Public score as of Nov 7, 7 days behind. Live subscribers see every move the moment it lands.
Go live for $29
Jupiter
Score history
Model updateEvery Score Move
Live for subscribersOpen any move to see what changedMay 15down 1Model updateDimensions rescored
BlackHart's method or evidence changed and the score was recalculated. No new release drove this move.
May 13down 36Model updateDimensions rescored
BlackHart's method or evidence changed and the score was recalculated. No new release drove this move.
May 6down 21Model updateDimensions rescored
BlackHart's method or evidence changed and the score was recalculated. No new release drove this move.
Dimensions
12 dimensions, 10 apply to Jupiter. Open one to see how it is scored.Access controlscore 60weight 18%
Admin keys, roles, permissions and the checks that guard them.
Economic soundnessscore 82weight 13%
How the economic design holds up under flash loans, MEV, liquidation cascades and bad incentives.
Oracle integrityscore 95weight 13%
How prices reach the protocol, and how hard they are to manipulate or let go stale.
Maturityscore 60weight 12%
Time in production, value secured over time, audits, bounties and incident history.
- Live since
- Oct 1, 2021 (61 months)
- TVL
- $2B+
- Audits
- Offside Labs, Jan 2024
- OtterSec, Jun 2023
- Bug bounty
- Self-hosted, up to $500,000
Governancescore 82weight 10%
Admin key concentration, timelocks and how upgrades happen.
Adversarial resiliencescore 50weight 10%
How the code holds up under independent adversarial research.
Operational securityscore 55weight 10%
Incident response, deployment hygiene, key management and monitoring.
- GitHub scan
- Not yet measured
- Branch protection
- Not yet measured
- Required reviews
- Not yet measured
- Signing ratio
- Not yet measured
- Commits in 90 days
- Not yet measured
- PR review ratio
- Not yet measured
- Has CI
- Not yet measured
- CI success rate
- Not yet measured
- Security policy
- Not yet measured
- Deployment hygiene
- Not yet measured
- Development practices
- Not yet measured
- Emergency history
- Not yet measured
- Incident response
- Not yet measured
- Key management
- Not yet measured
- Monitoring
- Not yet measured
Compositional riskscore 100weight 5%
External dependencies and the surface where contracts and integrations interact.
Cascade exposurescore 95weight 5%
Failures upstream that could spread into the protocol, and the damage if it fails.
Supply chainscore 75weight 4%
Compiler versions, libraries, build reproducibility and proxy patterns.
- Dependabot
- Not yet measured