CVE-2020-17752

Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented…

published June 24, 2021

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

⚠️ An integer overflow in a smart contract could let an attacker manipulate token balances! 💰 Think of this as a vending machine that doesn't know its capacity — if you keep adding items, it could overflow, dispensing more than it should, like a glitchy machine miscalculating change! This vulnerability could allow a crafty attacker to exploit the smart contract, potentially leading to unintended token distribution. In a worst-case scenario, it could drain resources from the contract, leading to significant financial losses for users. Ouch!

Put simply

Think of this as a vending machine that doesn't know its capacity — if you keep adding items, it could overflow, dispensing more than it should, like a glitchy machine miscalculating change! The integer overflow occurs when the payable function in the smart contract exceeds its maximum limit, allowing attackers to manipulate token balances when they shouldn't be able to. This can happen during transactions involving the MillionCoin (MON) smart contract.

What to do

This vulnerability could allow a crafty attacker to exploit the smart contract, potentially leading to unintended token distribution. In a worst-case scenario, it could drain resources from the contract, leading to significant financial losses for users. Ouch! To mitigate this vulnerability, update the contract to include proper checks for integer limits and ensure that all arithmetic operations are safe. Consider implementing safe math libraries to prevent overflows in future transactions! You've got this! With a few adjustments, you can keep the token ecosystem safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01579 · 75.3th percentile
Published
2021-06-24T19:16Z
EPSS history
Timeline
  • 24 JUN 19:16Z
    Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented…
    cvelistv5