DeFi Protocol Launch Checklist

The complete checklist for launching a DeFi protocol. Covers security audits, liquidity bootstrapping, monitoring setup, and safe mainnet deployment for lending protocols, DEXs, and yield aggregators.

DeFi Developer

64 items

Updated May 17, 2026

0 of 64 completed (0%)

Security Preparation

Complete security review before launch.

Complete professional security audit

critical

Engage reputable audit firm. Allow 4-8 weeks for thorough review.

Fix all critical and high audit findings

critical

No launch with unresolved critical issues. Document any accepted risks.

Run bug bounty program

critical

Launch on Immunefi or similar. Set meaningful bounty amounts.

Complete formal verification for core functions

important

Use Certora, Halmos, or similar for critical invariants.

Run extensive fuzzing campaigns

critical

Echidna/Foundry fuzzing for all financial operations.

Review all external dependencies

important

Audit imported libraries. Check for known vulnerabilities.

Conduct economic security review

critical

Model attack economics, MEV, and manipulation vectors.

Set up security monitoring

critical

Configure Forta bots, Tenderly alerts, or custom monitoring.

Protocol Configuration

Set conservative launch parameters.

Set conservative initial parameters

critical

Lower TVL caps, higher collateral ratios, wider spreads for launch.

Configure asset listings carefully

critical

Start with battle-tested assets (ETH, USDC). Add riskier assets later.

Set supply and borrow caps

critical

Limit exposure per asset until protocol is battle-tested.

Configure oracle feeds

critical

Use Chainlink primary with fallbacks. Set staleness thresholds.

Set liquidation incentives

critical

Ensure liquidators are profitable to maintain solvency.

Configure interest rate models

critical

Set use targets and rate curves appropriately.

Set fee parameters

important

Configure protocol fees, withdrawal fees, and distribution.

Configure governance timelock

critical

Set appropriate delay (24-48h minimum) for parameter changes.

Access Control Setup

Secure admin functions and keys.

Deploy governance multisig

critical

Use Gnosis Safe with reputable signers. Document threshold.

Transfer ownership to multisig

critical

Move all admin rights from deployer to governance.

Configure emergency guardian

critical

Set up fast-response guardian for pause functionality.

Document all privileged roles

important

Public documentation of who controls what.

Set up key ceremony for critical keys

important

Proper key generation with multiple witnesses.

Configure upgrade authority

critical

Set timelock as upgrade admin for proxies.

Test emergency procedures

critical

Dry run pause, unpause, and emergency actions.

Plan key rotation procedures

important

Document how to rotate signers if needed.

Liquidity Bootstrapping

Seed initial protocol liquidity.

Plan liquidity bootstrapping strategy

critical

Choose LBP, fair launch, liquidity mining, or VC seeding.

Secure initial liquidity commitments

critical

Line up launch liquidity from team, investors, or partners.

Design liquidity incentive program

important

Structure rewards to attract sticky liquidity, not mercenary.

Set up liquidity mining contracts

important

Deploy and test reward distribution contracts.

Coordinate with DEX aggregators

important

List on 1inch, Paraswap, etc. for discoverability.

Plan trading pair strategy

important

Prioritize deep liquidity for key pairs.

Set up token vesting if applicable

important

Configure vesting schedules for team and investors.

Prepare treasury management

important

Plan how protocol-owned liquidity will be managed.

Infrastructure & Monitoring

Set up operational infrastructure.

Deploy and index subgraph

critical

The Graph or custom indexer for protocol analytics.

Set up protocol dashboard

critical

Real-time TVL, use, and health metrics.

Configure liquidation bots

critical

Run redundant liquidation bots or partner with liquidators.

Set up keeper infrastructure

important

Automated keepers for oracle updates, rewards, etc.

Configure alerting system

critical

PagerDuty or similar for critical alerts.

Set up 24/7 on-call rotation

critical

Ensure someone can respond to incidents anytime.

Deploy frontend to reliable hosting

critical

CDN with DDoS protection. Consider IPFS backup.

Configure RPC redundancy

critical

Multiple RPC providers with automatic failover.

Documentation & Communication

Prepare launch communications.

Publish detailed docs

critical

Protocol mechanics, risks, and user guides.

Write risk disclosure

critical

Clear documentation of protocol risks for users.

Prepare audit report publication

important

Make audit reports easily accessible.

Create integration documentation

important

SDK docs, contract addresses, and integration guides.

Brief community moderators

important

Train mods on protocol mechanics and common issues.

Prepare launch announcements

important

Blog posts, tweets, and press materials ready.

Set up support channels

important

Discord support, FAQ, and escalation paths.

Coordinate launch PR

important

Reach out to media, influencers, and partners.

Launch Execution

Execute the mainnet launch.

Final testnet validation

critical

Complete end-to-end testing on testnet fork of mainnet.

Deploy contracts to mainnet

critical

Execute deployment scripts. Verify all contracts.

Seed initial liquidity

critical

Deploy committed liquidity before opening to public.

Enable deposits with caps

critical

Start with conservative caps. Raise as confidence grows.

Monitor first transactions closely

critical

Watch initial deposits, borrows, and trades for issues.

Verify oracle functionality

critical

Confirm price feeds are working correctly.

Test emergency pause

critical

Verify pause functionality works without affecting funds.

Announce launch

important

Publish announcements once system is stable.

Post-Launch Operations

Ongoing operations after launch.

Monitor protocol health daily

critical

Check TVL, use, bad debt, and anomalies.

Gradually raise caps

important

Increase limits as protocol proves stability.

Process bug bounty submissions

critical

Triage and respond to security reports quickly.

Maintain community communication

important

Regular updates on metrics, roadmap, and issues.

Plan next asset listings

important

Due diligence on new assets before adding.

Schedule follow-up audits

important

Plan audits for new features and periodic reviews.

Gather user feedback

important

Collect feedback for product improvements.

Document lessons learned

nice-to-have

Record what worked and what to improve.

Key Recommendations

Launch with lower caps than you think you need: You can always raise caps. You can't undo a hack. Start conservative.

Have war room ready for launch week: Engineering, security, and ops should be available 24/7 for the first week.

Partner with professional liquidators: Don't rely solely on your own bots. Liquidation failures cause bad debt.

Monitor competitor incidents: When similar protocols get hacked, review if you're vulnerable to the same attack.

Build relationships with security researchers: White hats who know your protocol can spot issues before black hats do.

More Guides for DeFi Developers

Checklist

DeFi Code Review Checklist

Checklist

DeFi Security Checklist for Developers

Project Ideas

60 Portfolio Project Ideas for DeFi Developers

Common Mistakes

30 Security Mistakes DeFi Developers Make

Tools Directory

33 Essential Development Tools for DeFi Developers

Looking for Web3 Opportunities?

Explore curated, high-impact roles across top blockchain protocols and Web3 startups.

Back to All Resources