DeFi Saver
DAMASCUSDeFi Automation · Ethereum + L2s · $500M+ managed TVL · 20 contracts
Confidence 67%Z-Factor 0.85Updated 2026-05-17Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
792
BRI Score
3004756508251000
Security Profile
Access Control
78
78
Economic Soundness
80
80
Oracle Integrity
78
78
Compositional Risk
58
58
Governance
52
52
Maturity
85
85
Resilience
50
50
Supply Chain
80
80
Op Security
57
57
Cascade Exposure
100
100
Access Ctrl
78
78
Economic
80
80
Oracle
78
78
Compos.
58
58
Govern.
52
52
Maturity
85
85
Resilience
50
50
Supply Ch.
80
80
OpSec
57
57
Cascade
100
100
Min
50
Avg
72
Max
100
Audit History
Consensys Diligence
2020-06
Dedaub
2022-11
Bug Bounty Program
$250,000
Max payout on Immunefi
Assessment
Veteran DeFi management tool with excellent maturity and clean track record. Survived Black Thursday stress test. High compositional risk by design (D4=58) and centralized governance (D5=52) are structural limitations. Slightly above Instadapp due to simpler architecture.
Dimension Breakdown
How scores work →Access Control
Weight 18%75% conf
78
arrow_forwardGood
+20Smart wallet with owner authority model
+20Automation permissions granted by user explicitly
+20Recipe/action-based architecture with permissioned actions
+20Bot automation requires explicit user opt-in
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 13%78% conf
80
arrow_forwardStrong
+27Fee-based model on automation actions (boost/repay)
-20No protocol token creating economic distortions
+27Passes through underlying protocol economics cleanly
+27Automation trigger economics well-understood
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 13%75% conf
78
arrow_forwardGood
+20Uses Chainlink for automation trigger prices
+20Inherits oracle deps from underlying protocols (Aave, Maker, etc.)
+20Automation triggers have oracle-sensitive timing
+20Price feed dependency for CDP ratio monitoring
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 12%82% conf
85
arrow_forwardStrong
+28Live since 2019 (originally CDP Saver for MakerDAO)
-8No protocol exploit across any version
+28Battle-tested through multiple market crashes (2020, 2022)
-8Automation worked correctly during Black Thursday
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 10%65% conf
52
arrow_forwardConcerning
-24No governance token (team-controlled)
+26Centralized decision-making on feature additions
-24No on-chain governance mechanism
+26Transparent team but unilateral control
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%30% conf
50
Concerning
- Maximum resilience under independent adversarial testing
- Comprehensive security coverage across all attack surfaces
- Mature codebase with extensive battle testing
- No validated adversarial findings — score set to neutral baseline
Operational Security
Weight 10%50% conf
57
arrow_forwardModerate
-7No branch protection detected
-7No CI/CD pipeline detected
+28Moderate development (17 commits/month)
-7Incident response time not available (using commit frequency proxy)
receipt_longView provenance chainarrow_forward
Compositional Risk
Weight 5%72% conf
58
arrow_forwardModerate
+19Composes multiple DeFi protocols by design
+19Recipe system creates cross-protocol transaction bundles
+19Flash loan integration adds composition surface
-42Automation bots create time-dependent composition risk
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%50% conf
100
arrow_forwardExcellent
+50Member of 1 dependency cluster(s)
0No cross-protocol cascade exposure detected
0Score: 100/100 (higher = more isolated from systemic risk)
+50Source: cross_protocol_composition.json dependency analysis
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%78% conf
80
arrow_forwardStrong
+20Standard Solidity dependencies
+20OpenZeppelin libraries
+20Integration dependencies on target protocols
+20Automation infrastructure is off-chain component
receipt_longView provenance chainarrow_forward
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Adversarial Resilience50
Governance & Upgradeability52
Operational Security57
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "defisaver"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("defisaver")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.