Security Rating Level: 3
Evaluation Date: Mar 31st, 2021
1. History & Team (Weight 20%; Score 44)
1.1 Project age (8%; 80)
Launched on mainnet from 2020 Feb, alive for 14 months.
1.2 Past exploits (8%; 0)
Was attacked twice
1.3 Team anonymity (2%; 100)
Team are public
1.4 Team experience in programming (2%; 20)
Unknown
2. Exposure (Weight 25%; Score 80.5)
2.1 Historical TVL (17.5%; 80)
Average market share in the past 4Q: 3.3%, 3.5%, 4.9%, 3.9%
Data collected from Balancer | Stats, Charts and Guide | DeFi Pulse
2.2 Industry segment (5%; 90)
Balancer is an exchange
2.3 Infrastructure (2.5%; 65)
Oracle is needed for price feed (Chainlink), a decentralised single oracle
3. Audit (Weight 35%; Score 82)
Audit report available on: Audits - Balancer V1
3.1 Transparency and scope (14%; 100)
Full scope audit done, and report is public
3.2 Audit firm trust score (10.5%; 100)
Audited by Trail of Bits, Consensys Dilligence and OpenZeppelin, Tier 1 audit firm
3.3 Audit findings (10.5%; 40)
Critical issues were found in audit
3.4 Other credits (up to additive 5.25%; 0)
N/A
4. Code quality (Weight 15%; Score 65)
Repository on github: GitHub - balancer-labs/balancer-core: Balancer on the EVM
4.1 Documentation
No document illustrating code design, comments are insufficient
4.2 Test
Test was well done, 96% coverage
5. Developer community (Weight 5%; Score 35)
5.1 Bug bounty program (3.5%; 50)
Exists. Reward up to $5,000
5.2 Issues raised on Github (1.5%; 0)
0 issues raised on github repository
The N-SCOSS for Compound is 69.125, level 3