← Back

Useless Ethereum Token

useless_ethereum_token

Vendor: Uetoken • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-10468
1Uetoken
1Useless Ethereum Token
Nov 21, 2024
Apr 28, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because c...Show more
The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because certain computations involving _value are incorrect, as exploited in the wild starting in December 2017, aka the "transferFlaw" issue.Show less