125 matches found
unused return value from transferfrom() function
Handle JMukesh Vulnerability details Impact by utilizing the return values we are ensuring that transaction is successfully executed if not it emit reason for failing Proof of Concept Tools Used manual review Recommended Mitigation Steps utilize the return value --- The text was updated...
function timeLockERC20 does not check the return value of transferFrom
Handle paulius.eth Vulnerability details Impact function timeLockERC20 uses transferFrom for erc20 transfers, however, it does not check the return value. According to the ERC20 standard, this function should return a boolean to indicate success. Not checking that may not work with some tokens...
Transfer fee is burned on wrong accounts
Handle @cmichelio Vulnerability details Vulnerability Details The Vader.transfer function burns the transfer fee on msg.sender but this address might not be involved in the transfer at all due to transferFrom. Impact Smart contracts that simply relay transfers like aggregators have their Vader...
DimonCoin (FUD) Security Breach
DimonCoin FUD is a virtual currency system. A security vulnerability exists in the 'transferFrom' function in the smart contract implementation of DimonCoin FUD, which stems from an error in the computation of the included value. The vulnerability can be exploited by an attacker to steal assets...
Easy Trading Token Digital Error Vulnerability
Easy Trading Token ETT is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in ETT's smart contract implementation. . An attacker can exploit this vulnerability to modify arbitrary amounts...
Pandora Digital Error Vulnerability
Pandora PDX is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in the smart contract implementation of PDX. An attacker could exploit the vulnerability to set a user's balance to an arbitrary value...
ChuCunLingAIGO Digital Error Vulnerability
ChuCunLingAIGO CCLAG is an ethereum-based digital currency.The 'transfer' and 'transferFrom' functions in CCLAG's smart contract implementation suffer from an integer overflow vulnerability. An attacker could use this vulnerability to set a user's balance to an arbitrary value...
Bittelux Number Error Vulnerability
Bittelux BTX is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in the smart contract implementation of BTX. A remote attacker could exploit the vulnerability to set a user's balance to an arbitrary value...
PFGc Number Error Vulnerability
PFGc is an ethereum-based digital currency.An integer overflow vulnerability exists in the smart contract implementation of PFGc in the 'transfer', 'transferFrom', and 'mint ' functions in the PFGc smart contract implementation suffer from an integer overflow vulnerability. An attacker could...
RemiCoin Integer Overflow Vulnerability
RemiCoin RMC is an Ether-based digital currency. A security vulnerability exists in the 'transferFrom' function in RMC's smart contract implementation. An attacker could exploit the vulnerability to steal a token or perform an integer overflow attack...
PFGc Number Error Vulnerability
PFGc is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'transfer', 'transferFrom', and 'mint' functions in PFGc's smart contract implementation. No details of the vulnerabilities are provided at this time...
Bittelux Number Error Vulnerability
Bittelux BTX is an Ether-based digital currency. An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in the smart contract implementation of BTX. No details of the vulnerability are provided at this time...
ChuCunLingAIGO Number Error Vulnerability
ChuCunLingAIGO CCLAG is an Ether-based digital currency. An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions in CCLAG's smart contract implementation. No detailed vulnerability details are provided at this time...
CVE-2018-12230
An wrong logical check identified in the transferFrom function of a smart contract implementation for RemiCoin RMC, an Ethereum ERC20 token, allows the attacker to steal tokens or conduct resultant integer underflow attacks...
Easy Trading Token Numeric Error Vulnerability
Easy Trading Token ETT is an Ether-based digital currency. An integer overflow vulnerability exists in the 'transfer' and 'transferFrom' functions of ETT's smart contract implementation. No detailed vulnerability details are provided at this time...
PT-2018-11751 · Chucunlingaigo · Cclag
Name of the Vulnerable Software and Affected Versions: ChuCunLingAIGO CCLAG affected versions not specified Description: The issue concerns an integer overflow in the transfer and transferFrom functions of a smart contract implementation for an Ethereum token. It is noted that this issue has been...
PT-2018-11750 · Bittelux · Bittelux
Name of the Vulnerable Software and Affected Versions: Bittelux BTX affected versions not specified Description: The issue concerns an integer overflow in the transfer and transferFrom functions of a smart contract implementation for Bittelux BTX, an Ethereum token. However, it is noted that this...
PT-2018-11628 · Pandora · Pandora
Name of the Vulnerable Software and Affected Versions: Pandora PDX affected versions not specified Description: The issue concerns an integer overflow in the transfer and transferFrom functions of a smart contract implementation for Pandora PDX, an Ethereum token. However, it is noted that this h...
PT-2018-11609 · Ethereum · Easy Trading Token
Name of the Vulnerable Software and Affected Versions: Easy Trading Token ETT affected versions not specified Description: The issue concerns an integer overflow in the transfer and transferFrom functions of a smart contract implementation for Easy Trading Token ETT, an Ethereum token. However, i...
FuturXE has an unspecified vulnerability
FuturXE FXE is an ethereum-based virtual currency. A security vulnerability exists in the 'transferFrom' function of the smart contract implementation in FXE, which stems from a logic error in the program. An attacker could exploit the vulnerability to make an unauthorized transfer of digital...