[Ethereum] Unagii - Security Rating 2

Security Rating Database
#1

Security Rating Level: 2
Evaluation Date: Mar 31st, 2021

1. History & Team (Weight 20%; Score 72)

1.1 Project age (8%; 50)
Launched on mainnet from 2020 Dec, alive for 4 months.
1.2 Past exploits (8%; 100)
Was never attacked
1.3 Team anonymity (2%; 100)
Team are public
1.4 Team experience in programming (2%; 20)
Unknown

2. Exposure (Weight 25%; Score 24.2)

2.1 Historical TVL (17.5%; 16)
Average market share in the past 1Q: less than 0.1%
Data collected from DefiLlama - DeFi Dashboard
2.2 Industry segment (5%; 40)
Unagii is a yield aggregator
2.3 Infrastructure (2.5%; 50)
Out of business nature, heavy oracles are needed for price feed

3. Audit (Weight 35%; Score 78)

Audit report available on: Security - Unagii Docs
3.1 Transparency and scope (14%; 100)
Full scope audit done, and report is public
3.2 Audit firm trust score (10.5%; 30)
Audited by Certik, Tier 3 audit firm
3.3 Audit findings (10.5%; 80)
No critical issues were found in audit
3.4 Other credits (up to additive 5.25%; 5)
Audit done before deployment

4. Code quality (Weight 15%; Score 65)

Repository on github: GitHub - stakewithus/uvault
4.1 Documentation
Top level documentation exists
4.2 Test
Test done but code coverage not visible

5. Developer community (Weight 5%; Score 18)

5.1 Bug bounty program (3.5%; 0)
Exists. Reward up to $50,000
5.2 Issues raised on Github (1.5%; 60)
3 issues raised on github repository

The N-SCOSS for Compound is 58.4, level 2

#2

Unagii is rated at security level at 2, as re-evaluated on 2021 December 20th.

Unagii gained higher score in Pillar 1 and 2 by lasting stably for another 9 months, and also occurring no attacks after last evaluation. But the improvement is not significant enough to take it to the next security level, though the overall score is very close to the bottom line of level 3.

Below are the details of updated rating for Unagii based on data up to 2021 December 20th.

Security Rating Level: 2
Evaluation Date: Dec 20th, 2021

1. History & Team (Weight 20%; Score 84)

1.1 Project age (8%; 80)
Launched on mainnet from 2020 Dec, alive for 13 months.
1.2 Past exploits (8%; 100)
Was never attacked
1.3 Team anonymity (2%; 100)
Team are public
1.4 Team experience in programming (2%; 20)
Unknown

2. Exposure (Weight 25%; Score 41)

2.1 Historical TVL (17.5%; 40)
Average market share in the past 4Q: less than 0.1%, less than 0.1%, less than 0.1%, less than 0.1%
Data collected from Unagii Protocol: TVL and stats - DefiLlama
2.2 Industry segment (5%; 40)
Unagii is a yield aggregator
2.3 Infrastructure (2.5%; 50)
Out of business nature, heavy oracles are needed for price feed

3. Audit (Weight 35%; Score 78)

Audit report available on: Security - Unagii Docs
3.1 Transparency and scope (14%; 100)
Full scope audit done, and report is public
3.2 Audit firm trust score (10.5%; 30)
Audited by Certik, Tier 3 audit firm
3.3 Audit findings (10.5%; 80)
No critical issues were found in audit
3.4 Other credits (up to additive 5.25%; 5)
Audit done before deployment

4. Code quality (Weight 15%; Score 65)

Repository on github: GitHub - stakewithus/uvault
4.1 Documentation
Top level documentation exists
4.2 Test
Test done but code coverage not visible

5. Developer community (Weight 5%; Score 15)

5.1 Bug bounty program (3.5%; 0)
Not exists.
5.2 Issues raised on Github (1.5%; 60)
3 issues raised on github repository

The N-SCOSS for Compound is 64.85, level 2