- Access control: Verifying that only authorised actions (deposits, withdrawals, parameter updates) can occur.
- Logic and arithmetic correctness: Ensuring calculations for interest, collateral ratios, and liquidations cannot overflow or misfire.
- Re-entrancy and exploit protection: Confirming the code cannot be manipulated through repeated or nested transactions.
- Upgrade and dependency safety: Reviewing external calls, oracles, and integrations for hidden vulnerabilities.

