CVE-2018-14089

CVE-2018-14089 affects Virgo_ZodiacToken smart contract: the comparison bool sufficientAllowance = allowance <= _value uses =, allowing an arbitrary transfer in transferFrom without meeting the intended allowance condition. This enables an attacker to transfer from any address to their own add...