RSS   Vulnerabilities for 'Moneytree'   RSS

2018-07-09
 
CVE-2018-13554

CWE-190
 

 
The mintToken function of a smart contract implementation for MoneyTree (TREE), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

 
2018-07-04
 
CVE-2018-13208

CWE-190
 

 
The sell function of a smart contract implementation for MoneyTree (TREE), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

 


Copyright 2024, cxsecurity.com

 

Back to Top