Description
The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812.
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md
Third Party Advisory x_refsource_misc
https://etherscan.io/address/0x7703c35cffdc5cda8d27aa3df2f9ba6964544b6e#code
Exploit, Third Party Advisory x_refsource_misc
https://github.com/klenergy/ethereum-contracts/issues/1
Scores
CVSS v3
7.5
EPSS
0.0142
EPSS Percentile
69.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-190
Status
published
Products (1)
pylon-network/pylontoken
Published
Dec 28, 2018
Tracked Since
Feb 18, 2026