QwikSec

Security Database

CVE

CWE

Training

CVE-2018-10376

Published: Apr 25, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh (aka SMT), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted _fee and _value parameters, as exploited in the wild in April 2018, aka the "proxyOverflow" issue.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://peckshield.com/2018/04/25/proxyOverflow/

x_refsource_MISC

https://www.reddit.com/r/ethereum/comments/8esyg9/okex_erc20_bug/

x_refsource_MISC

https://dasp.co/#item-3

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.