BlackHartBlackHart
Scores/Circle CCTP/Provenance/Compositional Risk
D4

Compositional Risk

Protocol-intrinsic composition: external dependencies, cross-contract interactions, and integration surface area.

Weight 5%70% confidence
60
Moderate
info

How This Score Is Built

Protocol-intrinsic composition: external dependencies, cross-contract interactions, and integration surface area.

+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative

Scoring Tree

BRI Formula
300 + 700 × ∏(Dᵢ/100)^wᵢ
680
Current BRI
D4Compositional Risk
Weight 6%
60
(60/100)^0.06 = 0.9698
Contributing Factors
+15Internal composition: TokenMessengerV2 <-> MessageTransmitterV2 <-> TokenMinterV2, wired via localMessageTransmitter/localMinter/localTokenMessenger (all cross-references confirmed on-chain)
+15Off-chain relayer/attestation dependency adds a liveness + integrity component outside the contract graph
+15V2 hook data lets a destination message trigger arbitrary downstream calls (handleReceiveFinalizedMessage / hook execution) — a new composition surface vs V1; bounded by maxMessageBodySize and the 2-of-2 attestation gate
+15TokenMinter mints USDC by calling the FiatToken mint path — coupling to the issuer's minter allowance (CCTP is a configured minter on the issuer)
Evidence Sources
blackhart_analysisMay 30sha256:8a9a41b0daec....

Score Composition

+15

Internal composition: TokenMessengerV2 <-> MessageTransmitterV2 <-> TokenMinterV2, wired via localMessageTransmitter/localMinter/localTokenMessenger (all cross-references confirmed on-chain)

PositivecodeView in source
+15

Off-chain relayer/attestation dependency adds a liveness + integrity component outside the contract graph

Positive
+15

V2 hook data lets a destination message trigger arbitrary downstream calls (handleReceiveFinalizedMessage / hook execution) — a new composition surface vs V1; bounded by maxMessageBodySize and the 2-of-2 attestation gate

PositivecodeView in source
+15

TokenMinter mints USDC by calling the FiatToken mint path — coupling to the issuer's minter allowance (CCTP is a configured minter on the issuer)

PositivecodeView in source

Evidence Chain (1 files)

BlackHart AnalysisMay 30, 2026, 05:10 AM
sha256:8a9a41b0daec...

Score History

No dimension-level score changes recorded yet.

Methodology: 2.1Formula: 1.1Weights: 1.1
How is Compositional Risk scored?← Back to Provenance Ledger