Security & monitoring

How every strategy in a Meta Vault is monitored, how a risk signal becomes a pause, an exit and a redeploy, and what a pause does to deposits and withdrawals.

Every strategy in a Meta Vault is monitored. An automatic pause stops the vault without moving funds, and any exit of capital is a transaction your approved signers execute. Monitoring pauses; your signers move money.

What is watched

• Security. Exploits and suspicious contract activity, and governance or oracle attacks on any strategy.
• Depegs. Of the deposit asset, or of assets held inside a strategy.
• Protocol health. TVL drops, utilization spikes and liquidity drains that would make an exit costly.

Hypernative and Blockaid are the default sources, and you can add your own.

From signal to response

The activation policy is configurable. A conservative policy waits for two of three sources to agree before acting.

1. Automatic pause

   A pre-signed pause from the monitoring wallet stops the vault, typically within seconds. No funds move.

2. Approved exit to idle

   Your approved signers deallocate the affected strategy’s position back to idle in the vault, typically within minutes. How much can exit depends on that strategy’s available liquidity.

3. Optional redeploy

   The affected strategy’s weight is set to zero, and idle funds go to strategies you already approved. The vault can then be unpaused.

Each step is an onchain transaction you can verify.

What a pause does

While paused	Status
Deposits and mints	Blocked
Withdrawals and redemptions	Blocked
Reward claims	Blocked
Keeper exits and allocations between the vault and its whitelisted strategies	Available, so capital can be pulled to idle
Admin functions, including unpausing	Available

The pause stays in place until it is lifted. The pauser role can also stop new deposits on their own, with setDepositsDisabled, while withdrawals stay open. That is the lighter option when a strategy needs watching but customers should still be able to exit.

Risks that stay with the strategies

A Meta Vault narrows what can happen to deposits, but some risk comes from the strategies themselves:

• Valuation. The vault values each position from the strategy’s own reported conversion rate. Strategies are reviewed before they are whitelisted for this reason.
• Liveness. If a strategy’s contract reverts when the vault values it, deposits and withdrawals stop until the strategy is removed. See Strategy lifecycle.
• Liquidity. A withdrawal larger than the idle buffer depends on strategies paying out. A withdrawal pays in full or reverts.

Evidence

Contract audit reports, SOC 2 Type II documentation and security policies are on the Trust Center. See also Audits & compliance.

Next steps

Roles & signing

Which wallet can pause, exit and redeploy.

Sentinel Vaults

The same protection on a single strategy.