INDEPENDENT CRASH TESTSTEST PROTOCOL PUBLISHED IN FULLRATINGS YOU CANNOT BUYEVERY REPORT DATED & RE-TESTEDPROTOCOLS TESTED ACROSS 12 CHAINSNEW: BRIDGE CRASH SERIES · READ NOW
← Safety Ratings
BULWARK CRASH REPORT · CR-1006

Portal

Bridges & Cross-chain · Ethereum · BNB · Solana

Report statusValidVerificationVERIFIEDTested 11 Sept 2026 · Valid until 11 Mar 2027

Verdict Rating

2 of 5 · 61 / 100 overall

“A strong safety posture with no material failures in the reviewed scenarios.”

Rubric Breakdown

AreaScoreWeight
Depositor Protection6740%
Market Stress5125%
Exit & Liquidity5815%
Safety Assist6320%

Area scores

Depositor Protection67 / 100 · weight 40%
Market Stress51 / 100 · weight 25%
Sets the rating
Exit & Liquidity58 / 100 · weight 15%
Safety Assist63 / 100 · weight 20%

Test Evidence

Report IDCR-1006
Tested11 Sept 2026
Valid until11 Mar 2027
Fork blockEthereum - block 22685000
TVL at test$115.5M
Versionv4.5.0

Scenario Results

Open a scenario for its setup and recorded result.

Frontal DrainDegraded

Setup. Common attack classes are run against the deployment: reentrancy, rounding and precision, access control, flash loans, and donation attacks.

Recorded result. Common attack classes tested against the contracts.

Fork block
Ethereum - block 22685000
Reproduction script
Not published for this report.
Pole TestDegraded

Setup. One privileged key (admin, owner, or a single signer) is assumed leaked or misused.

Recorded result. Privileged key and upgrade path reviewed.

Fork block
Ethereum - block 22685000
Reproduction script
Not published for this report.
Side ImpactFailed

Setup. The oracle price is pushed ±30% for one block, or through a flash loan on the source pool.

Recorded result. Oracle stress and flash-loan price impact tested.

Fork block
Ethereum - block 22685000
Reproduction script
Not published for this report.
RolloverFailed

Setup. The main collateral or stablecoin depegs to 0.80 for six hours.

Recorded result. Collateral depeg and liquidation path reviewed.

Fork block
Ethereum - block 22685000
Reproduction script
Not published for this report.
Rear ImpactFailed

Setup. 30% of TVL is withdrawn within 24 hours by many addresses.

Recorded result. Exit queue and stressed withdrawal tested.

Fork block
Ethereum - block 22685000
Reproduction script
Not published for this report.

Findings

  • Market Stress is the limiting area at 51/100 and sets the rating.
  • 0 of five reviewed scenarios held; 5 recorded a degraded or failed result.
  • The reviewed deployment spans Ethereum, BNB, Solana and carries an overall weighted score of 61/100.
  • The report covers the tested contracts only; integrations outside that scope are not included.

Visual record

Schematic visual record · CR-1006One report.
Five scenarios.
One verdict.

Verified Resources

Limitations of Assessment

  • Scores reflect the deployment and chain set reviewed for this report.
  • On-chain metrics are measured at the test block and may move after publication.
  • The report covers the tested contracts, not integrations outside that scope.

Member Reports

Member Reports · not part of the rating0reports filed
Safety rating · set by the lab2 / 5Signed rating

Test History

ReportTestedVersionStars
CR-100611 Sept 2026v4.5.02 / 5

Protocol badge

BULWARK safety rating: Portal, 2 of 5 stars

Embed this rating on the protocol site. The badge links back to this report.

<a href="https://bulwarkproof.tech/ratings/portal/"><img src="https://bulwarkproof.tech/badge/portal.svg" alt="BULWARK safety rating: Portal, 2 of 5 stars" width="320" height="112"></a>
Signed by Test Director11 Sept 2026
MethodologyBULWARK Test Protocol v1.0
Fork blockEthereum - block 22685000

BULWARK · Tested · Unbuyable · Re-tested