CVE-2018-19834: Bombba Project Bombba

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The quaker function of a smart contract implementation for BOMBBA (BOMB), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.

Affected products

• Bombba Project Bombba: affected versions not specified

Published 2019-12-31. Last modified 2026-06-17.