DeFi Integrations Best Practices

A condensed summary of the 25 most important DeFi integration practices drawn from every page in this section.

Allowlist mint pubkeys: Never trust ticker strings - hard-code mainnet mints in config (DeFi Basics).
Re-quote before send: Jupiter quotes expire in seconds - fetch fresh quote immediately before swap (Swaps with Jupiter).
Set explicit slippage: Default 50 bps for liquid pairs; raise for thin pools - log chosen slippageBps per tx.
Simulate every mainnet tx: Use RPC simulateTransaction or Surfpool 0.12.0 fork before spending SOL.
Use dynamic compute limits: Multi-hop swaps exceed 200k CU - enable Jupiter dynamicComputeUnitLimit or set budget ix.
Handle wSOL explicitly: Enable wrapAndUnwrapSol or manage wSOL ATA lifecycle manually.
Validate pool program IDs: Direct AMM CPIs must check pool owner matches Raydium/Orca/Meteora program (AMMs).
Read reserves at execution: Client previews use stale state - simulate or read on-chain reserves in same slot.
Check oracle staleness: Lending and perps must fail closed when Pyth/Switchboard age exceeds threshold (Oracles).
Separate LTV and liquidation: Display max borrow LTV and liquidation threshold with safety buffer (Lending).
Track LST exchange rates: Never assume 1 LST = 1 SOL - read stake pool rate (Liquid Staking).
Allowlist LST mints: Reject unknown stake pool tokens - scams mimic jitoSOL tickers.
Bundle under contention: Large swaps on mainnet use Jito bundles or private RPC (Jito & MEV).
Cap price impact: Abort swaps when priceImpactPct exceeds product policy.
Use versioned transactions: DeFi routes need ALTs - legacy tx formats hit account limits.
Priority fees on mainnet: Set prioritizationFeeLamports from fee oracle during congestion.
Test on mainnet fork: Devnet liquidity is thin - Surfpool 0.12.0 for realistic Jupiter routes.
Log route plans: Persist routePlan JSON for incident debugging and user support.
Isolate leverage loops: Borrow-swap-deposit chains fail atomically - model end-state health before submit.
Perp oracle marks: Liquidations use oracle price, not last trade (Perps).
Tick/lot integers only: CLOB prices are ticks - no JavaScript float math in production paths.
Monitor receipt token balances: Lending deposits may return cTokens - track correct mint for withdrawals.
Rate-limit quote API: Backoff on HTTP 429 from Jupiter; cache quotes < 5s only.
Fail closed on CPI errors: Propagate program errors - never swallow failed DeFi CPI in your program.
Document venue risk: Disclose smart contract, oracle, and depeg risks per integrated protocol in UX copy.

FAQs

What is the minimum slippage for SOL-USDC?

50 bps is a common default; tighten for size-dependent impact checks using priceImpactPct.

Should retail apps use Jito bundles?

Optional for large trades; priority fees alone may suffice for small swaps.

How do I test without mainnet SOL?

Surfpool fork with cloned user ATAs and pool state - not bare devnet for routing tests.

What is the top integration mistake?

Stale quotes and missing slippage checks - causes failed txs or bad fills.

DeFi Basics on Solana - section entry
Swaps with Jupiter - primary swap path
Security Best Practices - on-chain safety
Testing Best Practices - DeFi test policy

Stack versions: This page was written for Agave 4.1.1, Solana CLI 3.0.10, Anchor 0.32.1, anchor-lang 0.32.1, Rust 1.91.1, @solana/kit 7.0.0, Surfpool 0.12.0, and LiteSVM 0.6.x.

DeFi Integrations Best Practices

A condensed summary of the 25 most important DeFi integration practices drawn from every page in this section.

Allowlist mint pubkeys: Never trust ticker strings - hard-code mainnet mints in config (DeFi Basics).

Re-quote before send: Jupiter quotes expire in seconds - fetch fresh quote immediately before swap (Swaps with Jupiter).

Set explicit slippage: Default 50 bps for liquid pairs; raise for thin pools - log chosen slippageBps per tx.

Simulate every mainnet tx: Use RPC simulateTransaction or Surfpool 0.12.0 fork before spending SOL.

Use dynamic compute limits: Multi-hop swaps exceed 200k CU - enable Jupiter dynamicComputeUnitLimit or set budget ix.

Handle wSOL explicitly: Enable wrapAndUnwrapSol or manage wSOL ATA lifecycle manually.

Validate pool program IDs: Direct AMM CPIs must check pool owner matches Raydium/Orca/Meteora program (AMMs).

Read reserves at execution: Client previews use stale state - simulate or read on-chain reserves in same slot.

Check oracle staleness: Lending and perps must fail closed when Pyth/Switchboard age exceeds threshold (Oracles).

Separate LTV and liquidation: Display max borrow LTV and liquidation threshold with safety buffer (Lending).

Track LST exchange rates: Never assume 1 LST = 1 SOL - read stake pool rate (Liquid Staking).

Allowlist LST mints: Reject unknown stake pool tokens - scams mimic jitoSOL tickers.

Bundle under contention: Large swaps on mainnet use Jito bundles or private RPC (Jito & MEV).

Cap price impact: Abort swaps when priceImpactPct exceeds product policy.

Use versioned transactions: DeFi routes need ALTs - legacy tx formats hit account limits.

Priority fees on mainnet: Set prioritizationFeeLamports from fee oracle during congestion.

Test on mainnet fork: Devnet liquidity is thin - Surfpool 0.12.0 for realistic Jupiter routes.

Log route plans: Persist routePlan JSON for incident debugging and user support.

Isolate leverage loops: Borrow-swap-deposit chains fail atomically - model end-state health before submit.

Perp oracle marks: Liquidations use oracle price, not last trade (Perps).

Tick/lot integers only: CLOB prices are ticks - no JavaScript float math in production paths.

Monitor receipt token balances: Lending deposits may return cTokens - track correct mint for withdrawals.

Rate-limit quote API: Backoff on HTTP 429 from Jupiter; cache quotes < 5s only.

Fail closed on CPI errors: Propagate program errors - never swallow failed DeFi CPI in your program.

Document venue risk: Disclose smart contract, oracle, and depeg risks per integrated protocol in UX copy.

FAQs

What is the minimum slippage for SOL-USDC?

50 bps is a common default; tighten for size-dependent impact checks using priceImpactPct.

Should retail apps use Jito bundles?

Optional for large trades; priority fees alone may suffice for small swaps.

How do I test without mainnet SOL?

Surfpool fork with cloned user ATAs and pool state - not bare devnet for routing tests.

What is the top integration mistake?

Stale quotes and missing slippage checks - causes failed txs or bad fills.

Stack versions: This page was written for Agave 4.1.1, Solana CLI 3.0.10, Anchor 0.32.1, anchor-lang 0.32.1, Rust 1.91.1, @solana/kit 7.0.0, Surfpool 0.12.0, and LiteSVM 0.6.x.

DeFi Integrations Best Practices

FAQs

Related

Search Documentation

DeFi Integrations Best Practices

FAQs

Related