Description
An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address.
References
- https://github.com/hellowuzekai/blockchains/blob/master/Phishing.md
- https://etherscan.io/address/0x5a50C7D96fC68ea2F0bEE06D86CD971c31F85604
- https://etherscan.io/address/0x07c1C8c2BCe6290DAA554118b7d208041615CE54
- https://etherscan.io/address/0x86b784AEF0e9c9A581550bA07fb85B64c780c320
- https://etherscan.io/address/0x403E518F21F5Ce308085Dcf6637758C61f92446A
- https://etherscan.io/address/0x340DbA127F099DAB9DC8599C75b16e44D9b02Fdb
- https://etherscan.io/address/0xD7aA007C3e7ab454FFE3E20F0b28F926Db295477