Category: Directory

Portals.fi – DEX Aggregator Review

Score: 66.75/100. The most technically ambitious scope here (LP tokens, vaults), with no confirmed named audit we could find.

Score: 65/100. Distinctive DEX+CEX liquidity, handled a small $22k hack well, but we found active impersonating domains ourselves.

Score: 68.5/100. Wintermute-incubated RFQ+JAM pricing; its own contracts are clean, but its backer’s 2022 hack forced a shutdown.

Score: 65/100. Broadest reach (60+ chains) of any aggregator here, carrying a repeated 2022/2024 vulnerability pattern.

Score: 69.5/100. 0x’s core contracts clean since 2017, though a 2026 SwapNet incident hit users who skipped One-Time Approval.

Score: 63.75/100. MEV-capturing intents, hit twice on the edges (solver exploit, DNS hijack), core protocol unbreached both times.

Score: 61/100. Rebranded from ParaSwap; a DAO vote split 49.56%-49.54% on returning Bybit-hack-linked fees says a lot.

Score: 69/100. Cleanest incident record we found in this whole series, undercut only by just two disclosed audits.

Score: 63.5/100. Dual aggregator+AMM; the Nov 2023 Elastic exploit left the aggregator itself confirmed unaffected.