Dromos Labs MetaDEX Relay

About Dromos Labs MetaDEX Relay

Dromos Labs implements the Relay, a vault that pools users’ staked weight in one sAERO and votes it across chains and gauges. Each deposit is split into a principal token claiming the stake and a yield token claiming its rewards. We have conducted a thorough review of the scope with a focus on liveness of withdrawals, share accounting and reward accounting:

Audit Summary

User withdrawals can only be processed once enough voting weight has returned from other chains. A leaf operator could delay the return of that weight by repeatedly resetting the gauge allocation cooldown on its chain, see Leaf operator can block the return of a Relay’s voting weight. The specification was partially changed and Dromos Labs plans not to use a leaf operator with local voting in its intended setups.

Share accounting is critical because the Relay pools all deposits, so each user must keep their fair share of the pool. The inflation protection was insufficient, since the bootstrap owner could withdraw the seed and inflate the share price so that pending depositors received zero shares, which has been resolved, see Insufficient protection against inflation attacks.

Rewards arrive in arbitrary tokens on several chains and pass through entrypoints and Relay modules before holders can claim them. Tokens left behind on an entrypoint by a swap batch could be swept by anyone, which has been resolved, see Intermediate tokens from a swap batch are left behind on the entrypoint.

We provide this audit report to assist in forming an opinion on the risk profile of MetaDEX Relay. In summary, we find that the codebase provides a good level of security, if operated under the assumptions documented in System Overview, Trust Model and System Considerations.

It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don’t replace other vital measures to secure a project.