> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kamui.finance/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Audited third-party vault infrastructure, automated monitoring with documented pause criteria, and a formal incident-response process.

## Security Framework

Kamui's security posture layers audited third-party vault infrastructure, custom safety contracts, automated monitoring with documented pause criteria, and a formal incident-response process.

* **Infrastructure layer.** Vaults are implemented on Lagoon Finance's ERC-7540 framework, reducing bespoke smart-contract surface area relative to a fully in-house implementation.
* **Monitoring.** 24/7 automated on-chain and system-health monitoring tied to documented pause criteria.
* **Incident response.** A formal incident-response runbook with an on-call rotation.

## Smart Contract Security

The vaults are implemented on Lagoon Finance's tokenised-vault framework using the ERC-7540 asynchronous standard, an extension of ERC-4626. The Lagoon framework has undergone twelve independent audits by tier-1 firms, including Nethermind and Trail of Bits. The full list is published at [docs.lagoon.finance/resources/audits](https://docs.lagoon.finance/resources/audits). The underlying assets additionally carry their own issuer-level smart-contract audits, reviewed as part of Kamui's diligence scorecard.

## Incident Response Protocol

* **Detection.** 24/7 automated monitoring tied to documented pause criteria.
* **Containment.** Automated pause halts new activity. All balances and pending requests remain intact.
* **Continuity.** Investor balances are represented on-chain by the receipt token, so ownership never depends on the availability of Kamui's systems. If front-end applications are unavailable, depositors can interact directly with the vault smart contracts, and requests are picked up by the operational backend.
* **Resolution.** A formal incident-response runbook with an on-call rotation governs escalation and recovery. Queued withdrawals resume once the vault is unpaused.
* **Entity channel.** Entity investors and distribution partners additionally receive a named contact and a direct escalation path during any incident, including assisted execution of contract-level withdrawals if needed.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.