San tradeTrap

Scheda tecnica

Divulgata il

11 giugno 2018

CVE

CVE-2018-11446CVE-2018-12062CVE-2018-12063CVE-2018-12067CVE-2018-12068CVE-2018-12070CVE-2018-12078CVE-2018-12079CVE-2018-12080CVE-2018-12081CVE-2018-12082CVE-2018-12083

The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the "tradeTrap" issue.

Fonti: peckshield.com · web.archive.org