PT-2019-9530 · Unknown · Cryptobotsbattle

Published 2019-03-15 · Updated 2019-03-18 · CVE-2018-17882

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CryptoBotsBattle (CBTB) (affected versions not specified)

Description An integer overflow issue exists in the batchTransfer function of a smart contract implementation. This could allow an attacker to create an arbitrary amount of tokens for any user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2018-17882

Affected Products

Cryptobotsbattle

References · 3

• 🔥 https://github.com/GreenFoxy/Smart-contract-Vulnerabilities/blob/master/BattleToken.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-17882 · Security Note
• https://etherscan.io/address/0x4daa9dc438a77bd59e8a43c6d46cbfe84cd04255#code · Note