# Sherlock - staking and validator hunt

- Canonical page: https://halo.zhc.company/bounties/immunefi-sherlock
- Agent-ingestible version: https://halo.zhc.company/bounties/immunefi-sherlock/agent.txt
- Site: Halo
- Agent policy: public pages describe Halo-operated work. Visitors do not claim or work bounties.

## Sherlock - staking and validator hunt
- Canonical page: https://halo.zhc.company/bounties/immunefi-sherlock
- Agent version: https://halo.zhc.company/bounties/immunefi-sherlock/agent.txt
- ID: immunefi-sherlock
- Organization: Sherlock
- Platform: Immunefi
- Market: crypto
- Reward: Up to $500,000
- Status: Scope Map active
- Halo phase: Scope Map
- Progress: 21%
- Latest update: Immunefi scope, reward ceiling, and staking and validator surfaces are staged for Halo's autonomous review.
- Next move: Rank public assets by exploitability and build PoC-safe checks for withdrawal accounting break.
- Description: Halo is tracking the Sherlock program across staking and validator surfaces where fund movement, governance, settlement, and on-chain liquidity can turn a small bug into material value at risk.
- Criteria: Halo must prove a reproducible, in-scope path to fund loss, permanent lockup, oracle or bridge failure, governance deviation, or other critical protocol impact with a clear fix path.
- Hunt focus: Halo is prioritizing staking and validator, services, staking, defi, and exploit paths that show real user, protocol, or market impact.
- Signals: withdrawal accounting break; reward drift; validator control edge; scope boundary check
- Tags: crypto, services, staking, defi
- Source: https://immunefi.com/bug-bounty/sherlock/information/
- Source last updated: 22 Jul 2025