High severity7.5NVD Advisory· Published Dec 31, 2019· Updated Jun 17, 2026

CVE-2018-19830

Description

The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public (by default) and does not check the caller's identity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Business Alliance Financial Circle (BAFC)/Business Alliance Financial Circle (BAFC)description
Business Alliance Financial Circle/BAFCllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/SmartContractResearcher/SmartContractSecurity/blob/master/New%20Vulnerabilities%20Allow%20Anyone%20to%20Own%20Certain%20ERC20-Based%20Smart%20Contracts%28CVE-2018-19830%2C%20CVE-2018-19831%2C%20CVE-2018-19832%2C%20CVE-2018-19833%2C%20CVE-2018-19834%29/README.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000