DeFi Protocol Risk Score Calculator
Score a DeFi protocol's risk level (0-100) based on TVL, audits, protocol age, admin key setup, timelock, oracle diversity, bug bounty, and insurance coverage.
About this calculator
The DeFi Protocol Risk Score Calculator combines nine security and trust dimensions into a single 0-100 Safety Score, similar in spirit to how due-diligence checklists used by DeFi funds and sophisticated users weigh multiple risk factors together rather than relying on any single signal. TVL Score, Audit Score, and Age Score each contribute up to 15 points, rewarding higher total value locked (a log-scaled proxy for market trust — the difference between $10M and $100M TVL matters more than the same dollar gap at $900M vs $990M), more completed security audits, and longer time in production without a major exploit. Admin Key Score, Timelock Score, and Oracle Score each contribute up to 10 points and target centralization risk specifically: a protocol with zero admin keys (fully immutable) scores highest, a single admin key scores lowest (a classic single-point-of-failure red flag, worse even than a small multisig), and longer timelocks between when an admin change is proposed and when it takes effect give users more time to exit before a malicious or buggy upgrade lands.
Bug Bounty Score (up to 10 points, log-scaled by bounty size) and an Insurance bonus (5 points) round out the security-investment side, while a Chain Penalty subtracts points for protocols deployed across many chains, reflecting the added bridge and interoperability risk each additional chain introduces. Suggested Max Allocation translates the composite score into a rough portfolio-sizing guideline — this is a simplified heuristic model for quick screening, not a substitute for reading a protocol's actual audit reports or conducting independent due diligence before committing capital.
Financial Disclaimer
This calculator is for educational purposes only and does not constitute financial advice. Results are estimates based on the inputs provided. Consult a qualified financial advisor before making investment or financial planning decisions.
Inputs
Results
Safety score (0-100)
63.5
How to Use This Calculator
- Enter the protocol's TVL in millions ($) and Number of Audits from reputable security firms.
- Set Protocol Age in days (newer protocols carry higher risk) and Unique/Custom Code % vs. forked audited code.
- Enter Admin Key Signers count and Timelock Hours — more signers and longer timelocks reduce centralization risk.
- Set Oracle Count (price feed providers) and Bug Bounty Size ($) to capture security investment.
- Review the composite Safety Score (0–100), Risk Level, individual dimension scores, and Suggested Max Allocation (%) to assess whether to invest or deploy capital.
How the result changes with Number of audits
| Number of audits | Safety score (0-100) |
|---|---|
| 1 | 59.5 |
| 1.5 | 59.5 |
| 3 | 67.5 |
| 5 | 70.5 |
What each input means
- Total Value Locked ($M)
- Protocol's TVL in millions of USD. Higher TVL indicates more user trust.
- Number of audits
- Number of completed security audits from reputable firms.
- Protocol age (days)
- Days since mainnet launch. Older protocols are more battle-tested.
- Unique/custom code (%)
- Percentage of code that is custom vs. forked from audited protocols.
- Admin key signers
- Number of multisig signers. 0 = fully immutable/decentralized.
- Timelock delay (hours)
- Hours of timelock delay before admin changes take effect.
- Independent oracles
- Number of independent oracle sources for price feeds.
- Bug bounty size ($)
- Maximum bug bounty payout. Larger bounties attract more security researchers.
- Chains deployed on
- Number of chains the protocol is deployed on. More chains = more bridge risk.
- Has insurance coverage
- Whether the protocol has coverage from Nexus Mutual, Unslashed, or a similar DeFi insurance provider.
What each result means
- Safety score (0-100)
- Overall protocol safety score. 80+ = Very Low risk, 60-79 = Low, 40-59 = Medium, 20-39 = High, <20 = Critical.
- Risk level
- Composite risk tier derived from the Safety Score: Critical Risk, High Risk, Medium Risk, Low Risk, or Very Low Risk.
- Suggested max allocation (%)
- Recommended maximum portfolio allocation based on risk score.
- TVL score (0-15)
- Points from Total Value Locked (log-scaled).
- Audit score (0-15)
- Points from the number of security audits.
- Age score (0-15)
- Points from protocol maturity.
- Admin key score (0-10)
- Points from admin key decentralization.
- Timelock score (0-10)
- Points from governance timelock duration.
- Oracle score (0-10)
- Points from oracle diversity.
- Bug bounty score (0-10)
- Points from bug bounty program size.
How this is calculated
Worked example, using the default values
- Identify Input Parameters10 parametersTotal Value Locked ($M) = 100, Number of audits = 2, Protocol age (days) = 365, Unique/custom code (%) = 30, Admin key signers = 3, Timelock delay (hours) = 48, Independent oracles = 2, Bug bounty size ($) = 500000, Chains deployed on = 1, Has insurance coverage = 0 = 10 input(s) provided
- Calculate Safety scoreSafety score63.5 = 63.5
- Calculate Risk levelRisk levelLow Risk = Low Risk
- Calculate Suggested max allocation15 = 15%
Engine last updated . Checked against 3 independently-derived tests — how we verify calculators. Built by Paul Gunder, a software engineer, not a licensed financial, medical, or legal professional.
Frequently Asked Questions
Why does having just one admin key score worse than having several?
A single admin key is a textbook single point of failure — if that one key is compromised, lost, or misused, the protocol's admin functions are fully exposed with no other signer to check it, which is why this calculator scores it at only 2 of 10 possible points. Zero admin keys (a fully immutable, decentralized protocol) scores highest at 10 points, and a multisig with several signers scores progressively higher as signer count rises, since compromising or colluding among multiple independent keyholders is harder than compromising one.
Does Total Value Locked ($M) matter more at low or high dollar amounts?
TVL Score is log-scaled (points come from the base-10 logarithm of TVL in millions), which means the score gain from $10M to $100M TVL is roughly the same as from $100M to $1B — each 10x jump in TVL adds a similar chunk of score, rather than the score rising in a straight line with dollars. This reflects diminishing marginal trust signal: going from $1M to $10M TVL says a lot more about market confidence than going from $900M to $909M.
How does the Chain Penalty work, and why does deploying on more chains lower the score?
Chain Penalty subtracts 2 points from the raw score for every chain beyond the first the protocol is deployed on, reflecting that each additional chain typically requires a bridge or cross-chain messaging layer — historically one of the most exploited attack surfaces in DeFi. A protocol on a single chain incurs no penalty; a protocol spread across five chains loses 8 points to this factor alone, independent of how secure any single chain's deployment is.
What does Suggested Max Allocation (%) actually recommend?
Suggested Max Allocation is a tiered guideline derived directly from the composite Safety Score — 25% at a score of 80 or above, stepping down to 15%, 5%, 2%, and 0% as the score falls through lower risk tiers. It's a rough portfolio-sizing heuristic for how much of a crypto portfolio might reasonably be exposed to a single protocol at that risk level, not personalized investment advice, and it does not account for your own risk tolerance, diversification needs, or the specific nature of any given protocol's risk beyond this calculator's nine input dimensions.
Related Calculators
The questions that sit next to this one — chosen by subject, including calculators filed under a different category.
Lending Protocol APY Calculator
Calculate net APY from DeFi lending protocols like Aave or Compound, accounting for supply APR, borrow APR, token rewards, compounding frequency, and health factor.
Crypto AdvancedFlash Loan Calculator
Size a flash loan arbitrage opportunity by calculating net profit after protocol fees, DEX fees, gas costs, and slippage. Determine break-even spreads and daily/monthly profit projections.
Blockchain DevSmart Contract Audit Cost Calculator
Estimate smart contract audit costs based on code size, complexity, auditor tier, and timeline urgency.
Crypto AdvancedValidator Node Cost Calculator
Estimate the costs and profitability of running a Proof-of-Stake validator node, including hardware, bandwidth, electricity, staking rewards, and slashing risk.
More in Investing & Retirement.