awesome-buggy-erc20-tokens
by sec-bit
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
AI summary
Vulnerability tracker
Collects and documents vulnerabilities in ERC20 smart contracts used in Ethereum tokens.
- stars
- 616
- forks
- 101
- watching
- 40
- awesome lists
- 5
- entries
- 54
What's in the list
54 links in 7 sections, with live GitHub stats.activeno commit in 2y
Navigation
- bad_tokens.all.csv
Visit for a summary of all Token contracts affected
- bad_tokens.top.csv
Visit for a summary of top ranking Token contracts affected
- ERC20_token_issue_list.md
Visit for a detailed description of all bugs and Token contracts affected
Recent Updates
Problems in ERC20 Token Contracts / One Solution: Collecting Buggy Token Contracts
- [16]
excessive authorities of Token administrators
Repo Structure
- token_dict.json
lists addresses and basic info of ERC20 contracts collected by
- token_detail_dict.json
lists addresses and detailed info of ERC20 contracts collected by
- ERC20_token_issue_list.md
lists detailed descriptions of known bugs
- issues.json
maps between known bugs and indexes
- bad_tokens.all.csv
along with are lists of all buggy Token contracts in CSV and JSON formats
- bad_tokens.top.csv
along with are lists of top ranking buggy Token contracts in CSV and JSON formats
- raw/
, and list all known bugs and addresses of affected contracts in formats of plain text, CSV and JSON
- gen_token_detail_dict.py
is a script to update
- gen_list_from_raw.py
is a script to generate and lists above
How to Contribute
- ERC20_token_issue_list.md
Add the name and description of the bug with reference to
- raw
Create a new file with the bug name in directory and fill in the address of affected contracts
- issues.json
Add the name and index of the new bug to
Technical Partnership
- https://loopring.io/
Loopring
- https://dex.top/
DEx.top
- https://consensys.net/
ConsenSys China
- https://www.chaitin.cn/
Chaitin Tech
References
ERC-20 Token Standard
[1] , Nov 19, 2015
- Understanding The DAO Hack for Journalists
[2] , Jun 19, 2016
- A disastrous vulnerability found in smart contracts of BeautyChain (BEC)
[3] , Apr 23, 2018
- SECBIT: 智能合约红色预警：四个Token惊爆逻辑漏洞，归零风险或源于代码复制
[5] , May 24, 2018
- SECBIT: 围观！81个智能合约惊现同一漏洞，是巧合？还是另有玄机？
[6] , Jun 3, 2018
- Tsinghua-360 Research Center of Enterprise Security: ERC20智能合约整数溢出系列漏洞披露
[7] , Jun 12, 2018
- ChainDD: 【得得预警】ERC20智能合约又现大量整数溢出漏洞
[8] , Jun 12, 2018
- An Incompatibility in Ethereum Smart Contract Threatening dApp Ecosystem
[12] , Jun 8, 2018
- Redundant Check in ERC20 Smart Contracts’ approve()
[13] , Jun 15, 2018
- 360 0KEE Team: 以太坊智能合约Hexagon存在溢出漏洞
[19] , May 18, 2018
- SlowMist：ATN 披露特殊场景下的以太坊合约重大漏洞
[20] , Jun 20, 2018
- BCSEC: 一些智能合约存在笔误，一个字母可造成代币千万市值蒸发！
[21] , Jun 22, 2018
- LianAn：小心！智能合约再爆高危漏洞，两大加密货币直接变废纸！
[22] , Jun 6, 2018
- PeckShield: New allowAnyone Bug Identified in Multiple ERC20 Smart Contracts
[23] , May 23, 2018
A guide to smart contract security best practices
OpenZeppelin, a framework to build secure smart contracts on EthereumNothing in this list matches your filter.
Featured in 5 awesome lists
Each link jumps to the spot where the list mentions awesome-buggy-erc20-tokens.
More related projects
paweldrozd/eslint-plugin-markdownlint24
wolflo/evm-opcodes783
uniswap/web3-react5.6K
peacekeeper/blockchain-identity648
ewasm/design1K
yuzushioh/ethereumkit481
igorshubovych/markdownlint-cli861
markdownlint/markdownlint1.8K
walletconnect/create-eth-app2.8K
davidanson/markdownlint-cli2386
rdubois-crypto/freshcryptolib129
scanate/ethlist3.9K