CVE-2018-14085

Summary: CVE-2018-14085 describes a vulnerability in a UserWallet smart contract where an attacker-supplied contract address, when added to the owner’s sweepers, can cause the sweep function to set the sweeperList to a fixed value (0x123456789). This indicates an unauthorized modification of the ...