← Back

Virgo Zodiactoken Project

virgo_zodiactoken_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Virgo Zodiactoken
virgo_zodiactoken
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-14089
1Virgo Zodiactoken Project
1Virgo Zodiactoken
Nov 21, 2024
Jul 16, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in a smart contract implementation for Virgo_ZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance <= _value' will cause an arbitrary transfer in the function tra...Show more
An issue was discovered in a smart contract implementation for Virgo_ZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance <= _value' will cause an arbitrary transfer in the function transferFrom because '<=' is used instead of '>=' (which was intended). An attacker can transfer from any address to his address, and does not need to meet the 'allowance > value' condition.Show less