Liquity BOLD
DAMASCUSStablecoin · Ethereum · $500M+ TVL · 15 contracts
Official site: www.liquity.org ↗
778
3004756508251000
Confidence60%
Z-Factor0.62
Updated 2026-05-27Public scoreSecurity Profile
Access Control
82
82
Economic Soundness
72
72
Oracle Integrity
78
78
Compositional Risk
65
65
Governance
90
90
Maturity
42
42
Resilience
50
50
Supply Chain
85
85
Op Security
56
56
Cascade Exposure
100
100
Access Ctrl
82
82
Economic
72
72
Oracle
78
78
Compos.
65
65
Govern.
90
90
Maturity
42
42
Resilience
50
50
Supply Ch.
85
85
OpSec
56
56
Cascade
100
100
Min
42
Avg
72
Max
100
Audit History
Dedaub
2024-06
Cantina Competition
2024-08
ChainSecurity
2024-09
Bug Bounty Program
$125,000
Max payout on Cantina
Assessment
Governance-minimized stablecoin from proven Liquity team. Immutability gives top scores in D1/D5/D8/D11 but very low maturity (Z=0.374, D6=42) is the critical drag. Novel interest rate mechanism untested. Score will rise rapidly if no exploit in first 18 months.
Dimension Breakdown
MethodologyAccess Control
82Weight 18% · 70% confidence
+20Immutable contracts (no admin keys, no upgradability)
+20Permissionless borrowing and liquidation
+20No governance control over protocol parameters
+20User-set interest rates (novel mechanism)
Provenance
Economic Soundness
72Weight 13% · 65% confidence
+18BOLD stablecoin with user-set interest rates (novel)
+18Multi-collateral (ETH, wstETH, rETH) with independent markets
+18Interest rate mechanism untested at scale
+18Redemption mechanism redesigned from Liquity V1
Provenance
Oracle Integrity
78Weight 13% · 72% confidence
+20Chainlink oracles with fallback to Uniswap TWAP
+20Dual oracle design provides redundancy
+20LST exchange rate handling adds complexity
+20Oracle failure modes well-considered in design
Provenance
Battle-Tested Maturity
42Weight 12% · 60% confidence
+14Mainnet since October 2025 (~7 months)
-29Very new protocol, limited battle testing
+14V1 (LUSD) ran 4+ years without exploit (team has track record)
+14Multiple audits (Dedaub, ChainSecurity, Certora formal verification)
Provenance
Governance & Upgradeability
90Weight 10% · 85% confidence
+22Fully immutable, no governance attack surface
+22No admin keys, no multisig risk
+22Parameter changes impossible (governance-minimized by design)
+22Highest possible governance score for DeFi
Provenance
Adversarial Resilienceredacted
50Weight 10% · 30% confidence
- No validated adversarial findings — score set to neutral baseline
Provenance
Operational Security
56Weight 10% · 60% confidence
-22No branch protection detected
-22CI/CD present but unstable (0% success)
+28Low development activity (8 commits/month)
+28Multiple monitoring repos found: liqbot, mev-job-board, cr-monitor
Provenance
Compositional Risk
65Weight 5% · 68% confidence
+16LST collateral inherits staking protocol risk (Lido, RocketPool)
+16BOLD composed in DeFi lending and DEXes
+16Cross-collateral type risks bounded by independent markets
+16Stability pool composition is well-scoped
Provenance
Cascade Exposure
100Weight 5% · 55% confidence
+33Appears in 1 cross-protocol cascade chain(s)
+33Member of 2 dependency cluster(s)
+33Source: cross_protocol_composition.json dependency analysis
Provenance
Supply Chain
85Weight 4% · 80% confidence
-15Clean Solidity with no upgradeable patterns
+42Standard OpenZeppelin for token interfaces
+42Immutability means no supply chain update risk post-deploy
Provenance
Top Score Drivers
Dimensions with the greatest marginal impact on BRI.
Battle-Tested Maturity
42+52.5 potential
Very new protocol, limited battle testing
Adversarial Resilience
50+34.3 potential
Operational Security
56+28.6 potential
Low development activity (8 commits/month)
Economic Soundness
72+20.9 potential
No governance = economic parameters must be self-regulating
Access Control
82+17.4 potential
Immutable contracts (no admin keys, no upgradability)
Adversarial Risk Signals
Publicly verifiable security posture indicators.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
methodology v2.1formula v1.1weights v1.1evidence sha256:sha256:a...
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "liquity-bold"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("liquity-bold")Reduce exploitable risk
Continuous adversarial analysis, vulnerability detection, and verified reassessment.
Embed this score
Live, updates automatically. Free for any site. Click-through links open the full report on BlackHart.
Style
Theme
Format
Preview
Copy iframe code
<iframe
src="https://blackhart.io/embed/oracle/liquity-bold?variant=card&theme=dark"
title="BlackHart Risk Index: Liquity BOLD"
width="340"
height="290"
frameborder="0"
loading="lazy"
style="border:0; max-width:100%;"
></iframe>