> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kamino.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Bug Bounty

> Kamino's bug bounty program on Sherlock, with rewards up to 1,000,000 USDC

Security / Bug Bounty

Live on Sherlock

# Bug Bounty

Put your security expertise to the test. Get rewarded for responsibly disclosing vulnerabilities in eligible smart contracts and applications.

Rewards up to
1,000,000
USDC
[View bounty on Sherlock ↗](https://audits.sherlock.xyz/bug-bounties/433)
Rewards depend on demonstrated impact and program eligibility.

01

## [Review the Scope](https://audits.sherlock.xyz/bug-bounties/433?tab=scope)

Check eligible assets, impacts, and program exclusions.

02

## [Reproduce Safely](https://audits.sherlock.xyz/bug-bounties/433?tab=rewards)

Demonstrate a realistic exploit in an authorized test environment.

03

## [Report Privately](https://audits.sherlock.xyz/bug-bounties/433?tab=submission)

Submit your findings and evidence through Sherlock.

## Explore the Scope

> [card] [KLend](https://github.com/kamino-finance/klend)
>
> Lending and borrowing

> [card] [KVault](https://github.com/kamino-finance/kvault)
>
> Lending vaults

> [card] [Kamino Liquidity](https://github.com/Kamino-Finance/kliquidity-sdk)
>
> Automated liquidity

> [card] [KFarms](https://github.com/kamino-finance/kfarms)
>
> Rewards infrastructure

> [card] [Scope](https://github.com/kamino-finance/scope)
>
> Oracle infrastructure

> [card] [Web and App](https://kamino.com)
>
> kamino.com and app.kamino.finance

## Research Resources

> [card] [Security Audits](https://docs.kamino.com/security/audits)
>
> Review published audits and verification reports

> [card] [Source Repositories](https://github.com/Kamino-Finance)
>
> Explore Kamino's public code and SDKs

> [!NOTE]
>
> The [Sherlock program rules](https://audits.sherlock.xyz/bug-bounties/433) govern eligibility, rewards, and submissions. Kamino does not set or override reward calculations, exclusions, or disclosure terms independently of the Sherlock platform.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.