Thanks for the tag @NeznaniJunak As you’ve already framed the trust model as layered, we just want to make that split explicit, because immutability only does its job on one of the two layers, and “human monitor vs. fully immutable” is a real trade-off with pros and cons on each side, not a clear win either way.
Vault layer (your contract) Immutability is great here. It kills the lever behind most DeFi rugs: a stolen or rogue admin key pushing a bad upgrade. No upgrade path, no setters, so a compromised key has nothing to pull. We back this fully.
Protocol layer (LayerBank and Sovryn) Immutability does nothing here, and the writeup blurs it a bit. If a venue gets exploited, a frozen vault doesn’t undo the loss. What protects users here is the ≤60% cap, fail-closed deposits, and redeemInKind, not immutability. And redeemInKind is really a vault-failure escape hatch, not a venue-failure one: if the vault accounting breaks but the venues are fine, it works and you exit to healthy protocols; if a venue gets drained, it just hands you a claim on an empty pool. @Eren_DAOplomats already flagged that both venues are Compound V2 forks, and that’s the case worth naming in the trust model: one bug hitting both at once, where the diversification doesn’t help (same code, same weakness) and the exit hatch returns two empty claims. That’s the one risk nothing in the current design covers.
Our suggestion on the design
We’d echo @ChronoTrigger on the Guardian/factory key being a multisig. Your design is actually already running a partial hybrid, immutable vault, pause-only guardian on the ERC-20 side — so the ask isn’t to add upgradeability back, it’s just to harden and name the one key you do keep. The other side of the trade is worth saying plainly to depositors: immutable also means no patch. If the audit misses something, no one can pause or fix it. That’s a fair call for a vault this simple, but it makes the audit the whole safety story, not just a milestone.
The architecture is genuinely well done. Where we’d push is demand, and this ties to something we reviewed earlier. TYKORA Prize Vaults was a no-loss lottery: deposit and earn a chance at the pooled yield. We supported the concept but landed on wrong timing for Rootstock, because the lending base wasn’t deep enough to make it work. Looking at the live LayerBank and Sovryn numbers, the two assets you can actually deploy (both venues live) tell different stories:
-
rBTC is deep but the yield is structurally low. On LayerBank it’s ~$1.71M supplied against only ~$25.8K borrowed (~1.5% utilization), so the ~2% APY there is almost entirely incentives, not real lending demand. Sovryn has more genuine borrowing (~29 rBTC supplied, ~28% utilization) but the organic rate is just 0.91% with no incentives. Same story either way: people borrow stables against BTC, not BTC itself, so there’s no real yield to optimize, and a vault that adds supply only pushes the rate lower. The deepest, safest asset is also the one with the least to earn. -
DOC is the real fit, and the best argument for the vault, deep and working on both venues. Sovryn is the strong side: ~720K DOC supplied, ~90% utilization, ~8.96% lend APR that’s held steady all week, organic borrow demand, not an incentive spike. LayerBank is shallow (~$154K, ~50% utilization) but shows ~19.77% because it’s incentive-boosted. One honest caveat on that spread: the 60% cap forces ≥40% to stay on the lower Sovryn rate, and piling into the shallow LayerBank side dilutes its incentive yield as you size up — so realized blended yield sits well under the 19.77% headline, and the rebalancer’s real job here is enforcing the cap, not capturing a spread. - USDRIF is worth noting as what you’re leaving on the table: it’s deep and genuinely working on LayerBank (~$370K, ~72% util, 10.65%), but it only exists on one venue, so the ≥2-adapter rule blocks it. The cleanest standalone market is the one the design can’t touch.
So it’s not uniformly thin, DOC genuinely fits, and that’s a real point in the vault’s favor. But it also means the demand case rests largely on one asset: DOC’s ~$720K organic base on Sovryn plus a shallow incentive-fed LayerBank pool, alongside rBTC where the depth is real but the yield isn’t. That sharpens rather than settles the question — is DOC alone a big enough base to justify Strategic-tier scope, and what’s a realistic 90-day TVL it can pull? That’s what we’d want sized before the RFC, and it’s the same thing @SEEDGov is pointing at.