Skip to main content
AVOID.NET
← Extra Finance1 decision on this page

Audit log

Every state-changing event for Extra Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

  1. #1publishby system:backfill
    2026-10-13 05:36:05Z
    Score: ? → ? (no score change)
    anchoranchored
    chain
    ●mainnet-betaslot 456,328,808
    sig
    5vmFjAt2t7pa…oxEC4zzLexplorer ↗
    hash
    AnSSfXqpmfVJ…JHPCtDyjsha256 → base58
    verifying row…full verify ↗
    canonical bytes (11388 B) ▸
    {"actor":"system:backfill","investigation_id":"ba76db19-e255-440d-aa66-9c5769125bb2","kind":"publish","page_slug":"extra-finance","published_at":"2026-10-13T05:36:05.828Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Extra Finance","sections":[{"content":"DefiLlama describes Extra Finance as a community-driven lending and leveraged yield farming protocol, listed since May 2023, with deployments on Base, OP Mainnet and Berachain, and Chainlink price feeds as its primary oracle. Search listings state a testnet launch on Optimism on 23 March 2023 and a mainnet launch on 9 May 2023 (aggregator data, lower confidence). Re-verification on 13 Oct 2026: the DefiLlama TVL endpoint for the protocol returned about $28.9M in total TVL, and CoinGecko's API showed an EXTRA market cap of about $2.82M (price about $0.0058, circulating supply about 487.8M). These differ from the requester-supplied figures (Base TVL about $32.7M, market cap about $3.35M read on 7 Oct 2026); the difference may reflect the date, the TVL definition (DefiLlama pages also list a separate leverage-farming product at about $23.3M and a parent page at about $25.8M) or market movement. The requester's figures could not be reproduced from a primary source and should not be treated as verified. EXTRA is reported to have an all-time high of $0.29 in March 2024 and a low near $0.0026 in June 2026 (aggregator data).","heading":"Overview and Current Metrics","severity":"low","sources":[{"credibility":2,"name":"DefiLlama TVL API - extra-finance","type":"on_chain","url":"https://api.llama.fi/tvl/extra-finance"},{"credibility":2,"name":"CoinGecko API - Extra Finance","type":"other","url":"https://api.coingecko.com/api/v3/coins/extra-finance"},{"credibility":2,"name":"DefiLlama - Extra Finance","type":"other","url":"https://defillama.com/protocol/extra-finance"},{"credibility":2,"name":"DefiLlama - Extra Finance Leverage Farming","type":"other","url":"https://defillama.com/protocol/extra-finance-leverage-farming"}]},{"content":"Per the protocol's documentation, users deposit collateral and borrow from the protocol's lending pool to open a larger liquidity-farming position on whitelisted DEXes (a 2024 Bankless analysis names Velodrome and Aerodrome). The docs give 3x as an example and say ratios of '3x and higher' are offered depending on pool risk; no fixed maximum is stated. Their worked example: a 20% farming APR at 3x with 8% borrowing interest yields (20% x 3) - (8% x 2) = 44% APR, showing that leverage amplifies both returns and losses. Lenders deposit into the same pools and earn borrowing interest. The docs describe a pseudo-fixed interest rate model, and DefiLlama reports a 15% performance fee on borrowing interest profit, with part paid to veEXTRA holders and part burned (DefiLlama description, not independently checked against contracts).","heading":"How Leverage Works","severity":"medium","sources":[{"credibility":2,"name":"Extra Finance docs - How Extra Finance Works","type":"official","url":"https://docs.extrafi.io/extra_finance/leverage-farming/how-extra-finance-works"},{"credibility":2,"name":"Extra Finance docs - Welcome","type":"official","url":"https://docs.extrafi.io/extra_finance"},{"credibility":2,"name":"Bankless - extra finance is pumping","type":"news_article","url":"https://www.bankless.com/extra-finance-is-pumping"}]},{"content":"The docs define the debt ratio as debt value divided by position value; if it exceeds the liquidation threshold the position is liquidated, the borrowed funds return to the lender and any remainder goes to the user. The Risks page warns that users may lose their entire investment or more, that in volatile, thin-liquidity markets liquidation may not execute at expected prices, and that if the liquidation bot fails to liquidate in time 'there would be some bad debt'. It also warns that lenders may be unable to withdraw on time when utilization is very high. The docs state the protocol uses a TWAP model against price manipulation. Liquidator rewards and a maximum leverage figure were not found in the pages read. This research found no reported liquidation cascade or bad-debt event specific to Extra Finance; absence of reports is not proof none occurred, and on-chain bad-debt history was not examined. Disclosed known issues on the Immunefi page include rounding differences between pool-level and per-position debt accounting and a first-depositor share-inflation pattern the page says is mitigated; these are disclosures, not reported exploits.","heading":"Liquidation Mechanics and Bad-Debt Risk","severity":"medium","sources":[{"credibility":2,"name":"Extra Finance docs - Risks","type":"official","url":"https://docs.extrafi.io/extra_finance/risks"},{"credibility":2,"name":"Extra Finance docs - How Extra Finance Works","type":"official","url":"https://docs.extrafi.io/extra_finance/leverage-farming/how-extra-finance-works"},{"credibility":2,"name":"Extra Finance Bug Bounty (Immunefi)","type":"official","url":"https://immunefi.com/bug-bounty/extrafinance/information/"}]},{"content":"The Audits and Security page lists reports from BlockSec, PeckShield and Sherlock (the Sherlock report filename is dated 2024.12.01; the other two list no date or scope), and states each firm says the issues it found were fixed. The audited scope versus the currently deployed Base and Berachain contracts was not confirmed. An Immunefi bug bounty exists (listing shows up to $100,000; its stated end date of 16 September 2026 has passed, so current status is unverified). The page also notes a Hexagate monitoring partnership was not renewed in 2025 and was under review. No security incident is described there.","heading":"Audits and Security Programs","severity":"low","sources":[{"credibility":2,"name":"Extra Finance docs - Audits & Security","type":"official","url":"https://docs.extrafi.io/extra_finance/audits-and-security"},{"credibility":2,"name":"PeckShield audit report (ExtraFi v1.0)","type":"research","url":"https://github.com/peckshield/publications/blob/master/audit_reports/PeckShield-Audit-Report-ExtraFi-v1.0.pdf"},{"credibility":2,"name":"BlockSec audit report (Extra Finance v1.0)","type":"research","url":"https://github.com/blocksecteam/audit-reports/blob/main/solidity/blocksec_extrafinance_v1.0-signed.pdf"},{"credibility":2,"name":"Sherlock audit report (Extra Finance)","type":"research","url":"https://github.com/sherlock-protocol/sherlock-reports/blob/main/audits/2024.12.01%20-%20Final%20-%20Extra%20Finance%20Audit%20Report.pdf"},{"credibility":2,"name":"Extra Finance Bug Bounty (Immunefi)","type":"official","url":"https://immunefi.com/bug-bounty/extrafinance/information/"}]},{"content":"No source found names the founders or core team; the documentation pages read list a contact email, Discord, X and Medium channels but no team page. Whether the team is anonymous could not be established. Readers should treat team identity as unverified.","heading":"Team and Transparency","severity":"medium","sources":[{"credibility":2,"name":"Extra Finance docs - Welcome","type":"official","url":"https://docs.extrafi.io/extra_finance"},{"credibility":2,"name":"Nansen - What Is Extra Finance?","type":"research","url":"https://www.nansen.ai/post/what-is-extra-finance"}]}],"sources_used":[{"credibility":2,"name":"Extra Finance docs - Welcome","type":"official","url":"https://docs.extrafi.io/extra_finance"},{"credibility":2,"name":"Extra Finance docs - Risks","type":"official","url":"https://docs.extrafi.io/extra_finance/risks"},{"credibility":2,"name":"Extra Finance docs - How Extra Finance Works","type":"official","url":"https://docs.extrafi.io/extra_finance/leverage-farming/how-extra-finance-works"},{"credibility":2,"name":"Extra Finance docs - Audits & Security","type":"official","url":"https://docs.extrafi.io/extra_finance/audits-and-security"},{"credibility":2,"name":"Extra Finance Bug Bounty (Immunefi)","type":"official","url":"https://immunefi.com/bug-bounty/extrafinance/information/"},{"credibility":2,"name":"DefiLlama TVL API - extra-finance","type":"on_chain","url":"https://api.llama.fi/tvl/extra-finance"},{"credibility":2,"name":"CoinGecko API - Extra Finance","type":"other","url":"https://api.coingecko.com/api/v3/coins/extra-finance"},{"credibility":2,"name":"DefiLlama - Extra Finance","type":"other","url":"https://defillama.com/protocol/extra-finance"},{"credibility":2,"name":"DefiLlama - Extra Finance Leverage Farming","type":"other","url":"https://defillama.com/protocol/extra-finance-leverage-farming"},{"credibility":2,"name":"Bankless - extra finance is pumping","type":"news_article","url":"https://www.bankless.com/extra-finance-is-pumping"},{"credibility":2,"name":"Nansen - What Is Extra Finance?","type":"research","url":"https://www.nansen.ai/post/what-is-extra-finance"},{"credibility":2,"name":"PeckShield audit report (ExtraFi v1.0)","type":"research","url":"https://github.com/peckshield/publications/blob/master/audit_reports/PeckShield-Audit-Report-ExtraFi-v1.0.pdf"},{"credibility":2,"name":"BlockSec audit report (Extra Finance v1.0)","type":"research","url":"https://github.com/blocksecteam/audit-reports/blob/main/solidity/blocksec_extrafinance_v1.0-signed.pdf"},{"credibility":2,"name":"Sherlock audit report (Extra Finance)","type":"research","url":"https://github.com/sherlock-protocol/sherlock-reports/blob/main/audits/2024.12.01%20-%20Final%20-%20Extra%20Finance%20Audit%20Report.pdf"},{"credibility":2,"name":"DefiLlama token page - EXTRA","type":"other","url":"https://defillama.com/token/EXTRA"}],"summary":"Extra Finance is a lending and leveraged yield farming protocol, launched on Optimism in 2023 and now deployed mainly on Base (also OP Mainnet and Berachain). Its documentation lists three audits (BlockSec, PeckShield, Sherlock) and a bug bounty, and this research found no reported exploit or bad-debt event specific to the protocol. The team is not identified in any source found, and market figures re-checked on 13 Oct 2026 differ from those supplied by the requester.","timeline":[{"date":"2023-03","event":"Testnet launch on Optimism reported by aggregator listings (day not verified)","source":"Search listing data (Nansen overview)","source_url":"https://www.nansen.ai/post/what-is-extra-finance"},{"date":"2023-05","event":"Mainnet launch on Optimism; DefiLlama lists the protocol since May 2023","source":"DefiLlama","source_url":"https://defillama.com/protocol/extra-finance-leverage-farming"},{"date":"2024-03","event":"EXTRA reported all-time high of about $0.29 (aggregator data)","source":"DefiLlama token page","source_url":"https://defillama.com/token/EXTRA"},{"date":"2024-12","event":"Sherlock audit report published (per report filename dated 2024.12.01)","source":"Sherlock reports repository","source_url":"https://github.com/sherlock-protocol/sherlock-reports/blob/main/audits/2024.12.01%20-%20Final%20-%20Extra%20Finance%20Audit%20Report.pdf"},{"date":"2026-06","event":"EXTRA reported all-time low of about $0.0026 (aggregator data)","source":"DefiLlama / search listings","source_url":"https://defillama.com/token/extra"},{"date":"2026-10","event":"Re-verification: total TVL about $28.9M and market cap about $2.82M, differing from requester-supplied figures","source":"DefiLlama API; CoinGecko API","source_url":"https://api.llama.fi/tvl/extra-finance"}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 250440a4-8f46-48a2-9981-81500887c914
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.