Severity classification.
Each finding is rated by its impact and how likely it is to happen.
Version 1.0, November 2026
01 — Impact
High
Significant loss or freezing of funds, or the protocol stops working as intended.
Medium
Limited loss of funds, or core functionality is disrupted.
Low
Minor loss or unexpected behavior, with little effect on funds.
02 — Likelihood
High
Anyone can trigger it, with no special conditions.
Medium
Requires specific conditions, such as certain market states or user actions.
Low
Requires unlikely conditions, a high cost to the attacker, or a trusted role making a mistake.
03 — Matrix
| Likelihood ↓ / Impact → | High | Medium | Low |
|---|---|---|---|
| High | Critical | High | Medium |
| Medium | High | Medium | Low |
| Low | Medium | Low | Low |
Informational: best practices and code quality, with no security impact.