Chainlink
MITHRILOracle Infrastructure · Multi-chain · $16B+ secured TVL · 20 contracts
Confidence 87%Z-Factor 0.94Updated 2026-05-17Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
890
BRI Score
3004756508251000
Security Profile
Access Control
88
88
Economic Soundness
92
92
Oracle Integrity
95
95
Compositional Risk
78
78
Governance
82
82
Maturity
96
96
Resilience
87
87
Supply Chain
90
90
Op Security
70
70
Cascade Exposure
46
46
Access Ctrl
88
88
Economic
92
92
Oracle
95
95
Compos.
78
78
Govern.
82
82
Maturity
96
96
Resilience
87
87
Supply Ch.
90
90
OpSec
70
70
Cascade
46
46
Min
46
Avg
82
Max
96
Audit History
Trail of Bits
2019-06
Sigma Prime
2020-11
Dedaub
2023-06
Bug Bounty Program
$100,000
Max payout on Immunefi
Assessment
Gold standard oracle infrastructure. 84+ months live, zero protocol exploits, secures $16B+. D4 penalized for massive downstream integration surface, D5 for centralized governance. Near-ADAMANTINE.
Dimension Breakdown
How scores work →Access Control
Weight 18%85% conf
88
arrow_forwardStrong
+22Multi-sig node operator management with OCR committee
+22Feed admin controls with configurable parameters
+22Timelocked updates for critical feed configurations
+22Staking v0.2 adds economic security layer
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 13%90% conf
92
arrow_forwardExcellent
+31LINK token economics proven over 6+ years
+31Staking mechanism adds validator incentive alignment
-8No flash-loan attack surface in core oracle
+31Fee model sustainable with growing adoption
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 13%95% conf
95
arrow_forwardExcellent
+24Gold standard oracle: aggregation across 30+ node operators
+24Deviation and heartbeat thresholds per feed
+24Proof of Reserve for wrapped/bridged assets
+24CCIP extends oracle model to cross-chain
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 12%95% conf
96
arrow_forwardExcellent
+19Live since May 2019 (84+ months)
+19Zero protocol-level exploits across any version
+19$16B+ TVL secured across DeFi
+1915+ audit firms over lifetime
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 10%78% conf
82
arrow_forwardStrong
+41Chainlink Labs retains significant operational control
-9No on-chain governance token for feed management
+41Node operator selection is permissioned
-9Community program emerging but not decentralized governance
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%95% conf
87
Strong
- Score derived from continuous adversarial security research
Operational Security
Weight 10%60% conf
70
arrow_forwardGood
-10No branch protection detected
-10CI/CD present but unstable (60% success)
+14Commit signing: 100% verified
+14Strong PR review culture (83% reviewed)
receipt_longView provenance chainarrow_forward
Compositional Risk
Weight 5%80% conf
78
arrow_forwardGood
+39Thousands of protocols depend on Chainlink feeds
-11Downstream integration failures are not Chainlink bugs
+39CCIP and VRF expand compositional surface
-11Feed-specific risk isolation (one bad feed != all)
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%60% conf
46
arrow_forwardConcerning
+12Appears in 2 cross-protocol cascade chain(s)
+12Failure cascades to 20 downstream protocol(s)
+12Member of 2 dependency cluster(s)
-54Score: 46/100 (higher = more isolated from systemic risk)
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%90% conf
90
arrow_forwardExcellent
-10Standard Solidity, minimal external dependencies
+30Verified on all deployment chains
+30Professional dependency management
+30Regular compiler version updates
receipt_longView provenance chainarrow_forward
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Cascade Exposure46
Operational Security70
Compositional Risk78
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "chainlink"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("chainlink")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.