Kim Exchange NFT Marketplace Security Case Study
Cantina's collaborative security audit approach helped Kim Exchange secure their NFT marketplace across multiple development stages.
Kim Exchange, a decentralized exchange utilizing novel mathematical asset pricing, partnered with Cantina for security reviews of their NFT marketplace launch. The engagement demonstrated a multi-stage approach, beginning with a solo review in May 2024 that identified only 4 lows and 4 informational issues in Kim Tokens.
The Security Review Process
In November 2024, Cantina conducted a comprehensive team review with researchers Cccz and Chinmay Farkya serving as associate researcher. The assessment identified 23 total issues across severity levels:
- Critical Risk: 2
- High Risk: 2
- Medium Risk: 7
- Low Risk: 6
- Gas Optimizations: 2
- Informational: 4
Researchers commended Kim Exchange’s streamlined architecture prioritizing simplicity in core products while managing complexity in peripheral contracts. The team’s internal review process demonstrated exceptional thoroughness and commitment to security consciousness.
Collaborative Impact
Kim Exchange’s representative highlighted how Cantina researchers embedded themselves in their development process, collaborating directly with engineers to scrutinize every marketplace layer. This close partnership enabled real-time issue identification and resolution through ongoing dialogue rather than distant review.
Security researcher Cccz noted the experience working with the team proved “incredibly rewarding,” praising each member’s dedication and professionalism throughout the collaboration.
The repeated engagements between Cantina and Kim Exchange strengthened their relationship, allowing researchers to explore increasingly sophisticated attack vectors and ensure comprehensive vulnerability coverage.