How Does Kamino Finance Work?
Solana's second-largest lending protocol, where you can deposit crypto to earn interest, borrow, or provide automated liquidity. It manages $1.6B in deposits with $6.1M in funding. Its C grade reflects the risk that one bad token listed in the shared lending pool could contaminate all depositors, plus a past bug that allowed users to withdraw more collateral than they should have.
TVL
$1.5B
Sector
Lending
Risk Grade
C+
Value Grade
C+
Core Mechanisms
Lending/Collateral Models/Cross-collateralized
NovelSingle unified liquidity market with asset tiers (rather than isolated markets) enabling permissionless lending for any Solana token
Unified market offers capital efficiency and deep liquidity but introduces contagion risk — a bad asset can contaminate the entire pool. Asset tier system mitigates but does not eliminate this risk.
Lending/Collateral Models/Elevation Mode
NoveleMode (Elevation Mode) enables higher LTV ratios when borrowing/lending within correlated asset groups (e.g., SOL/mSOL)
Higher leverage for correlated assets improves capital efficiency but assumes correlation holds. During market stress, correlations can break, triggering liquidations across eMode positions.
Market Structure/AMM/Automated Liquidity Vaults
Automated rebalancing vaults with auto-compounding that issue yield-bearing kTokens representing proportional pool shares
Automated vaults simplify LP management but introduce smart contract concentration risk. kToken exchange rate depends on vault performance and accurate accounting.
Lending/Interest Rate Curves/Kinked Utilization Curve
Dynamic interest rates with utilization-based kink points per asset, governed by Kamino Risk Council
Standard kinked curve adapted for Solana's fast block times. Risk Council can adjust parameters, introducing governance centralization risk.
Lending/Liquidation Mechanics/Dynamic Liquidation
NovelDynamic liquidation penalties and auto-deleverage mechanism that lowers deposit/borrow caps during adverse conditions
Auto-deleverage is a proactive risk management tool but can force position unwinding during volatile periods. Users may be unwound even if their individual position is healthy, due to protocol-level cap adjustments.
Lending/Oracle Dependencies/Multi-oracle with Fallback
Advanced Oracle Risk Engine combining heuristic analysis, EWMA pricing, and multi-provider data feeds (Chainlink, Pyth, Switchboard)
Multi-oracle approach with EWMA smoothing reduces flash-crash vulnerability but introduces complexity. Oracle disagreement scenarios could cause incorrect pricing.
Lending/Risk Management/Asset Tiers
Tiered asset classification (isolated, cross, collateral) within unified market to contain risk from long-tail assets
Asset tiers provide granular risk controls within the unified market. Tier assignment by Risk Council introduces governance dependency and potential for miscategorization.
Governance/Council/Risk Council
Kamino Risk Council manages asset risk parameters, deposit caps, and tier assignments
Centralized risk management via council enables faster response but creates a single point of governance risk. Council decisions directly impact user positions through cap adjustments.
How the Pieces Interact
Risk from any listed asset can spill over to the entire unified pool. A toxic or manipulated asset could create bad debt that is socialized across all lenders, unlike isolated-market designs that contain the blast radius.
eMode assumes asset correlations hold (e.g., SOL and mSOL). During de-pegging events or protocol failures affecting one asset, eMode positions become undercollateralized faster than standard positions, triggering rapid liquidation cascades.
When the auto-deleverage mechanism lowers caps during market stress, users near the cap are forced to unwind. This forced selling creates additional downward pressure, potentially triggering more cap reductions in a self-reinforcing loop.
Historical precision loss bug in kToken exchange rate calculation allowed excess collateral redemption. While patched, similar precision issues in exchange rate computation could resurface as new vault strategies are added.
Oracle disagreements between multiple providers during fast price moves could delay eMode liquidation triggers, allowing undercollateralized positions to persist longer than intended.
What Could Go Wrong
- Unified liquidity market allows risk spillover from one toxic asset to contaminate all lending positions
- Historical precision loss bug in exchange rate calculation allowed excess collateral redemption
- Auto-deleverage mechanism can force unwinding of positions during volatile markets, creating cascade liquidations
Unified Market Toxic Asset Contagion
ModerateTrigger: A permissionlessly listed token experiences a rug pull, oracle manipulation, or liquidity crisis causing >90% price decline within 1 hour
- 1.Listed token price collapses due to exploit, rug pull, or market manipulation — Borrowers using the token as collateral become instantly undercollateralized
- 2.Liquidation attempts fail as token liquidity evaporates — Bad debt accumulates in the unified liquidity pool from unliquidatable positions
- 3.Bad debt socializes across all lenders in the unified market — Healthy-asset depositors absorb losses from unrelated toxic token
- 4.Auto-deleverage mechanism triggers emergency cap reductions across all assets — Users with healthy positions forced to unwind due to protocol-level cap adjustments
- 5.Mass withdrawal from unified market as contagion fears spread — Utilization spikes to 100%, trapping remaining depositors who cannot withdraw
Risk Profile at a Glance
Overall: C+ (38/100)
Lower score = safer