CVE-2018-11239

An integer overflow in the _transfer function of a smart contract implementation for Hexagon (HXG), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a _to argument in conjunction with a large _value argument, as exploited in the wild in May 2018, aka the "burnOverflow" issue.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-05-19

Last modified

2024-08-05

Weaknesses

CWE-190

Affected products

• Hexagon (Hexagontoken)

References

• https://peckshield.com/2018/05/18/burnOverflow/