Centrifuge
DAMASCUSRWA / Tokenization · Ethereum · $300M+ TVL · 15 contracts
Confidence 70%Z-Factor 0.80Updated 2026-05-17Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
759
BRI Score
3004756508251000
Security Profile
Access Control
70
70
Economic Soundness
65
65
Oracle Integrity
55
55
Compositional Risk
72
72
Governance
65
65
Maturity
75
75
Resilience
50
50
Supply Chain
72
72
Op Security
62
62
Cascade Exposure
100
100
Access Ctrl
70
70
Economic
65
65
Oracle
55
55
Compos.
72
72
Govern.
65
65
Maturity
75
75
Resilience
50
50
Supply Ch.
72
72
OpSec
62
62
Cascade
100
100
Min
50
Avg
69
Max
100
Audit History
Trail of Bits
2022-06
Code4rena
2023-09
Bug Bounty Program
$250,000
Max payout on Immunefi
Assessment
RWA tokenization protocol with 72-month Tinlake history. D3 low (55) due to off-chain oracle dependency for RWA valuations. D2 reflects inherent RWA illiquidity risk. Niche protocol with moderate security coverage.
Dimension Breakdown
How scores work →Access Control
Weight 18%72% conf
70
arrow_forwardGood
+18Pool admin controls asset onboarding and configuration
+18Epoch-based tranche investment/redemption model
+18Restricted token transfers (compliance whitelist)
+18Centralized asset originator trust dependency
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 13%68% conf
65
arrow_forwardModerate
+22RWA collateral valuation depends on off-chain assets
+22Senior/Junior tranche waterfall model
+22NAV calculation relies on off-chain asset pricing
-35Liquidity risk: RWA assets are illiquid by nature
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 13%60% conf
55
arrow_forwardModerate
+14NAV oracle depends on off-chain asset valuations
+14Asset originator self-reports collateral values
+14Limited on-chain price verification for RWA
+14Trust assumption: originator honest reporting
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 12%75% conf
75
arrow_forwardGood
+25Tinlake live since mid-2020 (72 months), new Centrifuge since 2023
+25~$250M TVL across pools
-25No protocol-level exploit
+25Z-factor: 0.923
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 10%68% conf
65
arrow_forwardModerate
+16CFG token governance on Centrifuge Chain
+16Council and democracy modules (Substrate-based)
+16Pool-level governance by asset originators
+16Limited on-chain governance maturity
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%30% conf
50
Concerning
- Maximum resilience under independent adversarial testing
- Comprehensive security coverage across all attack surfaces
- Active bounty program incentivizes continuous scrutiny
- No validated adversarial findings — score set to neutral baseline
Operational Security
Weight 10%60% conf
62
arrow_forwardModerate
-8No branch protection detected
-8CI/CD present but unstable (60% success)
+21Commit signing: 100% verified
+21Strong PR review culture (87% reviewed)
receipt_longView provenance chainarrow_forward
Compositional Risk
Weight 5%70% conf
72
arrow_forwardGood
+18Tinlake/Centrifuge Chain integration
+18Limited DeFi composability (restricted tokens)
+18MakerDAO integration for DAI lending against RWA
+18Moderate external dependency footprint
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%50% conf
100
arrow_forwardExcellent
+50Member of 2 dependency cluster(s)
0No cross-protocol cascade exposure detected
0Score: 100/100 (higher = more isolated from systemic risk)
+50Source: cross_protocol_composition.json dependency analysis
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%70% conf
72
arrow_forwardGood
+18Substrate-based chain (Centrifuge Chain)
+18Solidity contracts on Ethereum (Tinlake)
+18Moderate dependency complexity
+18Mixed tech stack (Rust + Solidity)
receipt_longView provenance chainarrow_forward
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Adversarial Resilience50
Oracle Integrity55
Operational Security62
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "centrifuge"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("centrifuge")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.