New burnOverflow Bug Identified in Multiple ERC20 Smart Contracts (CVE-2018-11239)

Our vulnerability-scanning system at PeckShield has so far discovered several dangerous smart contract vulnerabilities batchOverflow1, proxyOverflow2, transferFlaw3, ownerAnyone4, multiOverflow5. Some of them could be used by attackers to generate tokens out of nowhere while others can be used to...

CVE-2018-11239

The Hexagon (HXG) Ethereum ERC20 token is vulnerable to an integer overflow in its _transfer function, known as the "burnOverflow" issue. By providing a large _value argument (e.g., 0xffff...fffe) in conjunction with a _to argument, an attacker can trigger an overflow when the contract calculates...