CVE-2018-18667

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://etherscan.io/address/0x7703c35cffdc5cda8d27aa3df2f9ba6964544b6e#codeThird Party Advisory
https://github.com/klenergy/ethereum-contracts/issues/1Exploit, Third Party Advisory
https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.mdExploit, Third Party Advisory
https://etherscan.io/address/0x7703c35cffdc5cda8d27aa3df2f9ba6964544b6e#codeThird Party Advisory
https://github.com/klenergy/ethereum-contracts/issues/1Exploit, Third Party Advisory
https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.mdExploit, Third Party Advisory

Timeline

Published: Dec 28, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018