CVE-2018-14085

An issue was discovered in a smart contract implementation for UserWallet 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42, an Ethereum token. First, suppose that the owner adds the evil contract address to his sweepers. The evil contract looks like this: contract Exploit { uint public start; function sweep(address _token, uint _amount) returns (bool) { start = 0x123456789; return true;} }. Then, when one calls the function sweep() in the UserWallet contract, it will change the sweeperList to 0X123456789.

• CWE-20

• https://github.com/hellowuzekai/blockchains/blob/master/delegatecall.mdExploit, Third Party Advisory
• https://github.com/hellowuzekai/blockchains/blob/master/delegatecall.mdExploit, Third Party Advisory

Published

Jul 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1408IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through …5.4
• CVE-2018-14080An issue was discovered on D-Link DIR-809 A1 through 1.09, A…
• CVE-2018-14081An issue was discovered on D-Link DIR-809 A1 through 1.09, A…
• CVE-2018-14082PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 has Cross-s…
• CVE-2018-14083LICA miniCMTS E8K(u/i/...) devices allow remote attackers to…
• CVE-2018-14084An issue was discovered in a smart contract implementation f…9.8
• CVE-2018-14086An issue was discovered in a smart contract implementation f…9.8
• CVE-2018-14087An issue was discovered in a smart contract implementation f…9.8
• CVE-2018-14088An issue was discovered in a smart contract implementation f…
• CVE-2018-14089An issue was discovered in a smart contract implementation f…
• CVE-2018-1409IBM Notes Diagnostics (IBM Client Application Access and IBM…
• CVE-2018-1410IBM Notes Diagnostics (IBM Client Application Access and IBM…