CVE-2018-13760

CVE-2018-13760 concerns MoneyChainNet (MCN) as an Ethereum token with a vulnerable mintToken function in its smart contract. The root cause is an integer overflow that allows the contract owner to set the balance of an arbitrary user to any value. Documents confirm that this could enable ownershi...

CVE-2018-13732

The mintToken function of a smart contract implementation for RiptideCoin RIPT, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13509

CVE-2018-13509 concerns the IamRich Ethereum token. The mintToken function has an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. This is described across multiple sources (CNVD-2018-13188, NVD/NVD data, etc.) as the root cause. The impact is arbit...

CVE-2018-13475

The CVE-2018-13475 entry concerns the mintToken function in a VSCToken smart contract (Ethereum). The vulnerability is an integer overflow that enables the contract owner to set any user’s balance to an arbitrary value, compromising token integrity. The connected documents reiterate that the issu...

CVE-2018-13650

The mintToken function of a smart contract implementation for BitmaxerToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13676

The CVE concerns the mintToken function of a smart contract implementing the Orderbook Presale Token (OBP). The documented issue is an integer overflow that enables the contract owner to set the balance of any arbitrary user to a chosen value. The available sources describe the vulnerable compone...

CVE-2018-13657

The mintToken function of a smart contract implementation for Rice, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13543

The mintToken function of a smart contract implementation for GemstoneToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13500

The CVE 2018-13500 describes an integer overflow in the mintToken function of the MSXAdvanced Ethereum token smart contract. The root cause is an overflow in mintToken that lets the contract owner set any user’s balance to an arbitrary value, impacting balance integrity of the token. The provided...

CVE-2018-13704

The mintToken function of a smart contract implementation for eddToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13622

The CVE-2018-13622 entry describes an integer overflow in the mintToken function of a smart contract implementation for ObjectToken (OBJ), an Ethereum token. The overflow allows the contract owner to set an arbitrary user’s balance to any value, enabling potential manipulation of token balances. ...

CVE-2018-13523

Summary: CVE-2018-13523 concerns an integer overflow in the mintToken function of the SmartPayment Ethereum token smart contract. The overflow enables the contract owner to set an arbitrary user’s balance to any value. The description appears consistently across multiple sources (NVD/CNVD/CVEs) a...

CVE-2018-13476

The mintToken function of a smart contract implementation for PhilCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13669

CVE-2018-13669 concerns the mintToken function of a smart contract implementation for the NCU Ethereum token, where an integer overflow vulnerability allows the contract owner to set an arbitrary user’s balance to any value. The issue stems from arithmetic without proper bounds checks in mintToke...

CVE-2018-13569

The CVE-2018-13569 entry concerns HitToken, an Ethereum token whose smart contract mintToken has an integer overflow. This overflow enables the contract owner to set any user’s balance to an arbitrary value. The affected component is the mintToken function within HitToken’s contract; root cause i...

AppleToken mintToken function integer overflow vulnerability

AppleToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of AppleToken's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

Bugged Smart Contract FuturXE: How Could Someone Mess up with Boolean? (CVE-2018–12025)

Recently SECBIT team found a serious bug about the if condition in a deployed ERC20 smart contract called FuturXE FXE and here is the bugged part: //Function for transer the coin from one address to another function transferFromaddress from, address to, uint value returns bool success //checking...

New ceoAnyone Bug Identified in Multiple Crypto Game Smart Contracts (CVE-2018-11329)

Our vulnerability-scanning system at PeckShield has so far discovered several dangerous smart contract vulnerabilities batchOverflow1, proxyOverflow2, transferFlaw3, ownerAnyone4, multiOverflow5, burnOverflow6. These vulnerabilities typically affect various tokens that may be publicly traded in...

Aurora IDEX Membership(IDXM), ERC20 Token, allows attackers to acquire contract ownership (CVE-2018–10666)

Abstract I found a new vulnerability in smart contract of IDXM Token CVE-2018–106661. Attackers can acquire contract ownership because the setOwner function is delcared as public. A new owner can subsequently bypass intended access restrictions by, for example, calling uploadBalances. Details In...

AMR Contract Token Integer Overflow Vulnerability

AMR contract tokens, known as AMMBR contract tokens, are ethereum-based smart contract tokens which use the ERC20 token standard. AMR contract tokens have an integer overflow vulnerability. An attacker can issue additional tokens at will...