Skip to content
Reading depth

Each view includes the earlier layers; the complete engineer or auditor page is shown by default.

A vault share is a proportional claim whose asset value depends on the vault's recognized net assets, eligible share supply, fees, rounding, and redemption rules.

Container outline category cue

A vault share is a pooled share: a proportional claim on eligible vault net assets under stated mint, burn, fee, rounding, and redemption rules.

One vault can hold many positions for many depositors. Shares let the vault track proportional ownership without assigning each holder a separate copy of every underlying asset, debt, reward, and fee.

A unit in a pooled investment vehicle is a useful analogy. On-chain shares may be transferable, wrapped, bridged, or used as collateral before the vault can redeem its positions. The token balance, accounting value, executable redemption, and secondary-market price therefore need not be equal.

For a simple proportional model:

shareValue = eligibleNetAssets / totalEligibleShares
sharesMinted = depositAssets / preDepositShareValue
withdrawalAssets = burnedShares * preWithdrawalShareValue

The model must define liabilities, fees, pending deposits, queued withdrawals, virtual shares or assets, locked profit, and rounding. When a strategy earns 100 units while 1,000 shares remain outstanding, net assets can rise from 1,000 to 1,100 and modeled share value from 1.00 to 1.10 without changing holder balances.

  1. Determine pre-operation net assets and eligible share supply.
  2. Apply pending profit, loss, debt, fee, and queue accounting in the prescribed order.
  3. Quote the operation with explicit units, limits, slippage, and rounding.
  4. Transfer assets and mint shares, or burn shares and transfer or queue assets.
  5. Update totals exactly once and verify the user’s post-operation ownership.
  6. Expose accounting value separately from current market price and available liquidity.

Capital flow moves deposits and withdrawals. Claim flow mints, transfers, wraps, queues, and burns shares. Return flow changes share value only when underlying positions receive value, recognize gains, or allocate explicit incentives. Risk flow reduces net assets or dilutes shares and propagates when another protocol treats the share as collateral or as if it were the underlying asset.

The share does not pay return by itself. Its value changes because the vault’s underlying positions receive income, incur valuation changes, pay costs and fees, or suffer loss. Holders absorb net loss unless a named reserve, insurer, manager, or subordinated class bears it first.

Test the first and final depositors, zero assets or shares, donations, inflation attacks, tiny values, decimal mismatch, favorable and unfavorable rounding, fee-share dilution, locked profit, negative reports, repeated claims, queued withdrawals, partial liquidity, transfer hooks, reentrancy, wrappers, bridges, and collateral integrations. No deposit may mint valuable shares without value, and no burn may transfer more than its entitlement.

ERC-4626 defines one standard share interface and exact rounding expectations. OpenZeppelin’s ERC-4626 implementation documentation describes donation or inflation risk in empty vaults for one library implementation. A vault still needs independent strategy, accounting, control, and token-behavior review. The implementation documentation was reviewed 2026-08-10.

  • “One share always equals one underlying token.” Profit, loss, fees, dilution, and rounding change the ratio.
  • “Share price equals market price.” Accounting, previewed execution, limits, queues, and secondary trading are different values.
  • “Transferability guarantees redemption.” The vault can be illiquid, paused, impaired, or subject to a queue.

Continue to the vault and its standardized ERC-4626 interface.

Machine-readable model

Key equations

Canonical expressions come from the structured concept record. KaTeX renders the notation, while the plain-text expression and variable table keep its meaning and units inspectable without JavaScript. Read the narrative above for the model's domain, assumptions, and rounding rules.

  1. Equation 1

    Plain-text equation: shareValue = eligibleNetAssets / totalEligibleShares

  2. Equation 2

    Plain-text equation: sharesMinted = depositAssets / preDepositShareValue

Assurance contract

Security properties

These structured statements define desired behavior. Their stable IDs can bind tests, invariants, specifications, audit findings, or proof results without turning descriptive review advice into an assurance claim.

Desired · not evaluated: No test, audit, or proof result is implied until scoped evidence is linked to this property.

  1. Shares minted correspond to contributed net value under the stated pre-deposit accounting and rounding model

  2. Burning shares cannot transfer more net assets than the holder's entitlement and available redemption rules permit

  3. Deposits, withdrawals, profits, losses, fees, donations, and queued claims preserve aggregate ownership after explicit rounding

  4. Token balance, accounting share value, previewed execution, maximum execution, and market price remain separately identified

Knowledge check

Quiz

Answer in your own words, then open the model answer.

What problem does Vault share exist to address?

Model answer

Vault shares let many depositors enter and leave a pooled accounting system without assigning each user a separate copy of every underlying position.