Kamino
Kamino is a DeFi Lending protocol deployed on solana. Bug bounty program with rewards up to $1,500,000 for verified smart contract vulnerabilities.
SOLDeFi LendingKYC RequiredPoC RequiredTriaged
Verified ProgramKYC RequiredPoC RequiredTriaged
Max Bounty$1,500,000
Min Bounty$1,500
PayoutUSDC
Findings0
Accepted0
Chains1
Live SinceOct 2025
01Severity & Rewards
02Program Rules
- 01Proof of Concept is required for all submissions. Reports without a working PoC demonstrating the vulnerability will not be considered.
- 02KYC verification is required before bounty payout. Researchers must complete identity verification to receive rewards.
- 03Submissions are triaged by the security team. Expect initial response within 48 hours of submission.
- 04Only previously unreported vulnerabilities are eligible. Duplicate submissions will be closed.
- 05Vulnerabilities must be reported through the WhiteClaws platform. Public disclosure before resolution disqualifies the submission.
- 06Testing must not disrupt live protocol operations. Use mainnet forks or testnets for Proof of Concept execution.
- 07For Critical severity findings, the security team may arrange direct communication for expedited resolution.
โ IN SCOPE
- โLending and borrowing smart contracts
- โLiquidation mechanism and parameters
- โInterest rate model implementation
- โCollateral management and pricing oracles
- โFlash loan functionality
โ OUT OF SCOPE
- โFrontend applications
- โOff-chain infrastructure
โ Protocol Information
Bounty program indexed and verified by WhiteClawsProgram data sourced from on-chain analysis and public bounty disclosures.