CVE-2025-57247 - CVE House

Back to Database

Status published Unknown CVE-2025-57247

The BATBToken smart contract (address 0xfbf1388408670c02f0dbbb74251d8ded1d63b7a2, Compiler Version v0.8.26+commit.8a97fa7a) contains...

0 CVSS

Vulnerability Description

The BATBToken smart contract (address 0xfbf1388408670c02f0dbbb74251d8ded1d63b7a2, Compiler Version v0.8.26+commit.8a97fa7a) contains incorrect access control implementation in whitelist management functions. The setColdWhiteList() and setSpecialAddress() functions in the base ERC20 contract are declared as public without proper access control modifiers, allowing any user to bypass transfer restrictions and manipulate special address settings. This enables unauthorized users to circumvent cold time transfer restrictions and potentially disrupt dividend distribution mechanisms, leading to privilege escalation and violation of the contract's intended tokenomics.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-57247

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from n/a

View All →

Versions of the package jsondiffpatch before 0.7.2 are vulnerable to...

RemoteClinic profile.php sql injection

Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

RemoteClinic edit-my-profile.php unrestricted upload

RemoteClinic edit-patient.php information disclosure

Affected Vendor

n/a

View all reports →

Affected Software

Unknown

Vulnerable Versions:

Unknown

Timeline

Official Publish: October 6th, 2025

Last Modified: October 6th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.