Audits

HypurrFi exclusively uses codebases with rigorous security audits. This page provides links to all available audit reports.

​

HypurrFi Audits

• Deployment Review - Feb 2025

​

Fork & Partner Protocol Audits

​

Aave V3 (Pooled Markets)

HypurrFi’s pooled markets are based on Aave V3’s open-source code, which has undergone significant third-party professional audits.

​

Aave V3.0.2 Audits

• Contract Review - Apr 19 2023
• Contract Review - Mar 2023

​

Aave V3.0.1 Audits

• Contract Review - Dec 23 2022
• Formal Verification of Aave V3 upgrade to V3.0.1 - Nov 17 2022 - Dec 15 2022
• Smart Contract Audit Report - Dec 22 2022

​

Aave V3 Audits

• Smart Contract Audit Report - Jan 27 2022
• Smart Contract Security Assessment Report - Jan 27 2022
• Formal Verification of Aave Protocol V3 - Nov 12 2021 - Jan 24 2022
• Smart Contract Audit Report - Jan 14 2022
• Security Assessment Report - Jan 7 2022
• Smart Contract Audit Report - Jan 11 2021

​

Aave Security (USDXL/GHO)

• Aave Security Audits

​

Fraxlend (Legacy Isolated Markets)

HypurrFi’s legacy isolated lending markets are based on Fraxlend’s open-source code.

• Fraxlend & Fraxferry Security Review - November 2022
• Fraxlend & veFPIS Security Review - January 2023
• Fraxlend Audits

​

Euler (HypurrFi Markets)

HypurrFi Markets use Euler’s next-gen vault stack (Earn & Frontier).

• Euler Audits

​

GlueX (Swap)

HypurrFi Swap is powered by GlueX.

• GlueX Audits

​

Hyperliquid (Purrps)

Purrps is powered by Hyperliquid Builder Codes.

• Hyperliquid Audits

​

Enso (Bridge)

HypurrFi Bridge is powered by Enso.

• Enso Audits

​

Price Oracles

​

Pyth

• Pyth Audit Reports

​

Redstone

• Redstone Security Audits

​

Bug Bounty Programs

The protocol will run bug bounty programs to incentivize external developers to identify and report any issues. Any proposed changes to the protocol code are thoroughly reviewed and approved prior to implementation by the HypurrFi community.