Spark Protocol
DAMASCUSLending / Borrowing · Ethereum · $4B+ TVL · 15 contracts
Confidence 69%Z-Factor 0.78Updated 2026-05-06Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
842
BRI Score
3004756508251000
Security Profile
Access Control
82
82
Economic Soundness
80
80
Oracle Integrity
82
82
Compositional Risk
72
72
Governance
75
75
Maturity
80
80
Resilience
61
61
Supply Chain
85
85
Op Security
82
82
Cascade Exposure
71
71
Access Ctrl
82
82
Economic
80
80
Oracle
82
82
Compos.
72
72
Govern.
75
75
Maturity
80
80
Resilience
61
61
Supply Ch.
85
85
OpSec
82
82
Cascade
71
71
Min
61
Avg
77
Max
85
Audit History
ChainSecurity
2023-04
Cantina
2024-02
Bug Bounty Program
$10,000,000
Max payout on Immunefi
Assessment
Strong score driven by MakerDAO org maturity (D6=80), Aave V3 base code, and dual oracle infrastructure. Compositional risk (D4=72) from deep Maker integration is the main drag.
Dimension Breakdown
How scores work →Access Control
Weight 18%82% conf
82
Strong
- Aave V3 fork with proven access control model
- MakerDAO integration adds admin surface complexity
- Emergency admin via MakerDAO governance
- Pool configurator and bridge executor from Aave
Economic Soundness
Weight 13%80% conf
80
Strong
- Inherits Aave V3 economic model (well-tested)
- DAI-first design with Maker PSM providing stability anchor
- SparkVault/PSM3 for stablecoin operations
- DSR integration provides floor yield
Oracle Integrity
Weight 13%80% conf
82
Strong
- Chainlink primary + Chronicle oracles (Maker oracle infra)
- Dual oracle infrastructure provides redundancy
- Inherited Aave V3 oracle validation
- Maker oracle security team provides additional oversight
Battle-Tested Maturity
Weight 12%82% conf
80
Strong
- SparkLend live since mid-2023 (~2 years)
- MakerDAO org maturity 5+ years (battle-tested through multiple crises)
- Aave V3 base code is extensively battle-tested
- Audited via Maker pipeline (ChainSecurity, ABDK)
- Z-factor: 0.802
Governance & Upgradeability
Weight 10%82% conf
75
Good
- MakerDAO governance (MKR holders) provides oversight
- SubDAO structure with SPK token governance maturing
- Timelocks via Maker governance (GSM delay)
- Some centralization in SubDAO executive decisions
Adversarial Resilience
Weight 10%95% conf
61
Moderate
- Score derived from continuous adversarial security research
Operational Security
Weight 10%80% conf
82
Strong
- Inherits MakerDAO mature monitoring infrastructure
- Keeper network for liquidations
- Incident response backed by Maker experience
- Active bug bounty program
Compositional Risk
Weight 5%76% conf
72
Good
- Deep integration with MakerDAO (D3M, PSM, DSR)
- MakerDAO failure would cascade to Spark
- Correlated risk with DAI/USDS stability
- Growing integration surface (Morpho vaults, etc.)
Cascade Exposure
Weight 5%75% conf
71
Good
- Appears in 5 cross-protocol cascade chain(s)
- Member of 3 dependency cluster(s)
- Score: 71/100 (higher = more isolated from systemic risk)
- Source: cross_protocol_composition.json dependency analysis
Supply Chain
Weight 4%84% conf
85
Strong
- Aave V3 codebase is extensively audited base
- Standard OpenZeppelin libraries
- Maker integration libraries add some dependency
- Proxy patterns inherited from Aave V3
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Adversarial Resilience61
Cascade Exposure71
Compositional Risk72
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Deployed 2023-05-09Z-Factor 0.78010 active dimensions
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "spark"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("spark")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.