CVE-2018-13078

The CVE-2018-13078 entry concerns the Jitech (JTH) Ethereum token. A vulnerability in the mintToken function is caused by an integer overflow, which enables the contract owner to set the balance of any arbitrary address to a chosen value. This is documented across multiple sources (CNVD, RH, NVD,...

CVE-2018-13078

The mintToken function of a smart contract implementation for Jitech JTH, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13090

CVE-2018-13090 affects YiTongCoin (YTC), an Ethereum ERC20 token. The vulnerability is in the mintToken function, where an integer overflow can let the contract owner set any address balance to an arbitrary value. The issue is documented across multiple sources (NVD, Red Hat, CNVD, Prion, CVE lis...

CVE-2018-13081

The mintToken function of a smart contract implementation for GZS Token GZS, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13086

The mintToken function of a smart contract implementation for IADOWR Coin IAD, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13068

The mintToken function of a smart contract implementation for AzurionToken AZU, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13079

The mintToken function of a smart contract implementation for GoodTo GTO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13091

The CVE-2018-13091 entry concerns a mintToken integer overflow in a SUMO (Sumocoin) smart contract on Ethereum. The vulnerability allows the contract owner to set an arbitrary user’s balance to any value, implying unauthenticated control over token balances and potential token manipulation. The a...

Integer overflow

The mint function of a smart contract implementation for Link Platform LNK, an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13041

The mint function of a smart contract implementation for Link Platform LNK, an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13041

The mint function of a smart contract implementation for Link Platform LNK, an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13041

The CVE-2018-13041 entry concerns Link Platform (LNK), an Ethereum ERC20 token. The vulnerability is an integer overflow in the mint function of the Link Platform smart contract, which can allow the contract owner to set the balance of an arbitrary user to any value. This is documented in multipl...

Globalvillage ecosystem evilReflex has an unspecified vulnerability.

Globalvillage ecosystem GVE is a virtual currency system based on blockchain technology. A security vulnerability exists in the 'approveAndCallcode' function in GVE's smart contract implementation, which stems from the program's failure to validate the callcode.An attacker could use this...

Buffer overflow

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the...

Code injection

The mintToken function of a smart contract implementation for PolyAI AI, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Design/Logic Flaw

The sell function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12067

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12079

The mintToken function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Buffer overflow

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

Design/Logic Flaw

The mintToken function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...