Warblerlabs Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: true
source: https://dev.goldfinch.finance/docs/security/bug-bounty/
policy:
- https://dev.goldfinch.finance/docs/security/bug-bounty/
program:
  platform: Immunefi
  reward_pool: "$500,000"
  scope: Goldfinch Protocol smart contracts
  submission: >-
    Bug reports are submitted via the Immunefi program; the open-source repo
    documents submission instructions.
audits:
  process: >-
    Warbler Labs maintains an internal audit process for all smart-contract
    code, and Goldfinch engages external auditors to review every release.
    Every external audit report is published in an open-source repo.
  firms:
  - CertiK
  - Trail of Bits
  reports_url: https://dev.goldfinch.finance/docs/security/audit-reports/
evidence:
- {source: https://dev.goldfinch.finance/docs/security/bug-bounty/, kind: bug-bounty, keywords: [immunefi, "$500k bug bounty"]}
- {source: https://dev.goldfinch.finance/docs/security/audit-reports/, kind: audit-reports, keywords: [certik, trail of bits, external audit]}