Security
Audits
Reviews of the contracts and what was fixed.
Internal review, 25 October 2026
A line-by-line review of every contract in scope, with Foundry proofs of concept that now run as regression tests. It found 1 high, 5 medium, 7 low and 4 informational issues; all but three were fixed the same day, and the rest are mitigated or acknowledged.
| ID | Issue | Severity | Status |
|---|---|---|---|
| KRN-01 | Borrowed funds could leave a Credit Account through the swap adapter | High | Fixed |
| KRN-02 | No staking warmup: late stakers took a full epoch's rebase | Medium | Mitigated |
| KRN-03 | A stale RWA feed valued the sleeve at zero | Medium | Fixed |
| KRN-04 | A collateral with a reverting feed made an account unliquidatable | Medium | Fixed |
| KRN-05 | Disabling a collateral zeroed its threshold instantly | Medium | Fixed |
| KRN-06 | Conviction could be farmed with empty multicalls | Medium | Fixed |
| KRN-12 | Dividend over-commit guard ignored earlier claims | Low | Acknowledged |
| KRN-17 | Index rounding leaves dust insolvency | Info | Acknowledged |
Read the full report. An external audit of the reserve, omnichain and Prime scopes is required before deposits open.