PT-2020-9655

CVE-2019-15080

·

Published

2020-12-30

·

Updated

2021-01-04

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions MORPH Token versions through 2019-06-05
Description An issue was discovered in the smart contract implementation of MORPH Token, allowing attackers to acquire contract ownership due to a typo in the constructor of the Owned contract. This enables a new owner to obtain MORPH Tokens for free and perform a Denial of Service (DoS) attack.
Recommendations For MORPH Token versions through 2019-06-05, consider disabling the contract until a fix is implemented to prevent attackers from acquiring contract ownership and performing a DoS attack.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾