CVE-2018-12081

CVE-2018-12081 affects the Target Coin (TGT) ERC20 token. The mintToken function has no period constraint, allowing the owner to arbitrarily increase total supply, enabling profit via inflation of assets. The vulnerability is defined in the NVD description and corroborated by multiple feeds; no e...

CVE-2018-12083

The CVE-2018-12083 entry concerns GOAL Bonanza (GOAL), an Ethereum ERC20 token whose smart-contract mintToken function has no period constraint, enabling the owner to arbitrarily increase total supply. This minting oversight creates a supply manipulation risk described as the tradeTrap. Affected ...

CVE-2018-12083

The mintToken function of a smart contract implementation for GOAL Bonanza GOAL, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

CVE-2018-12082

The CVE-2018-12082 entry concerns Fujinto (NTO) ERC20 token smart contract where the mintToken function has no period constraint. This allows the owner to arbitrarily increase total supply, enabling profit by altering supply. Connected sources corroborate the same description across NVD/CNVD/PRIO...

CVE-2018-12062

The sell function of a smart contract implementation for SwftCoin SWFTC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12081

The mintToken function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Design/Logic Flaw

The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem GVE, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the...

Design/Logic Flaw

The approveAndCallcode function of a smart contract implementation for Block 18 18T, an tradable Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the "evilReflex"...

CVE-2018-12702

The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem GVE, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the...

CVE-2018-12703

The approveAndCallcode function of a smart contract implementation for Block 18 18T, an tradable Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the "evilReflex"...

CVE-2018-12702

The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem GVE, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the...

CVE-2018-12703

The approveAndCallcode function of a smart contract implementation for Block 18 18T, an tradable Ethereum ERC20 token, allows attackers to steal assets e.g., transfer the contract's balances into their account because the callcode i.e., spender.callextraData is not verified, aka the "evilReflex"...

CVE-2018-12702

The CVE-2018-12702 entry concerns Globalvillage ecosystem (GVE) ERC20 contracts where approveAndCallcode allows an attacker to hijack a callback via a non-verified _spender.call(_extraData), enabling token transfers from the vulnerable contract (evilReflex). Connected sources describe the mechani...

CVE-2018-12703

The CVE-2018-12703 vulnerability affects the approveAndCallcode flow in Block 18 (18T) ERC20 contracts. The issue is that _spender.call(_extraData) is not verified, enabling an attacker to hijack the callback and trigger arbitrary contract calls from the vulnerable contract. According to the Seeb...

PT-2018-10980

Name of the Vulnerable Software and Affected Versions Internet Node Token INT smart contract implementation affected versions not specified Description The issue concerns a potential trap in the sell function of the smart contract implementation, which could lead to financial damage to the seller...

PT-2018-11342

Name of the Vulnerable Software and Affected Versions Block 18 18T smart contract implementation affected versions not specified Description The issue concerns the approveAndCall function in a smart contract implementation, which allows attackers to steal assets by transferring the contract's...

PT-2018-11341

Name of the Vulnerable Software and Affected Versions Globalvillage ecosystem GVE smart contract implementation affected versions not specified Description The issue concerns the approveAndCall function in the smart contract implementation, which allows attackers to steal assets by transferring t...

PT-2018-10987

Name of the Vulnerable Software and Affected Versions Smart contract implementation for SEC affected versions not specified Description The issue concerns a potential trap in the sell function of a smart contract implementation, which could lead to financial damage due to an overflow caused by th...

PT-2018-10992

Name of the Vulnerable Software and Affected Versions PolyAI AI smart contract implementation affected versions not specified Description The issue concerns the mintToken function of the smart contract, which lacks a period constraint. This allows the owner to arbitrarily increase the total suppl...

PT-2018-10999

Name of the Vulnerable Software and Affected Versions BitAsean BAS affected versions not specified Description The issue concerns the mintToken function of a smart contract implementation, which lacks a period constraint. This allows the owner to arbitrarily increase the total supply of digital...