What’s Vulnerable › Vulnerabilities

CVE-2018-17882

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-15 · updated 2026-06-17
• Weakness: CWE-190

Description

An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user.

Affected products

• Cryptobots Battletoken: all versions

References

• https://etherscan.io/address/0x4daa9dc438a77bd59e8a43c6d46cbfe84cd04255#code
• https://github.com/GreenFoxy/Smart-contract-Vulnerabilities/blob/master/BattleToken.md
• https://etherscan.io/address/0x4daa9dc438a77bd59e8a43c6d46cbfe84cd04255#code
• https://github.com/GreenFoxy/Smart-contract-Vulnerabilities/blob/master/BattleToken.md

Get alerted when CVE-2018-17882 or the next vulnerability affects your stack