BlackHart
Go live

Public score as of Nov 7, 7 days behind. Live subscribers see every move the moment it lands.

Go live for $29
USDC logo
Index / Stablecoins and RWA

USDC

Token · Stablecoin · Multi-chain · Tempered tier · Confidence 75 · circle.com

733up 30
BRI out of 1000 · last move May 30
Claim

Score history

Model update

Every Score Move

Live for subscribersOpen any move to see what changed
May 30up 30Model updateDimensions rescored
Score 703 to 733Dimensions Several dimensions

BlackHart's method or evidence changed and the score was recalculated. No new release drove this move.

Dimensions

12 dimensions, 10 apply to USDC. Open one to see how it is scored.
Access controlscore 45weight 18%

Admin keys, roles, permissions and the checks that guard them.

BlackHart-1On-chain rolesMultisig thresholdsTimelocksDeterministic
Economic soundnessscore 82weight 13%

How the economic design holds up under flash loans, MEV, liquidation cascades and bad incentives.

BlackHart-1 value flowDefiLlama dataDeterministic
Oracle integrityscore 62weight 13%

How prices reach the protocol, and how hard they are to manipulate or let go stale.

BlackHart-1On-chain oracle configurationDeterministic
Maturityscore 97weight 12%

Time in production, value secured over time, audits, bounties and incident history.

AgeTVL historyIncident historyDeterministic
Signals
Live since
Aug 3, 2018 (99 months)
TVL
$52B+ circulating
Audits
  • Deloitte & Touche (monthly reserve attestation), Sep 2025
  • ChainSecurity (CCTP V2, shared role/sig patterns), Mar 2025
  • EtherAuthority (FiatTokenV2_2), Jan 2024
Bug bounty
HackerOne, up to $5,000
Governancescore 38weight 10%

Admin key concentration, timelocks and how upgrades happen.

On-chain parametersProposals and docsDecision model for docs
Adversarial resiliencescore 70weight 10%

How the code holds up under independent adversarial research.

Validated findingsSeverity-weighted BlackHart-1 candidatesAudit coverageDecision model to parse audit reports
Operational securityscore 72weight 10%

Incident response, deployment hygiene, key management and monitoring.

GitHub collectorDeterministic
Signals
GitHub scan
Not yet measured
Branch protection
Not yet measured
Required reviews
Not yet measured
Signing ratio
Not yet measured
Commits in 90 days
Not yet measured
PR review ratio
Not yet measured
Has CI
Not yet measured
CI success rate
Not yet measured
Security policy
Not yet measured
Deployment hygiene
80 of 100
Development practices
70 of 100
Emergency history
82 of 100
Incident response
78 of 100
Key management
68 of 100
Monitoring
72 of 100
Compositional riskscore 78weight 5%

External dependencies and the surface where contracts and integrations interact.

Integration graphDeterministic
Cascade exposurescore 30weight 5%

Failures upstream that could spread into the protocol, and the damage if it fails.

Dependency graphDeterministic
Supply chainscore 84weight 4%

Compiler versions, libraries, build reproducibility and proxy patterns.

Dependency manifestsPinned versionsKnown CVEsDeterministic
Signals
Dependabot
Not yet measured