See Yields

METHODOLOGY

Security Score Methodology

Every protocol and every vault scored with a deterministic, public formula. No protocol pays for a better score. The same inputs always produce the same number.

Overview

The yieldwire Security Score combines two independent assessments into a single 0–100 number:

WEIGHT 60%

Protocol Security Score (PSS)

Evaluates the protocol itself: audits, governance, timelocks, track record, and transparency.

WEIGHT 40%

Vault/Pool Safety Score (VSS)

Evaluates the specific vault or pool: liquidation risk, impermanent loss, oracle quality, TVL, and dependencies.

Security Score = (PSS × 0.6) + (VSS × 0.4)

Protocol Security Score (PSS)

100 POINTS · WEIGHT 60%

Dimension 1 — Audits

0–30 POINTS

CRITERIAPOINTS
0 known audits0
1 audit from recognized firm12
2+ audits from distinct firms20
Audit from top firm (Halborn, OtterSec, Trail of Bits, Certora, Neodyme)+5
Audit less than 12 months old+5

Dimension 2 — Multisig & Governance

0–25 POINTS

CRITERIAPOINTS
No multisig, single admin key (EOA)0
Basic multisig (2/3 or less)8
Robust multisig (3/5, 4/6, 4/7…)16
Robust multisig + publicly identified signers+4
On-chain governance (DAO vote for upgrades)+5

Dimension 3 — Timelock / Cooldown

0–20 POINTS

CRITERIAPOINTS
No timelock, instant upgrades0
Timelock < 24h5
Timelock 24h–48h10
Timelock 48h–7d15
Timelock > 7 days20

Dimension 4 — Track Record

0–15 POINTS

CRITERIAPOINTS
< 3 months on mainnet0
3–6 months without incidents5
6–12 months without incidents8
12–24 months without incidents12
> 24 months without incidents15
Known exploit or hack−10 (min 0)
Exploit resolved with full reimbursement−5 instead of −10

Dimension 5 — Transparency

0–10 POINTS

CRITERIAPOINTS
Closed source0
Open source (not verified)3
Open source + verified contract on explorer6
Active bug bounty (Immunefi or similar)+2
Complete technical documentation+2

Vault / Pool Safety Score (VSS)

100 POINTS · WEIGHT 40%

Dimension 1 — Liquidation Risk

0–30 POINTS · LENDING ONLY

CRITERIAPOINTS
No liquidation risk (staking, stablecoin LP)30
Max LTV < 70%22
Max LTV 70–80%15
Max LTV > 80%8
Liquidation penalty > 10%−5

Dimension 2 — Impermanent Loss

0–25 POINTS · LPs

CRITERIAPOINTS
No IL (single-sided staking, lending)25
Stablecoin / stablecoin LP20
Correlated pair (SOL/jitoSOL)14
Uncorrelated pair (SOL/USDC)8
Uncorrelated + high volatility4

Dimension 3 — Oracle Risk

0–20 POINTS

CRITERIAPOINTS
No external oracle (native staking)20
Pyth Network or Switchboard15
Chainlink on Solana14
Protocol’s own oracle7
No oracle info available3

Dimension 4 — TVL Concentration

0–15 POINTS

CRITERIAPOINTS
TVL > $100M15
TVL $10M–$100M10
TVL $1M–$10M5
TVL < $1M0

Dimension 5 — Composability / External Dependencies

0–10 POINTS

CRITERIAPOINTS
No external dependencies10
1 dependency7
2 dependencies4
3+ dependencies1

Grade Scale

The final score maps to a letter grade and risk label:

GRADERANGERISK LEVEL
A85–100Low Risk
B70–84Moderate-Low Risk
C55–69Moderate Risk
D40–54High Risk
F0–39Very High Risk

Solana Ecosystem Stats

SNAPSHOT

132

Protocols scored

Solana DeFi, TVL ≥ $1M

56.1

Average score

out of 100

14%

Score B or above

PASS threshold

0

Score A

No protocol qualifies

58%

No public audits

Unaudited protocols

Disclaimer

Security scores are informational only and do not constitute financial advice. A high score does not guarantee the safety of your funds. Smart contract risk can never be fully eliminated.

Always do your own research before depositing funds into any DeFi protocol. yieldwire does not accept payment from protocols to modify their scores. The methodology is deterministic — the same inputs always produce the same score.

Scores are updated every data cycle. Historical scores may not reflect the current state of a protocol if material changes have occurred since the last update.