FORESHOCK

Protocols

Request coverage

Only protocols with enough independently verified data to trust a score appear here. This is a permanent rule, not a temporary gap.

Coverage grows three ways: protocols Foreshock selects at its own discretion, protocols requested through the Request coverage button, and sponsored assessments delivered on an agreed timeline. No path has a guaranteed date except sponsorship.

SparkLend

Multi-Chain

low:

  • Backtest coverage is limited.
  • Only 1 comparable incident or control were found in this protocol's TVL, age, and category bucket.
  • 70% of category weight is verified data.
Why this rating
Every category's contribution to the overall score, highest first.
Dependency risk11.2Verified

Uses 4 oracles (a redundant multi-oracle aggregator ("Aggor") combining Chronicle, Chainlink, and Redstone feeds, with Chainlink Aggregators as the first-checked source; if a Chainlink aggregator returns a price <= 0 the call forwards to the fallback path, and a Uniswap TWAP is the final fallback if all three primary sources fail simultaneously.), composable with 1 other protocol.

Audit profile9.9Verified

8 audits/contests on record, most recent (SigmaPrime, 2023-04-19) has unread findings, scored as unknown, not assumed clean.

Code characteristics7.5Unverified

No verified evidence yet; held at the neutral midpoint rather than assumed safe or unsafe.

Governance attack surface5.0Unverified

No verified evidence yet; held at the neutral midpoint rather than assumed safe or unsafe.

TVL profile3.5Verified

TVL change (6%) is within a stable range.

Team factors2.5Unverified

No verified evidence yet; held at the neutral midpoint rather than assumed safe or unsafe.

Historical incidents2.2Verified

No known own or inherited incidents.

Protocol age1.5Verified

1185 days live, past the ~1yr floor; treated the same as any older protocol, not scored progressively safer with more age.

Bug bounty0.7Verified

Has a bug bounty program, up to $5 000 000, hosted on Immunefi.

Dependencies (2)
  • Uses 4 oracles (a redundant multi-oracle aggregator ("Aggor") combining Chronicle, Chainlink, and Redstone feeds, with Chainlink Aggregators as the first-checked source; if a Chainlink aggregator returns a price <= 0 the call forwards to the fallback path, and a Uniswap TWAP is the final fallback if all three primary sources fail simultaneously.).
  • Composable with 1 other protocol.
Incident history (0)

No material incidents on record.

Audit history (8)
  • SigmaPrime 2023-04-19

    Findings not confirmed in this research pass.

  • SigmaPrime 2022-12-23

    Findings not confirmed in this research pass.

  • PeckShield 2022-12-09

    Findings not confirmed in this research pass.

  • ABDK 2022-01-27

    Findings not confirmed in this research pass.

  • SigmaPrime 2022-01-27

    Findings not confirmed in this research pass.

  • PeckShield 2022-01-14

    Findings not confirmed in this research pass.

  • Trail of Bits 2022-01-07

    Findings not confirmed in this research pass.

  • OpenZeppelin 2021-11-01

    Findings not confirmed in this research pass.

This assessment follows Foreshock's published methodology. Exact category weights, scoring rules, thresholds, and aggregation logic are proprietary and not shown here. How to interpret this assessment

Do you hold a position in this protocol?

Get an email when this assessment materially changes.

SparkLend · Foreshock