OctoLend
Decentralized lending protocol
Critical / High
Medium
Low / Informative
Report files
Audit lifecycle
This engagement is complete with finalized deliverables.
Completed
Scheduled
Scope, timeline, and review plan were agreed.
Completed
In Progress
Manual review and verification work were carried out.
Completed
Completed
The engagement wrapped with a published final report.
Executive Summary
High-level assessment and conclusions
A concise overview of the audit scope, core findings, and the key outcomes from the engagement.
Untangled engaged Runtime Verification Inc. to audit the Collateral Vault and Lending Market smart contracts that power the OctoLend platform. The review examined the platform’s business logic and its Rust (Soroban) implementation to identify potential vulnerabilities or failures. Conducted over five weeks (Jan 22–Feb 27, 2026), the audit analyzed lending and borrowing functionality, including a delegation system that allows third parties to supply collateral for borrowers.
The assessment combined manual code review, formal specification generation, invariant analysis, and testing to evaluate contract behavior and ensure system integrity across state transitions. Overall, the codebase demonstrated strong quality and structure, and the Untangled team addressed reported issues promptly and effectively.
Findings ranged from high-severity issues affecting protocol correctness or user funds to informative recommendations focused on maintainability and best practices. Most remediations were successfully verified, and the updated codebase is now more robust and aligned with secure development standards.
Reports
Download the audit artifacts
Access the published PDF deliverables associated with this engagement.
PDF report 1
OctoLend Report.pdf
Download the published report for this engagement.