Skip to main content
Security / Bug BountyLive on Sherlock

Bug Bounty

Put your security expertise to the test. Get rewarded for responsibly disclosing vulnerabilities in eligible smart contracts and applications.

Rewards up to
1,000,000
USDC
View bounty on Sherlock ↗

Rewards depend on demonstrated impact and program eligibility.

01

Review the Scope

Check eligible assets, impacts, and program exclusions.

02

Reproduce Safely

Demonstrate a realistic exploit in an authorized test environment.

03

Report Privately

Submit your findings and evidence through Sherlock.

Explore the Scope

KLend

Lending and borrowing

KVault

Lending vaults

Kamino Liquidity

Automated liquidity

KFarms

Rewards infrastructure

Scope

Oracle infrastructure

Web and App

kamino.com and app.kamino.finance

Research Resources

Security Audits

Review published audits and verification reports

Source Repositories

Explore Kamino’s public code and SDKs
The Sherlock program rules govern eligibility, rewards, and submissions. Kamino does not set or override reward calculations, exclusions, or disclosure terms independently of the Sherlock platform.