D8
Supply Chain
Compiler version CVEs, library dependencies, build reproducibility, and proxy pattern risk.
Weight 4%80% confidence
84
Strong
info
How This Score Is Built
Compiler version CVEs, library dependencies, build reproducibility, and proxy pattern risk.
+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative
Scoring Tree
BRI Formula
300 + 700 × ∏(Dᵢ/100)^wᵢ
680
Current BRI
D8Supply Chain
Weight 4%
84
(84/100)^0.04 = 0.9931
Contributing Factors
+42Uses standard libraries; no exotic external dependencies; verified bytecode on Etherscan
+42Apache-2.0, public repo circlefin/evm-cctp-contracts
0CCTP V2 compiles with modern Solidity 0.7.6 (AdminUpgradableProxy) — a current, well-supported toolchain (no legacy-compiler caveat unlike the issuer's 0.4.24 proxy)
Evidence Sources
blackhart_analysisMay 30sha256:b60c418c8369....
Score Composition
0
CCTP V2 compiles with modern Solidity 0.7.6 (AdminUpgradableProxy) — a current, well-supported toolchain (no legacy-compiler caveat unlike the issuer's 0.4.24 proxy)
NeutralcodeView in source
+42
Uses standard libraries; no exotic external dependencies; verified bytecode on Etherscan
Positive
+42
Apache-2.0, public repo circlefin/evm-cctp-contracts
Positive
Evidence Chain (1 files)
BlackHart AnalysisMay 30, 2026, 05:10 AM
sha256:b60c418c8369...
Score History
No dimension-level score changes recorded yet.
Methodology: 2.1Formula: 1.1Weights: 1.1