There's a layer above your curator
Vault research usually stops at the curator. There's someone above them.
@TermMax 's role documentation describes a protocol-level vault role that can set and update the curator of a vault, whitelist its allocators, and revoke that vault's pending guardian, pending timelock and pending market.
So the person managing the vault you deposited into can be replaced by someone who is neither you nor them.
Then look at the Guardian's actual powers. Revoke a pending timelock. Revoke a pending guardian. Revoke a pending market. Revoke a pending performance fee.
Every verb is attached to the word pending. The Guardian is a veto on things that haven't gone live. It isn't an undo button for something already accepted.
That's defensible design — a role that can reverse live state is its own attack surface. But it does change what the word "guardian" should make you feel when you see it on a vault page.
Before depositing, do you check who holds the role that can swap out the curator?
#termmax @TermMax
Vault research usually stops at the curator. There's someone above them.
@TermMax 's role documentation describes a protocol-level vault role that can set and update the curator of a vault, whitelist its allocators, and revoke that vault's pending guardian, pending timelock and pending market.
So the person managing the vault you deposited into can be replaced by someone who is neither you nor them.
Then look at the Guardian's actual powers. Revoke a pending timelock. Revoke a pending guardian. Revoke a pending market. Revoke a pending performance fee.
Every verb is attached to the word pending. The Guardian is a veto on things that haven't gone live. It isn't an undo button for something already accepted.
That's defensible design — a role that can reverse live state is its own attack surface. But it does change what the word "guardian" should make you feel when you see it on a vault page.
Before depositing, do you check who holds the role that can swap out the curator?
#termmax @TermMax