Skip to main content
A risk factor is an individual characteristic, behavior, or observation that contributes to Webacy’s overall assessment of an entity. Rather than relying on a single indicator, Webacy evaluates hundreds of proprietary risk factors spanning security, financial integrity, operational resilience, governance, compliance, and behavioral analysis. Some risk factors are simple binary observations, while others are the result of complex analytics performed across blockchain history, market data, and relationships between entities. Together, these factors provide the foundation for every risk score, rating, alert, and policy decision generated by the platform. The exact weighting, implementation, and methodologies behind many of these risk factors are proprietary and continuously refined as new threats and asset classes emerge.

​
Risk Factor Categories

Webacy’s risk factors can be organized into several broad categories.
Security risk factors identify vulnerabilities, malicious behavior, exploit patterns, and characteristics that could place users or assets at risk.Examples include:
  • Malicious contract functionality
  • Freezeability
  • Blacklisting capabilities
  • Unlimited mint permissions
  • Proxy upgradeability
  • Address poisoning exposure
  • Exploit associations
  • Transaction simulation results

​
Beyond Individual Risk Factors

Many risk factors are not inherently “good” or “bad.” Instead, they provide additional context that helps explain an entity’s overall risk profile. For example, a vault may receive financial risk signals related to redemption mechanics, governance signals related to administrative controls, and operational signals related to underlying protocol dependencies. Together, these independent observations create a more complete picture than any single factor could provide on its own.

​
Beyond Risk Categories

The categories presented are intended to help explain the Webacy Risk Framework, not to define rigid boundaries. Many risk factors naturally span multiple dimensions of risk. For example, a governance issue may also introduce operational risk, while an issuer’s reputation may influence both financial and compliance assessments. As the blockchain ecosystem evolves, new products, use cases, and regulatory requirements will continue to shape how these signals are interpreted. The strength of the Webacy Risk Framework lies not in assigning every factor to a single category, but in combining signals from across the ecosystem to provide a more complete and contextual view of risk.

​
A Continuously Evolving Framework

Webacy currently evaluates 400+ proprietary risk factors, with new signals regularly added as the blockchain ecosystem evolves. Emerging asset classes, protocol designs, attack vectors, and regulatory requirements continually introduce new considerations, and our framework evolves alongside them. Risk factors are the building blocks of the Webacy Risk Framework, enabling explainable, transparent, and adaptable risk intelligence across every supported blockchain entity.

​
What’s Next

Risk Scores and Ratings

Webacy provides both numerical risk scores for automation and letter-grade ratings for quick interpretation.