How To Audit Sanctum Infinity INF 5.48% On $156M TVL

What You Will Verify In 24 Hours

Sanctum Infinity (INF) pays 5.48% on $149.45M TVL as of November 11. That is 41 basis points above Sparklend USDS at 5.07%. On a $120,000 position, the difference is $492 annually. But if INF depegs 2% once due to concentrated validator risk or redemption failure, you lose $2,400. The audit pays for itself in avoided downside.

This is the 24-hour checklist to verify safety before you allocate capital.

Prerequisites: You need a Solana wallet, access to Solscan or Solana Beach, and the ability to execute a test transaction with 0.1 SOL. If you have not used Solana before, complete wallet setup first.

Hour 0-3: Validator Set Decentralization Query

Sanctum Infinity does not run validators directly. It holds a basket of Sanctum-supported liquid staking tokens. Each LST delegates to a validator set. Your job is to confirm that the aggregate validator exposure is not concentrated in a single entity, data center, or jurisdiction.

Start at app.sanctum.so/infinity. The interface shows the constituent LSTs and their percentage allocations within the INF pool. As of the most recent data, 20% of Infinity is delegated to newly whitelisted LSTs to incentivize LST creation. The remainder is spread across established LSTs like JitoSOL, mSOL, and validator-specific tokens.

For each LST holding more than 5% of the pool, trace its validator set:

• Navigate to Solscan and search the LST mint address
• Check the staking account distribution under the "Validators" tab
• Cross-reference each validator against stakewiz.com for skip rate (network average is approximately 2.5%; anything above 4% is a red flag)
• Verify geographic and data center diversity using validators.app

Sanctum states that Infinity delegates to validators that are geographically and jurisdictionally decentralized and are not part of the minimum security group. Confirm this claim by spot-checking at least three of the largest constituent LSTs. If a single validator controls more than 15% of aggregate stake across the INF basket, document it. That is concentration risk.

Solana has no slashing currently, but validator performance still matters. A validator with chronic downtime or high skip rates reduces effective yield. If the weighted average skip rate across INF's validator exposure exceeds 3%, the advertised 5.48% APY is overstated.

Expected outcome: You should see stake distributed across at least 30 distinct validators, with no single entity exceeding 10% of total INF-delegated stake. If you find concentration above that threshold, reduce your position size or skip the opportunity.

Hour 4-8: Redemption Mechanism Testing

Sanctum advertises instant withdrawals with no warmup period and zero fees. Test this claim with real capital before you deploy a full position.

Navigate to app.sanctum.so/infinity. Connect your Solana wallet. Acquire a small amount of INF by swapping 0.1 SOL into the pool. The interface should execute the swap at fair value with no trading fee. Sanctum's documentation states that Infinity swaps are 0% fee; LST issuers pay Sanctum a share of staking rewards instead.

Wait one hour. Then initiate a withdrawal of your 0.1 SOL equivalent back to SOL. The system should offer two paths: instant withdrawal via the Infinity AMM pool, or epoch-bound unstaking that follows Solana's standard cooldown (approximately two to three days). Confirm both paths exist and that the instant withdrawal completes within one slot (roughly 400 milliseconds).

Inspect the transaction on Solscan. Verify that no withdrawal fee was deducted. The documentation mentions a "minimal withdrawal fee" in some contexts, but current implementation shows zero. If you observe a fee, calculate its impact on net yield. A 0.1% exit fee on a position you turn over quarterly reduces effective APY by 40 basis points.

Test the epoch-bound redemption timeline by checking the current epoch number at solanabeach.io. Solana epochs last approximately two days. If you initiate an epoch-bound withdrawal, your SOL will be unlocked at the start of the next epoch plus one. This is standard across all Solana LSTs, not specific to INF. The risk is that during the unstaking window, you are exposed to price volatility but cannot exit.

Expected outcome: Instant withdrawal executes in under 10 seconds with zero fees. Epoch-bound redemption shows an ETA of 2-3 days. If instant withdrawal fails or incurs a fee above 0.05%, the advertised yield advantage over alternatives evaporates.

Hour 9-14: Governance Control Verification

Sanctum's protocol upgrades require approval from an 11-member multisig. The members include representatives from Jupiter, Jito, Sol Strategies, and Solblaze. Your task is to verify the multisig composition, voting threshold, and recent proposal history.

Start at research.sanctum.so. The governance section lists active proposals and historical votes. Check the multisig address on Solscan. The on-chain program authority should match the documented multisig. If the addresses do not match, the documentation is stale or the control structure has changed without public notice.

Sanctum distributed CLOUD, its governance token. The verified Solana mint is CLoUDKc4Ane7HeQcPpE3YHnznRxhMimJ4MyaUqyHFzAu. CLOUD holders vote on partner qualification, meaning which LSTs are eligible for inclusion in the Infinity pool. Check the token distribution on Solscan. If a single wallet holds more than 30% of CLOUD supply, governance is effectively controlled by one entity regardless of multisig structure.

Review the most recent three proposals. Look for parameter changes related to fee splits, validator whitelisting, or withdrawal restrictions. The current fee structure splits swap revenue 90% to liquidity providers and 10% to the protocol vault. If a recent proposal adjusted this split in favor of the protocol without a corresponding increase in APY, the governance is extracting value from depositors.

Cross-reference the multisig signers against public Solana ecosystems roles. If any signer is anonymous or has no verifiable on-chain history, that is a risk flag. The multisig should require at least 6 of 11 signatures for execution. A lower threshold makes the protocol vulnerable to collusion or compromise.

Expected outcome: Multisig address matches documentation, requires 6-of-11 threshold, and has no single CLOUD holder above 25%. Recent proposals show transparent voting with diverse participation. If governance is opaque or token distribution is concentrated, reduce position size accordingly.

Hour 15-20: Historical Depeg And Incident Search

LST depegging is the failure mode that converts yield into loss. If INF trades 5% below its fair SOL value and you exit at that price, you realize a $6,000 loss on a $120,000 position. That loss eliminates more than a decade of yield advantage over the 5.07% alternative.

Search for historical depeg incidents on Solana LSTs. The most common triggers are validator slashing (Solana has none currently), smart contract exploits, or liquidity crises during market crashes. Check Sanctum's audit history at learn.sanctum.so/docs. The programs have been audited by Sec3 with publicly linked reports. Download the most recent audit and search for critical or high-severity findings related to exchange-rate manipulation, stale validator sets, or withdrawal-queue edge cases.

Navigate to defillama.com/protocol/sanctum-infinity and examine the TVL chart for the past 90 days. INF TVL has decreased 9.9% over the past 30 days. A slow decline suggests organic outflows, not a crisis. A sudden drop of more than 20% in 24 hours indicates a depeg event or exploit. Check the corresponding price chart on CoinGecko or CoinMarketCap. INF should trade within 1% of fair value (calculated as the weighted average of underlying LST values). If historical price data shows deviations above 3%, investigate the cause.

Search Twitter and Solana Discord for mentions of "Sanctum depeg" or "INF exploit" in the past 12 months. Filter for posts from credible analysts like ZachXBT or Solana core contributors. If no incidents appear, the protocol has a clean operational history. If you find a depeg event, examine how quickly the peg was restored and whether depositors suffered permanent losses.

Check for recurring audit findings. If the same vulnerability class appears in multiple Sec3 reports (for example, oracle staleness or reentrancy in withdrawal logic), the protocol may have systemic code quality issues even if no exploit has occurred.

Expected outcome: Zero depeg events in the past 12 months, audit reports with no unresolved critical findings, and TVL drawdown under 15% in any 30-day window. If you find a depeg event with losses exceeding 2%, the historical risk profile is incompatible with a 41-basis-point yield advantage.

Hour 21-24: Rate Sustainability And Yield Source Breakdown

Sanctum Infinity generates yield from two sources: staking rewards from the underlying LSTs, and swap fees captured by the Infinity AMM pool. The advertised 5.48% APY is the sum of both streams. Your task is to verify that this rate is sustainable and not inflated by temporary incentives.

Start with the staking component. Typical Solana LST APY ranges from 5.9% to 7.5%, depending on MEV capture and validator performance. INF's weighted average staking yield should fall within this range. If it does not, either the constituent LSTs are underperforming or the advertised APY includes non-staking sources.

Check the swap fee component. Sanctum states that Infinity is the only Solana LST to distribute yield continuously every slot, thanks to the Infinity V2 upgrade. The pool captures fees from users swapping between LSTs within the basket. During high-volatility periods or liquid staking migrations, swap volume increases and fee revenue rises. During low-volatility periods, this component approaches zero.

Navigate to DefiLlama's Sanctum Infinity page and examine the APY history chart. If the current 5.48% is significantly above the 30-day average, the rate may be inflated by a temporary spike in swap activity. Calculate the 90-day median APY. If it is below 5.2%, the current rate is not sustainable and will mean-revert within weeks.

Compare INF's yield to other Solana LSTs. JitoSOL, the largest permissionless LST, currently pays approximately 6.2% due to MEV rewards. Marinade's mSOL pays approximately 5.9%. If INF pays less than these alternatives, the only reason to hold it is diversification across multiple validator sets. That diversification reduces idiosyncratic validator risk but also caps upside from high-performing validators.

Expected outcome: The 5.48% APY consists of approximately 5.1% from staking and 0.38% from swap fees. The 90-day median APY is within 20 basis points of the current rate. If the staking component is below 5%, the underlying LSTs are underperforming and you should choose a direct LST position instead.

Common Failure Modes In Sanctum INF Vetting

Most depositors skip the validator-level trace. They see that Infinity holds mSOL and JitoSOL, assume those are decentralized, and stop. That assumption is correct for those specific LSTs, but it ignores the 20% allocation to newly whitelisted LSTs. A new LST might delegate 80% of its stake to a single validator run by the LST issuer. If that validator goes offline or censors transactions, the LST depegs and drags INF's fair value down with it.

Another failure mode is treating instant withdrawal as guaranteed liquidity. Instant withdrawal works only if the Infinity AMM pool has sufficient SOL liquidity on the other side. During a market crash, everyone exits simultaneously and the pool becomes one-sided. At that point, instant withdrawal either fails or executes at a 3-5% discount to fair value. The epoch-bound redemption path still works, but you are locked for 2-3 days while the market moves against you.

A third failure mode is ignoring CLOUD token distribution. If governance is controlled by insiders, they can change fee splits or add low-quality LSTs to the basket without meaningful community input. Check the top 10 CLOUD holders. If they are all Sanctum team wallets or early investors, governance is theater.

What To Watch On-Chain Next

After you deploy capital into INF, monitor these on-chain signals weekly:

• TVL trend on DefiLlama: a decline above 15% in 7 days suggests loss of confidence or a better alternative appearing
• INF price on CoinGecko or CoinMarketCap: any deviation above 2% from fair value is a liquidity or depeg warning
• Validator skip rates on stakewiz.com: an increase in aggregate skip rate above 4% reduces effective yield
• CLOUD governance proposals at research.sanctum.so: watch for fee changes or validator whitelisting votes

Set an alert for any Sanctum-related audit report or exploit disclosure. Follow Sanctum's official Twitter and the Sec3 audit feed. If a critical vulnerability is disclosed, you have a two-to-six-hour window to exit before the market reprices the risk.

Compare INF's APY to direct LST alternatives weekly. If JitoSOL or mSOL consistently pay 80+ basis points more than INF, the diversification benefit does not justify the opportunity cost. Exit INF and reallocate to the higher-yielding LST unless you have a specific thesis that validator diversification will prevent a tail-risk event within your holding period.

The Takeaway

You have a 24-hour protocol to verify validator decentralization, test redemption mechanics, confirm governance structure, and search for historical depeg incidents. Sanctum INF pays 5.48% on $149.45M TVL, which is 41 basis points above alternatives. On $120,000, that difference is $492 annually. But a 2% depeg costs $2,400. The audit checklist above prevents that loss.

If INF passes all four checkpoints, it is a viable yield position for users who value validator diversification and instant withdrawal optionality. If it fails any checkpoint, reallocate to a direct LST like JitoSOL or mSOL. The on-chain data required to make that decision is public. Most depositors do not check it. You just did.

For additional context on vetting newly tracked yield opportunities, see How To Vet New DeFi Yield Positions Within 2 Hours and Best Places To Stake Crypto (With Real Yields). Both provide parallel frameworks for validating on-chain income streams before capital deployment.

Frequently Asked Questions

What is the main risk difference between Sanctum INF and direct Solana LSTs like JitoSOL?

Sanctum INF holds a basket of multiple LSTs, which diversifies validator risk but also introduces indirect exposure that is harder to audit. JitoSOL delegates to a known validator set that you can verify directly. INF's 5.48% yield includes swap fees that fluctuate with trading volume, while JitoSOL's 6.2% comes primarily from MEV rewards and staking. If you value transparency and maximum yield, choose the direct LST. If you want validator diversification and instant withdrawal optionality, INF is the better fit.

How long does it take to fully redeem Sanctum INF back to SOL during a market crash?

Sanctum offers two redemption paths. Instant withdrawal via the Infinity AMM pool completes in one slot (under 10 seconds) if the pool has sufficient liquidity. During a crash, everyone exits simultaneously and the pool becomes one-sided. At that point, instant withdrawal either fails or executes at a 3-5% discount to fair value. The epoch-bound redemption path takes approximately two to three days, following Solana's standard unstaking schedule. You cannot accelerate this timeline. If you need guaranteed liquidity within 24 hours, INF is not suitable.

How do I verify that Sanctum's 11-member multisig actually controls protocol upgrades?

Navigate to research.sanctum.so and locate the governance section. Copy the documented multisig address. Open Solscan and search for that address. Check the on-chain program authority for the Sanctum Infinity contract. The program authority address must match the multisig address. If they do not match, the documentation is outdated or the control structure has changed without disclosure. Also verify that the multisig requires at least 6 of 11 signatures for execution. A lower threshold makes the protocol vulnerable to collusion.

What validator skip rate threshold should disqualify a Sanctum constituent LST?

The Solana network average skip rate is approximately 2.5%. Individual validators below 4% are acceptable. If a validator consistently exceeds 4%, it is underperforming and reduces effective yield. If you find that a constituent LST in the Infinity basket delegates more than 15% of its stake to a validator with a skip rate above 4%, that LST is dragging down INF's overall performance. Calculate the weighted average skip rate across all INF validator exposure. If the aggregate exceeds 3%, the advertised 5.48% APY is overstated.

When does the 41-basis-point yield advantage over Sparklend USDS justify the additional complexity of vetting Sanctum INF?

On a $120,000 position, 41 basis points is $492 annually. The 24-hour audit checklist in this article takes approximately three hours if you have prior Solana experience. At that rate, you are earning $164 per hour of due diligence work. If you plan to hold the position for at least six months and you already use Solana, the vetting is worth the time. If you are new to Solana or your position size is below $50,000, the complexity cost exceeds the yield benefit. Choose the simpler option.