EUVD-2026-30146

When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this...

doInteraction() won't mint tokens to user if interaction.specifiedAmount less than 10**12 and has certain conditions

Lines of code Vulnerability details Impact If the user calls doInteraction and executes Interaction with specifiedAmount less than 10 12 and a big difference in token decimals, the user won't get any tokens. Proof of Concept Core external functions like doInteraction will call the internal...

the validator would able to manipulate the Time Stamp ant

Lines of code Vulnerability details Impact attacker able to make manipulation in the function of pageprice Proof of Concept validators can make some manipulation in the timestamp. bob validator even if can make time stamp manipulation or 2 secend able to call function faster than others then mint...

Project Owner can mint all tokens to their own address

Lines of code Vulnerability details Impact A project owner may mint all tokens for the project in JBController.mintTokensOf , with all tokens minted by the project owner to their own address, the payer during any pay call would be unable to to mint any project token as the mint function would...

Timing Attack

@openzeppelin/contracts is vulnerable to timing attack. It allows an attacker to invoke the system by mint tokens after receiving the token balance but before the supply is updated...

CryptoBotsBattle Digital Error Vulnerability

CryptoBotsBattle CBTB is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'batchTransfer' function of CBTB's smart contract implementation. An attacker could exploit the vulnerability to create an arbitrary number of tokens for any user...

Bitotal (TFUND) Integer Overflow Vulnerability

Bitotal TFUND is a smart contract that runs on Ether. An integer overflow vulnerability exists in the mintTokens function in Bitotal TFUND. The vulnerability can be exploited by the contract owner to arbitrarily retrieve minted tokens...