Code injection

An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address...

CVE-2020-17752

Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented at address 0xB49E984A83d7A638E7F2889fc8328952BA951AbE, an implementation for MillionCoin MON...

CVE-2020-17752

CVE-2020-17752 corresponds to an integer overflow in the payable function of a smart-contract implementation for Ethereum token MillionCoin (MON). The vulnerable contract is at 0xB49E984A83d7A638E7F2889fc8328952BA951AbE. Documented impact is partial confidentiality/integrity/availability (per CVS...

CVE-2020-17753

An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address...

CVE-2020-17753

The CVE-2020-17753 entry concerns the RC Ethereum token smart contract. A vulnerability in the function addMeByRC allows an attacker to transfer an arbitrary amount of tokens to an arbitrary address. Public sources (NVD/NVD-derived entries and related records) confirm the affected component as th...

Ethereum token 安全漏洞

The Ethereum token is a digital currency of the Ether Ethereum community. The Ethereum token suffers from a security vulnerability that stems from an issue discovered in the function addMeByRC in the smart contract implementation of the Ethereum token RC, which allows an attacker to transfer an...

Eth may get stuck in contract

Handle JMukesh Vulnerability details Impact Istanbul hardfork increases the gas cost of the SLOAD operation and therefore breaks some existing smart contracts. In file withdrawable.sol, contract uses transfer to send eth from contract to EOA due which eth can get stuck. reason behind this is, aft...

The function liquidateDai() fails

Handle s1m0 Vulnerability details Impact liquidateDai try to swap DAI to ETH through uniswap using swapExactTokenForETH. Before calling swapExactTokenForETH the smart contract should approve uniswap router to use amount of DAI. Also as for documentation If the to address is a smart contract, it...

Fee Distribution Re-Entrancy

Handle 0xsomeone Vulnerability details Impact The distribute function of NFTXFeeDistributor has no access control and will invoke a fallback on the fee receivers, meaning that a fee receiver can re-enter via this function to acquire their allocation repeatedly potentially draining the full balanc...

_recordBurn calls _updateEmission afterwards

Handle paulius.eth Vulnerability details Impact contract Vether4 function recordBurn first does all the calculations and only at the end calls updateEmission. This means that in theory last user still contributes to the previous day even though this day has already passed. So it is possible to...

Code injection

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

CVE-2020-35962

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

CVE-2020-35962

The CVE-2020-35962 issue affects Loopring (LRC) by the vault protocol’s sellTokenForLRC function in its smart contract, which lacks access control for fee swapping. This vulnerability enables price manipulation within the on-chain logic. The documented impact is a HIGH severity in CVSS 3.1 (I:H) ...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

Design/Logic Flaw

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3006

The CVE-2021-3006 entry concerns the Seal Finance (Seal) Ethereum token. The breed function in its smart contract lacks access control, enabling price manipulation. Exploitation occurred in the wild during December 2020 and January 2021. The available documents confirm the root cause (unauthorize...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3004

The deposit function in the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should...

CVE-2021-3004

Technical details about CVE-2021-3004 are not present in the connected documents. The description notes incorrect calculations in the yCREDIT deposit function, but no vendor/version/exploit specifics are supplied here; monitor for updates.