Liquid Collective

Liquid Collective Protocol Security Review

Cantina Security Report

Organization

@liquid

Engagement Type

Spearbit Web3

Period

-


Validator Exit and Oracle Logic Review of Liquid Collective

Liquid Collective is an institutional-grade liquid staking protocol built for multichain participation, providing users with KYC-compliant staking access and slashing protection via receipt tokens like lsETH. The system integrates oracle-driven coordination, validator management, and dynamic redemption logic to help ensure reliability at scale.

To validate its infrastructure, Liquid Collective engaged Spearbit through Cantina for a security audits review focused on validator exit flows, coverage fund logic, and oracle reporting integrity. The assessment also reviewed share tracking, vote handling, and state transitions to ensure consistent behavior in high-volume or edge-case scenarios.

Cantina supports institutional staking protocols through bug bounty programs, crowdsourced security competitions, and multisig security, providing layers of defense for complex validator and redemption architectures.


Findings

Critical Risk

2 findings

2 fixed

0 acknowledged

High Risk

1 findings

1 fixed

0 acknowledged

Medium Risk

3 findings

3 fixed

0 acknowledged

Low Risk

14 findings

9 fixed

5 acknowledged

Informational

24 findings

17 fixed

7 acknowledged

Gas Optimizations

5 findings

4 fixed

1 acknowledged