How Does Sanctum Infinity Work?
Sanctum Infinity is a liquid staking pool that holds a basket of Solana LSTs (like JitoSOL, mSOL, bSOL) under a single INF token. Instead of picking one staking provider, INF diversifies across many, spreading validator risk. With $178M in deposits, 3 security audits, and over a year of clean operation, it earns a B grade. The innovation of holding LSTs inside an LST introduces unique risks: if any one constituent token is compromised, the entire pool can be drained.
TVL
$167M
Sector
Liquid Staking
Risk Grade
B
Value Grade
C-
Core Mechanisms
Liquid-Staking/Meta-LST
NovelINF token — a liquid staking token that holds a diversified basket of underlying Solana LSTs (mSOL, JitoSOL, bSOL, etc.)
First-ever LST-of-LSTs. INF holds a portfolio of Solana liquid staking tokens, diversifying validator risk. Yields aggregate from all underlying LSTs. Over 3 audits (OtterSec, Sec3, Neodyme).
Oracle/On-Chain-Exchange-Rate
NovelDirect on-chain exchange rate reads from each constituent LST's stake pool program, eliminating external oracle dependency
Instead of using AMM pricing or external oracles, Infinity reads exchange rates directly from SPL stake pool programs. This eliminates constant-product pricing but trusts each LST's reported rate.
AMM/Router
Multi-LST swap router enabling instant swaps between any Solana LSTs at fair exchange rate without AMM slippage
Sanctum's router allows swaps between LSTs using on-chain exchange rates rather than AMM curves. Any LST in the pool can be used as the redemption path, improving exit liquidity.
Staking/Basket-Diversification
Weighted basket of Solana LSTs with dynamic allocation across validators and staking protocols
INF diversifies across multiple staking protocols and validators. Reduces single-validator risk but introduces composition risk. Basket weights can be adjusted by governance.
Redemption/Instant-Swap
Instant redemption via any constituent LST in the pool, avoiding unbonding periods
Unlike single-LST redemptions that may require epoch waits, INF holders can swap instantly through any liquid asset in the pool. Liquidity depends on pool depth per constituent.
How the Pieces Interact
If a constituent LST's stake pool reports a manipulated or inflated exchange rate, an attacker could deposit that LST into Infinity at an inflated value and drain other assets from the pool at fair rates, stealing from all INF holders.
A compromised or exploited LST in the basket (e.g., validator slashing, smart contract exploit) contaminates the entire INF pool. The diversification benefit becomes a contagion vector.
During a de-peg event for one constituent LST, arbitrageurs can swap into the depegging LST from Infinity at fair value, draining the pool of good LSTs and concentrating the pool in the impaired asset.
Exchange rate updates that lag actual validator performance could create brief mispricings. Flash loan or MEV strategies could exploit rate update timing for risk-free extraction.
What Could Go Wrong
- A single compromised LST in the Infinity basket can drain value from the entire pool if not detected quickly
- Pool relies on on-chain exchange rate oracles from each constituent LST's stake pool — a manipulated rate could enable theft
- Basket composition changes affect risk profile without depositor consent; new LSTs can be added that introduce unknown risks
Constituent LST Exploit Drains Infinity Pool
TailTrigger: A constituent LST in the Infinity basket suffers a smart contract exploit or validator slashing event that causes its real value to drop 50%+ while its on-chain exchange rate remains stale
- 1.Constituent LST (e.g., a smaller validator LST) is exploited; attacker drains underlying staked SOL — LST's real value drops to near zero but on-chain exchange rate still reports normal rate
- 2.Arbitrageurs deposit large amounts of the compromised LST into Infinity at the stale exchange rate — Pool receives worthless LSTs and issues INF tokens at full value; good assets diluted
- 3.Arbitrageurs immediately swap INF for healthy LSTs (mSOL, JitoSOL) via the instant swap router — Pool is drained of high-quality LSTs; remaining pool composition is mostly the compromised asset
- 4.INF token value collapses as pool is concentrated in worthless LSTs — All INF holders suffer proportional losses; trust in meta-LST model is destroyed
Risk Profile at a Glance
Overall: B (27/100)
Lower score = safer