On August 10, 2018, Jonghyuk Song (Security team at Samsung Research) wrote a nice article how he found a vulnerability in the smart contract of ‘All For One’ game.
He reported his findings to us and patch was applied. 🙂
We are thankful for his contribution! @freest4r
@_supernothing Hello. I'm Jonghyuk Song. I really enjoyed your talk in Codeblue2018. So, Can I get your slides? I want to study more about your research. I can't wait until it is uploaded by Codeblue. If it is possible, please send the slides to '[email protected]'. thanks!
CVE-2018-10468 The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) ... https://t.co/l0ZSvI1lBX
CVE-2018-10666 The Owned smart contract implementation for Aurora IDEX Membership (IDXM), an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. A new owner can ... https://t.co/PUDseCu0AI
@RasputinOnline Hello. I found a vulnerability of ROC smart contract.
What is your official email? I can give detail information.
By the way, I will report it CVE.