BlackHartBlackHart
Scores/Puffer Finance

Puffer Finance

DAMASCUS

Liquid Restaking · Ethereum · $1B+ TVL · 10 contracts

Official site: puffer.fi

773
3004756508251000
Confidence52%
Z-Factor0.55
Updated 2026-05-27Public score

Security Profile

Access Ctrl
70
Economic
72
Oracle
75
Compos.
62
Govern.
55
Maturity
62
Resilience
72
Supply Ch.
78
OpSec
56
Cascade
89
Min
55
Avg
69
Max
89

Audit History

SlowMist
2024-01
BlockSec
2024-02
Code4rena
2024-06

Bug Bounty Program

$100,000
Max payout on Immunefi

Assessment

Liquid restaking protocol with lowest bond requirement (1 ETH). 27+ months live with no exploits. Young protocol with expanding product surface (UniFi). Governance centralization and EigenLayer dependency are main risks.

Dimension Breakdown

Methodology
Access Control
Weight 18% · 68% confidence
70
+23Operator permission system
+23Admin controls for protocol parameters
+23Validator ticket system
-30Centralized admin functions
Provenance
Economic Soundness
Weight 13% · 68% confidence
72
+18pufETH liquid restaking model
+181 ETH bond requirement (lowest in market)
+18Validator ticket economics novel
+18UniFi integration adds complexity
Provenance
Oracle Integrity
Weight 13% · 72% confidence
75
+19Exchange rate oracle
+19No external price feed in core
+19Rate update mechanism
+19Trust assumption in rate submission
Provenance
Battle-Tested Maturity
Weight 12% · 60% confidence
62
+16Live since February 2024 (27+ months)
+16Rapidly growing TVL
+16No exploits
+16Multiple product launches
Provenance
Governance & Upgradeability
Weight 10% · 60% confidence
55
+18Early-stage governance
-45Team controls most parameters
+18No meaningful decentralization yet
+18Foundation structure
Provenance
Adversarial Resilienceredacted
Weight 10% · 68% confidence
72
  • Audited by multiple firms
  • Active bounty program
  • C4 competition conducted
  • Young protocol with evolving surface
Provenance
Operational Security
Weight 10% · 60% confidence
56
-22No branch protection detected
-22CI/CD present but unstable (20% success)
+19Strong PR review culture (80% reviewed)
+19Low development activity (4 commits/month)
Provenance
Compositional Risk
Weight 5% · 65% confidence
62
+16EigenLayer dependency
+16pufETH integration across DeFi
+16UniFi rollup adds surface
+16Multiple product lines
Provenance
Cascade Exposure
Weight 5% · 60% confidence
89
+30Appears in 2 cross-protocol cascade chain(s)
+30Member of 4 dependency cluster(s)
+30Source: cross_protocol_composition.json dependency analysis
Provenance
Supply Chain
Weight 4% · 75% confidence
78
+20Standard Solidity
+20OpenZeppelin
+20Verified contracts
+20Moderate dependencies
Provenance

Top Score Drivers

Dimensions with the greatest marginal impact on BRI.

Access Control
70+31.4 potential
Centralized admin functions
Governance & Upgradeability
55+29.1 potential
Team controls most parameters
Operational Security
56+28.2 potential
No branch protection detected
Battle-Tested Maturity
62+27.9 potential
Live since February 2024 (27+ months)
Economic Soundness
72+20.6 potential
pufETH liquid restaking model

Adversarial Risk Signals

Publicly verifiable security posture indicators.

Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Deployed 2024-02-0110 dimensionsProvenance Ledger
methodology v2.1formula v1.0weights v1.0evidence sha256:sha256:a...

Score History & Verification

Score provenance tracking begins with the next reassessment.

On-Chain Data

Protocol Slug
"puffer"
Oracle
BRORegistry (Base)
Evidence
IPFS (pinned)
Staleness Threshold
24 hours
Read Score
registry.getScore("puffer")
Reduce exploitable risk

Continuous adversarial analysis, vulnerability detection, and verified reassessment.

Embed this score

Live, updates automatically. Free for any site. Click-through links open the full report on BlackHart.

Public
Style
Theme
Format
Preview
Copy iframe code
<iframe
  src="https://blackhart.io/embed/oracle/puffer?variant=card&theme=dark"
  title="BlackHart Risk Index: Puffer Finance"
  width="340"
  height="290"
  frameborder="0"
  loading="lazy"
  style="border:0; max-width:100%;"
></iframe>