D4
Compositional Risk
Protocol-intrinsic composition: external dependencies, cross-contract interactions, and integration surface area.
Weight 5%88% confidence
88
Strong
info
How This Score Is Built
Protocol-intrinsic composition: external dependencies, cross-contract interactions, and integration surface area.
+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative
Score Composition
-6
Hook risk sandboxed per-pool, not protocol-wide
-6
Bad hook affects one pool, not all of Uniswap
+29
Zero external dependencies in core PoolManager
+29
14 trust_dependency edges all hook-related
+29
TRIB-SETTLE-001: Universal Router <-> Compact/Tribunal composition creates permissionless fund theft vector via unlinked sourceClaimHash
Evidence Chain (2 files)
GitHub APIMay 17, 2026, 06:58 PM
open_in_newGitHub (/)sha256:dbeacf0a1bb4...
BlackHart AnalysisMay 13, 2026, 02:00 PM
open_in_newCompositional Risk — Source Codesha256:b6c0e20f4e80...
Score History
—
Automated pipeline dimension update—
Automated pipeline dimension update—
D7 delta: +8 findings (3C/2H/1M/2L), 73->81 total. TRIB-SETTLE-001 permissionless fund theft via Tribunal composition. D7: 40->39, D4: 91->88 (compositional risk from Universal Router <-> Compact interaction)