Liquity BOLD
DAMASCUSStablecoin · Ethereum · $500M+ TVL · 15 contracts
Confidence 60%Z-Factor 0.62Updated 2026-05-17Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
778
BRI Score
3004756508251000
Security Profile
Access Control
82
82
Economic Soundness
72
72
Oracle Integrity
78
78
Compositional Risk
65
65
Governance
90
90
Maturity
42
42
Resilience
50
50
Supply Chain
85
85
Op Security
56
56
Cascade Exposure
100
100
Access Ctrl
82
82
Economic
72
72
Oracle
78
78
Compos.
65
65
Govern.
90
90
Maturity
42
42
Resilience
50
50
Supply Ch.
85
85
OpSec
56
56
Cascade
100
100
Min
42
Avg
72
Max
100
Audit History
Dedaub
2024-06
Cantina Competition
2024-08
ChainSecurity
2024-09
Bug Bounty Program
$1,000,000
Max payout on Immunefi
Assessment
Governance-minimized stablecoin from proven Liquity team. Immutability gives top scores in D1/D5/D8/D11 but very low maturity (Z=0.374, D6=42) is the critical drag. Novel interest rate mechanism untested. Score will rise rapidly if no exploit in first 18 months.
Dimension Breakdown
How scores work →Access Control
Weight 18%70% conf
82
arrow_forwardStrong
-9Immutable contracts (no admin keys, no upgradability)
+41Permissionless borrowing and liquidation
-9No governance control over protocol parameters
+41User-set interest rates (novel mechanism)
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 13%65% conf
72
arrow_forwardGood
+18BOLD stablecoin with user-set interest rates (novel)
+18Multi-collateral (ETH, wstETH, rETH) with independent markets
+18Interest rate mechanism untested at scale
+18Redemption mechanism redesigned from Liquity V1
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 13%72% conf
78
arrow_forwardGood
+20Chainlink oracles with fallback to Uniswap TWAP
+20Dual oracle design provides redundancy
+20LST exchange rate handling adds complexity
+20Oracle failure modes well-considered in design
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 12%60% conf
42
arrow_forwardConcerning
+8Mainnet since October 2025 (~7 months)
+8Very new protocol, limited battle testing
+8V1 (LUSD) ran 4+ years without exploit (team has track record)
+8Multiple audits (Dedaub, ChainSecurity, Certora formal verification)
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 10%85% conf
90
arrow_forwardExcellent
-5Fully immutable, no governance attack surface
-5No admin keys, no multisig risk
+45Parameter changes impossible (governance-minimized by design)
+45Highest possible governance score for DeFi
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%30% conf
50
Concerning
- No validated adversarial findings — score set to neutral baseline
Operational Security
Weight 10%60% conf
56
arrow_forwardModerate
-7No branch protection detected
-7CI/CD present but unstable (0% success)
-7Low development activity (7 commits/month)
-7Incident response time not available (using commit frequency proxy)
receipt_longView provenance chainarrow_forward
Compositional Risk
Weight 5%68% conf
65
arrow_forwardModerate
-18LST collateral inherits staking protocol risk (Lido, RocketPool)
+32BOLD composed in DeFi lending and DEXes
-18Cross-collateral type risks bounded by independent markets
+32Stability pool composition is well-scoped
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%55% conf
100
arrow_forwardExcellent
+33Appears in 1 cross-protocol cascade chain(s)
+33Member of 2 dependency cluster(s)
0Score: 100/100 (higher = more isolated from systemic risk)
+33Source: cross_protocol_composition.json dependency analysis
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%80% conf
85
arrow_forwardStrong
-5Minimal dependencies (immutable = no proxy libraries)
-5Clean Solidity with no upgradeable patterns
+85Standard OpenZeppelin for token interfaces
-5Immutability means no supply chain update risk post-deploy
receipt_longView provenance chainarrow_forward
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Battle-Tested Maturity42
Adversarial Resilience50
Operational Security56
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "liquity-bold"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("liquity-bold")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.