> ## Documentation Index
> Fetch the complete documentation index at: https://yieldxyz.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & monitoring

> How every strategy in a Meta Vault is monitored, how a risk signal becomes a pause, an exit and a redeploy, and what a pause does to deposits and withdrawals.

Every strategy in a Meta Vault is monitored. An automatic pause stops the vault without moving funds, and any exit of capital is a transaction your approved signers execute. Monitoring pauses; your signers move money.

## What is watched

* **Security.** Exploits and suspicious contract activity, and governance or oracle attacks on any strategy.
* **Depegs.** Of the deposit asset, or of assets held inside a strategy.
* **Protocol health.** TVL drops, utilization spikes and liquidity drains that would make an exit costly.

Hypernative and Blockaid are the default sources, and you can add your own.

## From signal to response

The activation policy is configurable. A conservative policy waits for two of three sources to agree before acting.

<Steps>
  <Step title="Automatic pause">
    A pre-signed pause from the monitoring wallet stops the vault, typically within seconds. No funds move.
  </Step>

  <Step title="Approved exit to idle">
    Your approved signers deallocate the affected strategy's position back to idle in the vault, typically within minutes. How much can exit depends on that strategy's available liquidity.
  </Step>

  <Step title="Optional redeploy">
    The affected strategy's weight is set to zero, and idle funds go to strategies you already approved. The vault can then be unpaused.
  </Step>
</Steps>

Each step is an onchain transaction you can verify.

## What a pause does

| While paused | Status |
| - | - |
| Deposits and mints | Blocked |
| Withdrawals and redemptions | Blocked |
| Reward claims | Blocked |
| Keeper exits and allocations between the vault and its whitelisted strategies | Available, so capital can be pulled to idle |
| Admin functions, including unpausing | Available |

The pause stays in place until it is lifted. The pauser role can also stop new deposits on their own, with `setDepositsDisabled`, while withdrawals stay open. That is the lighter option when a strategy needs watching but customers should still be able to exit.

## Risks that stay with the strategies

A Meta Vault narrows what can happen to deposits, but some risk comes from the strategies themselves:

* **Valuation.** The vault values each position from the strategy's own reported conversion rate. Strategies are reviewed before they are whitelisted for this reason.
* **Liveness.** If a strategy's contract reverts when the vault values it, deposits and withdrawals stop until the strategy is removed. See [Strategy lifecycle](/documentation/platform/vaults/meta-vaults/vault-mechanics/strategy-lifecycle#a-strategy-that-stops-working).
* **Liquidity.** A withdrawal larger than the idle buffer depends on strategies paying out. A withdrawal pays in full or reverts.

## Evidence

Contract audit reports, SOC 2 Type II documentation and security policies are on the [Trust Center](https://trust.yield.xyz). See also [Audits & compliance](/documentation/security/audits-compliance).

## Next steps

<Columns cols={2}>
  <Card title="Roles & signing" icon="user-lock" href="/documentation/platform/vaults/meta-vaults/vault-mechanics/roles-signing-models">
    Which wallet can pause, exit and redeploy.
  </Card>

  <Card title="Sentinel Vaults" icon="shield-halved" href="/documentation/platform/vaults/sentinel-vaults">
    The same protection on a single strategy.
  </Card>
</Columns>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.