CVEs-PoC/2018/CVE-2018-11687.md

CVE-2018-11687

Description

An integer overflow in the distributeBTR function of a smart contract implementation for Bitcoin Red (BTCR), an Ethereum ERC20 token, allows the owner to accomplish an unauthorized increase of digital assets by providing a large address[] array, as exploited in the wild in May 2018, aka the "ownerUnderflow" issue.

POC

Reference

No PoCs from references.

Github

• https://github.com/DSKPutra/Buggy-ERC20-Tokens
• https://github.com/SruthiPriya11/audit
• https://github.com/devmania1223/awesome-buggy-erc20-tokens
• https://github.com/mitnickdev/buggy-erc20-standard-token
• https://github.com/rjhorniii/DICOM-YARA-rules
• https://github.com/sec-bit/awesome-buggy-erc20-tokens