CVE-2018-13069

The mintToken function of a smart contract implementation for DYchain DYC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13091

The CVE-2018-13091 entry concerns a mintToken integer overflow in a SUMO (Sumocoin) smart contract on Ethereum. The vulnerability allows the contract owner to set an arbitrary user’s balance to any value, implying unauthenticated control over token balances and potential token manipulation. The a...

CVE-2018-13080

The CVE-2018-13080 entry concerns Goutex (GTX), an Ethereum token, where the mintToken function in the smart contract has an integer overflow vulnerability. This flaw allows the contract owner to electrobalance (set the balance of any arbitrary user to an arbitrary value). Root cause: integer ove...

CVE-2018-13073

CVE-2018-13073 affects the ETHEREUMBLACK (ETCBK) Ethereum token. The mintToken function in its smart contract has an integer overflow vulnerability that enables the contract owner to set any user’s balance to an arbitrary value. This is the explicit impact described in multiple sources within the...

CVE-2018-13071

The mintToken function of a smart contract implementation for CCindex10 T10, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13081

The mintToken function of a smart contract implementation for GZS Token GZS, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13084

The mintToken function of a smart contract implementation for Good Time Coin GTY, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

Integer overflow

The mint function of a smart contract implementation for Link Platform LNK, an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13041

The mint function of a smart contract implementation for Link Platform LNK, an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13041

The mint function of a smart contract implementation for Link Platform LNK, an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

CVE-2018-13041

The CVE-2018-13041 entry concerns Link Platform (LNK), an Ethereum ERC20 token. The vulnerability is an integer overflow in the mint function of the Link Platform smart contract, which can allow the contract owner to set the balance of an arbitrary user to any value. This is documented in multipl...

Globalvillage ecosystem evilReflex has an unspecified vulnerability.

Globalvillage ecosystem GVE is a virtual currency system based on blockchain technology. A security vulnerability exists in the 'approveAndCallcode' function in GVE's smart contract implementation, which stems from the program's failure to validate the callcode.An attacker could use this...

Design/Logic Flaw

The sell function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12067

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12079

The mintToken function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Code injection

The mintToken function of a smart contract implementation for PolyAI AI, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Buffer overflow

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the...

Buffer overflow

The sell function of a smart contract implementation for Substratum SUB, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

Design/Logic Flaw

The mintToken function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue...

Buffer overflow

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...