Audits

Audits — PrimeFi Core

PrimeFi's smart-contract suite has undergone multiple independent reviews. Each review is limited to its stated scope, code revision, assumptions, and review date.

An audit is a point-in-time assessment, not a guarantee that a deployment is secure or that later integrations and configuration changes are covered.

---

⚡ Pre-Audit — Gerard Persoon (Code4rena Top Warden)

Field	Detail
Scope	Core Lending, pLP Locking, OFT Bridge
Date	February 2025
Status	Review completed; consult the revision repository for its findings and reviewed code
Auditor profile	https://code4rena.com/@gpersoon
Revision repo	https://github.com/gpersoon/PrimeFi

---

🛡 Full Audit #1 — PeckShield

Field	Detail
Scope	Lending markets, liquidation engine, Chainlink oracle integration
Date	April 2025
Status	Report published; findings and remediation claims should be evaluated against the report's reviewed revision and deployed code
Report	https://drive.google.com/file/d/1TLig0aCVzmdpwOvYbE_S3JX-BOYIGwVG/view

---

🔍 Full Audit #2 — QuillAudits

Field	Detail
Scope	Cross-chain messaging (LayerZero), security-admin modules
Date	May 2025
Status	Public report page available; formal sign-off has not been independently verified for this documentation
Report	See report

---

Scope and deployment mapping

The currently published audit entries do not identify exact reviewed commit hashes or provide a complete mapping from each reviewed revision to every deployed implementation and configuration.

Until that mapping is published, users and integrators should not infer that a report covers later integrations, deployments, upgrades, or configuration changes merely because a broad component category appears in its scope.

Future review completion and resulting deployment changes should be documented without treating them as a guarantee against vulnerabilities.