CVE-2018-13741
Description
The mintToken function of a smart contract implementation for ABLGenesisToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Integer overflow in ABLGenesisToken's mintToken allows owner to arbitrarily set user balances.
Vulnerability
The mintToken function in the ABLGenesisToken smart contract (Ethereum) contains an integer overflow vulnerability. This allows the contract owner to set the balance of any user to an arbitrary value by invoking mintToken with specially crafted inputs. The contract code is available in the EtherTokens repository [1][2], and the vulnerability is present in all versions of ABLGenesisToken.
Exploitation
To exploit this vulnerability, an attacker must be the contract owner. By calling mintToken with parameters that cause an integer overflow, the owner can manipulate the arithmetic to set the balance of any chosen address to any desired value.
Impact
A successful exploit enables the owner to arbitrarily inflate or deflate token balances. This undermines the token's scarcity and value, potentially leading to financial losses for legitimate holders and loss of trust in the token.
Mitigation
No official fix has been released for ABLGenesisToken. Developers and users should avoid using this contract. Token contracts should implement the SafeMath library to prevent integer overflow. This vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.mdmitrex_refsource_MISC
- github.com/BlockChainsSecurity/EtherTokens/tree/master/ABLGenesisTokenmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.