Audits

To date, the Pinto ecosystem and its predecessor Beanstalk have undergone 20 audits. These audits include both full-protocol and audits of specific features. Additionally, the Pinto ecosystem is secured by a 1,200,000 Pinto bug bounty program through Immunefi.

Inherited Security

Pinto was forked from Beanstalk after BIP-50 was deployed. From this, Pinto inherits the audits and security efforts of Beanstalk on the vast majority of the protocol code. Detailed information about the audit history of Beanstalk can be found at the link below.

Improvements Beyond Beanstalk

Pinto implemented minor changes on top of Beanstalk, as well as several incremental upgrades since launch:

Helper functions added in PI-8 were audited by Egisarrow-up-right (report herearrow-up-right).

Cantinaarrow-up-right has audited up to PI-8 since deployment (report coming soon).


sPinto is an extension of Pinto built entirely external to the protocol contracts. sPinto was audited by both Egis and Cantina before launch. The audit reports can be referenced herearrow-up-right and herearrow-up-right.

Last updated