CVE-2018-13228

The CVE-2018-13228 entry concerns Crowdnext (CNX), a token on Ethereum. The documented vulnerability is an integer overflow in the sell function of CNX’s smart contract, where the calculation amount * sellPrice can evaluate to zero, enabling an attacker to diminish a seller’s assets. This is tied...

CVE-2018-13744

The CVE-2018-13744 entry concerns Crowdnext (CNX) Ethereum token smart contract MintToken function with an integer overflow, enabling the contract owner to set any user’s balance to an arbitrary value. The NVD/NVD-derived records confirm the vulnerability is a numeric overflow in MintToken; repor...