Skip to main content
CoinPulse

What Is DeFindex? Stellar Yield Vaults for Wallets and Fintechs

DeFindex is yield infrastructure on the Stellar blockchain, built by PaltaLabs, a Latin American blockchain studio 610. It lets a wallet, neobank or fintech offer customers a balance that earns interest. The partner deploys a DeFindex vault, users deposit stablecoins or XLM, and the vault spreads that money across audited strategies on outside protocols such as Blend lending pools 137. DeFindex doesn't generate yield itself. It packages yield from other protocols into one balance and one APY, and charges a fee only on earnings 12.

Facts checked 11 cited sources No score on this page, no affiliate links

At a glance

What it is
Non-custodial vault and strategy infrastructure (yield aggregator) 19
Builder
PaltaLabs 611
Network
Stellar (Soroban smart contracts) 710
Assets with strategies
USDC, EURC, XLM, plus CETES, USTRY and TESOURO bond tokens 7
Yield sources
Blend pools, Kinetic (K2) lending, tokenized sovereign bonds 3
Fees
Performance fee on yield, set by the partner and shared with the protocol 2
Audits
OtterSec (2025), Runtime Verification (2026), Halborn (2026) 5
Value locked
≈$19.2 million (DefiLlama, October 24, 2026) 10
Official site
defindex.io · docs.defindex.io
Updated
October 23, 2026

Who uses DeFindex

DeFindex is built for companies first. A partner integrates its API once, chooses which strategies its vault may use, and sets its own fee. It then shows users a single balance and APY 1. The Stellar Development Foundation named the Beans wallet as one app that routes deposits through DeFindex 11. If you hold a balance in a Stellar wallet that advertises "earn" on stablecoins, DeFindex may be the layer underneath. Check that wallet's disclosures to confirm.

How DeFindex vaults work

DeFindex has three on-chain parts:

  1. Vault. This is the contract users deposit into, usually one per partner. It is the only layer that holds funds. It issues share tokens (dfTokens) and reports one balance and APY 1.
  2. Strategies. Each strategy is a small contract that knows how to supply funds to one yield source and withdraw them. DeFindex writes and audits each one before release 1. Current strategies are 37:
    • Blend Autocompound supplies USDC, EURC or XLM to Blend lending pools and reinvests the reward emissions.
    • K2 Autocompound does the same on Kinetic lending, supply-only with no borrowing.
    • RWA Wrapper holds a value-accruing sovereign bond token (CETES, Mexican government bills) against USDC.
  3. Yield sources. Blend, Kinetic and the bond issuers are separate protocols run by their own teams 17.

A vault's set of strategies is fixed when it is created. No vault function can add or swap a strategy later. Only a contract upgrade can change it, and only on vaults deployed as upgradable 5. For background on reward-reinvesting strategies, see yield farming.

Who controls a vault

Each vault has four roles 4:

Role What it can do
Manager Change settings, roles and the performance fee; upgrade the contract if it is upgradable
Emergency Manager Pause a strategy or "rescue" it, pulling its funds back into the vault
Rebalance Manager Move funds between the vault's approved strategies
Fee Receiver Receive and distribute collected fees

According to the docs, none of these roles can withdraw user funds, send assets to an arbitrary address, or freeze deposits and withdrawals 45. These are design claims that can be checked in the open-source contracts. They are not a guarantee against bugs.

Fees

DeFindex charges only a performance fee on yield, never on principal 2. The partner sets the rate, and the fee is split between the partner and the DeFindex protocol. The docs don't publish the split 2. There are no deposit or management fees by default. The APY returned by the API is already net of fees 2.

Docs example: with a 20% fee, a 1,000 deposit that earns 100 pays 20 in fees, leaving the user with 1,080 2. Stellar network fees apply to transactions. Partners can sponsor them through fee-bump transactions.

Stable APY

Partners can display a fixed rate instead of a floating one. DeFindex then adjusts the vault fee within a floor and ceiling the partner chooses. If yield runs above the target, the excess becomes fee revenue. If it falls short, the fee drops toward the floor. Once the fee is at its floor, only extra money the partner adds through a separate product, Boost, can close the gap 8. A "fixed" rate in an app built on DeFindex is therefore a partner commitment backed by the partner's own funding. It is not a protocol guarantee.

Security model, audits and risks

DeFindex describes itself as non-custodial. It says it never holds users' keys and is not a bank, custodian or broker 9. Its listed risks are 5:

  • Smart-contract risk. The docs say plainly that in a hack "funds could be at risk."
  • Underlying-protocol risk. A loss or freeze at Blend, Kinetic or a bond issuer flows through to the vault.
  • Asset risk. Stablecoins can depeg, and bond tokens depend on their issuer and currency (see types of stablecoins).

Audits: OtterSec reviewed the vault, factory and Blend strategy (March 2025). Runtime Verification reviewed the Stable APY contracts (July 2026). Halborn reviewed the Kinetic and RWA Wrapper strategies (September 2026) 5. An audit is a point-in-time review, not insurance. No DeFindex-specific bug bounty is listed 5.

Track record: DefiLlama first listed DeFindex in February 2026, so its public mainnet history is short 10.

Depositing and withdrawing

Users deposit through the partner app, which builds the transaction with the DeFindex API and asks the user to sign it. Withdrawals are always open according to the docs, and no role can block them 5. If a strategy is rescued during an emergency, its funds return to the vault as idle balance that users can withdraw 5. Liquidity inside an underlying pool, such as a highly utilized Blend pool, can still delay how quickly funds come back from that strategy.

Incident record

No security incident involving DeFindex contracts was found in DeFindex's risk page or DefiLlama's data as of October 23, 2026 510.

No security incident found in the sources checked as of October 23, 2026. That is a dated observation, not a promise that none has happened.

Hacks in DefiLlama’s public database are also scored as the security record on the DeFindex rating page.

Questions about DeFindex

Is DeFindex a wallet or an app I can use directly?
Mostly no. It is infrastructure that wallets and fintechs integrate. Users usually reach it through a partner app such as Beans 111.
Which blockchain does DeFindex run on?
Stellar. All listed mainnet contracts are Stellar contracts 7.
Where are DeFindex's contract addresses?
Mainnet factory and strategy addresses are on the docs' Contract Deployments page. Testnet addresses live in a frequently redeployed JSON file in the repository 7. Verify any address there before interacting with it.
Does DeFindex hold my funds?
The vault contract holds deposits. DeFindex says no team role can withdraw them 49. Your control also depends on the partner wallet, which may be custodial or self-custodial (see self-custody).
Where can I see how CoinPulse evaluates DeFindex?

DeFindex elsewhere on CoinPulse

Sources

  1. 1DeFindex docs, "What is DeFindex" —docs.defindex.io
  2. 2DeFindex docs, "Fees and revenue" —docs.defindex.io
  3. 3DeFindex docs, "Strategies" —docs.defindex.io
  4. 4DeFindex docs, "Vault Roles" —docs.defindex.io
  5. 5DeFindex docs, "Risks and Audits" —docs.defindex.io
  6. 6DeFindex docs, "About Us" —docs.defindex.io
  7. 7DeFindex docs, "Contract Deployments" —docs.defindex.io
  8. 8DeFindex docs, "Stable APY" —docs.defindex.io
  9. 9DeFindex docs, "Terms of Use" —docs.defindex.io
  10. 10DefiLlama, DeFindex protocol data —defillama.com
  11. 11Stellar Development Foundation, "Composability on Stellar: from concept to reality" —stellar.org

Other yield aggregatorsAll →

What changed on this page

  • 2026-10-23Profile created.
All companies