defirisk.co
rubric v1.7.0

Admin has mint() with unlimited max

Sanctum's assessment for RD-F-042 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

CLOUD total supply is fixed at 1,000,000,000 tokens — no admin-callable mint function with unlimited max. INF (Infinity receipt token) minting is governed by the SPL stake pool program proportional to SOL deposits, not at admin discretion. The 4-of-7 multisig controls distribution of pre-minted tokens from cold storage, not new minting. No unlimited mint authority identified.

Sources #

Methodology #

Determine whether an admin-callable `mint` on a protocol token has no supply cap or an unlimited maximum supply.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sanctum factor RD-F-042 score green collected_at 2026-05-04 18:49:23