Availability is global with China excluded. 

The applications are distributed on the App Store and Google Play.

Availability is global, with China the only excluded jurisdiction; access is otherwise worldwide, subject to local laws. The applications are distributed on the App Store and Google Play, whose listing states availability worldwide subject to local laws and directs U.S. users to report gains to the IRS. 

‍

Cadena operates a peer-to-peer credit marketplace on Bitcoin's base layer. Borrowers and lenders are matched directly, and each loan is a standalone Discreet Log Contract (DLC) rather than a claim against a pooled balance.

- Borrowing: the borrower commits Bitcoin as collateral. The contract gives the borrower synthetic exposure to the locked collateral; the borrower then sells Bitcoin separately, on the borrower's own exchange or OTC desk, to obtain cash. The original Bitcoin position is preserved through the locked collateral for the term.

- Lending: the lender commits Bitcoin as principal and receives, at maturity, a dollar-denominated target return paid in Bitcoin.

Identity verification is performed on-device through Sumsub, via the open-source Cadena Signer App. Identity data is transmitted to Sumsub directly and does not pass through Cadena. Onboarding is a one-time step that is reused across subsequent contracts.

Cadena custody setup is non-custodial. Collateral and principal are committed to a Discreet Log Contract on Bitcoin's base layer. 

- Joint funding transaction: the borrower's collateral and the lender's principal enter the same on-chain funding transaction. Each contract occupies its own on-chain pool and is not commingled with other contracts.

- Pre-signed settlement: before any Bitcoin moves, both parties sign every possible settlement outcome as a Contract Execution Transaction (CET), using adaptor signatures. The contract's full lifecycle is fixed at inception. Only two on-chain transactions occur: funding and execution.

- Key management: private keys are generated and stored on-device in the Signer App and, per the app-store listings, are never transmitted. Only the derived extended public key (XPUB) is sent to Cadena's backend, and it is used to construct contract transactions. The Signer signs transactions constructed externally and cannot construct contracts or move funds on its own.

- Oracle: settlement price is determined by an oracle referred to as the DLCP Oracle. Cadena states that it is operated by a separate entity with separate key infrastructure, that it aggregates BTC/USD prices from multiple independent exchanges under a published methodology, and that it pre-commits its public key when a contract is funded so that any later attestation is verifiable against that key. Cadena states the oracle selects among the pre-signed outcomes and cannot invent an outcome, refuse to settle, or move funds.

- Oracle failure path: if the oracle does not publish at maturity, a refund timelock path activates. After a defined window a pre-signed refund transaction returns the principal to the lender and the collateral to the borrower. Cadena states this path is enforced by Bitcoin script and does not require Cadena's or the oracle's cooperation.

- Open-source components: the Signer App (github.com/CadenaWizard/signer_app) and the underlying cryptlib library (github.com/CadenaWizard/cryptlib) are published under an MIT licence.

Risk Mitigation

- No platform custody — Bitcoin is committed directly to an on-chain DLC; the platform holds no key and cannot move, freeze, or seize the collateral.

- On-device key generation — private keys are generated and retained on the user's device and, per Cadena's documentation, are never transmitted to the platform.

- No rehypothecation — each contract sits in its own on-chain pool; collateral is not re-lent or used as collateral for anything else.

- Atomic funding — collateral and principal enter the contract in a single transaction.

- Deterministic settlement — every outcome is pre-signed at inception, so settlement does not depend on the platform's discretion or solvency.

- Refund timelock — a pre-signed, script-enforced refund path returns funds to both parties if the oracle fails to attest.

- Open-source signer — the signing client and its cryptographic library are publicly available under an MIT licence.

- No margin calls or in-term liquidations — collateral is evaluated once, at maturity.

A Security and Operations Memo and a full diligence package, including code-repository access and mainnet transaction history, are available to institutional counterparties on request.

‍

‍

Despite the risk mitigation solutions implemented by the platform as described above (see Collateral Management and Security), the following residual risks remain for users to assess:

- Key Loss Risk — private keys are generated and held on the user's device. Loss of the seed phrase, or of the device without a backup, results in permanent loss of access to the collateral, which no party can restore.

- Protocol and Smart Contract Risk — settlement depends on correctly constructed DLC transactions and adaptor signatures. A flaw in contract construction, in the signing client, or in the cryptographic library could be exploited.

- Oracle Error or Manipulation Risk — the settlement outcome is selected by the oracle's attestation of the BTC/USD price at maturity. An erroneous, delayed, or manipulated attestation would change the split of the collateral between the parties. Cadena states the oracle is independent, multi-source, and pre-committed, which reduces but does not remove this risk; the residual risk depends on those properties holding in practice.

- Counterparty and Default Risk — the collateral pool is sized to cover the lender's full dollar-denominated target down to a 50% fall in the Bitcoin price between funding and maturity. If Bitcoin falls more than 50% over the term, the pool no longer covers the lender's target and the lender absorbs the shortfall. There is no top-up and no in-term mechanism to prevent this. 

Cadena notes the possibility that the exposure is hedgeable by the lender separately, through a put option struck near the 50% threshold, purchased outside the contract.

- Operational Error Risk — the platform constructs the transactions the user signs. An error in construction, fee estimation, or broadcasting could affect settlement.

- User Error Risk — the borrower obtains cash by selling Bitcoin separately on the borrower's own exchange or OTC desk. That leg sits outside the contract and its guarantees.

On liquidation: Cadena's model has no margin calls and no in-term liquidations. During the term the contract is locked and no party, including Cadena, can move the other party's Bitcoin or trigger an early settlement. Collateral is evaluated once, at maturity, when the oracle attests the price and the matching pre-signed CET broadcasts. The trade-off is that price risk is not removed but concentrated at a single point in time: the outcome depends only on the price at maturity, and the shortfall described under Counterparty and Default Risk is the form that price risk takes for the lender.

‍

There are no margin calls and no in-term liquidations. Collateral is evaluated once, at maturity. The oracle attests the BTC/USD price, and the corresponding pre-signed CET broadcasts on-chain, splitting the collateral: the lender receives the fixed dollar-denominated target paid in Bitcoin, and the borrower receives the remainder. Below a 50% fall in the Bitcoin price the lender receives the whole pool and still falls short of the dollar target, and absorbs the difference.

‍

No top-up is required during the term, since there are no margin calls. Excess collateral is not withdrawable during the term: the committed amount remains locked in the DLC until settlement.

No. Contracts have no active repayment step; settlement is automatic at term-end through the pre-signed Contract Execution Transaction.

‍

Available as a manual process. Contracts settle terminally at maturity, so to continue a position the borrower opens a new contract. There is no automated rollover or in-place extension.

None currently live. Cadena's materials list the following as announced but not yet live:

- Integrated stablecoin on-ramps and off-ramps — in development. The contract layer remains Bitcoin.

- Periodic-income product with monthly or annual coupon-style payouts for lenders — in design.

- Multi-oracle attestation for larger institutional contracts (settlement contingent on 2-of-3 or 3-of-5 independent oracles) — on the roadmap.

Email: info@cadenabitcoin.com. To book a call: https://calendly.com/cadenabitcoin-info/30min 

Escalation: kevin@cadenabitcoin.com; sziller@cadenabitcoin.com

Cadena Bitcoin, S.A. de C.V.

Calle Llama del Bosque Poniente, Urbanización Madre Selva III, Edificio Avante, Local 3-13, Antiguo Cuscatlán, La Libertad, El Salvador.

‍

Registered Bitcoin Service Provider (BSP) in El Salvador. Cadena's App Store listing cites Central Bank registry number 689a87a19c3ab49e3173656c and directs users to the Banco Central de Reserva register at registrobitcoin.bcr.gob.sv/web/proveedores-registrados.

Global Access with restrictions:
‍

Jurisdictions{The official power to make legal decisions and judgments.} ineligible include those where citizenship, permanent residency, tax residency, or location applies in Cuba, North Korea, Iraq, Iran, Puerto Rico, Somalia, Syria, Sudan, territories occupied by the Russian Federation, or any state, country, territory, or other jurisdiction embargoed by the United Nations, the United States of America, or the European Union.

KYC{KYC stands for Know Your Customer. It is a process used by financial institutions, and other businesses, to verify the identity of their clients and assess the potential risks associated with those clients. This helps prevent fraud, money laundering, and other financial crimes.} requirements vary depending on the Lender. All offers without KYC are labeled accordingly.

• Non-custodial Lending* - Multi-Party Custody: Debifi provides a 3-out-of-4 multi-signature escrow wallet, meaning three signatures are required to authorize any transaction, ensuring consensus among parties and safeguarding Bitcoin collateral.
  ‍
• Key Distribution: Keys are held by the borrower, lender, Debifi, and the authorized keyholder (separate company that has been granted the authority to act as an additional key in certain situations), preventing any single party from unilateral control over the collateral.
  ‍
• Open-source Key Generation: The key generation process within the Debifi app is open source, making it transparently verifiable.
  ‍
• Escrow Process: Upon loan initiation, the borrower’s bitcoin is secured in a unique multisig escrow wallet (P2SH address) on the Bitcoin blockchain. Release of funds requires agreement from three of the four keyholders, ensuring no action can proceed without mutual consent.In addition parties can easily check that bitcoin is kept in the escrow and is not moving.
  ‍
• Custom Key Usage: The loan initiation process allows selection of a key from Debifi’s secure app storage or a supported hardware wallet (currently, Coldcard MK4 and ColdHodl).

• Loan Lifecycle: Throughout the loan term, collateral remains locked in the multisig wallet. Upon repayment, funds are released back to the borrower with full transparency. In case of disputes, Debifi utilizes its key to mediate as a neutral party.
  ‍
• Protection Mechanism: The system is designed to prevent unauthorized access or scams, as neither the borrower nor the lender can unilaterally move funds. Forced liquidation allows the lender to claim collateral only under predefined conditions, with Debifi stepping in during disputes.
  ‍
• Security Protocol: All actions are signed using private keys generated on a separate device app, enhancing security. Debifi does not store collateral but facilitates a 3-out-of-4 multisig solution with distributed key management.
  ‍
• Blockchain Integration: Each lending contract generates a unique multisignature address on the Bitcoin blockchain, where collateral is held until loan completion. Funds are released only upon mutual agreement or, in disputed cases, through Debifi’s mediation.
  ‍

• Risk mitigation:
  ‍

1. Counterparty risk is reduced by allowing borrowers to maintain control of their Bitcoin, meaning the collateral is locked but not held by Debifi. 
   ‍
2. The 3-of-4 multisig system requires three of the four parties to sign any transaction involving the collateral, eliminating single points of failure and minimizing the risk of unauthorized access or theft.
   ‍
3. No collateral rehypothecation: prevents mismanagement and platform insolvency by not reusing Bitcoin collateral, avoiding over-leveraging and fractional reserve risks.
   ‍
4. Collateral Recovery: Should Debifi become unavailable, the collateral can be retrieved using a freely available extraction tool, requiring coordination among the lender, borrower, and authorized key holder. No vendor lock-in exists.

‍

* Note that, in the Bitcoin Lending domain, non-custodial is not synonymous with self-custodial—otherwise, the collateral would not be pledged as a guarantee—but literally means that the lending platform is not custodial, i.e., it does not act as a custodian, and instead relies on collaborative custody multi-sig based systems/escrow, or other smart contract-based protocols. Therefore, in non-custodial lending, the borrower retains self-custody of one key but inevitably shares collateral custody under specific pre-agreed and signed loan conditions. This is why Coinlateral invites and supports you in understanding the loan terms and risks.

Despite the risk mitigation solutions implemented by the platform as described above (see Collateral Management and Security), there are persistent risks to know:
‍

• 2 Keys Loss Risk: Entailing multisig lockout and collateral freeze risk.
  ‍
• Protocol Hack Risk: exploitation of vulnerabilities in smart contracts or multisig implementation, potentially allowing an attacker to bypass the 3-of-4 signature requirement and drain the collateral.
  ‍
• Collusion Risk: Two or more of the four parties colluding to override the multisig controls, potentially unlocking the collateral without the consent of the remaining parties. The 3-of-4 design reduces but doesn’t eliminate this possibility.
  ‍
• Oracle Error or Manipulation Risk: When the platform uses oracles for price feeds or liquidation triggers, attackers could manipulate these external data sources to force unfair liquidations or prevent legitimate ones. 
  ‍
• User Error Risk: Even with a robust system, users losing keys to phishing or mismanaging permissions can undermine security, a human factor that persists despite technical safeguards.
  ‍

Liquidation risk: This is not a risk specific to BTC-backed loans but applies to any financial leveraged operation. This risk can be mitigated and managed with a conservative LTV and a re-collateralization plan (always use only a fraction of BTC holdings as collateral to reduce risk and stress upfront).

LTV Thresholds & Actions:

• Margin Call at 75%, 80%, 85%  LTV, with option to increase collateral or partially repay debt to maintain the required LTV ratio.
• 90% LTV: Forced Liquidation Alert – Trigger for potential collateral liquidation.

Forced Liquidation (5% fee) applies if Bitcoin’s price fluctuations affect collateral and the LTV ratio falls below what is agreed in the contract, and meanwhile, there have been no attempts from the borrower to either increase the collateral amount or repay part of the debt to keep the LTV ratio at the required level.

In case the LTV ratio has dropped to 90%,  Lender, Borrower and Authorized Keyholder will be informed about the start of a Forced Liquidation procedure.

‍

Borrowers can manually top up their bitcoin collateral without incurring any extra fees. Any gain in the value of collateral is borrowers to keep. The borrower only ever owes the loan amount, which is pre-determined and not affected by the price of bitcoin.

Email

Majuro, Isole Marshall (WAGMI LTD., reg. 115362)
Lugano, Switzerland (Debifi SA, reg. CH-501.3.024.140-7)
‍

Available to US residents in all states except Hawaii (HI) and Texas (TX).

• BTC HELOC

• BTC-backed loans

Custodian: Anchorage Digital Bank
‍

BTC is held as collateral in a decentralized multi-party computation wallet.
‍

• Collateral Deposit Process: A unique wallet address is assigned for depositing required bitcoin collateral directly with the qualified custodian, Anchorage, specific to the loan.‍

• Keys segregation: Private keys are stored separately, ensuring bankruptcy-remote collateral.

• Verifiable Proof: Existence and control are provable via cryptographic proofs or audit reports.‍

• Regulatory Compliance: Anchorage Digital Bank, with a U.S. OCC charter, holds SOC 1 and SOC 2 Type II certifications for security, confidentiality, and privacy.
‍

Risk mitigation

• Industry insurance safeguards assets throughout their custodial lifecycle.

• No rehypothecation: Figure states that collateral is not reused or lent out, preventing mismanagement and insolvency risks.

Despite the risk mitigation solutions implemented by the platform as described above (see Collateral Management and Security), there are persistent risks to know:

Counterparty risk, including: 

• Key Loss Risk - potentially locking Bitcoin funds in escrow or custody setups.
  ‍
• Platform Hack Risk - a breach in custodian’s systems could allow hackers to steal collateral or user funds.
  ‍
• Operational Error Risk - Mistakes in loan processing or collateral handling by custodians could lead to unintended fund locks or losses.
  ‍
• Reliance on external partners (e.g., custodians or auditors) exposes to the risk that these entities are compromised.

• ‍BTC Liquidation/Property Foreclose: If the Bitcoin price falls by more than 50%, the collateral is liquidated, and proceeds are applied to reduce the loan balance. The loan then transitions to a traditional HELOC secured by the property. Failure to make HELOC payments may result in foreclosure of the property, requiring repayment of only the remaining loan balance to minimize potential property impact.

If the Bitcoin collateral’s value falls below 50% of the outstanding balance, a portion is liquidated at market prices (with a 1% liquidation fee) to restore balance.

Collateral exceeding the credit limit may be withdrawn.

With no prepayment penalties

Email

All HELOCs are offered by Figure Lending LLC (NMLS ID 1717824).

Figure Lending LLC dba Figure. 650 S. Tryon Street, 8th Floor, Charlotte, NC 28202. (888) 819-6388.

Figure Markets - 650 California, Suite 2700, San Francisco CA 94108

Figure Lending LLC holds licenses as a mortgage lender and finance lender, regulated by US authorities such as the Department of Financial Protection and Innovation and the NJ Department of Banking and Insurance.

Firefish P2P lending is available for users from EU, UK and Switzerland. Professional marketplace is available globally.

‍

• Marketplace loans: fixed-rate loans matching borrowers' demand with lenders' offers: borrowers set loan amount, interest rate, and term; once listed, the platform matches the request with an investor, who funds the loan upon agreement.

‍

• Instant Loans: fixed-rate instant loans at pre-defined terms by the lenders. 

‍

Collateral Management System

• Multi-Signature Escrow: Bitcoin collateral is secured in a multisignature address on the Bitcoin blockchain, requiring signatures from borrower, lender, and Firefish to authorize transactions. 
• Non-custodial*: Firefish does not hold funds; collateral remains in an on-chain escrow, preventing direct access by any party.
• Escrow Process: Upon loan agreement, Bitcoin is locked via Partially Signed Bitcoin Transactions (PSBT). Funds are released only when predefined conditions (e.g., repayment or liquidation) are met, ensuring mutual consent. The escrow is generated by the borrower to ensure transparency.
• Borrower Keys Management: The Borrower uses two types of keys within the protocol: 1) B represents a key pair fully controlled by the Borrower (such as stored on a hardware wallet). All outputs of the escrow designated for the Borrower are directed here. 2) Key B-EPH, which represents an ephemeral key pair created in the Firefish app and used for signing during the contract setup.
• Recovery Mechanism: A pre-signed recovery transaction allows borrowers to reclaim collateral after loan maturity (~30 days) if Firefish becomes unavailable, reducing vendor lock-in.

Security

• Blockchain Transparency: All transactions are recorded on the Bitcoin blockchain, ensuring traceability and verifiability.
• Audited Code: The protocol underwent a thorough review by Ackee Blockchain and Bitcoin experts.
• Protection Mechanism: In case of default, collateral transfers to the lender. The multisig contract prevents unauthorized access, reducing risks of mismanagement or rehypothecation.
• Oracle Integration: Firefish provides oracle services for price feeds and liquidation triggers in the current release, ensuring accurate loan management.

Risk Mitigation

• Counterparty Risk: The non-custodial escrow and multisig system reduces reliance on centralized entities.
• No Rehypothecation: Collateral is not reused, preventing over-leveraging or platform insolvency.
• Collusion risk: happens if two or more (e.g., lender and escrow, or borrower and escrow) conspire to unlock collateral without the third’s consent, like faking a default or early withdrawal. Firefish mitigates this with a neutral escrow, pre-signed recovery transactions with a time-lock, and the 3-of-3 requirement, making collusion harder.
• Recovery Mechanism: mitigates vendor lock-in risk by allowing you to reclaim your Bitcoin collateral via pre-signed transactions if Firefish becomes unavailable, such as in case of service disruption or failure.
• Conservative LTV: A 50% Loan-to-Value ratio lowers liquidation risk.

* Note that, in the Bitcoin Lending domain, non-custodial is not synonymous with self-custodial—otherwise, the collateral would not be pledged as a guarantee—but literally means that the lending platform is not custodial, i.e., it does not act as a custodian, and instead relies on collaborative custody multi-sig based systems/escrow, or other smart contract-based protocols. Therefore, in non-custodial lending, the borrower retains self-custody of one key but inevitably shares collateral custody under specific pre-agreed and signed loan conditions. This is why Coinlateral invites and supports you in understanding the loan terms and risks.

Despite the risk mitigation solutions implemented by the platform as described above (see Collateral Management and Security), there are persistent risks to know:

• Key Loss Risk: Losing access to private keys may lock collateral in the multisig address.
• Protocol Hack Risk: Potential vulnerabilities in the multisig implementation could be exploited.
• Collusion Risk: Some parties colluding to override the multisig controls, potentially unlocking the collateral without the consent of the remaining parties. 
• Oracle Error Risk: Inaccurate or manipulated price feeds could affect liquidation triggers.
• Collusion risk: happens if two or more (e.g., lender and escrow, or borrower and escrow) conspire to unlock collateral without the third’s consent, like faking a default or early withdrawal. Firefish mitigates this with a neutral escrow, pre-signed recovery transactions with a time-lock, and the 3-of-3 requirement, making collusion harder.
• User Error Risk: Even with a robust system, users losing keys to phishing or mismanaging permissions can undermine security, a human factor that persists despite technical safeguards.
• Liquidation risk: This is not a risk specific to BTC-backed loans but applies to any financial leveraged operation. This risk can be mitigated and managed with a conservative LTV and a re-collateralization plan (always use only a fraction of BTC holdings as collateral to reduce risk and stress upfront).

Margin calls are triggered at LTV levels of 80%, 85%, and 90%. Liquidation occurs at an LTV of 95% and a collateral health indicator (CHI) of 0%, with the liquidation price displayed in loan details.

In case of significant Bitcoin price declines, borrowers may add collateral via the platform’s “Top-up collateral” option or repay the loan. Partial repayments do not affect the LTV ratio.

If the loan is not repaid at maturity, collateral is transferred to the liquidator (investor or Firefish), who sells a portion to settle the loan, returning the remainder to the borrower after a 5% liquidation fee.

 Excess collateral withdrawal not allowed.

‍

Email

Instant loans are offered by Firefish Peer Servicing s.r.o. ID No. 56 481 748, based at Lazovná 20, 974 01 Banská Bystrica, Slovakia, registered in the Banská Bystrica District Court, section Sro, Insert No. 50102/S.

Firefish Europe s.r.o. operates and provides Firefish services, including the website, Firefish App, Firefish Invest, Firefish Borrow, and related services such as escrow setup, Bitcoin collateral escrow, and liquidation exchange. It is based at Lazovná 20, 974 01 Banská Bystrica, Slovakia, registered with the Banská Bystrica District Court, section Sro, Insert No. 47958/S.

‍

No penalties or additional charges.

Loan extension is possible by paying a one-time extension fee.

Lava Card

‍

‍

Email

Lava Global Inc