FORESHOCK

Protocols

Request coverage

Only protocols with enough independently verified data to trust a score appear here. This is a permanent rule, not a temporary gap.

Coverage grows three ways: protocols Foreshock selects at its own discretion, protocols requested through the Request coverage button, and sponsored assessments delivered on an agreed timeline. No path has a guaranteed date except sponsorship.

Sky Lending

Ethereum

low:

  • This methodology version hasn't been backtested against any historical incidents in this protocol's bucket yet.
  • This is not because this protocol's data is thin (80% of category weight is verified data).
Why this rating
Every category's contribution to the overall score, highest first.
Audit profile12.1Verified

2 audits on record, most recent audit is over 2 years old; the most recent audit found 0 High and 1 Medium severity issues. This reflects code quality at the time of that audit only, not a claim that these specific issues are still unresolved today.

Code characteristics7.6Unverified

No verified evidence yet; held at the neutral midpoint rather than assumed safe or unsafe.

Governance attack surface7.6Verified

Top 10 holders control 88.41%, adjusted figure may still include pooled custody (untagged exchanges, infrastructure contracts) due to tagging coverage limits; exclusions require positive identification.

Dependency risk6.1Verified

Uses 1 oracle (Chronicle is Sky's (formerly MakerDAO's) long-standing primary oracle provider for collateral price feeds.).

TVL profile3.5Verified

TVL change (13%) is within a stable range.

Team factors2.5Unverified

No verified evidence yet; held at the neutral midpoint rather than assumed safe or unsafe.

Historical incidents2.3Verified

No known own or inherited incidents.

Protocol age1.5Verified

3147 days live, past the ~1yr floor; treated the same as any older protocol, not scored progressively safer with more age.

Bug bounty0.8Verified

Has a bug bounty program, up to $10 000 000, hosted on Immunefi.

Dependencies (1)

Uses 1 oracle (Chronicle is Sky's (formerly MakerDAO's) long-standing primary oracle provider for collateral price feeds.).

Incident history (0)

No material incidents on record.

Audit history (2)
  • PeckShield 2019-10-01

    Unresolved issues:

    4 low, 1 medium, 0 high, 0 critical

  • Trail of Bits 2019-08-01

    Unresolved issues:

    2 low, 0 medium, 0 high, 0 critical

This assessment follows Foreshock's published methodology. Exact category weights, scoring rules, thresholds, and aggregation logic are proprietary and not shown here. How to interpret this assessment

Do you hold a position in this protocol?

Get an email when this assessment materially changes.