CVE-2018-13208

The sell function of a smart contract implementation for MoneyTree (TREE), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-07-05

Last modified

2024-08-05

Weaknesses

CWE-190

Affected products

• Moneytree (Moneytree Project)

References

• https://github.com/BlockChainsSecurity/EtherTokens/blob/master/ETHEREUMBLACK/sell%20integer%20overflow.md
• https://github.com/BlockChainsSecurity/EtherTokens/tree/master/MoneyTreeToken