Protocol & venue risk

Risk criteria

The 🟢 / 🟡 / 🔴 flag is an auto heuristic, not a rating. It is set from the same facts shown in the table below:

• 🔴Red: lost ≥ $1M to a hack in the last 12 months, or TVL down ≥ 60% over 30 days. Smaller incidents still appear in the Last-hack column — the flag is about magnitude, not just recency.
• 🟡Yellow: no audits on record, or TVL down ≥ 35% over 30 days.
• 🟢Green: none of the above (audited, no recent hack, TVL stable).
• ⚪Unknown: DeFiLlama has no entry for it, so we have no scanner facts to flag on. That is a gap in the data, not a finding — read the research report instead.

Venues (CEX / perp-DEX / chain) sit in the same list; they are flagged only on a recent incident, and scanner facts like TVL or audits don't apply to them (shown as dashes). Facts auto-refresh daily from DeFiLlama; oracle & venue notes are curated. Always verify at the venue / protocol before acting.

Whether a named party can freeze or seize an individual holder's balance — as opposed to pausing the protocol for everyone — is covered inside each protocol's report rather than flagged here. It is a real risk, but it does not feed this flag.

For stablecoins we also map what each token actually leans on - dependency map.