Smart Contract Dependency
Smart contract dependency exists when a protocol requires the successful execution of another protocol's code to function correctly. Many DeFi platforms function as layers built on top of base protocols, using them for price feeds, interest rate generation, or collateral storage.
If the underlying contract has a bug, is upgraded in a way that breaks compatibility, or is exploited by an attacker, the dependent protocol is immediately compromised. This creates a hidden risk profile because users may believe they are only exposed to the risks of the platform they are interacting with, when they are actually exposed to the entire stack.
Security audits often focus on individual contracts, but they frequently overlook the emergent risks created by these inter-contract interactions. Managing these dependencies requires constant monitoring of the entire chain of custody for assets and logic.