Audits & Security

1. Audits

• Audit report from Sherlock (Source)

971KB

2025.06.19 - Final - Extra Finance Private Best Efforts Audit Contest Report 1750340468.pdf

PDF

Open

• Audit report from PeckShield (Source)

367KB

PeckShield-Audit-Report-ExtraFi-v1.0.pdf

PDF

Open

• XLend liquidity protocol is a fork of Aave V3. Check Aave's audit reports here.

2. Bug Bounty

XLend bug bounty is live on Immunefi:

Extra Finance Bug Bounties | Immunefiimmunefi

3. Proactive Monitoring

(The partnership has not yet been renewed in 2025, still in review)

We have partnered with Hexagate to protect the protocol from cyber exploits, hacks, governance, and financial risks.

4. Rainy-Day Fund

Approximately $1,000,000 USDC has been accumulated to the Rainy-Day Fund to safeguard the protocol against unexpected incidents and protect the lending pool from insolvency.

For more details and to track the current balance of the Rainy-Day Fund, visit: https://debank.com/profile/0xC918a60e4D40d15959A85fa8b35f6dB96907BabF

5. Oracle Safety

Please check our Oracle selection & usage here: Price Feed