Total risk score36Medium
Collateral
0/10
What are you pledging? Native BTC is safest; wrappers, bridges, or paper IOUs add redemption risk.
Native BTC (on-chain UTXO).
Rehypothecation
0/10
Will your BTC be re-used? More hidden leverage → bigger blow-up chance.
Non-rehypothecable collateral.
Custody
2/10
Who can move the coins? Scores quorum design, recovery paths, and (for CeFi) bankruptcy-remote segregation.
Collateral in 3-of-4 multisig: borrower, lender, Debifi, and AnchorWatch. Any 3 can recover; borrower holds one key.
Security & Governance
7/10
How battle-tested are code and ops? Counts audits, bug-bounty, certs, and hardware key isolation.
Press release touts three audits (latest by CertiK) yet no report or scope is public and coverage of Debifi’s server-side cosigner/oracle keys is unconfirmed. Because the audit coverage of that critical server‑side key is unverified and its storage location is undisclosed, Debifi currently gets a 7.
Platform
0/10
Is the chain or bridge robust? Rates consensus security and smart-contract attack surface.
Native Bitcoin script.
Oracle
7/10
How is price fetched and signed? Independence, on-chain proofs, refresh speed, circuit breakers.
Uses internal price feed (median of 17–18 exchanges). Transparent, but off-chain, unverifiable, and modifiable by Debifi.
Liquidation Buffer
4/10
How much room and time before liquidation? Combines LTV gap, grace window, and flash-crash guards.
Margin calls at 75/80/85%; liquidation at 90% LTV. ~20 pp buffer, no formal grace window or circuit breaker.
Rate & Term
2/10
Can interest spike mid-loan? Looks at fixed vs variable APR and funding duration match.
Fixed APRs for 1–12 month terms. No repricing mid-loan. Lender funding stack is private.
Transparency
4/10
Can outsiders verify code & solvency? Rewards open-source + live PoR; punishes black boxes.
Loan UTXOs are public and the signer app is open-source, but the backend and build process are closed, with no full reproducibility.
Loan Currency
4/10
What asset do you borrow? Native-BTC best; fiat stables graded on reserves, audits, censorship risk.
Stablecoin Loans: USDT (ERC-20, TRC-20, Liquid), USDC (ERC-20).
Fiat loans: USD, EUR, GBP, AED, BRL, and CHF.
Privacy
4/10
How exposed is your identity? Scores KYC depth, data storage, and breach history.
KYC requirements vary depending on your Lender. All offers without KYC are labeled accordingly. KYC procedure is conducted by a third-party provider such as Sumsub, or by a third-party provider utilized by the Lender.
History
4/10
Have they proven themselves? Measures years live, audit/OSS footprint, and incident track record.
Live since 2024; exited beta in 2025. >$20M loan volume and no known incidents. Still <18 months old.
Jurisdiction
4/10
Which legal system backs you? Rates clarity of licensing, creditor rights, and enforcement.
Operated by WAGMI LTD in the Marshall Islands—offshore, no crypto-lending regulation.