rhino.fi
TEMPEREDDEX / Bridge · Ethereum + L2s · $100M+ TVL · 10 contracts
Public risk assessment — scores are produced with the same methodology as monitored protocols
Security Profile
55
68
72
52
40
70
87
68
58
100
55
68
72
52
40
70
87
68
58
100
Audit History
Bug Bounty Program
Assessment
DeFi aggregator/bridge with 48-month track record (ex-DeversiFi). D5 very low (40) for fully centralized governance with single owner. D1 low (55) due to 5/10 contracts having zero access control modifiers. D4 low (52) due to multi-contract proxy composition with 971 call edges. StarkEx base provides cryptographic settlement security but does not compensate for centralization risk. Downgraded from DAMASCUS to TEMPERED based on deeper graph analysis revealing modifier coverage gaps.
Dimension Breakdown
How scores work →- 33 modifiers total but 5/10 contracts have ZERO modifiers
- Bridge: onlyOwner (single owner), _isAuthorized custom check
- StarkExchange: onlyGovernance, notFinalized, notFrozen
- SHARPVerifierCallProxy: 13 modifiers (comprehensive RBAC)
- DACommittee, GpsFactRegistryAdapter, MemoryPageFactRegistry, OrderRegistry, SHARPVerifier: 0 modifiers
- Bridge permissionless value operations: depositWithId, withdrawV2, swapWithData
- StarkExchange: transfer, transferAll permissionless value moves
- Bridge 160 CONSERVATION_BREAK reactions in structural analysis
- StarkEx settlement provides trade finality via validity proofs
- Lower economic complexity than lending protocols
- StarkEx validity proofs (cryptographic verification) - no external price oracle for core settlement
- GpsFactRegistryAdapter mediates GPS contract proof verification (2 SVs, 0 writers)
- MemoryPageFactRegistry: fact storage with 7 writing functions
- Bridge pricing relies on DEX aggregation externally
- DACommittee verifyAvailabilityProof for data availability checks
- Live since 2021 as DeversiFi, rebranded to rhino.fi (~48 months total)
- StarkEx technology well-tested across multiple deployments (dYdX, Immutable, Sorare)
- Moderate TVL (~$700M in bridge)
- Z-factor: 0.889
- Centralized company governance (rhino.fi team)
- Bridge: single onlyOwner controls all admin operations
- StarkExchange: onlyGovernance (single governance address)
- No on-chain governance mechanism or DAO
- Proxy upgradeable by admin without timelock
- SHARPVerifierCallProxy has role separation but controlled by StarkWare
- Score derived from continuous adversarial security research
- Small operational team
- Multi-chain bridge operations complexity
- StarkEx operational dependency on StarkWare
- Limited public incident documentation
- 24 events total but 4/10 contracts have 0 events (monitoring gaps)
- 971 call edges across 10 contracts
- 3 delegatecall proxy patterns: Bridge, StarkEx, SHARPVerifier
- Cross-contract: StarkExchange -> DACommittee -> GpsFactRegistryAdapter -> MemoryPageFactRegistry
- SHARPVerifierCallProxy 260 calls + 336 reads (highest complexity)
- Bridge_2_Proxy 251 calls (second highest)
- Member of 1 dependency cluster(s)
- No cross-protocol cascade exposure detected
- Score: 100/100 (higher = more isolated from systemic risk)
- Source: cross_protocol_composition.json dependency analysis
- StarkEx settlement layer (StarkWare proprietary dependency)
- OpenZeppelin upgradeable contracts
- Standard Solidity dependencies
- StarkWare infrastructure dependency creates supply chain risk
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "rhinofi"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
registry.getScore("rhinofi")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.