At Kiln we are unwavering in our commitment to fortifying our digital assets and protecting our stakeholders' interests.
In light of our commitment to ensuring the highest security standards, we're thrilled to announce the launch of our bug bounty program in collaboration with Immunefi.
Before diving into the details of our bug bounty program, let’s first talk about our past and ongoing efforts:
- Prior to this launch, meticulous audits and penetration tests of our smart contracts were conducted by Spearbit, Halborn, and Quantstamp to ensure our systems are resilient against a multitude of threats.
- Kiln is SOC 2 Type I and Type II accredited.
This certification, regarded globally, attests to our ongoing best-in-class security practices and the stringent measures we employ to protect our customers' assets. - Kiln On-chain v1’s smart contracts have been verified on Etherscan, and their source code has been published
- Our infrastructure best practices are approved by the Ethereum Foundation, learn more:
Why a bug bounty program?
Even with prior audits and accreditations, we acknowledge the constantly evolving scope of the digital space. No matter how fortified our defences are, there are always brilliant minds out there who can spot things we have missed.
This is where the bug bounty program comes in. By incentivizing vulnerability discovery, we are tapping into collective intelligence, leveraging the vast expertise of ethical hackers worldwide to make our products even more secure and reliable.
How does it work?
This bug bounty focuses on Kiln’s staking smart contracts. According to the severity of potential bugs, the payout will be as high as $100,000 for most critical issues:
![](https://cdn.prod.website-files.com/625db3caa8abd67c1b5f0d0a/64e61f61b4f407429489c610_Bouty%20Payout.png)
We invite all ethical hackers, cybersecurity enthusiasts, and experts to join us in this initiative. Together, we can make the digital space more secure, one vulnerability at a time.
For more details on the bug bounty program, including the scope, and guidelines, please visit https://immunefi.com/bounty/kiln/.
Learn more about Kiln security here: https://security.kiln.fi/.
About Immunefi
Immunefi is the leading bug bounty and security services platform for Web3, which features the world’s largest bounties. Immunefi guards over $60 billion in user funds across projects like Synthetix, Chainlink, SushiSwap, MakerDAO, Wormhole, GMX, Alchemix, Nexus Mutual, and many others. Immunefi is chain-agnostic: we host bug bounties for blockchain projects across all chains and networks.
About Kiln
Kiln is the leading enterprise-grade staking platform, enabling institutional customers to stake assets, and to whitelabel staking functionality into their offering. Kiln runs validators on all major PoS blockchains, with over $2.2b worth of stake under management, and running over 3% of the Ethereum network on a multi-cloud, multi-region infrastructure. Kiln also provides a validator-agnostic suite of products for fully automated deployment of validators, and reporting and commission management, enabling custodians, wallets and exchanges to streamline staking operations across providers. Kiln is also SOC2 Type 2 certified.