What's New in v5.2
What's New in v5.2 — Sovereign Infrastructure
Plan v5.2 "Sovereign Infrastructure" delivers privacy contracts, multi-vault routing, proof of solvency, autonomous AI memory, and sybil-resistant governance across the Vauban ecosystem.
Bastion (DeFi Platform)
VaultRouter — Multi-Vault Deposits
Deposit into the optimal vault with a single transaction. VaultRouter analyzes APY, capacity, and risk across all active vaults and routes your deposit for maximum yield.
- Optimal vault selection: On-chain routing logic picks the best vault based on current APY and capacity
- Multi-vault deposits: Split a single deposit across multiple vaults for diversification
- Auto-approve: Router handles token approvals internally — one transaction, not three
User deposits 1000 STRK
→ VaultRouter checks vaSTRK vault (12% APY, 80% capacity)
→ VaultRouter checks vawBTC vault (8% APY, 40% capacity)
→ Routes to vaSTRK (best risk-adjusted yield)
→ User receives vaSTRK LST tokensPortfolio Dashboard
Track your entire DeFi position in one view:
- Allocation breakdown: See how your assets are distributed across vaults and protocols
- Live APY comparison: Vauban vaults vs Ekubo, Nostra, Vesu — updated every 5 minutes
- Yield projection: Forecast earnings at current rates over 30/90/365 days
- Rebalancer alerts: Get notified when APY drift exceeds your threshold
Multi-Vault Rebalancer
Automated APY drift monitoring with configurable thresholds:
- Monitors all vault APYs every 30 minutes
- Triggers rebalance suggestions when drift exceeds threshold (default: 2%)
- Strategy templates: Conservative (stable vaults), Moderate (mixed), Aggressive (highest APY)
VaubanSwap (CoW Solver)
Starknet's only Coincidence of Wants solver for MEV-protected swaps:
- Batch settlement: Opposing intents matched off-chain, settled on-chain via VaubanSettlement
- Surplus capture: When CoW matching finds better prices than market, surplus goes to users
- AVNU fallback: Unmatched intents automatically routed through AVNU aggregator
- Zero MEV: No front-running possible — intents are signed off-chain with SNIP-12
Proof of Solvency
On-chain proof that Vauban reserves always exceed liabilities:
- Phase 1 (Live): Merkle root anchoring on Madara L3 via ProofRegistry contract
- Phase 2 (Planned): Full STARK proof via Stwo prover — cryptographically verify without revealing balances
- Weekly attestations: Automated data aggregation + proof anchoring every 7 days
- Public verification: Anyone can verify proof hashes on-chain
Yield DCA (YieldIntentVault)
Idle DCA funds earn yield while waiting for execution:
- Deposits into Nostra lending pools during idle periods
- 10% liquid buffer maintained for reliable execution
- Auto-unstake when execution triggers
- Per-user cap: 100K STRK, minimum stake: 10 STRK
Glacis Protocol (Post-Quantum Identity)
DaoGovernance — Sybil-Resistant DAO
One person = one vote governance using HumanAttestation SBTs:
- Sybil resistance: Voting power tied to attestation, not token holdings
- Quorum snapshotted per proposal: Prevents quorum manipulation attacks
- Voting delay > 0: Mandatory delay prevents flash-loan governance attacks
- Parameter update events: All governance parameter changes emit events for transparency
TimelockController
Time-delayed execution for critical operations:
- Proposer/Executor roles: Separation of proposal and execution privileges
- Configurable delay: Minimum waiting period before execution (default: 24 hours)
- Cancellation: Proposers can cancel pending operations
- Batch operations: Execute multiple calls in a single timelocked transaction
Privacy Contracts
StealthRegistry (ERC-5564)
Stealth addresses for private transactions:
- Stealth meta-addresses: Register once, receive at unlimited stealth addresses
- Ephemeral keys: Each transaction uses a unique derived address
- 20/20 tests: Comprehensive test coverage including edge cases
ConfidentialPool (Privacy Pools v1)
Pseudonymous transactions with Poseidon commitments:
- Deposit/withdraw with commitments: Poseidon hash commitments + nullifiers
- Reentrancy-protected: Guard on all state-changing functions
- felt252 bounds checking: Overflow protection on all arithmetic
- 29/29 tests: Full coverage including audit-hardened edge cases
Security Audit Results
v5.2 underwent a comprehensive 10-epoch security audit:
| Category | CRITICAL | HIGH | MEDIUM | LOW |
|---|---|---|---|---|
| Contracts (vauban) | 0 | 0 | 3 | 5 |
| Contracts (glacis) | 0 | 0 | 1 | 2 |
| Blog contracts | 0 | 0 | 1 | 2 |
| ProofRegistry | 0 | 0 | 2 (fixed) | 1 |
| Backend (CoW Solver) | 0 | 0 | 1 | 3 |
All CRITICAL and HIGH issues resolved. See the full audit report in the Brain knowledge base.
Test Coverage
| Component | Tests | Status |
|---|---|---|
| Blog contracts | 389 | All pass |
| Vauban contracts | 580+ | All pass (1 snforge limitation) |
| Glacis contracts | 127 | All pass |
| Brain Protocol | 2001 | All pass |
| Brain SDK | 165 | All pass |
| Brain MCP | 336 | All pass |
| Command Center | 800 | All pass |
| Backend (Bastion API) | 591 | All pass |
| Citadel | 133 | All pass |
| Total | 4500+ |
Deployment Status
| Service | Image | Status |
|---|---|---|
| Brain Protocol | v1.8.4 | Deployed |
| Command Center | v2.2.2 | Deployed |
| Citadel | v7 | Deployed |
| Bastion API | v2.5.5 → latest | Sprint 9 |
| Docsite | vdl-v2.5 → latest | Sprint 9 |
| ProofRegistry | — | Sprint 9 (Sepolia) |
| CoW Solver | — | Sprint 9 |