CVE-2018-10769: First Project First

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh (SMT), an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions (with the same signatures) in other tokens: First (FST), GG Token (GG), M2C Mesh Network (MTC), M2C Mesh Network (mesh), and UG Token (UGT).

Affected products

• First Project First: affected versions not specified
• Gg Token Project Gg Token: affected versions not specified
• Mesh Project Mesh: affected versions not specified
• Mtc Project Mtc: affected versions not specified
• Smartmesh Project Smartmesh: affected versions not specified
• Ugtoken Project Ugtoken: affected versions not specified

Published 2018-08-10. Last modified 2026-06-17.