EUVD-2018-2540

Malware in sbrugna...

New transferFlaw Bug Used For Possible Scam Token Listed In A Top Exchange(CVE-2018-10468)

Our automated scanning system at PeckShield discovered a new vulnerability named transferFlaw CVE-2018–10468. This particular vulnerability affects a publicly traded ERC20 token listed in a top exchange. Different from batchOverflow 1 and proxyOverflow 2 we identified before, this vulnerability...

CVE-2018-10468

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

Code injection

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

CVE-2018-10468

The transferFrom function in the Useless Ethereum Token (UET) smart contract, an Ethereum ERC20 token, contains a logic flaw known as "transferFlaw" . Due to incorrect computations involving the _value parameter, an attacker can cause a balance overflow to steal assets, potentially transferring a...

PT-2018-9887

Name of the Vulnerable Software and Affected Versions: Useless Ethereum Token UET affected versions not specified Description: The issue concerns a smart contract implementation for an Ethereum ERC20 token, where the transferFrom function allows attackers to steal assets by transferring all...

CVE-2018-10468: Improper Input Validation

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...