CVE-2018-12067

The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the "tradeTrap" issue.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-06-25

Last modified

2024-08-05

Weaknesses

CWE-190

Affected products

• Substratum (Substratum)

References

• https://peckshield.com/2018/06/11/tradeTrap/