SushiSwap

SushiSwap receives a C+ risk grade (36/100) from Hindenrank, where lower scores indicate lower risk. Moderate risk — still functional across 40+ chains, but the massive TVL decline, past exploits, and sprawling attack surface raise real sustainability concerns One of the earliest DeFi exchanges, deployed across 40+ blockchains with $200M in deposits. It has survived leadership crises, a $3.3M router exploit, and a $3M insider supply-chain attack. Its C+ grade reflects a protocol that keeps running but has lost 99% of its peak TVL and faces ongoing security and sustainability questions.

The key risks identified for SushiSwap are: (1) The swap router is deployed identically on 40+ chains. A single bug can be exploited across all of them before the team can patch every deployment. This already happened in 2023 with $3.3M in losses (2) An anonymous contractor once injected malicious code into the MISO launchpad and stole $3M. Open-source contribution from unknown developers means this supply-chain attack could happen again (3) TVL has crashed 99% from its 2021 peak. If revenue drops further, the team cannot afford security audits across 40+ chains. Unaudited contracts on low-activity chains become ticking time bombs

SushiSwap scores 36/100 across eight risk dimensions: Mechanism Novelty: 2/15, Interaction Severity: 8/20, Oracle Surface: 0/10, Documentation Gaps: 4/10, Track Record: 12/15, Scale Exposure: 3/10, Regulatory Risk: 2/10, Vitality Risk: 5/10. The highest risk area is Track Record at 12/15.

Among 111 rated DEX protocols on Hindenrank, SushiSwap ranks #65 by safety (lowest risk score = safest). Its 36/100 risk score and C+ grade place it in the middle tier of DEX protocols.

SushiSwap scores 12/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.