CVE-2018-12063 : Security Advisory and Response

This CVE involves a vulnerability in the smart contract implementation for Internet Node Token (INT), an Ethereum ERC20 token, leading to potential financial harm for sellers due to an overflow issue during multiplication.

Understanding CVE-2018-12063

The smart contract for INT contains a sell function susceptible to the "tradeTrap" problem, impacting sellers financially.

What is CVE-2018-12063?

The vulnerability in the sell function of the smart contract for INT can result in financial losses for sellers due to an overflow during multiplication.

The Impact of CVE-2018-12063

The "tradeTrap" issue poses a risk of financial harm to sellers using the sell function in the INT smart contract.

Technical Details of CVE-2018-12063

The technical aspects of the vulnerability in the INT smart contract.

Vulnerability Description

The sell function in the INT smart contract can lead to financial losses for sellers due to an overflow during multiplication.

Affected Systems and Versions

Product: Not applicable
Vendor: Not applicable
Versions: Not applicable

Exploitation Mechanism

The vulnerability occurs during the multiplication of the argument amount with the variable sellPrice, causing financial harm to sellers.

Mitigation and Prevention

Ways to address and prevent the CVE-2018-12063 vulnerability.

Immediate Steps to Take

Avoid using the sell function in the INT smart contract until a patch is available.
Monitor for any updates or security advisories related to this vulnerability.

Long-Term Security Practices

Regularly update smart contracts to address known vulnerabilities.
Implement secure coding practices to prevent similar issues in the future.

Patching and Updates

Apply patches or updates provided by the INT smart contract developers to fix the "tradeTrap" problem.