Vulnerability: Exploitable approveAndCall Function in Aditus (ADI) Smart Contract

CVE-2018-12959 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:N

The approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all contract balances into their account).

Learn more about our Web Application Penetration Testing UK.