How Vaults & ERC-4626 Work

What Is a Vault?

A DeFi vault is a smart contract that accepts deposits of an asset, deploys that capital into a yield strategy, and issues tokenised shares representing each depositor's claim on the underlying pool. As yield accrues, each share becomes redeemable for more of the underlying asset.

Vaults abstract the complexity of yield generation behind a single deposit transaction. Rather than manually supplying to Aave, harvesting COMP rewards, swapping them back to USDC, and redepositing — a vault does all of this automatically, continuously, and gas-efficiently by spreading the cost of harvesting across all depositors.

The vault pattern is DeFi's most composable primitive. The share token — representing your claim on the vault's assets — is itself an ERC-20 token that can be held, transferred, used as collateral, or deposited into another vault. This composability is what makes vaults central to almost every DeFi yield strategy.

Yearn Finance, launched in 2020, popularised the vault model with its yVaults — automated strategy vaults that rotated between lending protocols to maximise yield. The problem: every protocol invented its own interface, its own accounting logic, and its own share token semantics. Integrating with ten different vaults meant writing ten different adapters. ERC-4626 was the industry's answer.

Before ERC-4626

Before the standard existed, every vault protocol invented its own interface. The result was a fragmented landscape where integrators, aggregators, and composable protocols had to write custom code for each vault they wanted to support.

Yearn's yVaults used deposit(uint256 _amount) and withdraw(uint256 _shares). Compound's cTokens used mint(uint256 mintAmount) and redeem(uint256 redeemTokens). Aave's aTokens rebased balances automatically rather than using a share-price model. Convex, Ribbon, and every structured product had their own unique interface.

The downstream effects were significant. Aggregators like Yearn, Idle, and Rari Capital had to maintain bespoke integrations for each underlying protocol.Lending protocols wanting to accept vault tokens as collateral needed custom oracle and accounting adapters. On-chain analytics tools struggled to generalise across vault types. The ecosystem was reinventing the same accounting wheel — deposits, withdrawals, share price — over and over with incompatible interfaces.

Joey Santoro (Fei Protocol) and Zefram Lou proposed ERC-4626 in November 2021. It was finalised and merged into the EIPs repository in March 2022. Within months, Yearn, Aave, Morpho, Sommelier, and dozens of other protocols had adopted it.

The ERC-4626 Standard

ERC-4626 defines a standard interface for yield-bearing vault tokens. A compliant vault exposes a consistent set of functions for depositing, withdrawing, converting between assets and shares, and querying vault state.

A vault that implements ERC-4626 is also an ERC-20 — the share token is the vault token. The standard extends ERC-20 with four deposit/withdrawal functions, four view functions for asset/share conversion, and two preview functions for slippage estimation.

The distinction between deposit/withdraw (asset-denominated) and mint/redeem (share-denominated) is deliberate. It allows callers to specify exactly what they want — "I want to deposit exactly 1,000 USDC" vs "I want to mint exactly 1,000 shares" — without needing to pre-calculate the conversion themselves. The vault handles rounding according to the standard's rounding direction rules (always round in the vault's favour, never the user's, to prevent rounding exploits).

Deposit & Withdrawal Mechanics

Every interaction with an ERC-4626 vault reduces to the same fundamental exchange: assets in, shares out (deposit) or shares in, assets out (redeem). The exchange rate between them — the share price — encodes the vault's accumulated yield.

A common misunderstanding: depositing into a vault does not lock your assets in the vault contract. The vault immediately deploys them into the underlying strategy — Aave, Curve, or wherever. The vault's totalAssets() function must return the current value of all deployed capital, not just cash held idle. This is why high-utilisation lending vaults may have withdrawal delays: the assets are lent out and must be recalled before they can be returned to the depositor.

Withdrawal limits are handled via maxWithdraw(owner) and maxRedeem(owner) — functions that return the maximum withdrawable amount at a given moment. If a strategy has liquidity constraints (e.g. locked in a time-locked contract, or deployed into an illiquid position), these functions return less than the full balance. Callers should always check max before attempting a withdrawal to avoid revert.

Share Price & Accounting

Share price is the ratio of total assets to total shares. It starts at 1:1 when the vault is deployed and increases monotonically as yield accrues — unless the strategy suffers a loss.

The share price formula is:

When a new depositor joins, the vault calculates how many shares to issue at the current share price, ensuring existing shareholders are not diluted. If 1,000 USDC was deposited when the share price was $1.00, and a second depositor joins when the share price is $1.10, the second depositor receives only ~909 shares for their 1,000 USDC. When they redeem those 909 shares, they will receive 909 × (current share price) — capturing their proportional share of yield from the point of entry forward.

Performance fees are typically collected by diluting shares rather than by taking assets. When the vault harvests yield, the protocol mints new shares to the fee recipient equal to the performance fee percentage of the yield. This dilutes existing shareholders slightly but does not require moving assets out of the strategy. Yearn charges a 20% performance fee and a 2% management fee, implemented this way.

Yield Strategies

A vault is only as good as its strategy. ERC-4626 standardises the accounting layer but says nothing about what the vault does with the assets. Strategy design is where the real engineering and risk management live.

Multi-strategy vaults — popularised by Yearn v3 and Morpho Vaults — allocate capital across multiple strategies simultaneously, with a vault manager or algorithm deciding the allocation. This diversifies strategy risk but adds governance complexity. Morpho's MetaMorpho vaults let curators (risk managers) configure the supply queue and allocation caps, while the underlying Morpho protocol handles lending execution.

Strategy rebalancing — moving capital between allocations — is triggered by keepers: automated bots (or Gelato, Chainlink Automation) that call harvest and rebalance functions when conditions are met (e.g. once per day, or when pending yield exceeds the gas cost of harvesting). Vault users benefit from shared harvest gas costs — a vault with $10M TVL amortises the same harvest transaction across thousands of depositors.

Composability & Integration

ERC-4626's standardisation unlocks composability that was previously impossible at scale. Any protocol that integrates one ERC-4626 vault automatically works with all of them.

Lending protocols can accept ERC-4626 vault tokens as collateral without custom adapters. Aave v3 and Morpho accept yield-bearing tokens (sDAI, stETH, aTokens) through ERC-4626 wrappers. A user can deposit USDC into a Yearn vault, receive yvUSDC, deposit yvUSDC as collateral on Morpho, and borrow ETH — earning vault yield while maintaining a leveraged position.

Aggregators and routers can route user deposits to the highest-yielding compatible vault in a single transaction. DeFi Saver, 1inch, and similar tools treat all ERC-4626 vaults identically — deposit function, share price, preview functions — without bespoke integration.

Vault-of-vaults (meta-vaults) accept an ERC-4626 vault token as their underlying asset and layer additional strategies on top. Convex's staked Curve LP tokens wrapped in ERC-4626 can be deposited into a Yearn meta-vault — multiple layers of yield stacking with a single interface.

Risks & Failure Modes

Vaults aggregate risk. A deposit into a vault inherits every risk of every protocol the vault touches — and adds vault-specific risks on top.

The strategy exploit risk is the most severe. When Euler Finance was exploited in March 2023, vaults that had deployed into Euler — including several Yearn strategies — faced immediate losses. ERC-4626 standardises the interface but not the security model: a well-audited vault wrapping an exploited protocol loses just as much as a poorly-audited one.

Vault-level insurance via Nexus Mutual, InsurAce, or Sherlock can cover smart contract exploits for a premium typically ranging from 1–5% APY. For institutional depositors, this insurance may be worth more than the yield itself — particularly for newer or less-audited vaults.

Real-World Implementations

ERC-4626 has been adopted across the DeFi stack — from simple lending wrappers to institutional-grade structured products. The standard has become the default for any new yield-bearing protocol launched after 2022.

Pendle Finance deserves special mention as a showcase of ERC-4626 composability. Pendle takes any ERC-4626 vault token and splits it into two components: a Principal Token (PT) redeemable for the underlying at maturity, and a Yield Token (YT) that receives all yield generated before maturity. This lets users trade future yield, buy yield at a fixed rate, or speculate on yield movements — all built on top of the standard vault interface with no custom vault integration required.