Lucene search
+L

31 matches found

Code423n4
Code423n4
added 2022/01/13 12:0 a.m.13 views

If Vault contains tokens that charge a fee on transfer the internally kept balance will be wrong

Handle Ruhum Vulnerability details Impact Some tokens charge a fee for each transfer. USDT, for example, has the possibility of enabling fees at any time. If the vault is used for that kind of token, the internal balance keeping will be wrong. The vault will think that it owns more tokens than it...

6.8AI score
SaveExploits0
Code423n4
Code423n4
added 2021/11/10 12:0 a.m.13 views

FSDVesting: Restrict updateVestedTokens() calls to only FSD token contract

Handle hickuphh3 Vulnerability details Impact The updateVestedTokens increases the amount of tokens to be vested for a beneficiary. There is no access restriction to the function. The intended total vesting duration is 30 months with a 12-month cliff where 5% is immediately unlocked, and the...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2021/10/12 12:0 a.m.7 views

Free Coin has a flawed logic vulnerability

Vulnerability mining supported by the Ministry of Science and Technology National Key R&D Program Topic 2020YFB1005802 The token contract freeze function will gradually increase its gas consumption when it is called multiple times, and when the gas consumption is extremely large, the running cost...

1.1AI score
SaveExploits0
Code423n4
Code423n4
added 2021/08/06 12:0 a.m.11 views

2 variables not indexed by marketIndex

Handle gpersoon Vulnerability details Impact In the token contract: batchedstakerNextTokenShiftIndex is indexed by marketIndex, so it can have separate or the same values for each different marketIndex. stakerTokenShiftIndextolongShortMarketPriceSnapshotIndexmapping and...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2020/04/27 12:0 a.m.4 views

ENTER has a logic flaw vulnerability

ENTER ENTR is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of ENTR's smart contract contract name: EnterToken implementation. An attacker could exploit this vulnerability to prevent the seller from accessing the assets due to the exchange...

7.1AI score
SaveExploits0
Prion
Prion
added 2018/07/09 6:29 a.m.11 views

Integer overflow

The mintToken function of a smart contract implementation for GoramCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

5CVSS7.7AI score0.01094EPSS
SaveExploits1References2
Prion
Prion
added 2018/07/09 6:29 a.m.16 views

Integer overflow

The mintToken function of a smart contract implementation for QRG, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

5CVSS7.7AI score0.01094EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2018/07/09 6:0 a.m.20 views

CVE-2018-13640

The mintToken function of a smart contract implementation for EthereumSmart, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

7.7AI score0.01094EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2018/07/09 6:0 a.m.18 views

CVE-2018-13720

The mintToken function of a smart contract implementation for Antoken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

7.7AI score0.01094EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2018/07/05 2:29 a.m.1 views

CVE-2018-13224

The sell function of a smart contract implementation for Virtual Energy Units VEU Contract Name: VEUTokenERC20, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

7.5CVSS5.5AI score0.00988EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/07/05 12:0 a.m.3 views

VEU_TokenERC20 Integer Overflow Vulnerability

Virtual Energy Units VEU is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'sell' function in the implementation of VEU's smart contract contract name: VEUTokenERC20. An attacker could exploit this vulnerability to prevent the seller from obtaining the assets...

7.5CVSS7.6AI score0.00988EPSS
SaveExploits0References1
Rows per page
Query Builder