Audits

The LI.FI contracts have been audited several times by some of the best security researcher and will continue to be audited regularly. Below you can find a list of all (full) contract audits to date.

Individual Audits

Besides full audits, LI.FI also conducts individual contract audits for any new contracts or changes to existing contracts to make sure that no vulnerability makes it into production. A list of all these reports can be found in our /audit folder in our git repo: Audit Folder

Full Audits

Cantina Security Competition (February 2025)

LI.FI organized a Cantina security competition with almost half a million USD prize pools in Jan/Feb 2025. The goal of this competition is to invite highly-skilled and experienced security researchers and white hackers to review all of LI.FI's smart contracts and identify potential vulnerabilities. The final report of this competition will be published in our repo once it is available.

Spearbit (11 Apr 2023)

Spearbit is a decentralized network of security experts.

Unlike traditional auditing firms that employ teams of full-time security researchers, Spearbit sources top talent from everywhere in the web3 ecosystem to assemble the best possible team.

During the audit Spearbit reviewed LI.FI's entire smart contract codebase.

Full Report

Spearbit (18 Oct 2022)

First full audit with Spearbit.

Full Report

Quantstamp (06 May 2022)

Quantstamp is the leader in blockchain security, having performed over 250 audits and secured over $200 billion in value. Our mission is to facilitate the mainstream adoption of blockchain technology through our security and risk assessment services.

Quantstamp services include securing Layer 1 blockchains such as Ethereum 2.0 and Solana, securing smart contract-powered NFT and DeFi applications such as Maker and OpenSea, and developing financial primitives for Layer 1 blockchain ecosystems. Enterprise companies and NGOs such as Visa, Toyota, and Siemens also trust Quantstamp to secure their blockchain implementations.

During the audit outlined in this document, Quantstamp conducted an analysis of the LI.FI smart contract system written in Solidity. The audit was completed on May 6, 2022.

Full Report

Code4rena (30 Mar 2022)

Code4rena (C4) is an open organization consisting of security researchers, auditors, developers, and individuals with domain expertise in smart contracts.

A C4 audit contest is an event where community participants, referred to as Wardens, review, audit, or analyze smart contract logic in exchange for a bounty provided by sponsoring projects.

During the audit contest outlined in this document, C4 conducted an analysis of the LI.FI smart contract system is written in Solidity. The audit contest took place between March 24—March 30 2022.

Full Report