3576 matches found
Integer overflow
An issue was discovered in a smart contract implementation for STeX White List STEWL, an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount 1000000000000000" will cause an integer overflow in withdrawToFounders...
Design/Logic Flaw
An issue was discovered in a smart contract implementation for VirgoZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance =' which was intended. An attacker can transfer from any address to his address, and does not need to meet the 'allowance value' condition...
CVE-2018-14088
The CVE-2018-14088 issue affects the STeX White List (STE(WL)) Ethereum token smart contract. A vulnerability in withdrawToFounders() arises from an integer overflow when the owner sets amount to a large value, causing amount * 1000000000000000 to overflow. The available sources confirm the overf...
CVE-2018-14088
An issue was discovered in a smart contract implementation for STeX White List STEWL, an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount 1000000000000000" will cause an integer overflow in withdrawToFounders...
CVE-2018-14089
CVE-2018-14089 affects Virgo_ZodiacToken smart contract: the comparison bool sufficientAllowance = allowance <= _value uses =, allowing an arbitrary transfer in transferFrom without meeting the intended allowance condition. This enables an attacker to transfer from any address to their own add...
CVE-2018-14084
CVE-2018-14084 affects the MKCB Ethereum token smart contract. The vulnerability arises in setPrices(): if the owner sets sellPrice to a large value, the calculation amount * sellPrice in sell() can overflow. The issue is described consistently across NVD/Red Hat/PRION/CVE listings as an integer ...
CVE-2018-14084
An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in setPrices then the "amount sellPrice" will cause an integer overflow in sell...
CVE-2018-14086
An issue was discovered in a smart contract implementation for SingaporeCoinOrigin SCO, an Ethereum token. The contract has an integer overflow. If the owner sets the value of sellPrice to a large number in setPrices then the "amount sellPrice" will cause an integer overflow in sell...
CVE-2018-14087
CVE-2018-14087 concerns the EUC Ethereum token smart contract. A root cause is an integer overflow in the fallback function when the owner sets a large buyPrice via setPrices, causing the expression msg.value * buyPrice to overflow. Documents consistently describe this vulnerability in EUC’s cont...
CVE-2018-14085
Summary: CVE-2018-14085 describes a vulnerability in a UserWallet smart contract where an attacker-supplied contract address, when added to the owner’s sweepers, can cause the sweep function to set the sweeperList to a fixed value (0x123456789). This indicates an unauthorized modification of the ...
CVE-2018-14089
An issue was discovered in a smart contract implementation for VirgoZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance =' which was intended. An attacker can transfer from any address to his address, and does not need to meet the 'allowance value' condition...
CVE-2018-14087
An issue was discovered in a smart contract implementation for EUC EUC, an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices then the "msg.value buyPrice" will cause an integer overflow in the fallback function...
CVE-2018-14086
CVE-2018-14086 describes an integer overflow in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The vulnerability occurs in the sell() function when the owner assigns a very large value to sellPrice in setPrices(); the operation can overflow the calculation amoun...
CVE-2018-14085
An issue was discovered in a smart contract implementation for UserWallet 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42, an Ethereum token. First, suppose that the owner adds the evil contract address to his sweepers. The evil contract looks like this: contract Exploit uint public start; function...
EPPCOIN Integer Overflow Vulnerability
EPPCOIN EPP is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EPP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
MultiGames Integer Overflow Vulnerability
MultiGames MLT is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of MLT. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
MKCB Integer Overflow Vulnerability
MKCB is a digital currency as well as Ether. An integer overflow vulnerability exists in the 'sell' function in the smart contract implementation of MKCB. No details of the vulnerability are provided at this time...
STeX White List Integer Overflow Vulnerability
STeX White List STEWL is an Ether-based digital currency. An integer overflow vulnerability exists in the 'withdrawToFounders' function in the smart contract implementation of STEWL. No detailed vulnerability details are provided at this time...
