3577 matches found
CVE-2018-13475
The CVE-2018-13475 entry concerns the mintToken function in a VSCToken smart contract (Ethereum). The vulnerability is an integer overflow that enables the contract owner to set any user’s balance to an arbitrary value, compromising token integrity. The connected documents reiterate that the issu...
CVE-2018-13715
The CVE-2018-13715 issue affects a smart contract implementation of BpsToken (Ethereum token). The mintToken function reportedly contains an integer overflow, enabling the contract owner to set an arbitrary user’s balance to any value. This is the primary vulnerability and impact described in the...
CVE-2018-13691
The mintToken function of a smart contract implementation for R Time Token v3 RS Contract Name: RTokenMain, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-13563
The CVE-2018-13563 issue affects the UPayToken Ethereum token: the mintToken function has an integer overflow that lets the contract owner set any user’s balance to an arbitrary value. This is a functional integrity risk in the token’s accounting, potentially enabling balance manipulation without...
CVE-2018-13531
CVE-2018-13531 concerns the mintToken function of MaxHouse, an Ethereum token, where an integer overflow vulnerability allows the contract owner to set any user balance to an arbitrary value. The issue is rooted in arithmetic handling within the token minting logic, potentially enabling unauthori...
CVE-2018-13781
CVE-2018-13781 concerns a vulnerability in the mintToken function of a MyYLC Ethereum token smart contract. The cited description states an integer overflow allows the contract owner to set an arbitrary user’s balance to any value, indicating a flawed balance-minting path likely not guarded by pr...
Bugged Smart Contract FuturXE: How Could Someone Mess up with Boolean? (CVE-2018–12025)
Recently SECBIT team found a serious bug about the if condition in a deployed ERC20 smart contract called FuturXE FXE and here is the bugged part: //Function for transer the coin from one address to another function transferFromaddress from, address to, uint value returns bool success //checking...
Aurora IDEX Membership(IDXM), ERC20 Token, allows attackers to acquire contract ownership (CVE-2018–10666)
Abstract I found a new vulnerability in smart contract of IDXM Token CVE-2018–106661. Attackers can acquire contract ownership because the setOwner function is delcared as public. A new owner can subsequently bypass intended access restrictions by, for example, calling uploadBalances. Details In...
New ceoAnyone Bug Identified in Multiple Crypto Game Smart Contracts (CVE-2018-11329)
Our vulnerability-scanning system at PeckShield has so far discovered several dangerous smart contract vulnerabilities batchOverflow1, proxyOverflow2, transferFlaw3, ownerAnyone4, multiOverflow5, burnOverflow6. These vulnerabilities typically affect various tokens that may be publicly traded in...
Attackers can steal all of Ether in ROC (Rasputin Online Coin) token smart contract (CVE-2018–10944)
Abstract I found a vulnerability of a smart contract for ROC aka Rasputin Online Coin, an Ethereum ERC20 token CVE-2018–109441. The requestdividend function has a critical bug similar to Reentrancy attack. Attackers can call the function in multiple times to steal Ether constantly until all of th...
erc20 contract KoreaShow bug(CVE-2018-10973)
An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters. Lets see where this issue is: function transferMultiaddress to,...
Ethereum Cash Pro Digital Error Vulnerability
Ethereum Cash Pro ECP is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ECP's smart contract implementation. An attacker can exploit the vulnerability to set the balance of any user to an arbitrary value...
AthletiCoin Digital Error Vulnerability
AthletiCoin ATHA is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in ATHA's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
JustDCoin Digital Error Vulnerability
JustDCoin JustD is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in JustD's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
AssetToken Number Error Vulnerability
AssetToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in AssetToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
bankcoin integer overflow vulnerability
bankcoin BNK is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in BNK's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
BonusToken Integer Overflow Vulnerability
bonusToken BNS is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of BNS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Yu Gi Oh Number Error Vulnerability
Yu Gi Oh YGO is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of YGO. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
etktokens integer overflow vulnerability
etktokens ETK is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of ETK. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
