CVE-2025-56207Medium
Share link
Anyone with the link can open this vulnerability.
A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-F…
CVSS
6.5
Medium
EPSS
0.00
p21
Published
2025-01-01
Updated
2025-01-01
Description
A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fungible Token (NFT) project, allows users or attackers to transfer NFTs to the zero address, leading to permanent asset loss and non-compliance with the ERC721 standard. The eth address is 0x41d3d86a84c8507a7bc14f2491ec4d188fa944e7, contract name is MoneyMakingOpportunity, and compiler version is v0.8.17+commit.8df45f5f.
Tags · CWE
Pre-auth
CWE-1259
CWE-1259BaseIncomplete
Improper Restriction of Security Token Assignment
The System-On-A-Chip (SoC) implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens are improperly protected.
https://cwe.mitre.org/data/definitions/1259.html →Open in CWE collection →CAPEC-121
CAPEC-121StandardStable
Exploit Non-Production Interfaces
https://capec.mitre.org/data/definitions/121.html →Open in CAPEC collection →
CAPEC-681
CAPEC-681DetailedDraft
Exploitation of Improperly Controlled Hardware Security Identifiers
https://capec.mitre.org/data/definitions/681.html →Open in CAPEC collection →
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Timeline
2025-01-01
Published
2025-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: L
Low (L)
Integrity Impact
I: N
None (N)
Availability Impact
A: L
Low (L)
Exploit indicators
EPSS
0.003 · p21
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
No vulnerabilities match your filters.