← Back

Gve

gve

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Globalvillage Ecosystem
globalvillage_ecosystem
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-12702
1Gve
1Globalvillage Ecosystem
Nov 21, 2024
Jun 25, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account)...Show more
The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."Show less