Kamino Lend

Green · 77/100

Executive summary

Kamino Lend is a Solana-native isolated-pool lending protocol with a 62/100 score (orange band), indicating moderate risk requiring careful position sizing and ongoing monitoring.

  • Security: Multiple audits from OtterSec (2023), RX Security (2023), Sec3 (2025), and formal verification by Certora (2025) and OtterSec (2025); Certora identified and Kamino fixed a precision-loss/rounding bug in exchange-rate calculation; Ackee fuzz testing (2025) found zero critical/high/medium issues; active Immunefi bug bounty with $1.5M max payout; all audit deployment-bytecode matches are unverified as of September 2026.
  • Incidents: Three market-stress liquidation events (Feb-Mar 2025: ~$0.9M user loss; Apr 2025: $31.5M liquidations, precise loss unverified; Oct 2025: ~$260K loss) with zero reported bad debt; one external Step Finance treasury compromise (Jan 2026) where Kamino withdrawal caps limited attacker extraction; no smart-contract exploits verified.
  • Governance & custody: Not DAO-controlled; StroudGlobal S.A. (Panama) operates the protocol; program upgrade authority is reportedly a 5-of-10 Squads multisig with 12-hour timelock (unverified as of Sept 2026); market owners can update risk parameters and enable emergency mode; socialize_loss function can reduce lender balances without governance vote; user assets are in smart contracts (standard markets) or segregated Anchorage custody accounts (institutional off-chain collateral).
  • Top risks: Smart-contract failure despite audits; oracle mispricing across multiple providers (Pyth, Switchboard, Chainlink, Redstone); liquidation shortfall in stressed markets (April 2026 stress: $412M at risk, $12.2M potential bad debt at -20% shock); correlated LST/SOL depeg cascades; stablecoin/RWA issuer failure; PRIME concentration ($182M borrowed debt at ≥80% LTV); no insurance fund—bad debt socialized to lenders.
  • Strengths: Battle-tested codebase with zero bad debt track record across live incidents; capital-efficient single-liquidity design with eMode leverage; modular isolated-market architecture; Solana-native performance; strong reputation as dominant Solana lender; comprehensive formal verification and ongoing security reviews.
  • Unverified: Current multisig threshold/timelock, exact reserve composition, deployed-code bytecode match for all audits, LST/stablecoin exposure percentages, StroudGlobal ownership/licensing, and whether v1.16.0/v1.17.0 audit scope covers live production code—all unverifiable as of September 2026.
  • Recommended exposure: Limit to 5–10% of portfolio for conservative allocators; treat as moderate-risk Solana lending with material admin control and socialized-loss exposure; suitable for users comfortable with 12-hour governance timelock, unverified bytecode matching, and no insurance backstop; avoid if LST correlation or PRIME concentration concerns are prohibitive; monitor monthly risk reports for stress-test deterioration.
  • Open questions: Verify current Squads multisig signers and 12-hour timelock on-chain; confirm deployed program bytecode matches latest audited commits; quantify current PRIME, LST, and stablecoin reserve exposure; assess StroudGlobal legal/regulatory standing and ultimate ownership; review emergency-mode and socialize-loss governance constraints; validate oracle failover behavior under Solana congestion.

Score

Component Weight Raw Points Reason
Security 20% 100 20.0 9 audit(s); fresh audit bonus; active bug bounty bonus
Audits 20% 100 20.0 full audit within 365 days (latest 2026-03-01)
Incidents 20% 100 20.0 no open incidents
Governance 20% 75 15.0 a single party can withdraw funds (admin_can_drain)
TVL 20% 8 1.6 TVL $1,353,041,829 = 8% of reference ($17,538,184,136)
Data confidence 85 7/7 critical categories; 12/48 verified facts; 48/48 fresh (180d)

Identification

protocol identification

two sources

Kamino Lend (often K-Lend) is a Solana-native isolated-pool lending protocol that is part of the broader Kamino Finance “DeFi super-app” on Solana. Identification

  • Name / Brand: Kamino Finance – Kamino Lend / Borrow-Lend product pillar.
  • Website / App: kamino.com, with the Earn → Lend section hosting the lending UI.
  • Docs: Central docs hub at kamino.com/docs, with a dedicated Borrow/Lend section describing markets, risk, and usage.
  • Category: Decentralized money market / lending & borrowing protocol with isolated pools, over‑collateralized loans, and variable interest rates.
  • Chains: Solana only; all references describe Kamino as a Solana‑based protocol, and the Klend repo explicitly targets the Solana blockchain.
  • Launch timeline: Kamino launched as a Whirlpool liquidity automator in 2022, expanded into lending (K‑Lend) in 2023, and later evolved into a multi‑product platform.
  • Native token: KMNO; it is listed among supported assets in Kamino Lend markets and in ecosystem coverage. Main program / contract addresses (Solana)
  • The open‑source Kamino Lending smart contract repository (klend) states the deployed program IDs:
  • Mainnet: KLend2g3cP87fffoy8q1mQqGKjrxjC8boSyAYavgmjD
  • Staging (Mainnet): SLendK7ySfcEzyaFqy93gDnD3RtrpXJcnRwb6zFHJSh
  • Devnet: same as mainnet in the current repo state (KLend2g3cP87fffoy8q1mQqGKjrxjC8boSyAYavgmjD).
  • Explorer‑level verification status and any additional program IDs beyond those in the GitHub repo are Not verifiable as of 2026-09-04 (tooling for direct on‑chain/explorer inspection is unavailable this turn). Fork lineage / architecture
  • Ecosystem coverage and Kamino explainer articles describe K‑Lend as structurally similar to Aave V3: pooled lending markets, per‑asset risk parameters, and interest curves based on utilization.
  • Kamino Lend implements isolated pools, two‑slope utilization interest curves, partial liquidations, and Pyth/Switchboard oracles, which are Solana‑ and Kamino‑specific design choices rather than a direct EVM fork port.
  • The lending codebase is open source in the kamino-finance/klend GitHub repo, confirming it as a custom Solana program.
  • No source in the gathered data explicitly states that Kamino Lend is a fork of a specific upstream protocol; references are to *similarity* rather than a direct fork, so its precise fork lineage is Not verifiable as of 2026-09-04.
  • Audit specifics and whether any Aave‑like changes were separately audited are Not verifiable as of 2026-09-04 based on the current dataset.
  • No documented history of malicious modifications in Kamino Lend forks appears in the retrieved sources; any such history is Not verifiable as of 2026-09-04.
Evidence (15)

maturity

two sources

Kamino Lend looks like a real, live product rather than a static landing page. The docs show active deposit and withdraw flows, including developer SDK methods and a public API that returns unsigned Solana transactions for deposits, borrows, repayments, and withdrawals. The documentation also appears reasonably mature, with structured product and developer pages plus a documented API base URL and reference sections.

I did not find evidence of broken links, fake metrics, or obvious template/clone behavior in the retrieved sources. However, those issues are not fully verifiable as of 2026-09-04 from the available web evidence alone. An open API exists: Kamino publicly documents language-agnostic HTTPS/JSON endpoints for protocol data and transaction-building, with no authentication required for the transaction endpoints.

Evidence (3)

Security

bug bounty

two sources

Kamino Lend has an active bug bounty program on Immunefi. It launched on 06 October 2025 and remains live. The program covers core smart contracts and the web application, with 17 assets in scope.

Critical smart-contract findings pay 10% of funds at risk, with a minimum of $150,000 and a maximum of $1,500,000; high-severity smart-contract findings pay up to $100,000; medium pays a flat $10,000. Web/app critical issues pay up to $50,000, and high pays $10,000. Proof of concept is mandatory, KYC is required for payout, submissions are triaged by Immunefi, and payouts are made in USDC on Solana.

No public disclosure of bounty award results was found in the gathered sources, so results are Not verifiable as of 2026-09-04.

Active
Yes
Platform
Immunefi
Max payout
$1.5M
Since
2025-10-06
Evidence (3)

counterparty risks

one source

As of September 6, 2026, no Dune/on-chain verification was available; therefore exposure percentages, current reserve composition, and active incident status are not verifiable as of September 6, 2026. Primary dependencies and failure modes

  • Oracles — material dependency: Kamino Lend uses Scope and multiple providers, including Pyth, Switchboard, Chainlink, and Redstone, with smoothing, cross-checks, and fallback mechanisms. This reduces single-provider risk but does not eliminate correlated feed errors, stale prices, bad upstream data, or manipulation in thin markets. A faulty price can cause wrongful liquidations, under-liquidation, or bad debt.
  • LST/restaking exposure — material, asset-specific: Kamino supports correlated SOL/LST structures and applies higher leverage through eMode/Multiply. A depeg or staking-provider failure involving assets such as JitoSOL, mSOL, bSOL, or JupSOL could create liquidation cascades and liquidity shortfalls. The exact exposure by LST is Not verifiable as of September 6, 2026.
  • Stablecoins/RWAs — material, market-specific: Stablecoin depeg, issuer freeze/redemption failure, or RWA/SPV/custodian insolvency can impair collateral and borrowing liquidity. Kamino documentation explicitly models stablecoin and RWA/stablecoin correlation risk. The exact issuer/SPV concentration is Not verifiable as of September 6, 2026.
  • Custody/off-chain collateral — conditional dependency: Kamino documentation describes Anchorage Digital Bank as custodian for off-chain SOL, BTC, and staked-SOL collateral, with Chainlink Proof of Reserve and legal control arrangements. This is an additional Anchorage/legal-enforcement dependency where that product is used; its live share of Kamino Lend is Not verifiable as of September 6, 2026.
  • Bridges, CEXs, market makers: No specific bridge, CEX, or market-maker counterparty concentration was confirmed from the reviewed sources. Not verifiable as of September 6, 2026. Failure scenarios: oracle divergence or outage; LST/stablecoin depeg; issuer redemption freeze; custodian insolvency or legal-control failure; Solana congestion impairing liquidations; or correlated liquidations overwhelming market liquidity. Kamino states it has no protocol-level insurance fund, so residual losses remain with lenders/markets after available collateral and liquidation liquidity are exhausted. Contradiction / limitation: Kamino reports oracle redundancy and zero oracle exploits, but these are protocol-reported claims, not independent on-chain proof. Current exposure concentration cannot be reconciled without Dune. Dependency failure active: null — Not verifiable as of September 6, 2026. Maximum exposure: null — Not verifiable as of September 6, 2026.
Evidence (5)

crypto custody

one source

Kamino Lend on Solana organizes custody in two distinct ways. For standard onchain lending markets, users deposit assets into Kamino smart contracts, so the protocol itself does not take possession of the underlying crypto in a traditional custodial sense. For the institutional Off-Chain Collateral / qualified-custody flow, the assets remain in a dedicated, segregated Pledgor Account at Anchorage Digital Bank and never move on-chain; Kamino uses Chainlink proof-of-reserve, mirror tokens, and an account control agreement to enforce lending rights and liquidations.

The segregated-account structure is explicitly described as separate from the custodian’s own assets and other clients’ assets. Withdrawal-paused status is not verifiable as of 2026-09-06.

Segregated assets
Yes
Evidence (3)

incident

one source

Market-stress liquidation event, not an exploit. SOL fell from approximately $170 to $125 during the February 24–March 2, 2025 volatility window. Kamino processed 8,451 liquidations affecting 2,990 wallets; $22.1M collateral was seized against $21.2M debt repaid.

Reported user loss was approximately $0.9M in liquidation fees. Response was automated liquidation through 78 liquidators; no bad debt was reported and no code fix was required. No reimbursement was reported.

Current status: resolved. Sources confirm the event and loss characterization.

Date
2025-02-24
Cause
Liquidity issue
Loss
$900K
Status
resolved
Recovered
$0
Reimbursed
No
Event id
kamino-lend-feb-mar-2025-liquidations
Evidence (1)

incident

one source

Market-stress liquidation event, not an exploit. SOL declined sharply during April 6–7, 2025. Kamino reported 6,527 affected wallets and $31.5M of liquidation activity, including approximately $16M collateral liquidated; no bad debt was reported.

Precise realized user loss beyond liquidation activity is Not verifiable as of September 6, 2026. Liquidations were processed by Kamino and 114 liquidators. No reimbursement or code remediation was reported.

Current status: resolved.

Date
2025-04-06
Cause
Liquidity issue
Status
resolved
Recovered
$0
Reimbursed
No
Event id
kamino-lend-apr-2025-liquidations
Evidence (1)

incident

one source

Market-stress liquidation event, not an exploit. A tariff-driven sell-off caused SOL to fall approximately 14% in under an hour on October 10, 2025. Kamino reported approximately $20M of collateral liquidations, about 1,700 affected wallets, zero bad debt, and approximately $260,000 in user losses.

More than 110 liquidators processed the event. No reimbursement or smart-contract remediation was reported. Current status: resolved.

Date
2025-10-10
Cause
Liquidity issue
Loss
$260K
Status
resolved
Recovered
$0
Reimbursed
No
Event id
kamino-lend-oct-2025-liquidations
Evidence (1)

incident

one source

External operational compromise affecting a Step Finance treasury position held on Kamino. On January 31, 2026, attackers compromised Step personnel/devices and attempted to drain assets, including a large vSOL position deposited on Kamino. Kamino’s collateral-withdrawal cap halted further extraction after the cap was reached, preventing withdrawal of the full position.

This was not a Kamino smart-contract exploit. The Kamino-specific realized loss, attacker proceeds, recovery amount, and any reimbursement are Not verifiable as of September 6, 2026. Response was cap enforcement and incident detection; no Kamino code fix or user reimbursement was reported.

Current status: resolved from Kamino’s protocol-exposure perspective; Step Finance’s broader treasury incident led to its later shutdown.

Date
2026-01-31
Cause
Key compromise
Status
resolved
Reimbursed
No
Event id
step-finance-treasury-compromise-kamino-vsol
Evidence (2)

incident

one source

An April 2026 risk action was taken in response to the Drift exploit and related Solana stress: Kamino said it had no exposure to the event, and it placed LayerZero-bridged reserves (USDS, LBTC, FBTC) into reduce-only mode, allowing withdrawals and repayments while disabling new deposits and borrows.

Date
2026-04-18
Cause
Other
Evidence (1)

key management

unverified

Kamino Lend’s key management is organized around on-chain program controls plus governance-managed admin authority, rather than a single user or operator key. The protocol is described as open-source, and governance materials for Lend V2 say market creation and management are available through the permissionless Kamino Manager SDK. For day-to-day protocol administration, the available evidence indicates that market-level risk settings are controlled through governance and curator workflows: third-party curators can deploy markets with their own collateral types, LTV ratios, and liquidation thresholds, and market administration keys are transferred to Squads multisigs before launch to distribute control beyond any single operator.

Kamino’s docs and governance posts also describe risk parameters such as borrow caps and LTVs as being governed via KMNO holders and forum proposals, which implies that sensitive config changes are not handled by a lone hot wallet. For user interactions, key management is standard Solana wallet-based self-custody: the user loads their own keypair, connects a Solana wallet, and signs lending, borrowing, deposit, repayment, or flash-loan transactions locally. The protocol SDK then builds instructions and transactions, but it does not custody user keys.

What is not verifiable as of 2026-09-04 from the provided sources is the exact current signer set, multisig threshold, hardware-wallet policy, or whether separate keys are used for oracle/config/emergency roles on the deployed Solana programs. That level of operational key policy is not exposed in the cited materials.

Evidence (5)

smart-contract

two sources

Scope/date: Kamino Lend on Solana; assessment as of September 6, 2026. Dune is unavailable in this run, so Dune-based event, timelock, and balance verification is Not verifiable as of 2026-09-06. Contract identification. The production KLend program is KLend2g3cP87fffoy8q1mQqGKjrxjC8boSyAYavgmjD; Solscan marks it executable, verified, and upgradeable. This is Solana BPF deployment architecture—not an EVM proxy. Upgrade/admin control. The program has a live upgrade authority: GzFgdRJXmawPhGeBsyRCDLx4jAKPsvbUqoqitzppkzkW.

Solscan labels it multisig; an independent governance review identifies the authority as a Squads V4 vault, reportedly 5-of-10 with a 12-hour timelock. That review’s on-chain snapshot is April 15, 2026 and therefore stale for current-state purposes; the current threshold/timelock is Not verifiable as of 2026-09-06. No proxy-admin contract exists. Protocol roles/capabilities. Market-level administration is separate from program upgrade authority.

Documented roles include lending_market_owner, global_admin, emergency council, and pending-owner controls. Owners can alter reserve/market risk parameters, oracle configuration, liquidation settings, borrow limits, and emergency flags; emergency council powers are described as pause/borrow-limit controls. The code/release history includes socialize_loss, forced deleveraging, emergency mode, and withdraw-queue functionality. Exit/drain risk. Users retain permissionless withdrawal mechanics subject to available liquidity, obligations, queues, and market solvency; direct arbitrary admin withdrawal of all deposits is not established.

However, a compromised market administrator could materially impair lenders by changing liquidation thresholds/oracles, forcing deleveraging, or socializing losses. Program-key compromise permits arbitrary code replacement, making theft, freezing, or censorship possible after deployment. Exact function-level drainability and current market-owner mapping are Not verifiable as of 2026-09-06. Audits. Kamino lists multiple OtterSec, Sec3, Certora, RX, and formal-verification engagements, including recent v1.16/v1.17 work; whether the currently deployed binary exactly matches an audited artifact is Not verifiable as of 2026-09-06. Architecture: User → KLend program → LendingMarket/Reserve/Obligation accounts ↘ Scope/oracle inputs Market owner/global admin → risk parameters/emergency controls Upgrade authority → replace KLend executable Primary risk conclusion: upgradeable, admin-controlled Solana lending system; no confirmed direct drain primitive, but severe governance/key-compromise and parameter-manipulation risk.

Admin can drain
No
Upgradeable
Yes
Evidence (5)

audit

unverified

Kamino Lend fuzz-testing report listed by Kamino for the lending contract.

Auditor
Ackee Blockchain
Report date
2025-09-22
Scope
Kamino Lend fuzz tests
Evidence (1)

audit

one source

Certora — Kamino Lend verification/audit report. Scope concerns formal verification and manual review of core lending invariants; report-specific deployment match is not independently verified.

Auditor
Certora
Report date
2025-02-21
Scope
Kamino Lend core contracts and lending invariants.
Findings
Not verifiable as of 2026-09-05.
Fix status
Not verifiable as of 2026-09-05.
Evidence (1)

audit

one source

Certora — Kamino Lend v1.16.0 verification report. Version-specific report; whether v1.16.0 is the deployed Solana program is not independently verifiable here.

Auditor
Certora
Report date
2025-05-13
Scope
Kamino Lend v1.16.0.
Findings
Not verifiable as of 2026-09-05.
Fix status
Not verifiable as of 2026-09-05.
Evidence (1)

audit

one source

Newly confirmed version-specific report: Certora verification of Kamino Lend v1.16.0. The report is listed in Kamino’s current security inventory as a March 2026 publication. Exact day, findings, remediation evidence, and deployment-bytecode match are not verifiable from accessible metadata.

Auditor
Certora
Report date
2026-03-01
Scope
Kamino Lend v1.16.0 on Solana.
Findings
Not verifiable as of 2026-09-06.
Fix status
Not verifiable as of 2026-09-06.
Report url
https://github.com/Kamino-Finance/audits/blob/master/kamino_lend_certora_1.16.0.pdf
Report id
doc:5afc167d0ed5941a
Covers deployed code
No
Evidence (2)

audit

one source

Corrected publication-date record: Certora Kamino Lending Security Assessment and Formal Verification Report. February 21, 2025 is the end of the second engagement phase; Certora’s report page publishes the report on February 24, 2025.

Auditor
Certora
Report date
2025-02-24
Scope
Kamino Lending Protocol on Solana; specification and formal verification of lending invariants plus manual review of two consecutive code iterations conducted November 4–December 13, 2024 and February 3–21, 2025.
Findings
One precision-loss/rounding issue in exchange-rate calculation was reported: under edge conditions, a user could redeem slightly more collateral than deposited. Certora characterized it as not exploitable at the time. Critical/high severity counts are Not verifiable as of 2026-09-06.
Fix status
Certora states the precision-loss issue was resolved with Kamino during the engagement. Whether the currently deployed Solana program matches the reviewed and verified code is Not verifiable as of 2026-09-06.
Report url
https://www.certora.com/reports/kamino-lending-security-report
Report id
doc:92c5c98531d5d56c
Covers deployed code
No
Evidence (2)

audit

one source

Newly identified published formal-verification report: OtterSec Kamino Lend formal verification. The report is listed by Kamino as dated October 6, 2025; exact verified properties, findings, remediation records, and deployed-code correspondence are not accessible from the available metadata.

Auditor
OtterSec
Report date
2025-10-06
Scope
Kamino Lend formal verification on Solana; exact program version, commit, and verified invariants Not verifiable as of 2026-09-06.
Findings
Not verifiable as of 2026-09-06.
Fix status
Not verifiable as of 2026-09-06. Kamino describes the formal-verification program as identifying no critical invariant violations, but that is an unverified marketing claim for this report-specific record.
Report url
https://github.com/Kamino-Finance/audits/blob/master/kamino_lend_osec_formal_verification.pdf
Report id
doc:a4155170e6652fa6
Covers deployed code
No
Evidence (2)

audit

one source

OtterSec — Kamino Lend audit report. Solana lending program; exact audited version and bytecode mapping are not verifiable from accessible metadata.

Auditor
OtterSec
Report date
2023-09-06
Scope
Kamino Lend core lending program; exact commit/version not verifiable.
Findings
Not verifiable as of 2026-09-05.
Fix status
Not verifiable as of 2026-09-05.
Evidence (1)

audit

one source

OtterSec — Kamino Lend v1.16.0 and v1.17.0 audit report. Combined versions are retained as one published report; deployment-bytecode matching is not independently verified.

Auditor
OtterSec
Report date
2026-03-01
Scope
Kamino Lend v1.16.0 and v1.17.0.
Findings
Not verifiable as of 2026-09-05.
Fix status
Not verifiable as of 2026-09-05.
Evidence (1)

audit

one source

RX Security — Kamino Lend audit report. Solana lending program; detailed scope and deployed-bytecode match are not independently verifiable from the accessible report metadata.

Auditor
RX Security
Report date
2023-07-03
Scope
Kamino Lend core lending program; exact commit/version not verifiable.
Findings
Not verifiable as of 2026-09-05.
Fix status
Not verifiable as of 2026-09-05.
Evidence (1)

audit

one source

Sec3 — Kamino Lend audit report. Solana lending program; exact audited commit, severity breakdown, remediation evidence, and deployed-code coverage are not verifiable from accessible metadata.

Auditor
Sec3
Report date
2025-02-06
Scope
Kamino Lend core lending program.
Findings
Not verifiable as of 2026-09-05.
Fix status
Not verifiable as of 2026-09-05.
Evidence (1)

Team & Reputation

founders

two sources

Kamino Lend is part of Kamino Finance, a Solana-native credit and liquidity protocol that emerged as a successor/spin‑off to Hubble Protocol (USDH), with a largely overlapping team and strong TradFi backgrounds. ### Founders & Key Team (identity, background, track record)

  • Multiple independent sources link Kamino’s origins to Marius Ciubotariu (co‑founder of Hubble, project lead/co‑founder at Kamino) and Mark Hull (core contributor), both public, non‑anonymous figures regularly speaking on podcasts and in research pieces.
  • Marius Ciubotariu: Business economics background; prior roles in TradFi as a derivatives product specialist, then senior software engineer at Bloomberg LP (C++/Rust).
  • Mark Hull: BSc in Business Admin & Management; worked ~7 years at Credit Suisse and ~8 years as VP at Swiss Re, before becoming a contributor at Hubble and Kamino.
  • Research profiles and investor notes highlight a TradFi‑heavy bench (Bloomberg, Credit Suisse, Swiss Re) as a central part of Kamino’s institutional positioning.
  • Some secondary articles also mention another founder set (Gonzalo Parejo Navajas, Rodrigo Perenha, Benjamin Gleason, Gutemberg/Guto Fragoso) and team members like Henrique Netzka. These appear in exchange blogs and general‑info sites, and conflict with the Hubble‑linked founder narrative. > Contradiction callout: >
  • Hubble-centric sources and deeper research pieces consistently name Marius Ciubotariu + Mark Hull as Kamino’s founding leadership. >
  • Exchange/marketing-style articles name Gonzalo Parejo + Rodrigo Perenha + Benjamin Gleason + Gutemberg Fragoso as founders. > This discrepancy is unresolved and should be treated as a founder‑identity ambiguity risk. Not verifiable as of 2026-09-04. ### Public vs. Anonymous; Office, Jurisdiction
  • Team members above are fully public, with detailed professional histories and multiple public interviews; Kamino is *not* an anonymous project.
  • One deep‑dive states Kamino was founded in 2022, “headquartered in the British Virgin Islands, but based in London,” and explicitly that the “core team behind it is the same as the Hubble Protocol.”
  • This indicates an offshore legal entity (BVI) with a likely London operational base, consistent with many crypto‑native but institution‑leaning teams. ### Real business vs. web front; institutional positioning
  • Kamino is covered by institutional‑style research (e.g., Oak Research, RockawayX) as a credit infrastructure and RWA‑integrated lending protocol on Solana, including Kamino Lend V2 and modular credit markets.
  • VC and research coverage plus repeated public appearances by leadership suggest a substantive operating business, not a thin web front. ### Hack / adverse history
  • In the gathered data there is no mention of prior protocol hacks or catastrophic failures tied to Kamino, Hubble, or Kamino Lend. Not verifiable as of 2026-09-04. Overall, Kamino Lend appears to be led by a non‑anonymous, TradFi‑experienced team, using an offshore (BVI) legal wrapper with London presence, but with founder attribution inconsistencies across sources that warrant explicit documentation in institutional risk memos.
Evidence (13)

general reputation

two sources

Kamino Lend has a generally strong reputation on Solana: it is repeatedly described by governance, ecosystem research, and market commentary as the chain’s dominant or most trusted lending protocol, with a long operating record and a publicly emphasized “zero bad debt” track record. Its security posture is also a major part of that reputation, with public claims of extensive external audits and formal verification, plus an ongoing bug bounty; independent writeups and a Certora report note that at least one precision-loss issue was found and addressed, which supports a view that the team responds to issues rather than ignoring them.

Evidence (7)

Economy

TVL: $1.4B

model

one source

Economic model (Solana only; Dune unavailable). Kamino Lend is a peer-to-pool, overcollateralized money market. Suppliers deposit assets and receive kTokens; yield is primarily borrower-paid interest, with supply APY determined by utilization and reserve rate curves. Base supply APY excludes KMNO and external incentives.

Borrowers post eligible collateral, borrow within asset/market LTV limits, and face permissionless liquidation when health deteriorates. Strategy / exposure. Ordinary lending is broadly market-neutral for suppliers, who bear utilization, smart-contract, oracle, collateral/liquidation and borrower-credit risk. Borrowers are directional to collateral/debt price divergence. Kamino also supports Multiply: atomic flash-loan looping, eMode and kToken collateral.

Documented maximum examples range from ~3.2x–4x for standard positions to ~7.7x–10x for correlated LST/SOL pairs; RWA and stablecoin strategies introduce external credit, staking, insurance or market-making exposure. This leverage is optional, not inherent to every Lend deposit. Yield sustainability. Organic base yield is borrower interest; it is utilization-sensitive and can fall when borrowing demand declines. DefiLlama currently reports average supply APY of 2.1% across 150 tracked Lend pools, but a reliable historical APY/volatility series and an organic-versus-subsidized percentage are Not verifiable as of September 6, 2026.

DefiLlama reports zero tracked incentives for the combined Kamino protocol, but this does not prove every reserve has never received external rewards. Withdrawals / constraints. No deposit, withdrawal or origination fees are documented for standard Borrow; liquidation penalties and a 0.001% Multiply flash-loan fee apply where relevant. Suppliers can withdraw when reserve liquidity is available; withdrawals may be constrained by high utilization. Deposit caps, market-specific collateral rules, LTVs, liquidation thresholds and borrow factors are risk gates.

No fixed lock-up is documented for standard deposits. TVL and revenue snapshot. DefiLlama: Kamino Lend TVL $1.328B, all on Solana (100%), +30.5% over 30 days; active loans $1.024B. Combined Kamino TVL is $1.404B; the difference is not independently attributable here by product. Lend 30-day fees are $4.01M and protocol revenue $548,487; DefiLlama attributes revenue mainly to interest spreads plus portions of liquidation fees.

Dune TVL, product allocation, chain trend comparison and on-chain APY history: Not verifiable as of September 6, 2026. Contradiction / data-quality callout: DefiLlama methodology aggregates Lend fees through Kamino API data, not raw-chain verification; therefore it is analytics-platform evidence, not on-chain proof.

Evidence (5)

reserves

one source

As of September 6, 2026, Kamino Lend’s protocol-wide reserves/treasury are Not verifiable as of September 6, 2026. Dune MCP was unavailable for this run, so no on-chain balance, token-composition, latest-block, or execution/query-ID verification is available. What is verifiable: Kamino Lend uses separate on-chain Reserve accounts for each asset within each lending market. These accounts track deposits, borrows, interest, and reserve parameters; published API documentation exposes reserve addresses and market-level supply/borrow metrics.

These are lending-pool assets belonging economically to suppliers, not automatically a Kamino treasury or protocol-owned reserve. Addresses and composition: A complete protocol-wide reserve-address inventory, treasury-wallet list, composition by asset, and custody map are Not verifiable as of September 6, 2026. Documentation examples identify individual market/reserve addresses but do not establish a canonical, exhaustive Solana address set. No reliable source found established a separately controlled Kamino Lend treasury balance. Control: Kamino documentation and SDK materials state that publicly used lending markets should be transferred to multisig ownership; for multisig-owned markets, reserve updates are submitted through Squads proposals and configured timelocks.

This documents an intended control model, not proof that every live market or treasury-controlled account currently follows it. Reserve policy / attestations: Reserve configuration includes risk limits, caps, rate curves, and fee parameters. Audits and formal-verification reports for Kamino Lend are publicly listed, but they are code-security assessments—not attestations of treasury balances, solvency, custody, or proof of reserves. No reserve/treasury attestation was identified. Contradiction / risk finding: Any claim equating Kamino Lend TVL or aggregate reserve liquidity with liquid protocol reserves would be misleading; the available evidence supports lending-market liquidity, not treasury ownership.

Protocol-wide liquid reserves and liabilities remain unverified.

Evidence (4)

tokenomics

two sources

Kamino Lend does not currently have a live native fungible token on Solana as of the latest available data (state of information: Not verifiable on-chain as of 2026-09-04). ### 1. Existence of a native token

  • Kamino is part of the Kamino Finance ecosystem on Solana, focused on lending and structured vaults. Public-facing docs and ecosystem overviews describe Kamino as a protocol without a launched governance/utility token for the lending product.
  • There is no widely referenced SPL token (name/ticker + contract address) recognized by major Solana analytics (DefiLlama for Kamino Lend; Solana explorers; leading Solana DEX listings) as a Kamino Lend native token.
  • Any references in social media or third‑party sites to “Kamino token” are either speculative or generic and are not backed by contract-level evidence tied to Kamino Lend specifically. Given the research constraints (no Dune, only web search) and the requirement not to infer:
  • Native token name/ticker: Not verifiable as of 2026-09-04.
  • Token contract address: Not verifiable as of 2026-09-04. ### 2. Tokenomics items requested (all non‑applicable or not verifiable) Because no confirmed native token exists for Kamino Lend:
  • Total vs circulating supply: Not applicable / Not verifiable as of 2026-09-04.
  • Market cap and FDV: Not applicable / Not verifiable as of 2026-09-04.
  • Token utility and governance role: Not applicable; protocol governance appears to be off‑chain/project‑controlled rather than token-based for Kamino Lend.
  • Revenue share, buybacks, burns, staking rewards: No evidence of a Kamino Lend token receiving protocol revenues or rewards; yield is paid in deposit/borrow assets, not a native token.
  • Emissions schedule & unlocks: Not verifiable as of 2026-09-04.
  • Allocations (team/investors/treasury/community): Not verifiable as of 2026-09-04.
  • Top-holder concentration & insider wallets: Not verifiable as of 2026-09-04.
  • Mint/blacklist/fee-switch controls: Not verifiable as of 2026-09-04 for any hypothetical native token. ### 3. DEX liquidity / listings
  • Major Solana DEXs and aggregators (e.g., Jupiter-routed markets) do not show a clearly labeled, high-liquidity “Kamino Lend” native token market.
  • Any thin-liquidity, similarly named assets cannot be reliably linked to the protocol without contract confirmation and are therefore excluded. From a risk analyst perspective, Kamino Lend should be treated as a non‑tokenized lending protocol at this time; token exposure risk (unlock overhang, insider concentration, fee-switch governance via token) is currently not a primary factor for this product, subject to change if/when an official token is launched and on-chain verified.
Evidence (3)

Stress scenarios

stress scenario - bitcoin price falls below $10000

two sources

A Bitcoin drop below $10,000 is an *extreme* tail-risk scenario for Kamino Lend, but the provided sources do not give a BTC-specific stress table for that exact price level, so the exact loss outcome is Not verifiable as of 2026-09-04. What can be said is that Kamino’s own stress framework shows the protocol has historically absorbed severe market shocks without bad debt, and its documented fallback tools include cap reductions, auto-deleverage, daily cap enforcement, and market freezes. The most relevant quantified evidence from Kamino’s recent risk reports is scenario-based, not BTC-price-based: at a 10% instantaneous shock, April 2026 reported $275M of collateral at risk with zero theoretical bad debt; at deeper shocks, collateral at risk rose to $894M at -60%, while theoretical bad debt remained below collateral at risk in all scenarios.

May 2026 showed $229.9M at risk at -10%, $486.4M at -20% with $9.0M bad debt, and $686.1M at -40% with $72.1M bad debt. Earlier 2025 reports also show that a -60% crash could produce roughly $900M–$1.03B of liquidation exposure and $111.5M–$115.5M of potential bad debt in worst-case assumptions. For interpreting a BTC move below $10,000, the key risk question is indirect exposure: whether Kamino borrowers are using BTC or BTC-correlated assets as collateral, and whether those positions are sufficiently liquid to be unwound before liquidation discounts turn into bad debt.

Kamino defines insolvency as a position becoming unhealthy and liquidation failing due to insufficient market liquidity; losses are then socialized among lenders. However, the sources provided do not identify BTC-collateral share, BTC-denominated debt, or reserve-level exposure on Solana, so a BTC<$10k protocol-wide loss estimate cannot be verified from the available material. Kamino’s own docs also state that extreme stress can trigger system-wide responses, including auto-deleverage and market freezes, specifically to protect lender solvency when normal liquidation is not enough.

Evidence (7)

stress scenario - largest collateral depegs 20%,

two sources

For a 20% uniform collateral depeg/shock on Kamino Lend, the latest available monthly risk report says $412M of collateral would be at risk and $12.2M of potential bad debt could result, with 5,114 positions liquidated. The same report also highlights PRIME concentration risk: about $182M of borrowed debt is collateralized by PRIME at LTV ≥80% against a 91% liquidation threshold, making it the largest single-asset cliff in that stress view. A closely related prior Kamino risk report for November 2025 showed a smaller -20% shock estimate of $137M collateral at risk and $2.3M potential bad debt, indicating the stress profile changed materially by April 2026.

Kamino’s docs define the framework as an instantaneous uniform shock across assets, where the -20% case is intended to capture broad-market downside rather than an isolated depeg in one asset. If you want the answer framed specifically as an *idiosyncratic single-asset depeg* rather than a broad 20% market shock, that is Not verifiable as of 2026-09-04 from the provided sources alone.

Evidence (3)

stress scenario - top counterparty insolvent — each with expected loss path, who absorbs it, compensation, and the impact path through the smart contracts;

two sources

For Kamino Lend on Solana, a top counterparty insolvency is handled as a borrower-credit loss problem: if the counterparty/borrower cannot repay and liquidation cannot fully recover value, the shortfall becomes bad debt and is socialized among lenders; Kamino also states it has no insurance fund to absorb bad debt. The dynamic liquidation penalty is 0.1% to 10%, so the protocol first tries to push the account into liquidation and incentivize third-party liquidators to seize collateral; if liquidation proceeds are insufficient, lenders eat the loss through reduced claim value in the reserve. Expected loss path: insolvency typically starts when a borrower’s LTV breaches the liquidation threshold, then unhealthy debt remains unliquidated because collateral is illiquid or market conditions are too thin to sell without excessive slippage; that residual deficit is the expected loss. Kamino’s own risk posts show modeled bad debt can rise quickly in deeper shocks (for example, the April 2026 stress table shows potential bad debt of $12.2M at -20%, $45.7M at -30%, $88.0M at -40%, and $214.9M at -60%), illustrating that the loss path is nonlinear once liquidations can no longer fully clear positions. Who absorbs it: in the absence of an insurance fund, the loss is borne by lenders in the affected reserve/market via socialized bad debt; Kamino’s docs explicitly say bad debt is socialized among lenders.

For systemic stress, Kamino says the Risk Council may also trigger auto-deleveraging to reduce the largest leveraged positions and protect protocol solvency, which shifts losses away from the protocol as a whole but can impose early position reductions on leveraged users. Compensation: there is no dedicated compensation pool documented for lender bad debt on Kamino Lend; recovery comes only from liquidation proceeds and any available collateral, with the remainder unmade whole by the protocol and thus passed to lenders. Impact path through smart contracts: unhealthy account → liquidation eligibility enforced by the lending program’s risk logic → liquidator repays part of debt and seizes collateral less penalty → if collateral sale value is insufficient, a deficit remains and is booked as bad debt/socialized loss in the reserve accounting.

Evidence (5)

stress scenario - committed fraud by the DAO or owners

two sources

For a DAO/owner committed-fraud stress scenario, I found no public evidence that Kamino Lend’s DAO or owners have committed fraud. What is verifiable is that Kamino positions K-Lend as a decentralized Solana lending protocol with open-source smart contracts, multiple audits/formal verifications, and a zero-bad-debt track record in its own materials and third-party writeups. For this stress case, the key risk is governance/key compromise or malicious parameter changes, not a documented fraud event.

Third-party coverage notes that Kamino added Whitelisted Reserves specifically to prevent compromised curator keys from redirecting depositor funds to unvetted reserves, which addresses a plausible owner/DAO abuse path. Kamino’s docs also state that market liquidation is permissionless and collateral is the only guarantee, so user exposure is primarily to smart-contract, oracle, and liquidation-design risk rather than legal recourse. There is one historical governance-related controversy referenced by a support article (“June 2022 whale-vote controversy”), but the source does not substantiate fraud, and it is not enough to conclude DAO fraud as a verified event.

Based on the available sources, the correct classification is: Not verifiable as of 2026-09-04 for any actual committed fraud by the DAO or owners.

Evidence (9)

stress scenario - primary yield source negative 30d,

two sources

Kamino Lend’s primary yield source is negative in a 30-day stress case if you mean the leverage/Multiply yield path: Kamino states that lender yield comes from borrower interest, and for Multiply positions the net APY turns negative when the borrow rate exceeds the collateral’s yield. In plain terms, that means the strategy is underwater for depositors/levered users when funding costs outrun the underlying staking or collateral yield. For Kamino’s own stress framework, the clearest 30% shock reference in the provided results is the March 2026 stress test, which shows $873M collateral at risk and $861M debt liquidated under an instantaneous -30% shock, with RWA positions driving the spike.

That is a *liquidation-risk* stress result, not a direct yield result, but it supports the conclusion that severe market stress can materially disrupt returns and position health. If you mean the lending-vault yield source specifically, Kamino says there is *no separate yield source*; lender yield is paid from borrower interest, so a negative 30-day primary yield would require borrow demand/utilization to be too weak to cover the vault’s return target. That exact 30-day realized yield outcome is Not verifiable as of 2026-09-04 from the provided sources.

The most important takeaway for a stress scenario is: on Kamino, negative primary yield is structurally possible when borrow rate < collateral yield for Multiply, or when borrow interest is insufficient for lending vaults; however, the specific 30-day realized figure is not available in the sources you provided.

Evidence (5)

Governance & Legal

governance

one source

As of September 13, 2026, Kamino Lend is not fully DAO-controlled. KMNO staking provides voting power, and Kamino operates a governance forum/proposal process, but binding control of markets, reserves, vault administration and program upgrades remains role- and multisig-based. The governance UI currently states that there are no active proposals.

DAO governance is therefore symbolic/partial rather than protocol-controlling. Control map: development is team/company-led through the public KLend repository; the repository identifies StroudGlobal S.A. as the software owner and uses a Business Source License. The frontend/site is operated under Kamino’s Terms by StroudGlobal S.A., a Panama company.

Registration number and directors: Not verifiable as of September 13, 2026. Admin powers are materially significant. Market owners can update market/reserve configuration and ownership; the program upgrade authority is separate.

Kamino’s emergency council can enable emergency mode and set borrow limits to zero. The audit reports that socialize_loss can reduce lender balances without a governance vote and is not gated by immutability/emergency mode; liquidation parameters can also be changed materially. Accordingly, admin_can_drain is assessed true in the stated risk-definition sense.

Timelock coverage is partial: 12 hours at the Squads V4 key-holder layer for the primary markets and program-upgrade authority, not source-enforced and not universal. The primary upgrade multisig is 5-of-10; the primary-market owner is 4-of-10. The two multisigs reportedly overlap by 8–9 members, so independence is weak.

Other markets use Squads V3 or EOAs without the 12-hour delay. Exact current signer identities and independence: Not verifiable as of September 13, 2026. Dune is unavailable in this run.

Voting concentration, KMNO top holders, treasury balances, and holder-adjusted governance concentration: Not verifiable as of September 13, 2026.

Timelock
Yes
Timelock delay hours
12
Multisig threshold
5
Multisig owners
10
Admin can drain
Yes
Emergency bypass
Yes
Dao governance
No
Evidence (6)

legal & regulatory

two sources

Assessment (as of September 4, 2026): Kamino Lend is a Solana smart-contract protocol, not itself a separately located legal person. The identified operating/development entity is StroudGlobal S.A., a Panamanian sociedad anónima; Kamino Lend’s repository also states that the software is StroudGlobal property. The entity’s ultimate ownership, registered address, licensing status, and whether it is the legal issuer/operator of every product are Not verifiable as of September 4, 2026.

ToS/restrictions: The website terms identify StroudGlobal S.A. as site operator, disclaim custody, fiduciary duties, broker/dealer/adviser status, and responsibility for third-party market managers. They prohibit U.S., U.K., and Panama persons, sanctioned persons, and residents of numerous sanctioned/restricted jurisdictions. Terms are governed by British Virgin Islands law, with confidential BVI-seated arbitration, individual-claims and jury/class-action waivers.

These restrictions apply contractually to the interface/services; their enforceability against permissionless on-chain contracts is a separate risk. KYC/AML and classification: No user-identification, KYC/AML onboarding, money-transmitter, lending, securities, commodities, or virtual-asset-service-provider authorization was verified. The terms use sanctions representations and geo-blocking but do not establish a comprehensive KYC/AML program.

Regulatory classification of Kamino Lend, KMNO, deposited assets, or lending activities is Not verifiable as of September 4, 2026. The terms expressly state that the operator is not registered as a broker, dealer, adviser, transfer agent, or intermediary. Warnings/enforcement/court/sanctions: Public searches identified no regulator enforcement action, court case, or sanctions designation against Kamino Finance, StroudGlobal S.A., or Kamino Lend itself; this is not a clearance opinion. Not verifiable as of September 4, 2026 for a definitive worldwide litigation, regulator, or sanctions determination.

Security audits and bug-bounty claims do not mitigate legal-person, insolvency, consumer-protection, or smart-contract-liability risk. Data protection: A complete privacy notice, data controller, retention, transfer, and user-rights framework was Not verifiable as of September 4, 2026. Legal structure therefore offers limited practical recourse: a Panamanian company and BVI arbitration clause exist, but user assets interact with permissionless Solana contracts and may not be claims against the company.

Active enforcement
No
Sanctioned
No
Entity
StroudGlobal S.A. (identified site operator/development entity); protocol itself has no verified separate legal person
Jurisdiction
Panama entity; BVI governing law and arbitration; Solana protocol has no verified geographic domicile
Evidence (5)

legal registries

two sources

No exact GLEIF LEI record for 'StroudGlobal S.A', 'Kamino Lend'. OFAC SDN screening of 'StroudGlobal S.A', 'Kamino Lend': no match. SEC litigation and administrative release feeds: no mention.

Screened names
  • StroudGlobal S.A
  • Kamino Lend
Sanctioned
No
Evidence (4)

Stability

stability

two sources

Kamino Lend is a Solana lending protocol that supports third-party assets such as USDC, USDT, PYUSD, USDe, USDG, and others; it does not issue its own stablecoin. No verifiable evidence was found in the available sources of a stablecoin depeg event specifically tied to Kamino Lend, so depeg count, last depeg date, and max depeg percentage are not verifiable as of 2026-09-06. Treat stable status as not verifiable as of 2026-09-06.

Own stablecoin
No
Stablecoin ids
  • USDC
  • USDT
  • PYUSD
  • USDe
  • USDG
Evidence (3)

Risks & Strengths

risks

two sources

Kamino Lend’s principal risks are smart-contract failure, oracle error, liquidation shortfall during stressed markets, adverse behavior of listed collateral or debt assets, and Solana/operational dependency. Kamino documents substantial controls, but these reduce rather than eliminate loss risk; protocol-level insurance is explicitly absent. On-chain verification was unavailable in this run: Not verifiable as of September 5, 2026.

RiskImpactSeverityProbabilityMitigation in placeResidual risk
Smart-contract failureA latent logic, accounting, access-control, or upgrade defect could permit unauthorized borrowing, collateral loss, insolvency, or disruption across lending markets.HighMediumPublished audits, formal verification, open-source code, fuzzing, verifiable builds, rolling reviews, and a reported bug-bounty program.High-impact unknown vulnerabilities and deployment/configuration mistakes remain possible.
Oracle mispricingStale, manipulated, unavailable, or divergent prices could overvalue collateral, understate debt, trigger unfair liquidations, or enable bad-debt creation.HighMediumScope aggregates multiple providers; Kamino describes price bands, smoothing, anomaly monitoring, fallbacks, and daily debt/withdrawal caps.Provider correlation, thin-market pricing, and rapid dislocations can defeat redundancy.
Liquidation shortfallA correlated market crash, congestion, or insufficient liquidity may make liquidations unprofitable, leaving losses to lenders; no protocol-wide insurance backstop exists.HighMediumSupply/borrow caps, E-Mode limits, conservative LTVs, liquidation incentives, stress testing, monitoring, and auto-deleverage controls.Extreme gaps, slippage, and simultaneous liquidations can still create bad debt.
Asset depeg or failureStablecoin depegs, LST impairment, issuer failure, or an underlying token exploit can sharply reduce collateral value or impair debt repayment.HighMediumFive-dimension asset assessments, isolated collateral/debt tiers, borrow factors, caps, and ongoing/event-driven reassessment.Third-party governance, bridge, issuer, and smart-contract risks remain outside Kamino’s control.
Solana and operations dependencyNetwork congestion, RPC failures, oracle-crank outages, liquidator downtime, or infrastructure compromise could delay transactions and risk controls during market stress.MediumMediumDocumented redundancy across RPC providers, cloud infrastructure, cranks, keepers, and liquidators, plus real-time monitoring and escalation.Common-chain dependency and operational coordination remain systemic single-environment risks.
Evidence (5)

strengths

two sources

Kamino Lend’s top strengths are: 1) strong security and robustness from a battle-tested V1 codebase and V2’s added risk-management infrastructure; 2) capital efficiency through a single-liquidity-market design and eMode-style higher leverage within asset groups; 3) modular architecture that supports isolated lending markets and easier scaling; 4) automation and UX that simplify borrowing/lending and integrate with Kamino’s broader yield products; and 5) Solana-native performance and ecosystem fit, which supports fast, low-cost transactions and a unified DeFi suite on Solana.

Evidence (5)

Methodology & Limitations

  • On-chain metrics: not verifiable — Dune phase 2 is not enabled.
  • 0 of 25 fact categories not yet collected.
  • Fact verifiability: 17 two independent sources, 26 one source, 5 unverified.
  • Oldest fact verification date: 2026-08-29.