VYPR

Substratum

by Substratum

CVEs (3)

  • CVE-2018-12511HigSep 21, 2018
    risk 0.49cvss 7.5epss 0.01

    In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily.

  • CVE-2018-12079HigJun 25, 2018
    risk 0.49cvss 7.5epss 0.01

    The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the "tradeTrap" issue.

  • CVE-2018-12067HigJun 25, 2018
    risk 0.49cvss 7.5epss 0.01

    The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable…