CVE-2018-11411

The transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because certain computations involving _value are incorrect.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-05-24

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Dimoncoin (Dimoncoin)

References

• https://medium.com/%40jonghyk.song/dimoncoin-fud-erc20-token-allows-attackers-to-steal-all-victims-balances-cve-2018-11…