D1
Access Control
Permission models, admin surface, reentrancy protection, and authorization boundaries. #1 exploit vector by dollar loss in DeFi history.
Weight 18%82% confidence
85
Strong
info
How This Score Is Built
Permission models, admin surface, reentrancy protection, and authorization boundaries. #1 exploit vector by dollar loss in DeFi history.
+23Strong positive
+12Positive
+5Slight positive
−15Strong negative
−8Negative
−3Slight negative
Scoring Tree
BRI Formula
300 + 700 × ∏(Dᵢ/100)^wᵢ
799
Current BRI
D1Access Control
Weight 18%
85
(85/100)^0.18 = 0.9712
Contributing Factors
+21Minimalist Morpho Blue core: ~650 lines, immutable, no admin keys
+21Authorization model via callbacks (well-scoped)
+21MetaMorpho vaults add curator layer with controlled permissions
+21No emergency pause on base layer (by design)
Score Composition
+21
Minimalist Morpho Blue core: ~650 lines, immutable, no admin keys
+21
Authorization model via callbacks (well-scoped)
+21
MetaMorpho vaults add curator layer with controlled permissions
+21
No emergency pause on base layer (by design)
Evidence Chain (2 files)
GitHub APIMay 17, 2026, 06:58 PM
open_in_newGitHub (/)sha256:c4cdd25ed7b5...
BlackHart AnalysisMay 4, 2026, 08:00 PM
open_in_newAccess Control — Source Codesha256:839cd8516924...
Score History
No dimension-level score changes recorded yet.
Methodology: 2.1Formula: 1.1Weights: 1.1