> ## Documentation Index
> Fetch the complete documentation index at: https://kamino.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Kamino's layered security approach: audits, formal verification, bug bounty, and continuous monitoring

<CardGroup cols={3}>
  <Card title="20 Security Reports" icon="shield-halved">
    Audits, formal verifications, and fuzzing from 6 independent firms
  </Card>

  <Card title="4 Formal Verifications" icon="circle-check">
    Mathematical proofs of correctness for core lending, vault, and order contracts
  </Card>

  <Card title="$0 Bad Debt" icon="lock">
    3+ years live, \$175M+ in liquidations processed with zero losses
  </Card>
</CardGroup>

## Defense in Depth

Kamino is a credit protocol — the stakes are existential. A single exploit or risk management failure could result in catastrophic loss for lenders. Security is not a single checkpoint but a continuous, multi-layer process where each layer operates independently. If any one fails, the others remain. This defense-in-depth approach spans the full stack: smart contract correctness, oracle reliability, operational infrastructure, protocol-level safeguards, market risk monitoring, and economic stress testing.

The protocol has operated since September 2022 without a single security incident, bad debt event, or oracle exploit. This track record is not the result of any one measure — it is the product of all layers working together.

## Security Stack

<CardGroup cols={2}>
  <Card title="Security Audits" icon="magnifying-glass" href="/docs/security/audits">
    15 independent code audits across all smart contracts, conducted by OtterSec, Sec3, Offside Labs, and RX Security.
  </Card>

  <Card title="Formal Verification" icon="square-root-variable" href="/docs/security/formal-verification">
    4 formal verifications providing mathematical proofs that critical invariants hold — not probabilistic testing, but exhaustive verification across all possible states.
  </Card>

  <Card title="Fuzzing & Testing" icon="shuffle" href="/docs/security/fuzzing">
    Months-long automated fuzzing campaigns using Ackee Blockchain's Trident framework, with millions of instruction sequences tested. Plus verifiable on-chain builds.
  </Card>

  <Card title="Oracle Architecture" icon="database" href="/docs/security/oracles">
    Kamino's proprietary Scope oracle aggregator combines feeds from Chainlink, Pyth, Switchboard, and Redstone with TWAP/EWMA smoothing and price band validation.
  </Card>

  <Card title="Infrastructure & Redundancy" icon="server" href="/docs/security/infrastructure">
    No single point of failure across RPC providers, cloud infrastructure, oracle cranks, and liquidation bots. Full real-time monitoring with anomaly escalation.
  </Card>

  <Card title="Bug Bounty" icon="bug" href="/docs/security/bug-bounty">
    \$1.5M program on ImmuneFi — Solana's largest bug bounty at launch — covering all core smart contracts and the web application.
  </Card>

  <Card title="Open Source" icon="code">
    All core contracts are publicly available on GitHub, enabling community review, peer security analysis, and independent verification.
  </Card>

  <Card title="Protocol Safeguards" icon="shield-halved" href="/docs/risk/safeguards/auto-deleverage">
    Auto-deleverage, daily caps, E-Mode caps, and interest rate controls provide protocol-level defense against market stress and outsized risk.
  </Card>
</CardGroup>

## Open Source Contracts

All core smart contracts are fully open source. Anyone can inspect the code, verify deployments against audited source, and contribute to identifying issues.

| Repository                                                        | Description                              |
| ----------------------------------------------------------------- | ---------------------------------------- |
| [kamino-finance/klend](https://github.com/kamino-finance/klend)   | Kamino Lend — core lending and borrowing |
| [kamino-finance/kvault](https://github.com/kamino-finance/kvault) | Kamino Earn Vaults                       |
| [Kamino-Finance/limo](https://github.com/Kamino-Finance/limo)     | LIMO — limit orders                      |
| [kamino-finance/scope](https://github.com/kamino-finance/scope)   | Scope — oracle aggregator                |
| [kamino-finance/kfarms](https://github.com/kamino-finance/kfarms) | Kamino Farms                             |

<Note>
  The information on this page is provided for informational purposes only. While Kamino implements rigorous security measures, no system is fully immune to risk. Refer to the [Terms & Conditions](https://kamino.com/terms) for full details.
</Note>