[Polygon] Kyber - Security Rating 3

Security Rating Level: 3
Evaluation Date: September 30th, 2021

1. History & Team (Weight 20%; Score 81)

1.1 Project age (8%; 60)
Launched on Polygon in 2021 June, alive for 4 months.
1.2 Past exploits (8%; 100)
Was never attacked
1.3 Team anonymity (2%; 100)
Team are public
1.4 Team experience in programming (2%; 70)
Co-founder and CTO, Victor Tran, started software programming from 2016

2. Exposure (Weight 25%; Score 53.9)

2.1 Historical TVL (17.5%; 42)
Average market share in the past 1Q: 1.2%
Data collected from Kyber Protocol: TVL and stats - DefiLlama
2.2 Industry segment (5%; 90)
Kyber is an exchange
2.3 Infrastructure (2.5%; 65)
Chainlink is used for price feed. Single decentralized oracle

3. Audit (Weight 35%; Score 89)

Audit report available on: Kyber Network - Blockchain Security DB
3.1 Transparency and scope (14%; 100)
Full scope audit done, and report is public
3.2 Audit firm trust score (10.5%; 50)
Audited by SmartDec, ChainSecurity, Tier 3 audit firm
3.3 Audit findings (10.5%; 80)
No critical issues found in audit
3.4 Other credits (up to additive 5.25%; 10)
Core smart contracts audited by multiple firms, audit done before deployment

4. Code quality (Weight 15%; Score 85)

Repository on github: GitHub - dynamic-amm/smart-contracts: 🎛 Core smart contracts of DMM protocol
4.1 Documentation
Top level documentation exsits and is clear. Comments are insufficient
4.2 Test
Full suite of test done but code coverage not visible.

5. Developer community (Weight 5%; Score 0)

5.1 Bug bounty program (3.5%; 0)
Not exists
5.2 Issues raised on Github (1.5%; 0)
No issues raised on github repository

The N-SCOSS for Compound is 73.575, level 3