CVE-2018-13471

The CVE-2018-13471 entry concerns BeyondCashToken, an Ethereum token. The issue is in the mintToken function of the smart contract where an integer overflow can permit the contract owner to set any user’s balance to an arbitrary value. Multiple connected records (CNVD-2018-13026, NVD/NVD CVE-2018...

CVE-2018-13776

CVE-2018-13776 concerns the AppleToken Ethereum token. The mintToken function in its smart contract has an integer overflow vulnerability that allows the contract owner to set any user’s balance to an arbitrary value. This is due to insufficient overflow checks in the minting logic. Documents ide...

CVE-2018-13549

The NeuroToken vulnerability CVE-2018-13549 concerns the mintToken function in NeuroToken’s Ethereum smart contract. Multiple sources describe an integer overflow in mintToken that enables the contract owner to set an arbitrary user’s balance to any value. This exposes a controllable manipulation...

CVE-2018-13572

The mintToken function of a smart contract implementation for PGMCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Bugged Smart Contract FuturXE: How Could Someone Mess up with Boolean? (CVE-2018–12025)

Recently SECBIT team found a serious bug about the if condition in a deployed ERC20 smart contract called FuturXE FXE and here is the bugged part: //Function for transer the coin from one address to another function transferFromaddress from, address to, uint value returns bool success //checking...

AppleToken mintToken function integer overflow vulnerability

AppleToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of AppleToken's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...

Aurora IDEX Membership(IDXM), ERC20 Token, allows attackers to acquire contract ownership (CVE-2018–10666)

Abstract I found a new vulnerability in smart contract of IDXM Token CVE-2018–106661. Attackers can acquire contract ownership because the setOwner function is delcared as public. A new owner can subsequently bypass intended access restrictions by, for example, calling uploadBalances. Details In...

New ceoAnyone Bug Identified in Multiple Crypto Game Smart Contracts (CVE-2018-11329)

Our vulnerability-scanning system at PeckShield has so far discovered several dangerous smart contract vulnerabilities batchOverflow1, proxyOverflow2, transferFlaw3, ownerAnyone4, multiOverflow5, burnOverflow6. These vulnerabilities typically affect various tokens that may be publicly traded in...

erc20 contract KoreaShow bug(CVE-2018-10973)

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters. Lets see where this issue is: function transferMultiaddress to,...

Attackers can steal all of Ether in ROC (Rasputin Online Coin) token smart contract (CVE-2018–10944)

Abstract I found a vulnerability of a smart contract for ROC aka Rasputin Online Coin, an Ethereum ERC20 token CVE-2018–109441. The requestdividend function has a critical bug similar to Reentrancy attack. Attackers can call the function in multiple times to steal Ether constantly until all of th...

AMR Contract Token Integer Overflow Vulnerability

AMR contract tokens, known as AMMBR contract tokens, are ethereum-based smart contract tokens which use the ERC20 token standard. AMR contract tokens have an integer overflow vulnerability. An attacker can issue additional tokens at will...

AthletiCoin Digital Error Vulnerability

AthletiCoin ATHA is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ATHA's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

JustDCoin Digital Error Vulnerability

JustDCoin JustD is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in JustD's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Ethereum Cash Pro Digital Error Vulnerability

Ethereum Cash Pro ECP is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ECP's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...

GROWCHAIN (GROW) Integer Overflow Vulnerability

GROWCHAIN GROW is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the sell function of the smart contract implementation of GROWCHAIN GROW. No details of the vulnerability are provided at this time...

BonusToken Integer Overflow Vulnerability

bonusToken BNS is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of BNS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

bankcoin integer overflow vulnerability

bankcoin BNK is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in BNK's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

AssetToken Number Error Vulnerability

AssetToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in AssetToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Yu Gi Oh Number Error Vulnerability

Yu Gi Oh YGO is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of YGO. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

etktokens integer overflow vulnerability

etktokens ETK is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of ETK. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...