CVE-2018-19830: Business Alliance Financial Circle Project Business Alliance Financial Circle

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public (by default) and does not check the caller's identity.

Affected products

• Business Alliance Financial Circle Project Business Alliance Financial Circle: affected versions not specified

Published 2019-12-31. Last modified 2026-06-17.