Token DD Framework

Due diligence questionnaire for token issuers seeking onboarding to Kamino markets

6 Categories
23 Questions
1

Regulatory & Compliance

4 questions
1.1

Listing Authorization

Do you have legal approval or authorization to pursue listings and integrations with third-party protocols? Describe the approval process and the approving entity.

1.2

Issuer Information

Describe the issuing entity: regulated financial institution, crypto-native organization, SPV/trust, or other structured vehicle. If assets are held by an entity different from the issuer, describe the relationship.

1.3

Jurisdiction

Jurisdictions where the issuing entity is incorporated and operating. Note any that may impose restrictions on issuance, redemption, or user access.

1.4

Legal & Regulatory Matters

Any prior or ongoing legal, regulatory, or enforcement actions involving the issuer, affiliates, or the token. Include current status, outcomes, mitigations, and legal exposure across entities.

2

Token Operations

4 questions
2.1

Mint/Redeem: Process & Timing

Standard and worst-case processing times, settlement delays, fees, operational constraints. Whether mint/redeem is limited to business days, weekends supported, operating hours.

2.2

Mint/Redeem: Whitelisting Requirements

Who is permitted to mint or redeem. If restricted: currently whitelisted entities, criteria & process for whitelisting, blacklisting / revocation criteria.

2.3

Mint/Redeem: Limits

Per-transaction and time-based limits. How redemptions are prioritized when demand exceeds liquidity, whether partial redemptions are possible.

2.4

Mint/Redeem: Historical Activity

Historical minting and redemption data — provide datasets or dashboards if available.

3

Asset & Custody

6 questions
3.1

Underlying Holdings

What backs the token (cash, treasuries, loans, RWAs, crypto), with breakdown, supporting documentation, and disclosure of any rehypothecation.

3.2

Proof of Reserves

Proof-of-reserves or transparency reports. Service provider, methodology, attestation frequency, and where reports can be accessed.

3.3

Custody Arrangement

Custodians, segregation of accounts, third-party involvement, and insurance coverage if any.

3.4

Multisig & Authorized Actions

Multisig setup for operational control: signer composition, quorum, and which actions are authorized (move reserve assets, mint/move tokens).

3.5

Permitted Use of Underlying Assets

How underlying assets are used: held as cash equivalents vs invested (treasuries, credit, RWAs, DeFi, on-chain strategies).

3.6

Risk & Strategy Constraints

Restrictions on risk exposure, duration/maturity, leverage/rehypothecation, counterparty concentration.

4

Technical

5 questions
4.1

Smart Contract Audit

Independent third-party audits — auditors, links to reports. If unaudited, planned audit timelines.

4.2

Special Permissions

Token-2022 permissions, hooks, or freeze authorities currently or planned. Purpose and conditions for activation.

4.3

APIs

APIs / interfaces for pricing, yield, reference data — endpoints, access restrictions, rate limits.

4.4

Bridged Assets

If bridged: bridge deployment & process, trust assumptions, upgrade/admin controls, supported source/destination chains, one-way vs bi-directional.

4.5

Wrapped Assets

If wrapped: underlying asset, wrapping/unwrapping mechanics, source of yield (if yield-bearing), who controls the wrapping contract.

5

Oracle

2 questions
5.1

Oracle Source

Current oracle setup; previous, current, or planned work with oracle providers. For RWA assets (not stablecoins), provide the Chainlink oracle.

5.2

Oracle Integration

How the oracle is integrated and maintained, including fallback mechanisms.

6

Price & Liquidity

2 questions
6.1

Market Maker

Engaged market maker for price stability: entity & scope, secondary-market trading strategy, supported venues & hours, peg-tolerance requirements.

6.2

On-chain Liquidity

Whether the token is live on-chain. If yes: current venues and depth. If no: go-live timing and planned setup. Intent to use Kamino Liquidity Vaults.