PancakeSwap
DAMASCUSDEX / AMM · BSC + Multi-chain · $2B+ TVL · 30 contracts
Confidence 77%Z-Factor 0.87Updated 2026-05-17Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
836
BRI Score
3004756508251000
Security Profile
Access Control
82
82
Economic Soundness
85
85
Oracle Integrity
90
90
Compositional Risk
80
80
Governance
78
78
Maturity
72
72
Resilience
70
70
Supply Chain
82
82
Op Security
49
49
Cascade Exposure
89
89
Access Ctrl
82
82
Economic
85
85
Oracle
90
90
Compos.
80
80
Govern.
78
78
Maturity
72
72
Resilience
70
70
Supply Ch.
82
82
OpSec
49
49
Cascade
89
89
Min
49
Avg
78
Max
90
Audit History
Peckshield
2021-04
SlowMist
2022-01
BlockSec
2023-03
Bug Bounty Program
$100,000
Max payout on Immunefi
Assessment
BSC's dominant DEX, Uniswap V2/V3 fork. Proven AMM model inherited but fork penalty on D6 maturity. Centralized team governance (D5). No exploits, solid operational history. BSC ecosystem context differs from Ethereum.
Dimension Breakdown
How scores work →Access Control
Weight 18%78% conf
82
arrow_forwardStrong
+20Uniswap V2/V3 fork ACL with MasterChef v3
+20Timelock on admin operations
+20Cake pool and IFO admin controls
+20Multi-chain deployment adds admin surface
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 13%82% conf
85
arrow_forwardStrong
+21Proven AMM model (Uniswap fork)
+21CAKE tokenomics with burn mechanism
+21IFO, lottery, prediction markets add secondary economic surface
+21vCAKE staking model for fee sharing
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 13%88% conf
90
arrow_forwardExcellent
+30TWAP from AMM pairs (standard)
+30Chainlink for prediction markets and farms
-10No novel oracle mechanism (inherited from Uniswap)
+30Standard price feed integration
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 12%80% conf
72
arrow_forwardGood
+36Live since September 2020 (56 months)
-9Uniswap V2/V3 FORK - inherits code but not innovation credit
-9Fork penalty: derivative codebase, not original research
-9No protocol-level exploit
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 10%72% conf
78
arrow_forwardGood
+20PancakeSwap team retains admin keys and upgrade authority
+20CAKE governance proposals but limited on-chain execution
+20Community influence via voting but team controls deployment
+20Less decentralized than Uniswap governance
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%95% conf
70
Good
- Score derived from continuous adversarial security research
Operational Security
Weight 10%60% conf
49
arrow_forwardConcerning
-8No branch protection detected
-8CI/CD present but unstable (0% success)
+24Commit signing: 100% verified
+24Strong PR review culture (77% reviewed)
receipt_longView provenance chainarrow_forward
Compositional Risk
Weight 5%75% conf
80
arrow_forwardStrong
+20BSC-native with Ethereum, Arbitrum, zkSync expansion
+20Integration with BSC DeFi ecosystem (Venus, Alpaca)
+20Multi-chain expansion adds composition surface
+20Syrup pools integrate external protocols
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%60% conf
89
arrow_forwardStrong
+30Appears in 2 cross-protocol cascade chain(s)
+30Member of 3 dependency cluster(s)
-11Score: 89/100 (higher = more isolated from systemic risk)
+30Source: cross_protocol_composition.json dependency analysis
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%78% conf
82
arrow_forwardStrong
+20BSC Solidity toolchain (compatible but different ecosystem)
+20Modified Uniswap codebase with custom additions
+20Verified on BSC and expansion chains
+20Some custom libraries diverge from Uniswap upstream
receipt_longView provenance chainarrow_forward
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Operational Security49
Adversarial Resilience70
Battle-Tested Maturity72
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "pancakeswap"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("pancakeswap")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.