1delta's Compound integration passes Certora security audit

Certora has completed a full manual security assessment of 1delta's Compound v2 and v3 integration, returning zero critical findings and zero high findings, with all actionable issues resolved.

Certora is one of the most established smart contract security firms in Web3. Their review covered the core contracts powering 1delta's lending composer architecture, including operation routing, permit handling, and flash swap execution.

The audit ran from December 10 to December 17, 2025, and reviewed seven Solidity contracts at the execution layer of 1delta's API.

Findings and resolution

Across all findings identified during the review, no critical or high severity issues were discovered.

All actionable findings were addressed and verified by Certora, with the remaining items acknowledged as systemic risks that are standard disclosures across multi-protocol aggregation infrastructure.

The most notable finding involved permit signature handling, where 1delta implemented a graceful execution pattern ensuring user transactions remain protected against known MEV griefing vectors. Certora reviewed the implementation and confirmed the fix.

All other findings, covering routing validation, transfer safety, and code consistency, were resolved and signed off by the Certora team.

What this means for integrators

1delta is the onchain API for lending and borrowing across 50+ chains and 200+ protocols.

Any team building a DEX, wallet, or onchain application can integrate lending infrastructure through a single API without managing protocol-level complexity directly.

This audit establishes a verified security baseline for the Compound integration and reflects 1delta's broader commitment to shipping infrastructure that institutions and developers can build on with confidence.

You can find the full Certora report here.

Request API access at 1delta.io or view technical documentation at docs.1delta.io. Contact us on Telegram or at team@1delta.io.