CVE-2018-12959

The approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all contract balances into their account).

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-07-19

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Aditustoken (Aditustoken Project)

References

• https://github.com/rootclay/Audit-of-smart-contracts/tree/master/0x8810C63470d38639954c6B41AaC545848C46484a