Reserve Protocol
DAMASCUSStablecoin Framework · Ethereum + Base · $300M+ TVL · 100 contracts
Confidence 70%Z-Factor 0.75Updated 2026-05-17Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
753
BRI Score
3004756508251000
Security Profile
Access Control
72
72
Economic Soundness
68
68
Oracle Integrity
70
70
Compositional Risk
55
55
Governance
70
70
Maturity
62
62
Resilience
40
40
Supply Chain
75
75
Op Security
58
58
Cascade Exposure
100
100
Access Ctrl
72
72
Economic
68
68
Oracle
70
70
Compos.
55
55
Govern.
70
70
Maturity
62
62
Resilience
40
40
Supply Ch.
75
75
OpSec
58
58
Cascade
100
100
Min
40
Avg
67
Max
100
Audit History
Trail of Bits
2023-01
Solidified
2023-01
Halborn
2023-06
Code4rena
2023-01
Bug Bounty Program
$10,000,000
Max payout on Cantina
Assessment
Complex basket stablecoin with 100+ contracts and active Cantina bounty ($10M max). D4 very low (55) due to extreme compositional complexity. D6 moderate (62) for 24-month V3 history. Active BlackHart research target.
Dimension Breakdown
How scores work →Access Control
Weight 18%75% conf
72
arrow_forwardGood
+18Governor-based ACL with timelocked execution
+18BackingManager controls basket rebalancing
+18StRSR staking for governance participation
+18Complex role hierarchy across 100+ contracts
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 13%72% conf
68
arrow_forwardModerate
+17Basket stablecoin with diversified collateral
+17Revenue distribution and RSR overcollateralization
+17Dutch auction trading for basket rebalancing
+17Complex economic interactions between RToken, RSR, and revenue
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 13%72% conf
70
arrow_forwardGood
+18Chainlink feeds with fallback mechanisms
+18Per-collateral oracle configuration
+18Oracle staleness checks with configurable windows
+18Multiple oracle dependencies across collateral basket
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 12%68% conf
62
arrow_forwardModerate
+21V3 live since mid-2023 (~24 months), V1 concepts since 2021
+21eUSD and other RTokens deployed
-38No protocol-level exploit on V3
+21Z-factor: 0.8
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 10%72% conf
70
arrow_forwardGood
+18Governor Alexios with timelocked execution
+18StRSR staking for voting power
+18Emergency mechanisms (freezing, pausing)
+18Governance delay provides safety window
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%95% conf
40
Concerning
- Score derived from continuous adversarial security research
Operational Security
Weight 10%60% conf
58
arrow_forwardModerate
-10No branch protection detected
+14Active CI/CD (100% success rate)
+14Commit signing: 100% verified
-10Minimal development activity (1 commits/month)
receipt_longView provenance chainarrow_forward
Compositional Risk
Weight 5%70% conf
55
arrow_forwardModerate
+18Extreme compositional complexity: 100+ contracts
+18RToken composes basket of arbitrary ERC-20 collateral
+18BackingManager, Broker, Distributor, Furnace interactions
-45Each collateral plugin adds composition risk
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%55% conf
100
arrow_forwardExcellent
+33Appears in 1 cross-protocol cascade chain(s)
+33Member of 2 dependency cluster(s)
0Score: 100/100 (higher = more isolated from systemic risk)
+33Source: cross_protocol_composition.json dependency analysis
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%72% conf
75
arrow_forwardGood
+19Modern Solidity (0.8.x) with OpenZeppelin
+19Plugin architecture means varied dependency quality
+19Verified contracts on Etherscan
+19Large codebase increases supply chain surface
receipt_longView provenance chainarrow_forward
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Adversarial Resilience40
Compositional Risk55
Operational Security58
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "reserve"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("reserve")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.