{"postId":"opengov:390","kind":"opengov","title":"Immunefi bounty payout","body":"Approve a `$5,000` payout for the following security report:\n\n- `$5,000` — Medium XCM deposit accounting issue: An over-limit XCM deposit targeting the router\n  account could create a duplicate credit and leave bridged-asset issuance in an unexpected state.\n  The additional balance was not practically exploitable and no user funds were affected. Fixed in\n  commit aa8469fa\n  (https://github.com/galacticcouncil/hydration-node/commit/aa8469fa4db1432196bfbe73b6e1be90d2643220)\n  by restricting the router’s deposit-lock exemption to active trade execution.","bodyFormat":"markdown","tldr":"","labels":[],"linked":["treasury:31"],"author":{"account":{"accountId":"0x8aee4e164d5d70ac67308f303c7e063e9156903e42c1087bbc530447487fa47f","address":"149AQApEw4Xe1DxWesqywiuGQHazbETMgWgT89WjEYFAc29y","emoji":"🍁","emojiName":"heimdall","emojiUrl":"https://cdn.discordapp.com/emojis/1005035405864869939.webp?size=32","tag":null,"identity":{"display":"lolmcshizz","verified":true,"email":"","web":"","twitter":"@lolmcshizz"},"profile":null},"legacyName":null},"authority":"subsquare","revision":0,"createdAt":"2026-08-20T09:09:12.000Z","editedAt":null,"lastActivityAt":"2026-09-09T07:53:39.530Z","commentsCount":1,"updatesCount":0,"upvotes":0,"threadKey":"opengov:390","source":{"name":"subsquare","id":"6a86c470781cee3ac4953a5f","cid":null,"removed":false},"bannerCid":null,"banner":null,"poll":null,"locked":false,"media":{},"hidden":false,"generation":"d9716f164a91ebad"}