How Does Sanctum Infinity Work?

Liquid Staking|Risk B|5 mechanisms|4 interactions

Sanctum Infinity is a liquid staking pool that holds a basket of Solana LSTs (like JitoSOL, mSOL, bSOL) under a single INF token. Instead of picking one staking provider, INF diversifies across many, spreading validator risk. With $178M in deposits, 3 security audits, and over a year of clean operation, it earns a B grade. The innovation of holding LSTs inside an LST introduces unique risks: if any one constituent token is compromised, the entire pool can be drained.

TVL

$167M

Sector

Liquid Staking

Risk Grade

B

Value Grade

C-

Core Mechanisms

Liquid-Staking/Meta-LST

Novel

INF token — a liquid staking token that holds a diversified basket of underlying Solana LSTs (mSOL, JitoSOL, bSOL, etc.)

First-ever LST-of-LSTs. INF holds a portfolio of Solana liquid staking tokens, diversifying validator risk. Yields aggregate from all underlying LSTs. Over 3 audits (OtterSec, Sec3, Neodyme).

Oracle/On-Chain-Exchange-Rate

Novel

Direct on-chain exchange rate reads from each constituent LST's stake pool program, eliminating external oracle dependency

Instead of using AMM pricing or external oracles, Infinity reads exchange rates directly from SPL stake pool programs. This eliminates constant-product pricing but trusts each LST's reported rate.

AMM/Router

Multi-LST swap router enabling instant swaps between any Solana LSTs at fair exchange rate without AMM slippage

Sanctum's router allows swaps between LSTs using on-chain exchange rates rather than AMM curves. Any LST in the pool can be used as the redemption path, improving exit liquidity.

Staking/Basket-Diversification

Weighted basket of Solana LSTs with dynamic allocation across validators and staking protocols

INF diversifies across multiple staking protocols and validators. Reduces single-validator risk but introduces composition risk. Basket weights can be adjusted by governance.

Redemption/Instant-Swap

Instant redemption via any constituent LST in the pool, avoiding unbonding periods

Unlike single-LST redemptions that may require epoch waits, INF holders can swap instantly through any liquid asset in the pool. Liquidity depends on pool depth per constituent.

How the Pieces Interact

Meta-LST basketOn-chain exchange rate oracleHigh

If a constituent LST's stake pool reports a manipulated or inflated exchange rate, an attacker could deposit that LST into Infinity at an inflated value and drain other assets from the pool at fair rates, stealing from all INF holders.

Meta-LST basketBasket diversificationMedium

A compromised or exploited LST in the basket (e.g., validator slashing, smart contract exploit) contaminates the entire INF pool. The diversification benefit becomes a contagion vector.

Instant swap routerMeta-LST basketMedium

During a de-peg event for one constituent LST, arbitrageurs can swap into the depegging LST from Infinity at fair value, draining the pool of good LSTs and concentrating the pool in the impaired asset.

On-chain exchange rate oracleInstant swap routerLow

Exchange rate updates that lag actual validator performance could create brief mispricings. Flash loan or MEV strategies could exploit rate update timing for risk-free extraction.

What Could Go Wrong

  1. A single compromised LST in the Infinity basket can drain value from the entire pool if not detected quickly
  2. Pool relies on on-chain exchange rate oracles from each constituent LST's stake pool — a manipulated rate could enable theft
  3. Basket composition changes affect risk profile without depositor consent; new LSTs can be added that introduce unknown risks

Constituent LST Exploit Drains Infinity Pool

Tail

Trigger: A constituent LST in the Infinity basket suffers a smart contract exploit or validator slashing event that causes its real value to drop 50%+ while its on-chain exchange rate remains stale

  1. 1.Constituent LST (e.g., a smaller validator LST) is exploited; attacker drains underlying staked SOL LST's real value drops to near zero but on-chain exchange rate still reports normal rate
  2. 2.Arbitrageurs deposit large amounts of the compromised LST into Infinity at the stale exchange rate Pool receives worthless LSTs and issues INF tokens at full value; good assets diluted
  3. 3.Arbitrageurs immediately swap INF for healthy LSTs (mSOL, JitoSOL) via the instant swap router Pool is drained of high-quality LSTs; remaining pool composition is mostly the compromised asset
  4. 4.INF token value collapses as pool is concentrated in worthless LSTs All INF holders suffer proportional losses; trust in meta-LST model is destroyed

Risk Profile at a Glance

Mechanism Novelty5/15
Interaction Severity5/20
Oracle Surface1/10
Documentation Gaps1/10
Track Record3/15
Scale Exposure5/10
Regulatory Risk2/10
Vitality Risk5/10
B

Overall: B (27/100)

Lower score = safer

More on Sanctum Infinity

Related Liquid Staking Explainers