Goldfinch Review
On-chain credit, MIT, Trail of Bits audited
of 10
Goldfinch is a decentralised credit protocol where loans are fully collateralised with off-chain assets and borrowers need no crypto collateral. It publishes a 0.5% withdrawal fee and a 10% protocol reserve cut, is MIT-licensed, and has published every external audit including Trail of Bits.
No money changes hands. This is a non-commercial project: no advertising, no sponsored placements, and no affiliate or referral links. Links to the services below earn us nothing. Every overall score is the plain average of the criteria shown on the page, so you can check the arithmetic yourself — see our rating methodology and how the site is funded.
Function
Decentralised credit protocol; loans collateralised off-chain
Withdrawal fee
0.5% redeeming FIDU for USDC
Protocol reserve
10% of nominal interest
Licence
MIT (monorepo and contracts)
Auditors
Certik, Trail of Bits, all reports open-source
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (8.0 + 10.0 + 9.0 + 6.0 + 5.0) ÷ 5 = 7.6.
Pros
- Function stated plainly: a decentralised, globally accessible credit protocol for real-world lending
- Fees published: 0.5% withdrawal fee, 10% of nominal interest to protocol reserves
- MIT licence on both the monorepo and the contracts repository
- Every external audit published open-source; Certik and Trail of Bits named across versions
Cons
- Loans are collateralised off-chain, so the collateral is not directly verifiable on-chain
- Whether the off-chain collateral is attested is not stated on the pages read
- Governance and timelock are referenced as separate pages but their detail was not read
- The monorepo LICENSE carries a Zeppelin Solutions copyright line, reported verbatim
Real-world credit, with published economics
Goldfinch describes itself as a decentralised, globally accessible credit protocol where all loans are fully collateralised with off-chain assets and borrowers need no crypto collateral. Its economics are published: a 0.5% withdrawal fee to redeem FIDU for USDC, 10% of nominal interest to protocol reserves, with the Senior Pool earning 70% and 20% reallocated to Backers.
Open and thoroughly audited
Both the monorepo and the contracts repository are MIT-licensed, and Goldfinch states it has published the report from every external audit in an open-source repository, naming Certik and Trail of Bits across versions. That combination — open code and a complete, named audit trail — is the strongest part of the entry.
The off-chain caveat
Because loans are collateralised with off-chain assets, the collateral cannot be verified on-chain the way an on-chain pool can, and whether it is independently attested is not stated. That is inherent to real-world lending, and the backing score reflects it honestly.
Who builds it
Goldfinch is stewarded by the Goldfinch Foundation and developed by Warbler Labs, an independent core team; its documentation names Mike Sall and Blake West as the co-founders behind both. The protocol is governed by GFI-token holders through a Snapshot-based DAO. That foundation-plus-labs split — a non-profit steward alongside a development company — is a common shape for protocols bringing real-world credit on chain, where a legal counterpart is unavoidable.
How it compares
Reserve
Tokenised index baskets under a permissive licence
Term Finance
Fixed-rate lending, six named audits, restrictive licence
dHEDGE
AGPL vaults with a deep audit list, now rebranding
Derive (formerly Lyra)
Options fees published in full, Sigma Prime audited
Maple Finance
Fee split published to the basis point
Index Coop
Per-product fees published, Apache-licensed
Nexus Mutual
On-chain capital pool, GPL-licensed
Synthetix
MIT-licensed with a published fee schedule
Ondo Finance
Thirteen named auditors on tokenised Treasuries
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Goldfinch — protocol overview and collateral — checked
- 2.Goldfinch — liquidity provider mechanics (fees) — checked
- 3.Goldfinch — contracts LICENSE (MIT) — checked
- 4.Goldfinch — security audit reports — checked
- 5.Goldfinch — governance documentation — checked
Frequently asked questions
What does Goldfinch charge?
A 0.5% withdrawal fee to redeem FIDU for USDC, and 10% of nominal interest goes to protocol reserves.
Is Goldfinch audited?
Yes. Goldfinch states it has published the report from every external audit in an open-source repository, naming Certik and Trail of Bits across versions.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.