BlackHart
Go live

Public score as of Nov 7, 7 days behind. Live subscribers see every move the moment it lands.

Go live for $29
Uniswap V3 logo
Index / DEX and AMM

Uniswap V3

Protocol · DEX / AMM · Multi-chain · Mithril tier · Confidence 72 · uniswap.org

893down 2
BRI out of 1000 · last move May 19
Claim

Score history

Model update

Every Score Move

Live for subscribersOpen any move to see what changed
May 19down 2Model updateDimensions rescored
Score 895 to 893Dimensions Operational security

BlackHart's method or evidence changed and the score was recalculated. No new release drove this move.

May 15down 33Model updateDimensions rescored
Score 928 to 895Dimensions Several dimensions

BlackHart's method or evidence changed and the score was recalculated. No new release drove this move.

Dimensions

12 dimensions, 10 apply to Uniswap V3. Open one to see how it is scored.
Access controlscore 92weight 18%

Admin keys, roles, permissions and the checks that guard them.

BlackHart-1On-chain rolesMultisig thresholdsTimelocksDeterministic
Economic soundnessscore 90weight 13%

How the economic design holds up under flash loans, MEV, liquidation cascades and bad incentives.

BlackHart-1 value flowDefiLlama dataDeterministic
Oracle integrityscore 95weight 13%

How prices reach the protocol, and how hard they are to manipulate or let go stale.

BlackHart-1On-chain oracle configurationDeterministic
Maturityscore 95weight 12%

Time in production, value secured over time, audits, bounties and incident history.

AgeTVL historyIncident historyDeterministic
Signals
Live since
May 5, 2021 (66 months)
TVL
$4B+
Audits
  • Trail of Bits, Apr 2021
  • Certora (Formal), Apr 2021
  • ABDK, Mar 2021
Bug bounty
Cantina, up to $2,250,000
Governancescore 90weight 10%

Admin key concentration, timelocks and how upgrades happen.

On-chain parametersProposals and docsDecision model for docs
Adversarial resiliencescore 80weight 10%

How the code holds up under independent adversarial research.

Validated findingsSeverity-weighted BlackHart-1 candidatesAudit coverageDecision model to parse audit reports
Operational securityscore 48weight 10%

Incident response, deployment hygiene, key management and monitoring.

GitHub collectorDeterministic
Signals
GitHub scan
Uniswap/v3-core on May 20
Branch protection
No
Required reviews
0
Signing ratio
92%
Commits in 90 days
1
PR review ratio
33%
Has CI
Yes
CI success rate
0%
Security policy
No
Deployment hygiene
58 of 100
Development practices
27 of 100
Emergency history
75 of 100
Incident response
35 of 100
Key management
70 of 100
Monitoring
40 of 100
Compositional riskscore 85weight 5%

External dependencies and the surface where contracts and integrations interact.

Integration graphDeterministic
Cascade exposurescore 90weight 5%

Failures upstream that could spread into the protocol, and the damage if it fails.

Dependency graphDeterministic
Supply chainscore 90weight 4%

Compiler versions, libraries, build reproducibility and proxy patterns.

Dependency manifestsPinned versionsKnown CVEsDeterministic
Signals
Dependabot
No