Smart Contract Risk
The exploit risk of the token's own contracts, assessed on three inputs: audit quality, quantity, bug bounty, and contract maturity. Contract complexity weights the whole metric: a simple, permissioned share-representation token (mint, burn, whitelist-gated transfer) has a far smaller attack surface than complex on-chain DeFi logic, and for a tokenized asset whose reserve sits off-chain even a successful contract exploit cannot reach the underlying assets, only disrupt the on-chain record.
Audit Quality and Bug Bounty
Audit frequency and scope, auditor credibility, and the size and structure of bug bounty programs, each treated as a rating input.
Contract Maturity
Deployed contract age and performance history as an indicator of exploit risk and protocol stability, and how Credora weighs both.
Tokenized Assets: Recoverability of an Exploit
How far exploit losses can be reversed, based on whether an off-chain register or issuer override can restore balances and block stolen tokens.