Integer Overflow Vulnerability in STeX White List (STE(WL)) Smart Contract

CVE-2018-14088 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount * 1000000000000000" will cause an integer overflow in withdrawToFounders().

Learn more about our Web Application Penetration Testing UK.