High severity7.5NVD Advisory· Published Jun 25, 2018· Updated Jun 17, 2026

CVE-2018-12083

Description

The mintToken function of a smart contract implementation for GOAL Bonanza (GOAL), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.

Affected products

GOAL Bonanza/GOALllm-fuzzy

Patches

Vulnerability mechanics

References

peckshield.com/2018/06/11/tradeTrap/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000