CVE-2018-13169

HIGH

Ethereum Cash Pro Coin - Integer Overflow in mintToken Function

Title source: llm

Description

The mintToken function of a smart contract implementation for Ethereum Cash Pro (ECP), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

References (2)

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md

View Exploit ZIP pw:eip

Third Party Advisory x_refsource_misc

https://github.com/BlockChainsSecurity/EtherTokens/tree/master/Ethereum_Cash_Pro_Coin

View Writeup ZIP pw:eip

Scores

CVSS v3 7.5

EPSS 0.0108

EPSS Percentile 61.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-190

Status published

Products (1)

ethereum_cash_pro_coin_project/ethereum_cash_pro_coin

Published Jul 05, 2018

Tracked Since Feb 18, 2026