★ Audit scope mismatch

Evidence summary #

Latest deployed version v1.19.0 (commit 95d694b, April 23 2026) not covered by any publicly accessible audit; most recent audits cover v1.16.0/v1.17.0 (OtterSec) and v1.17.0 (Certora Feb 2025), leaving two incremental versions unaudited.

Detail #

The audits repo (github.com/Kamino-Finance/audits) shows the most recent klend audit files as kamino_lend_ottersec_1.16.0_and_1.17.0.pdf and kamino_lend_certora_1.17.0.pdf. v1.18.0 (reserve emergency mode) and v1.19.0 (obligation ownership transfer) have no corresponding audit PDFs. Scored yellow not red because the gap is 2 incremental versions rather than architectural rewrites, Certora formal verification of core invariants provides partial carry-forward, and per-version audit cadence has otherwise been continuous.

Sources #

Methodology #

Check whether the commit SHA cited in the audit report matches the bytecode deployed at the production proxy/implementation address.

See the full factor methodology and distribution across all protocols →