CVE-2025-4126

POC-CVE-2025-4126 smart contract reentrancy attack vulnerability 验证 Smart Contract Reentrancy Attack PoC This repository contains a Proof of Concept PoC demonstrating a reentrancy attack vulnerability in Ethereum smart contracts. The PoC includes a vulnerable smart contract, an attacker contract,...

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware framework, GoCaracal , during a June 2026 intrusion at an unnamed communications organization in Venezuela. GoCaracal provides operators with remote shell access and...

EUVD-2018-5689

Malware in sbrugna...

EUVD-2018-5563

Malware in sbrugna...

Malware in ethereum-smart-contract

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2018-13129

SP8DE Token SPX is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2024-22419 concat built-in can corrupt memory in vyper

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The concat built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existing valid data. The root cause is that the buildIR for concat doesn't properly adhere to the API of co...

Bribe Rewards Not Collected In Current Period Will Be Lost Forever

Lines of code Vulnerability details High Bribe Rewards Not Collected In Current Period Will Be Lost Forever Vulnerability Details It was observed that if the bribe rewards are not collected in the current period, they will not be accrued to future epoch, and they will be lost forever...

mintSynth and mintFungible function are not verified from==msg.sender

Handle cccz Vulnerability details Impact The mintSynth function and the mintFungible function are not verified from==msg.sender, causing anyone to use other people’s tokens to mint Synth or LP tokens for themselves Proof of Concept Tools Used Manual analysis Recommended Mitigation Steps Add the...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

TopscoinAdvanced Digital Error Vulnerability

TopscoinAdvanced is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of TopscoinAdvanced. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

DaddyToken Number Error Vulnerability

DaddyToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in DaddyToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

HELP Digit Error Vulnerability

HELP is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of HELP. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

MegaCryptoPolis Security Vulnerability

MegaCryptoPolis is an ethereum-based blockchain game. A denial of service vulnerability exists in the 'doPayouts' function in the smart contract implementation of MegaCryptoPolis. An attacker can exploit this vulnerability to cause a denial of service...

MyYLC Numeric Error Vulnerability

MyYLC is an ethereum-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in MyYLC's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Primeo has a flawed logic vulnerability

Primeo PEO is an ethereum-based digital currency.A security vulnerability exists in the 'doAirdrop' function in the smart contract implementation of Primeo PEO. An attacker could exploit the vulnerability to issue any number of virtual currencies...

CryptoBotsBattle Digital Error Vulnerability

CryptoBotsBattle CBTB is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'batchTransfer' function of CBTB's smart contract implementation. An attacker could exploit the vulnerability to create an arbitrary number of tokens for any user...

CVE-2018-14001: Integer Overflow or Wraparound

An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH SKT, an Ethereum token smart contract. An attacker could use it to set any user's balance...

CryptoLeu Integer Overflow Vulnerability

CryptoLeu is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CryptoLeu's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Integer overflow

The mintToken function of a smart contract implementation for MktCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...