Goldfinch

Goldfinch Protocol Smart Contract Audit

Cantina Security Report

Organization

@goldfinch

Engagement Type

Spearbit Web3

Period

-


DeFi Credit System Security Review of Goldfinch

Goldfinch is a decentralized credit protocol that enables undercollateralized loans to real-world businesses, expanding access to capital through community-managed lending pools. Its design bridges DeFi infrastructure with traditional finance needs, using tokenized participation and transparent governance mechanisms.

To support protocol safety, Goldfinch engaged Spearbit through Cantina for a security audits review. The audit focused on reinforcing core lending behaviors, collateral logic, and role-based controls, ensuring user protections within a permissionless lending environment.

Cantina also supports DeFi lending systems like Goldfinch with additional protections including bug bounty programs, crowdsourced security competitions, and multisig security to help scale securely across jurisdictions and user types.


Findings

Medium Risk

2 findings

0 fixed

2 acknowledged

Low Risk

2 findings

0 fixed

2 acknowledged

Informational

8 findings

0 fixed

8 acknowledged

Gas Optimizations

4 findings

0 fixed

4 acknowledged