CVE-2018-11687

HIGH EXPLOITED IN THE WILD

Bitcoin Red - Integer Overflow in distributeBTR Function

Title source: llm

Exploitation Summary

CVE-2018-11687 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).

Description

An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address[] array, as exploited in the wild in May 2018, aka the "ownerUnderflow" issue.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://www.anquanke.com/post/id/147913

Scores

CVSS v3 7.5

EPSS 0.0128

EPSS Percentile 66.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

VulnCheck KEV 2018-08-15

InTheWild.io 2018-10-15

CWE

CWE-190

Status published

Products (1)

bitcoin_red_project/bitcoin_red

Published Aug 15, 2018

Tracked Since Feb 18, 2026