CVE-2018-13836

An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use it to set any user's balance.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-07-12

Last modified

2024-08-05

Weaknesses

CWE-190

Affected products

• Rocket Coin (Rocket Coin Project)

References

• https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
• https://github.com/VenusADLab/EtherTokens/tree/master/Rocket%20Coin%28XRC%29