CVE-2018-11329

The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets (including Ether balance and tokens) might be manipulated by the attackers, as exploited in the wild in May 2018.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2018-05-22

Last modified

2024-08-05

Affected products

• Ether Cartel (Ethercartel)

References

• https://peckshield.com/2018/05/21/ceoAnyone/