RWA SECURITY
LEADERBOARD

RWA protocols are ranked by their overall Protocol Security Score (0–100) from highest to lowest, calculated as a weighted average across 8 risk categories: • Smart Contract Security (20%) • Oracle & Data Integrity (15%) • Custody & Asset Backing (15%) • Redemption & Liquidity Safety (10%) • Governance Risk (10%) • Compliance & Transfer Restrictions (10%) • Operational Security (10%) • Transparency & Proof Systems (10%)

The leaderboard includes tokenized real-world asset protocols across categories: • Tokenized US Treasury protocols (Ondo, Franklin Templeton, Superstate) • Private Credit protocols (Maple Finance, Goldfinch, TrueFi) • Stablecoin-backed RWA protocols (Paxos) • Asset Tokenization Platforms (Securitize, Centrifuge, STOKR) • Tokenized Securities protocols (Backed Finance, xStocks, Spiko) New protocols are added as they submit and pass the RWA Protocol Security Score assessment.

The RWA Protocol Security Score is a weighted average across 8 risk categories evaluated for each tokenized real-world asset protocol: 1. Smart Contract Security (20%) 2. Oracle & Data Integrity (15%) 3. Custody & Asset Backing (15%) 4. Redemption & Liquidity Safety (10%) 5. Governance Risk (10%) 6. Compliance & Transfer Restrictions (10%) 7. Operational Security (10%) 8. Transparency & Proof Systems (10%) Each category contains multiple protocol-level factors scored 0–100. Overall score = Σ(category_score × category_weight).

Protocol security grades are assigned based on the overall RWA Protocol Security Score: • A+ (95–100): Exceptional protocol security across all categories • A (85–94): Excellent protocol security with minor areas for improvement • B+ (75–84): Good protocol security with some moderate risks • B (65–74): Acceptable security but several protocol-level areas need attention • C+ (55–64): Below average with notable protocol security concerns • C (45–54): Poor protocol security posture requiring significant improvements • D (35–44): Very weak protocol security with critical issues • F (0–34): Failing grade with severe protocol security deficiencies

To get your RWA protocol listed on the leaderboard: 1. Go to the RWA Protocol Security Score calculator page 2. Fill out the protocol self-assessment form accurately across all 8 risk categories 3. Submit your protocol for review 4. The QuillAudits team verifies and approves your protocol submission All protocol submissions are manually reviewed to ensure accuracy and scoring integrity.