CVE-2025-56207

{"id": "CVE-2025-56207", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "published": "2025-09-30T17:15:41.163", "references": [{"url": "https://github.com/Monekon/CVE/blob/main/Vulnerabilities/MMO_Transfer_to_ZeroAddress.md", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-1259"}]}], "descriptions": [{"lang": "en", "value": "A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fungible Token (NFT) project, allows users or attackers to transfer NFTs to the zero address, leading to permanent asset loss and non-compliance with the ERC721 standard. The eth address is 0x41d3d86a84c8507a7bc14f2491ec4d188fa944e7, contract name is MoneyMakingOpportunity, and compiler version is v0.8.17+commit.8df45f5f."}, {"lang": "es", "value": "Una falla de seguridad en la funci\u00f3n '_transfer' de una implementaci\u00f3n de contrato inteligente para Money Making Opportunity (MMO), un proyecto de Token No Fungible (NFT) ERC721 de Ethereum, permite a los usuarios o atacantes transferir NFT a la direcci\u00f3n cero, lo que lleva a la p\u00e9rdida permanente de activos y al incumplimiento del est\u00e1ndar ERC721. La direcci\u00f3n de eth es 0x41d3d86a84c8507a7bc14f2491ec4d188fa944e7, el nombre del contrato es MoneyMakingOpportunity y la versi\u00f3n del compilador es v0.8.17+commit.8df45f5f."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "cve@mitre.org"}