Kamino Finance
DAMASCUSLending / Yield · Solana · $1B+ TVL · 10 contracts
Confidence 63%Z-Factor 0.72Updated 2026-05-17Public Score
Public risk assessment — scores are produced with the same methodology as monitored protocols
784
BRI Score
3004756508251000
Security Profile
Access Control
72
72
Economic Soundness
72
72
Oracle Integrity
72
72
Compositional Risk
62
62
Governance
48
48
Maturity
60
60
Resilience
98
98
Supply Chain
75
75
Op Security
59
59
Cascade Exposure
100
100
Access Ctrl
72
72
Economic
72
72
Oracle
72
72
Compos.
62
62
Govern.
48
48
Maturity
60
60
Resilience
98
98
Supply Ch.
75
75
OpSec
59
59
Cascade
100
100
Min
48
Avg
72
Max
100
Audit History
OtterSec
2023-09
Offside Labs
2024-01
Bug Bounty Program
$500,000
Max payout on Immunefi
Assessment
Growing Solana lending protocol with moderate maturity. Multiply product adds leveraged composition risk. Oracle dependency on Solana ecosystem (D3=72) and governance centralization (D5=48) drag score. Clean security record helps.
Dimension Breakdown
How scores work →Access Control
Weight 18%68% conf
72
arrow_forwardGood
+24Lending market creation permissioned by protocol
-28Asset listing controlled by Kamino team/governance
+24Liquidation is permissionless (good)
+24Admin authority for market parameters
receipt_longView provenance chainarrow_forward
Economic Soundness
Weight 13%68% conf
72
arrow_forwardGood
+24Lending model with interest rate curves
+24Multiply (leveraged yield) adds economic complexity
-28kToken collateral creates recursive risk
+24Liquidation mechanics adapted for Solana's execution model
receipt_longView provenance chainarrow_forward
Oracle Integrity
Weight 13%70% conf
72
arrow_forwardGood
+18Pyth and Switchboard oracle dependency
+18TWAP-based pricing for certain assets
+18Oracle staleness checks present
+18Solana oracle ecosystem less mature than Ethereum's Chainlink
receipt_longView provenance chainarrow_forward
Battle-Tested Maturity
Weight 12%65% conf
60
arrow_forwardModerate
+15Lending product live since early 2024 (~16 months)
+15Evolved from Hubble Protocol (vault strategy)
-40No protocol exploit to date
+15Growing TVL (~$2B) but relatively young lending protocol
receipt_longView provenance chainarrow_forward
Governance & Upgradeability
Weight 10%65% conf
48
arrow_forwardConcerning
-26KMNO token governance is early stage
+24Protocol parameters largely team-controlled
-26No meaningful timelock on parameter changes
+24Governance structure still being decentralized
receipt_longView provenance chainarrow_forward
Adversarial Resiliencelock
Weight 10%95% conf
98
Excellent
- Score derived from continuous adversarial security research
Operational Security
Weight 10%60% conf
59
arrow_forwardModerate
-10No branch protection detected
+15Active CI/CD (100% success rate)
+15Commit signing: 100% verified
+15Strong PR review culture (83% reviewed)
receipt_longView provenance chainarrow_forward
Compositional Risk
Weight 5%65% conf
62
arrow_forwardModerate
+21kTokens composed across Solana DeFi
+21Multiply product creates leveraged composition loops
-38JitoSOL, mSOL, etc. as collateral inherits LST risks
+21Cross-protocol liquidation cascades possible on Solana
receipt_longView provenance chainarrow_forward
Cascade Exposure
Weight 5%50% conf
100
arrow_forwardExcellent
+50Member of 1 dependency cluster(s)
0No cross-protocol cascade exposure detected
0Score: 100/100 (higher = more isolated from systemic risk)
+50Source: cross_protocol_composition.json dependency analysis
receipt_longView provenance chainarrow_forward
Supply Chain
Weight 4%72% conf
75
arrow_forwardGood
+19Rust/Anchor framework
+19Solana program library dependencies
+19Oracle client libraries (Pyth, Switchboard)
+19Math libraries for interest rate calculations
receipt_longView provenance chainarrow_forward
Risk Drivers
Primary risk factors driving this score, ordered by severity.
Governance & Upgradeability48
Operational Security59
Battle-Tested Maturity60
Adversarial Risk Signals
Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.
Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Score History & Verification
Score provenance tracking begins with the next reassessment.
On-Chain Data
- Protocol Slug
- "kamino"
- Oracle
- BRORegistry (Base)
- Evidence
- IPFS (pinned)
- Staleness Threshold
- 24 hours
Read Score
registry.getScore("kamino")Reduce exploitable risk
BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.