Audits & Bug Bounties

Kiln aims to provide a secured and enhanced experience of staking through the different Kiln On-Chain smart contract platforms.

On-Chain products have been audited multiple time by various security firms and are under exhaustive monitoring and security practices to limit security risks as much as possible.

Kiln Onchain Dedicated Staking v1

Resources

Resource	Link
Source Code (Smart Contracts only)	https://github.com/kilnfi/staking-contracts/tree/master
Ledger Live mainnet	https://etherscan.io/address/0x1e68238ce926dec62b3fbc99ab06eb1d85ce0270
Ledger Live testnet	https://goerli.etherscan.io/address/0xe8Ff2a04837aac535199eEcB5ecE52b2735b3543
Other mainnet and testnet deployments	https://github.com/kilnfi/staking-contracts/tree/master/deployments

Audits

Security firm	Audit link	Scope	Date
Ledger Donjon	not available	Smart Contracts	July 21st 2022 March 15th 2023
Halborn	Report	Smart Contracts	July 22nd 2022
Spearbit	Report	Smart Contracts	July 27th 2023
Ledger Donjon	not available	Ledger Nano Plugin	July 21st 2022 March 15th 2023

Bug Bounty

• Cantina

• Immunefi

A $1,000,000 max bounty program is live since 21 August 2023. All bug reports must come with a working PoC impacting asset listed in the "Assets in Scope" section of the program which only addresses smart contracts.

Kiln Onchain Platform ("v2")

Security firm	Audit link	Date
Spearbit	Audit report is available upon request here.	July 27th 2023

Kiln Operator Infrastructure

Kiln is SOC 2 Type I and SOC 2 Type II certified and has been undergoing multiple penetration testings and audits from third parties.

Certifications and audits reports are available upon request here.

Bug Bounty

• Cantina
• Immunefi

A $500,000 max bounty program is live since September 9th 2024. All bug reports must come with a working PoC impacting asset listed in the "Assets in Scope" section of the program which only addresses smart contracts.