CVE-2018-10468

The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g.…

published April 28, 2018

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because certain computations involving _value are incorrect, as exploited in the wild starting in December 2017, aka the "transferFlaw" issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01541 · 74.7th percentile
Published
2018-04-28T13:00Z
EPSS history
Timeline
  • 28 APR 13:00Z
    The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g.…
    cvelistv5