CVE-2018-10376
Published · Updated
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 1.8%
from disclosure to weapon
Published on NVDApr 25
VulnCheckApr 25
exploitation probability
1.8%top 23% of all CVEs
observed exploitation
yesVulnCheck
An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh (aka SMT), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted _fee and _value parameters, as exploited in the wild in April 2018, aka the "proxyOverflow" issue.
Affected products
n/a · n/a