CVE-2018-17882

An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user.

• CWE-190

• https://etherscan.io/address/0x4daa9dc438a77bd59e8a43c6d46cbfe84cd04255#codeThird Party Advisory
• https://github.com/GreenFoxy/Smart-contract-Vulnerabilities/blob/master/BattleToken.mdExploit, Third Party Advisory
• https://etherscan.io/address/0x4daa9dc438a77bd59e8a43c6d46cbfe84cd04255#codeThird Party Advisory
• https://github.com/GreenFoxy/Smart-contract-Vulnerabilities/blob/master/BattleToken.mdExploit, Third Party Advisory

Published

Mar 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17877A lottery smart contract implementation for Greedy 599, an E…
• CVE-2018-17878Buffer Overflow vulnerability in certain ABUS TVIP cameras a…9.8
• CVE-2018-17879An issue was discovered on certain ABUS TVIP cameras. The CG…9.8
• CVE-2018-1788IBM Spectrum Protect Server 7.1 and 8.1 could disclose highl…4.1
• CVE-2018-17880On D-Link DIR-823G 2018-09-19 devices, the GoAhead configura…
• CVE-2018-17881On D-Link DIR-823G 2018-09-19 devices, the GoAhead configura…
• CVE-2018-17883An issue was discovered in Open Ticket Request System (OTRS)…6.1
• CVE-2018-17884XSS exists in admin/gb-dashboard-widget.php in the Gwolle Gu…
• CVE-2018-17886An issue was discovered in JEESNS 1.3. The XSS filter in com…
• CVE-2018-17888NUUO CMS all versions 3.1 and prior, The application uses a …
• CVE-2018-17889In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 a…
• CVE-2018-1789IBM API Connect v2018.1.0 through v2018.3.4 could allow an a…8.4