Data Room

Live protocol state

Read in your browser from the same public endpoints anyone can call. Nothing on this page is hand-entered, so it cannot silently drift from reality.

The published APY is a modeled, deployed-basis figure, live and variable, computed from public Lido and Hyperliquid data with the methodology open at /docs/yield-methodology. It models the book we actually run: the hedge is sized one for one against spot, so the carry is multiplied by L/(L+1), which is below one, never by the venue leverage itself. The separate 3x target at scale is published beside it, labelled, at /api/apy; that target assumes a levered spot leg the protocol does not run today and charges no borrow cost against it, so it is a design target and not a rate anyone earns now. The formula's 180-day funding window has also been decaying mechanically since June as strong late-2025 funding months roll out, exactly as this page disclosed in advance, and the published figure moves down with it. Two more honest sentences we volunteer: realized distributions have only just begun (the first genesis-scale skUSD distribution landed on July 8, 2026, and it is small; staking at scale is gated behind the external audit), and our own published feasibility analysis caps the sustainable through-cycle rate for this design near 8 to 9.4 percent at current market funding. That band is stated on the levered design basis, the same basis as the 3x target, so it caps the target rather than the deployed headline; the deployed figure sits well under it, and the two are not a like for like comparison. The modeled number is an output to verify, not a promise. As a live reference point, sUSDe, the market's largest delta-neutral dollar, currently realizes 4.13 percent on $1.54 billion staked (staked total per DefiLlama), per DefiLlama's published data.

Independently listed on DefiLlama, which tracks the live TVL from the same on-chain contracts.

What kUSD is

kUSD is a USDC-collateralized synthetic dollar on Base, minted 1:1 through an on-chain Peg Stability Module at a published, tiered fee. Staked kUSD (skUSD) is an ERC-4626 wrapper designed to earn a delta-neutral yield: Ethereum staking rewards plus Hyperliquid perpetual funding, designed for net-zero directional exposure at scale. Both tokens live in the holder's own wallet.

Full mechanism: whitepaper v3.0, chapter-level detail in the documentation, machine-readable summary at /llms.txt. Kerne Protocol on Base is unrelated to Kernel Protocol or KernelDAO; disambiguation here.

Scale, stated plainly

Kerne is at genesis scale. The first PSM mint happened on 2026-05-14; supply and TVL are in the hundreds of dollars, and the holder count is whatever BaseScan says it is today. We lead with those numbers rather than hide them. The first millions of every synthetic dollar in this category have come from anchor capital, not organic retail; the protocol is structured for that sequence, and this page exists so that capital can diligence quickly.

What is already real at this scale: the full mint-stake-redeem loop is live on mainnet, the hedging engine runs a live pilot-scale short sized against its disclosed founder float, reserves are attested hourly with a recoverable signature, and the protocol publishes its failures (see the findings corpus below) with the same cadence as its wins.

Contract registry and verification

14 of 17 deployed contracts are source-verified on both BaseScan and Sourcify. The two pending rows are disclosed with reasons and resolution paths. The verified source bundles are mirrored per address in the public contract registry, with a step-by-step independent verification guide in HOW_TO_VERIFY_KERNE.md.

Per-row notes, the retired-contract history, and the verification timeline live on /security/audits. Where deployed bytecode differs from current source, the divergence is disclosed with an operating rule at /security/deployed-vs-source.

Proof of reserves, signed hourly

Every hour the protocol publishes a signed attestation of reserves at /api/por/signed. The signature is EIP-191 personal_sign over the attestation hash; the canonical signer is the strategist EOA 0x09a2780ac8Be6D5d2d1F85A8D92b09D40C9CA37e. Recovering the signer takes three lines of code in JavaScript, Python, or foundry cast; the recipes are embedded in the response itself under _meta.verify and rendered on /transparency.

Since schema v4 the headline aggregate_solvency_ratio is the PSM stablecoin backing ratio (USDC reserve versus user-held kUSD). The legacy v1 vault's alarming share-basis figures remain published, demoted to a labeled known_issue_vault_v1 block, because hiding them would be worse than explaining them.

Audit pipeline

No external audit has been completed yet. We say that plainly rather than decorate it. The current state of the pipeline:

• Internal, done and published: two adversarial campaigns in May 2026 (a 10-auditor red team across all 80 contracts, then an 8-agent multi-surface pass over contracts, bot, frontend, and infrastructure), 201 findings catalogued with severities and a triage order, full history at /security/audits.
• External, in progress (Hexens): Kerne has engaged Hexens for its first external smart-contract audit. The MSA is executed, signed by the founder as a self-employed individual with no entity or novation; fieldwork ran from July 13, 2026 and Hexens delivered its initial report on July 20, 2026, with remediation underway. The final report is still pending and nothing has been published yet. The auditor-facing scope is public: audits/SCOPE.md. The report pins its scope to five contracts at commit 0912c870: kUSD, skUSD, KUSDPSM, KerneVault and esKERNE.
• Reviewed commit versus deployed bytecode: these are separate facts and we publish both. The live peg stability module and the live skUSD run commit 0912c870 byte for byte, independently checkable on Sourcify. The live KerneVault does not: it was deployed on June 16, 2026 from earlier source, so the initial report's vault findings are open on that bytecode. That vault holds no user funds and has never issued a share, and no deposit opens into it until the remediated build is deployed and verified. The contract-by-contract map is at /security/deployed-vs-source.
• Sequencing: institutional-scale staking is gated on the published external report; the anchor terms encode that gate explicitly. The bug bounty at /security is the standing external channel in the interim.

The findings corpus: self-found, published

Kerne has found, classified, and published over two hundred findings against its own code, including Critical ones, before any external auditor was engaged. Read one way, that is a long list of mistakes. Read the way auditors read it, it is the difference between a team that knows its own system and a team that is about to be surprised. Every named finding carries a live status (open, mitigated, partial, closed) with the closing commit cited at /security/findings-tracker.

The honest residue: three places where deployed bytecode still lags current source, each with a mitigation and an operating rule, disclosed at /security/deployed-vs-source. That page exists so a reviewer finds context from us, not surprises on their own.

Governance and signer policy

Protocol administration sits with a 2-of-3 Gnosis Safe on Base: 0x52d3E450bA6c299B1B07298F1E87DD74732D4877. The Safe holds DEFAULT_ADMIN_ROLE across the deployed AccessControl contracts (with one current exception, below) and owns the treasury (verified in the April 2026 on-chain admin audit; timeline on /security/audits). On those contracts the first signer is hardware-backed and no single key can move protocol funds or grant roles. The one current exception is the skUSD vault, redeployed on 2026-07-03 to reset a distorted share price: on 2026-07-08 the Safe was granted DEFAULT_ADMIN and the bot strategist EOA was granted STRATEGIST, and the deployer Trezor retains both roles until a planned renounce after the July 2026 external audit, documented at /security/skusd-admin-status. Day-to-day automation (hedging, attestation signing) runs on a separate operational EOA that holds no admin roles.

Token-level disclosures: KERNE token history and skUSD admin role status.

Team

Kerne is built by three co-founders. The team is pseudonymous at this stage, and the protocol is deliberately structured so that nothing on this page requires trusting an identity: core admin roles sit with the 2-of-3 Safe, reserves are signed hourly by a key you can check, and the deployed source is verified. Identity disclosure to specific counterparties (an anchor, an audit firm) happens directly in those conversations.

Most of the code is written with AI under the founders' direction, and the commit trailers record it. We put that here rather than leave it to be found, because it explains why this dataroom is built the way it is. Code written this way earns more outside scrutiny, so the contracts went to Hexens for a paid external audit, a public bug bounty runs at kerne.fi/security, reserves are signed hourly against a key you can recover yourself, and every contract carries a verification status you can check on BaseScan and Sourcify without asking us. The two contracts whose deployed bytecode cannot be reproduced from any source we hold are named on the live risk surface.

Direct channels: [email protected], @KerneProtocol, Discord.

Runway

Protocol operations (the hedging engine, the hourly attestation signer, on-chain automation) are funded with an operational gas runway measured in months at the current transaction cadence. The treasury and insurance fund balances are small at genesis scale and verifiable on chain at the addresses in the registry above; the insurance fund is designed to capitalize from protocol revenue as it accrues, and we do not decorate either number.

Anchor terms

Documented terms exist for anchor mints of $1M to $5M: tranche-structured (mint and hold first, staking gated on the external audit), a guaranteed points multiplier, a fee-share rider on staked tranches, a named transparency page, and full exit symmetry through the PSM. The terms document is available on request to qualified counterparties: [email protected].

Regulatory positioning

kUSD is a protocol-issued synthetic dollar, not a fiat-backed payment stablecoin. kUSD itself pays no yield for holding it; yield exists only through the separate skUSD staking receipt. This is the structure the category has converged on under the US GENIUS Act framework and analogous legislation elsewhere, whose perimeters target fiat-backed payment stablecoins: protocol synthetic dollars with a separate staking receipt sit outside that perimeter, with sUSDe and sUSDS as the worked public examples. None of this is legal advice; it is stated so a reviewer knows how the protocol is positioned and can test the reasoning.

Known weaknesses, stated by us first

• Scale. TVL and holder count are tiny. Everything above is real but small; judge the machinery, not the odometer.
• No completed external audit. Hexens fieldwork ran from July 13, 2026 and its initial report landed on July 20, 2026, with remediation underway; until the final report is published, the verification story rests on the internal corpus, the verified source, and the signed PoR.
• Hedge venue concentration. The funding leg currently runs on a single venue (Hyperliquid). Multi-venue routing exists in the engine and arms as additional venues are added.
• Legacy v1 vault. The original WETH vault is in a documented degraded state, holds no user funds, and is excluded from backing math. Its raw share figures look alarming in isolation; the signed PoR labels them as a known issue rather than hiding them.
• Deployed-versus-source divergences. Three, each with an operating rule, at /security/deployed-vs-source.
• Short realized history. The published APY is a live formula output, not a realized track record; realized-cost telemetry accumulates daily and the realized story will be reported from data as the history lengthens.