Curriculum·J306 Smart Contract Risk for Non-Developers·about 31 min
A risk rubric
By the end of this lesson you can
- →Score a protocol across the six dimensions this course produces
- →Apply the minimum rule rather than an average, and justify why
- →Identify the gate conditions that disqualify regardless of other scores
- →Convert a rubric result into a position size rather than a verdict
Junior · enrolled learners
This lesson opens with The average that was always high.
- What happened
- This is a pattern drawn from the verified incidents in this course and this level rather than a single event, and it is labeled as such. Multichain was a widely used router with functioning contracts, real volume and years of operation, and failed because every node ran on one individual's personal cloud account. Venus had reasonable parameters on every market except the one that accepted its own governance token as collateral. Compound had a mature governance process that worked exactly as designed and could not act for seven days. Ankr and Helio each held defensible parameters in isolation and produced a $16M loss in combination. In every case a scorecard averaging across dimensions would have returned a high number, and in every case a single dimension determined the outcome.
- The decision point
- Averaging is the wrong operation for a system whose failure requires only one path to be open. Per J301-04, security is the cost of the cheapest authorization path rather than the typical one, and a rubric that averages six dimensions will rate a protocol scoring nine on five of them and two on the sixth at 7.83, which is a number that describes nothing about what will happen. The correct summary statistic for a stack of dependencies is the minimum.
What you will be able to answer
- →What are the six rubric dimensions?
- →Why the minimum rather than the average?
- →What are the gate conditions?
- →What does the rubric produce?
Orientation and Year One are open: anyone can read them without an account. From Year Two onward the lessons are for enrolled learners, because progress through the later years only means anything if it is tracked against a record.
It is free. We do not sell the list and there is nothing to buy at the end of it.
Sources and review
- https://blockworks.com/news/multichain-founder-family-arrested
- https://www.tradingview.com/news/cointelegraph:47125b808094b:0/
- https://www.theblock.co/amp/linked/119086/compound-bug-comp-risk-misreward
- https://www.merklescience.com/blog/hack-track-analysis-of-ankr-exploit
Confidence high·Volatility low·Reviewed 2026-08-06·Owner unassigned
Contested
The size bands in the worked example are illustrative and depend entirely on a reader's own policy per S207-06. The transferable part is the mapping from a minimum score to a bound, not the specific percentages.
J310-07 applies this rubric to tokenized real world assets, where the dimensions extend to a legal wrapper, an issuer's jurisdiction and a redemption process running on business days. J308-02 owns governance as an attack surface. Both extend this rubric rather than replacing it.