Security Framework
Kamui’s security posture layers audited third-party vault infrastructure, custom safety contracts, automated monitoring with documented pause criteria, and a formal incident-response process.- Infrastructure layer. Vaults are implemented on Lagoon Finance’s ERC-7540 framework, reducing bespoke smart-contract surface area relative to a fully in-house implementation.
- Monitoring. 24/7 automated on-chain and system-health monitoring tied to documented pause criteria.
- Incident response. A formal incident-response runbook with an on-call rotation.
Smart Contract Security
The vaults are implemented on Lagoon Finance’s tokenised-vault framework using the ERC-7540 asynchronous standard, an extension of ERC-4626. The Lagoon framework has undergone twelve independent audits by tier-1 firms, including Nethermind and Trail of Bits. The full list is published at docs.lagoon.finance/resources/audits. The underlying assets additionally carry their own issuer-level smart-contract audits, reviewed as part of Kamui’s diligence scorecard.Incident Response Protocol
- Detection. 24/7 automated monitoring tied to documented pause criteria.
- Containment. Automated pause halts new activity. All balances and pending requests remain intact.
- Continuity. Investor balances are represented on-chain by the receipt token, so ownership never depends on the availability of Kamui’s systems. If front-end applications are unavailable, depositors can interact directly with the vault smart contracts, and requests are picked up by the operational backend.
- Resolution. A formal incident-response runbook with an on-call rotation governs escalation and recovery. Queued withdrawals resume once the vault is unpaused.
- Entity channel. Entity investors and distribution partners additionally receive a named contact and a direct escalation path during any incident, including assisted execution of contract-level withdrawals if needed.