Static-analyzer high-severity count

Evidence summary #

EVM static analysis tools (Slither, Mythril, Semgrep) not applicable to Rust/Anchor. Solana-equivalent tools (Sec3 X-Ray, Ackee fuzz) were applied but specific finding counts not publicly extractable without PDF parsing.

Detail #

Sec3 performed a formal verification assessment (kamino_klend_sec3.pdf). Ackee Blockchain performed fuzz testing (kamino_lend_ackee_blockchain_fuzz_tests.pdf). Neither PDF was individually parsed to extract high-severity finding counts. Gray = data unavailable via accessible sources; not green.

Sources #

Methodology #

Count the number of unique high-severity detector findings from Slither + Mythril + Semgrep run against the deployed verified source (after deduplication across tools).

See the full factor methodology and distribution across all protocols →