CVE-2018-11446

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

CVE-2018-12078

The CVE-2018-12078 entry describes a vulnerability in the mintToken function of PolyAI (AI), an ERC20 smart contract, where there is no period constraint. This allows the owner to arbitrarily increase the total supply, enabling profit through dilution. The provided documents do not include exploi...

CVE-2018-12080

The CVE describes a vulnerability in the Internet Node Token (INT) ERC20 contract where the mintToken function has no period constraint. This allows the owner to arbitrarily increase total supply, enabling potential profit manipulation. Documents confirm the affected component is the mintToken fu...

CVE-2018-12080

The mintToken function of a smart contract implementation for Internet Node Token INT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

CVE-2018-12083

The CVE-2018-12083 entry concerns GOAL Bonanza (GOAL), an Ethereum ERC20 token whose smart-contract mintToken function has no period constraint, enabling the owner to arbitrarily increase total supply. This minting oversight creates a supply manipulation risk described as the tradeTrap. Affected ...

CVE-2018-12084

The mintToken function of a smart contract implementation for BitAsean BAS, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Design/Logic Flaw

The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem GVE, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the...

CVE-2018-12703

The approveAndCallcode function of a smart contract implementation for Block 18 18T, an tradable Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the "evilReflex"...

Design/Logic Flaw

The approveAndCallcode function of a smart contract implementation for Block 18 18T, an tradable Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the "evilReflex"...

CVE-2018-12702

The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem GVE, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the...

CVE-2018-12702

The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem GVE, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the...

CVE-2018-12703

The CVE-2018-12703 vulnerability affects the approveAndCallcode flow in Block 18 (18T) ERC20 contracts. The issue is that _spender.call(_extraData) is not verified, enabling an attacker to hijack the callback and trigger arbitrary contract calls from the vulnerable contract. According to the Seeb...

CVE-2018-12702

The CVE-2018-12702 entry concerns Globalvillage ecosystem (GVE) ERC20 contracts where approveAndCallcode allows an attacker to hijack a callback via a non-verified _spender.call(_extraData), enabling token transfers from the vulnerable contract (evilReflex). Connected sources describe the mechani...

CVE-2018-12703

The approveAndCallcode function of a smart contract implementation for Block 18 18T, an tradable Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the "evilReflex"...

CVE-2018-12063: Integer Overflow or Wraparound

The sell function of a smart contract implementation for Internet Node Token INT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable...

PT-2018-10999

Name of the Vulnerable Software and Affected Versions BitAsean BAS affected versions not specified Description The issue concerns the mintToken function of a smart contract implementation, which lacks a period constraint. This allows the owner to arbitrarily increase the total supply of digital...

PT-2018-10992

Name of the Vulnerable Software and Affected Versions PolyAI AI smart contract implementation affected versions not specified Description The issue concerns the mintToken function of the smart contract, which lacks a period constraint. This allows the owner to arbitrarily increase the total suppl...

PT-2018-11341

Name of the Vulnerable Software and Affected Versions Globalvillage ecosystem GVE smart contract implementation affected versions not specified Description The issue concerns the approveAndCall function in the smart contract implementation, which allows attackers to steal assets by transferring t...

PT-2018-10980

Name of the Vulnerable Software and Affected Versions Internet Node Token INT smart contract implementation affected versions not specified Description The issue concerns a potential trap in the sell function of the smart contract implementation, which could lead to financial damage to the seller...

PT-2018-10987

Name of the Vulnerable Software and Affected Versions Smart contract implementation for SEC affected versions not specified Description The issue concerns a potential trap in the sell function of a smart contract implementation, which could lead to financial damage due to an overflow caused by th...