defirisk.co
rubric v1.7.0

Bridge TVL per validator ratio

A cross-chain & bridge factor in the v1.7.0 rubric. Measured per protocol on a c cadence.

Methodology how we score #

**What this measures** This factor computes the bridge TVL divided by the validator count, expressed in USD per validator. A high ratio indicates that each individual validator controls a disproportionately large amount of locked value, raising the economic incentive for targeted compromise. The value is derived from bridge TVL feeds and the validator count from RD-F-148. This factor applies only to bridge-touching protocols; non-bridge protocols show this factor as N/A.

**Why it matters** TVL-per-validator is a risk concentration metric analogous to TVL-per-multisig-signer in governance contexts (RD-F-028). A bridge with $1B TVL and 3 validators has a $333M-per-validator ratio — an extremely high-value target for nation-state-level or well-funded adversaries. Harmony Bridge had approximately $100M TVL across 5 validators ($20M per validator) when it was compromised. Radiant Capital II secured $53M across 3 required signers from an 11-signer set. As bridge TVL grows without corresponding validator set expansion, the per-validator ratio grows and the economic incentive to compromise individual keys increases proportionally.

**Green / Yellow / Red** Green is scored when the TVL-per-validator ratio is below $10M with a quorum-of-N structure that prevents single-validator compromise from being sufficient. Yellow is scored when the ratio is $10M–$50M per validator. Red is scored when the ratio exceeds $50M per required-quorum validator, or when TVL growth has outpaced any validator-set expansion in the past 12 months.

**Common gray cases** Gray is applied when bridge TVL cannot be reliably attributed to a specific bridge contract due to multi-chain routing architectures.

**Notable historical examples** No cross-hacked incidents are currently linked in the database for this factor.

Measurement what to look for #

Compute bridge TVL divided by validator count as a concentration-of-compromise measure.

Data & output #

Data source
Bridge TVL from DeFiLlama + validator count from F148
Output format
Green / Yellow / Red
Evidence artifact
Bridge TVL USD + validator count + USD-per-validator ratio
Confidence signal
green = <$50M TVL per validator; yellow = $50M–$200M per validator; red = >$200M per validator; gray = bridge not identified

Scored protocols 80 carry this factor #

Protocol RD-F-157
Aave v3 ethereum yellow Across Protocol ethereum yellow Aerodrome Finance base not_applicable Axelar Network ethereum yellow Babylon Protocol bitcoin yellow Balancer (v2 + v3) ethereum not_applicable Beefy Finance ethereum green BENQI avalanche not_applicable BlackRock USD Institutional Digital Liquidity Fund (BUIDL) ethereum not_applicable Cap (cUSD / stcUSD) ethereum green Centrifuge ethereum yellow Chainlink CCIP ethereum yellow Circle USYC binance not_applicable Compound V3 (Comet) ethereum not_applicable Concrete ethereum gray Convex Finance ethereum not_applicable crvUSD (Curve Stablecoin) ethereum not_applicable Curve Finance ethereum not_assessed deBridge ethereum green Dolomite ethereum green dYdX v4 (dYdX Chain) dydx not_applicable EigenLayer ethereum not_applicable Ethena ethereum yellow ether.fi ethereum yellow Euler V2 ethereum not_applicable Falcon Finance ethereum not_applicable Fluid ethereum gray Frax Finance ethereum yellow GMX v2 (GMX Synthetics) arbitrum not_applicable Hyperlane ethereum yellow Hyperliquid arbitrum yellow Jito solana gray Jupiter solana not_applicable Jupiter Perpetual Exchange solana not_applicable JustLend DAO tron not_applicable Kamino Lend solana not_applicable Kinetiq hyperliquid not_applicable Lido ethereum yellow Liquid Collective (LsETH) ethereum not_applicable Liquity V1 + V2 (LUSD / BOLD) ethereum not_applicable Lista DAO bsc yellow Lombard Finance ethereum yellow M^0 ethereum yellow Maple Finance ethereum green Marinade Finance solana not_applicable Meteora solana not_applicable mETH Protocol ethereum gray Midas ethereum yellow Morpho V1 (Morpho Blue + MetaMorpho) ethereum not_applicable Multipli ethereum yellow Ondo Finance ethereum yellow OpenEden ethereum not_applicable Orca solana not_applicable PancakeSwap bsc green Pendle Finance ethereum yellow Polymarket polygon not_applicable QuickSwap polygon not_applicable Raydium solana not_applicable Rocket Pool ethereum not_applicable Sanctum solana not_applicable Save (formerly Solend) solana not_applicable Sky Lending (formerly MakerDAO) ethereum gray Spark Protocol ethereum yellow Spiko stellar gray Stake DAO ethereum not_applicable StakeWise v3 ethereum not_applicable Stargate Finance ethereum gray stHYPE (Valantis Labs) hyperliquid not_applicable SUNSwap (sun.io) tron not_applicable Superstate ethereum not_applicable Sushi (SushiSwap) — v2 + v3 + Trident + BentoBox/Kashi + SushiXSwap ethereum not_applicable Symbiotic ethereum not_applicable Synapse Protocol ethereum yellow Uniswap (v2 + v3) ethereum not_applicable USDD (Decentralized USD) tron not_applicable Usual (USD0 / bUSD0 / USUAL) ethereum gray Veda (BoringVault) ethereum gray Venus Protocol bsc yellow Wormhole ethereum gray Yearn Finance ethereum not_applicable

Linked hacks no historical incidents linked #

No historical incidents are linked to this factor.
rubric_version v1.7.0 factor RD-F-157 category 10 carried 80 critical no