Skip to content
Reading depth

Each view includes the earlier layers; the complete engineer or auditor page is shown by default.

A vault is an on-chain asset container that accepts or controls assets, applies accounting and access rules, and may deploy capital through one or more strategies.

Container outline category cue

A vault is an on-chain container that controls assets, accounting, access, and possibly one or more strategies.

Users can hold one vault claim instead of repeatedly operating every lending, staking, liquidity, or hedging position themselves. The vault packages deposits, share accounting, allocation, fees, limits, reporting, and exits. That convenience concentrates dependencies rather than eliminating them.

A managed account or pooled investment vehicle is a useful analogy. A smart contract vault does not by itself establish a regulated fund, legal entity, fiduciary duty, protected custody arrangement, disclosure regime, or investor remedy. Its code can automate rules while governance, keepers, oracles, adapters, and upgrades retain control.

  1. Admit an eligible asset under deposit caps, allowlists, recipient rules, and current valuation.
  2. Transfer assets and mint a vault claim using pre-operation accounting and disclosed rounding.
  3. Keep required liquidity and allocate only approved amounts to strategies or adapters.
  4. Record every received claim, debt, reward, fee, pending operation, and impairment.
  5. Report profit and loss without treating deposits, withdrawals, or token donations as income.
  6. Rebalance or unwind within authorization, oracle, slippage, debt, and loss limits.
  7. Burn or lock shares and transfer, reserve, or queue the holder’s eligible assets.

Capital flow connects deposits, strategy deployment, income, fees, repayment, and withdrawals. Claim flow connects shares, underlying protocol positions, debt, and queues. Return flow starts with named borrowers, traders, networks, services, asset issuers, or incentives. Risk flow reaches shareholders through every strategy, oracle, control, and liquidity dependency.

vaultNAV = recognizedAssets - recognizedLiabilities
shareValue = vaultNAV / eligibleShareSupply

This is an accounting model, not a promise of immediate liquidity. Each vault must define recognition, timestamps, prices, fees, pending claims, impairment, and whether previews or withdrawals can execute at the modeled value.

The vault wrapper creates no return. Underlying positions earn borrower interest, trader fees, network issuance, service payments, asset income, incentives, or price changes. Costs and fees reduce that result. Unless an explicit reserve, insurance policy, manager guarantee, or subordinated class intervenes, loss reduces the value available to vault-share holders.

Reconcile controlled assets, strategy debt, claim tokens, liabilities, reserves, fees, pending deposits and withdrawals, and total share supply. Test first and last user, donation and inflation attacks, rounding, unusual tokens, reentrancy, partial strategy withdrawals, loss reports, locked profit, stale oracles, keeper races, allocation limits, paused states, emergency exits, upgrades, allowance scope, fee changes, and residual assets after shutdown.

ERC-4626 standardizes one single-asset tokenized-vault interface while explicitly leaving allocation and accounting implementation details to each vault. Interface compatibility is not a security, solvency, liquidity, or performance certification.

  • “A vault removes complexity.” It moves complexity behind one claim and concentrates it in accounting, integrations, and control.
  • “Assets in the vault contract equal all vault assets.” Capital can be deployed, borrowed, queued, impaired, or represented by claims.
  • “Standardized vault means safe vault.” An interface says how to call a product, not whether its strategy or controls are sound.

Inspect the holder’s vault share, the broader fund boundary, and ERC-4626.

Machine-readable model

Key equations

Canonical expressions come from the structured concept record. KaTeX renders the notation, while the plain-text expression and variable table keep its meaning and units inspectable without JavaScript. Read the narrative above for the model's domain, assumptions, and rounding rules.

This concept does not require one canonical equation. Its mechanism and state transitions remain the authoritative explanation; do not invent a formula merely to make the topic look quantitative.

Interactive module

Test the mechanism

Change assets, shares, return, fees, deposits, and withdrawals; inspect NAV, ownership, and dilution.

Open Vault share-accounting lab on its full lab page

Assurance contract

Security properties

These structured statements define desired behavior. Their stable IDs can bind tests, invariants, specifications, audit findings, or proof results without turning descriptive review advice into an assurance claim.

Desired · not evaluated: No test, audit, or proof result is implied until scoped evidence is linked to this property.

  1. Controlled assets, deployed positions, liabilities, fees, reserves, queued claims, and share supply reconcile across every state transition

  2. Deposits and mints cannot receive too few shares, and withdrawals and redemptions cannot transfer excess assets, outside explicit slippage and rounding rules

  3. Strategy allocations, debt limits, allowed assets, counterparties, and privileged operations remain authorized and bounded

  4. Pauses, emergency exits, upgrades, reports, fee changes, and recovery paths cannot silently rewrite existing holder entitlements

Knowledge check

Quiz

Answer in your own words, then open the model answer.

What problem does Vault exist to address?

Model answer

Vaults package custody, share accounting, strategy execution, fees, limits, and redemptions behind a reusable interface so users can hold one claim instead of operating every position.