BlackHartBlackHart
Scores/Axelar

Axelar

TEMPERED

Bridge / Messaging · Multi-chain · $500M+ TVL · 10 contracts

Confidence 77%Z-Factor 0.78Updated 2026-05-17Cross-chain assessedPublic Score

Public risk assessment — scores are produced with the same methodology as monitored protocols

748
BRI Score
3004756508251000

Security Profile

Access Ctrl
72
Economic
68
Oracle
75
Compos.
55
Govern.
58
Maturity
78
Resilience
50
Supply Ch.
75
X-Chain
60
OpSec
54
Cascade
99
Min
50
Avg
68
Max
99

Audit History

NCC Group
2022-08
Ackee Blockchain
2022-06
Oak Security
2023-09

Bug Bounty Program

$2,250,000
Max payout on Immunefi
View Program →

Assessment

Cross-chain messaging protocol with 52-month track record, no exploits. D4 and D10 low due to extreme cross-chain composition surface (60+ chains). Governance concerns (D5) and validator centralization risk limit score.

Dimension Breakdown

How scores work →
Access Control
Weight 16%78% conf
72
Good
arrow_forward
+24Validator set controls message relay (threshold signature)
+24Gateway contract with admin upgrade capability
+24Governance multisig can pause/unpause
-28Concerns: validator collusion threshold, upgrade key centralization
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 12%72% conf
68
Moderate
arrow_forward
+68AXL token staking secures network (moderate security budget)
-11No direct lending/borrowing economics to exploit
-11Bridge relay fees are minimal attack surface
-11Risk: validator slashing economics untested at scale
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 12%75% conf
75
Good
arrow_forward
+38Validators act as oracle for cross-chain state
+38Multi-validator attestation reduces single-point failure
-12No external price oracle dependency
-12Risk: validator set IS the oracle, shared trust assumption
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 11%80% conf
78
Good
arrow_forward
+26Mainnet live since January 2022 (52 months)
-22No protocol-level exploit (bridge hacks are common in sector)
+26Processed billions in cross-chain volume
+26Z-factor: 0.897
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%30% conf
50
Concerning
  • Maximum resilience under independent adversarial testing
  • Comprehensive security coverage across all attack surfaces
  • Active bounty program incentivizes continuous scrutiny
  • No validated adversarial findings — score set to neutral baseline
Compositional Risk
Weight 9%70% conf
55
Moderate
arrow_forward
+18Cross-chain message relay = extreme compositional surface
+18GMP (General Message Passing) can compose arbitrary logic
-45Connected to 60+ chains, each adds risk surface
+18Squid Router integration adds DeFi composition layer
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 9%72% conf
58
Moderate
arrow_forward
+19Cosmos SDK governance with AXL token voting
+19Gateway upgradeable via governance proposals
-42Validator governance concerns raised by community
+19Limited timelock visibility on critical operations
receipt_longView provenance chainarrow_forward
Cross-Chain Messaging
Weight 9%72% conf
60
Moderate
arrow_forward
+30Core product IS cross-chain messaging
+3060+ chain connections = massive bridge surface
-20Validator-based relay model (not trustless)
-20Governance concerns about validator centralization
receipt_longView provenance chainarrow_forward
Operational Security
Weight 9%60% conf
54
Concerning
arrow_forward
-9No branch protection detected
+18Active CI/CD (80% success rate)
+18Commit signing: 94% verified
+18Strong PR review culture (77% reviewed)
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%55% conf
99
Excellent
arrow_forward
+25Appears in 1 cross-protocol cascade chain(s)
+25Failure cascades to 1 downstream protocol(s)
+25Member of 2 dependency cluster(s)
-1Score: 99/100 (higher = more isolated from systemic risk)
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%78% conf
75
Good
arrow_forward
+19Cosmos SDK base (well-maintained)
+19Solidity gateway contracts on EVM chains
+19Multiple chain deployments increase supply chain surface
+19Dependency on relayer infrastructure
receipt_longView provenance chainarrow_forward

Risk Drivers

Primary risk factors driving this score, ordered by severity.

Adversarial Resilience50
Operational Security54
Compositional Risk55

Adversarial Risk Signals

Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.

Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Deployed 2022-01-01Z-Factor 0.78011 active dimensionsreceipt_longProvenance Ledger

Score History & Verification

Score provenance tracking begins with the next reassessment.

On-Chain Data

Protocol Slug
"axelar"
Oracle
BRORegistry (Base)
Evidence
IPFS (pinned)
Staleness Threshold
24 hours
Read Score
registry.getScore("axelar")

Reduce exploitable risk

BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.