BlackHartBlackHart
Scores/Euler V2/Provenance/Access Control
D1

Access Control

Permission models, admin surface, reentrancy protection, and authorization boundaries. #1 exploit vector by dollar loss in DeFi history.

Weight 18%85% confidence
80
Strong
info

How This Score Is Built

Permission models, admin surface, reentrancy protection, and authorization boundaries. #1 exploit vector by dollar loss in DeFi history.

+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative

Scoring Tree

BRI Formula
300 + 700 × ∏(Dᵢ/100)^wᵢ
757
Current BRI
D1Access Control
Weight 18%
80
(80/100)^0.18 = 0.9606
Contributing Factors
+20EVC operator/sub-account model with 12 modifiers across EVC contract
+20EVault authority_topology shows all public functions as permissionless (graph limitation: misses custom modifiers)
+20GenericFactory function_authorities has 96 entries covering all governance functions
+20ProtocolConfig has tau_star=0.75 with 1 bypass surface (admin-gated config setters)
-20EVC bypass_surfaces=99 is concerning but reflects complex internal permission model, not lack of access control
Evidence Sources
blackhart_analysisMay 4sha256:c17152707d9e....View
blackhart_analysisMay 17sha256:536e185e0f9e....View

Score Composition

-20

EVC bypass_surfaces=99 is concerning but reflects complex internal permission model, not lack of access control

Strong negativeopen_in_newSource CodeMay 4, 2026
+20

EVC operator/sub-account model with 12 modifiers across EVC contract

Strong positiveopen_in_newSource CodeMay 4, 2026
+20

EVault authority_topology shows all public functions as permissionless (graph limitation: misses custom modifiers)

Strong positiveopen_in_newSource CodeMay 4, 2026
+20

GenericFactory function_authorities has 96 entries covering all governance functions

Strong positiveopen_in_newSource CodeMay 4, 2026
+20

ProtocolConfig has tau_star=0.75 with 1 bypass surface (admin-gated config setters)

Strong positiveopen_in_newSource CodeMay 4, 2026

Evidence Chain (2 files)

GitHub APIMay 17, 2026, 06:58 PM
open_in_newGitHub (/)
sha256:536e185e0f9e...
BlackHart AnalysisMay 4, 2026, 10:30 PM
open_in_newAccess Control — Source Code
sha256:c17152707d9e...

Score History

No dimension-level score changes recorded yet.

Methodology: 2.1Formula: 1.1Weights: 1.1
How is Access Control scored?← Back to Provenance Ledger