Authors

Gauntlet

March 2, 2026

Blog

What Features Do Earn Vaults Need? A Technical Deep Dive for Aera

Key Takeaways

Key Takeaways

■  Fintechs and institutions exploring onchain yield need vault infrastructure that delivers on two fronts: a smart contract layer that enforces what a vault can and cannot do, and an operational layer that ensures the vault performs reliably day to day. Composable strategies, cross-chain reach, robust risk controls, and production-grade tooling are all required to support the service levels their users expect.

■  Aera, a protocol incubated by Gauntlet, provides this infrastructure: a modular, non-custodial vault infrastructure where strategies are executed under enforced onchain constraints, enabling everything from lending aggregation and auto-compounding to leveraged positions and cross-chain yield allocation. In an independent comparison by ExaGroup, Aera received the highest overall score among vault infrastructures reviewed.

■  Choosing Aera means choosing a single, vertically integrated partner for the full stack: vault infrastructure, risk management, strategy design, and operational execution. There is no need to separately source a risk manager, a curator, and an infrastructure provider. One partner, one point of accountability.

■  The guardian service layer, which covers execution automation, continuous monitoring, and strategy override capabilities, is as critical as the smart contract architecture itself. For partners whose end users expect seamless, reliable experiences, this operational layer defines the quality of the integration.

■  Two live use cases illustrate the range of what Aera enables: KAST’s consumer-facing stablecoin earn product, bringing DeFi yield to 500,000+ users through a one-click interface, and leveraged RWA strategies for token issuers like FalconX and Apollo/Securitize that unlock new utility for tokenized assets through onchain composability.

Introduction

The convergence of stablecoin growth and fintech interest in DeFi yield has surfaced a specific infrastructure problem. Financial institutions, neobanks, and payment platforms seek to offer users returns on stablecoin balances. The yield exists; it is distributed across lending protocols, fixed-income instruments, and structured strategies across multiple chains. However, accessing it reliably, at scale, with the operational and security properties these companies require, is a different matter.

The challenge is not whether a vault can be deployed. It is whether the vault infrastructure supports operational correctness in line with real user expectations: clear semantics for deposits, withdrawals, and settlement; and the capacity to absorb discrete inflows and outflows without turning every volatility event into a support incident. Many vault products available today were designed for crypto-native users, not for enterprises embedding yield into consumer products where withdrawal reliability and operational transparency are non-negotiable.

Just as importantly, the integration itself must be seamless. Fintechs need a single integration point that abstracts away multi-chain complexity, gas management, and protocol-level operations so their engineering teams can focus on user experience rather than DeFi plumbing. A vault that generates yield but creates integration overhead is not a solution for these teams; it is a liability. The ideal infrastructure should feel invisible to the end user and lightweight for the developer.

Aera was purpose-built for this. Built by the team at Gauntlet, DeFi’s leading risk manager, Aera is a vertically integrated yield stack: programmable vault infrastructure, institutional-grade risk management and a turnkey operational layer, all from a single partner. The sections that follow break down how it works, what it enables, and what it looks like in production.

Aera: Overview

Aera is a non-custodial vault protocol incubated by Gauntlet, the team that has been managing risk across DeFi since 2018, at peak overseeing risk parameters covering up to 80% of all DeFi total value locked (TVL). Gauntlet’s risk models currently oversee over $48 billion in protocol TVL, and its curated vault strategies combine over $1.5 billion in TVL across Morpho, Drift, Symbiotic, Aera, and other protocols. 

Gauntlet incubated Aera because no existing vault infrastructure met its requirements as a risk manager. Existing solutions either lacked the onchain constraint enforcement needed for institutional-grade risk management, or required stitching together separate providers for infrastructure, curation, and operations. Aera was designed to unify these under a single, vertically integrated stack.

The core design principle is straightforward: strategy logic and execution can be as sophisticated and adaptive as needed, leveraging off-chain computation and quantitative models, while the constraints on what a vault operator can actually do are enforced onchain on a per transaction and parameter level.

Each vault has an owner (typically the capital allocator or integrating institution) and one or more guardians (the entities executing strategy operations). Guardians submit bundles of operations to the vault, but every action must comply with a pre-approved allowlist of contracts, function signatures and input parameters. A configurable hooks system enforces additional constraints, such as slippage limits, borrowing factor bounds, and asset restrictions at the point of execution. If any operation in a bundle fails validation, the entire submission reverts.

In practical terms, this means partners and depositors can verify exactly what actions their vault is permitted to take: which protocols it can supply to, what maximum slippage is tolerable on a rebalancing trade, what borrowing limits apply, and which assets are in scope. These rules are defined upfront, enforced automatically at the smart contract level, and fully auditable onchain. Any external party can independently verify the vault’s approved action space and confirm that the guardian has not exceeded its permissions. The vault simply cannot deviate from its approved parameters.

Aera supports both single-depositor vaults (suited for treasury management or bespoke deployments) and multi-depositor vaults that issue ERC20 deposit receipt tokens, enabling tokenized strategies where multiple participants share a common allocation. Multi-depositor vaults use a provisioner contract with asynchronous supply/redemption requests filled by solvers, decoupling user-facing operations from underlying strategy execution.

Each multi-depositor vault can be integrated with the Gauntlet App and the Gauntlet API, allowing convenient position management through an optimized user interface for end users. 

Aera vaults can allow one or more deposit tokens so users can choose the most convenient path to enter the vault. Vault owners may restrict access to certain users through onchain whitelists/blacklists.

Since launch, Aera-powered vaults have attracted over $100 million in TVL and more than 3,000 individual depositors (onchain metrics via Dune).

In a recent independent comparison of vault infrastructures by ExaGroup, which evaluated Aera alongside Veda, Lagoon Finance, and IPOR, Aera received the highest overall score (4.0 out of 5), with particular strengths in security and risk management.

Strategy Composability

For earn programs targeting competitive, sustainable yields, the infrastructure needs to support not a single yield source but a composable set of strategies that can be mixed, weighted, and rebalanced as conditions evolve. This is where Aera’s architecture delivers a distinct advantage over alternatives: the strategy space is not limited to what a single smart contract can compute.

Aera’s guardian model enables multi-step interaction bundles: swap, deposit, and stake sequences, or rebalancing between venues with different rate profiles, all executed atomically within a single transaction. Because the guardian can interact with any pre-approved DeFi protocol, the vault’s opportunity set is broad and continuously extensible. In practice, this enables several categories of strategy within a single vault:

Lending aggregation. The guardian monitors supply APYs across protocols and rebalances allocations to pursue favorable risk-adjusted rates, simulating supply levels to balance yield capture against concentration and liquidity risk.

Fixed-income exposure. Strategies can allocate to fixed-rate instruments such as Pendle principal tokens, locking in defined yields for a portion of the portfolio.

Basis trading. Vaults can access basis trade yield through instruments such as USCC, Ethena’s USDe and Resolv, adding a yield primitive structurally distinct from lending rates.

Leverage. The vault deposits collateral, borrows against it, and redeploys the proceeds. Borrowing factor constraints are enforced at the smart contract level, and the guardian’s rapid response capability governs the viability of leveraged positions.

Auto-compounding. Rewards across positions, including protocol incentives, interest accrual, and token emissions, are claimed by the vault, converted to the base denomination, and redeployed automatically. Gas costs and manual overhead are absorbed by the infrastructure. For the end user of a stablecoin vault for instance, the experience could be as simple as USDC in, USDC out, with yield accruing continuously. Without this capability built into the vault, partners would need to build and maintain their own claiming, conversion, and redeployment pipelines.

Gauntlet USD Alpha (gtUSDa) demonstrates this composability in production: a multi-strategy vault combining lending aggregation with fixed-income and basis trade exposure across chains and protocols. Aera provides flexibility in how strategies are managed. Gauntlet can design, deploy, and fully operate a strategy on behalf of a partner, or the partner can retain ownership and manage their own allocation using Aera’s infrastructure directly, with Gauntlet providing tooling, risk oversight, and operational support as needed.

Cross-Chain and Cross-Protocol Integration

Yield fragmentation across chains is one of the primary obstacles for institutions seeking onchain returns. The most attractive rates and the deepest liquidity are rarely co-located on a single network. An infrastructure that confines capital to one chain leaves yield on the table.

Aera is designed to operate across EVM-compatible chains and Solana, and is already compatible with over 10 networks. Users can deposit from multiple chains simultaneously; for Gauntlet USD Alpha, deposits are currently supported from Ethereum Mainnet, Base, Arbitrum, and Optimism. The guardian then allocates capital to pre-approved protocols on any supported chain. Cross-chain transfers are executed via established bridging infrastructure such as Circle’s CCTP, with slippage and fee constraints enforced at the smart contract level. This decouples the user-facing deposit experience from the yield-generating chains: a fintech integrating on Base does not need to expose its users to the operational complexity of other networks.

At the protocol level, Aera is already integrated with leading DeFi platforms, including Morpho, Drift, and Pendle. The integration surface continues to expand, and all existing Aera vaults automatically benefit as new chains and protocols are added. Adding a new protocol requires configuring validation hooks and updating the approved allowlist, without modifying core vault contracts. For earn programs, this is the pragmatic answer to protocol churn: venues will be added and retired over time, and the infrastructure accommodates this without architectural changes.

Risk Management

Risk management is not simply another feature. It is the most important competitive differentiator in vault infrastructure, and the factor that determines whether an institutional integration is viable. That conviction led to building Aera from the ground up, with risk management as the foundational design constraint rather than an afterthought.

Gauntlet brings an unmatched track record among vault infrastructure providers. Eight years of DeFi risk management. Risk models protecting over $48 billion in protocol TVL. Over $1.5 billion in curated vault strategies. At peak, risk parameters covering up to 80% of all DeFi.

Other providers deliver vault infrastructure and leave partners to source their own risk management and strategy curation separately. With Aera, the vault defines the permissible action space through onchain constraints, and Gauntlet’s team can actively manage risk within it: monitoring conditions, adjusting allocations, and intervening when necessary. It is a single, vertically integrated stack with one point of accountability.

Gauntlet’s risk management approach is quantitative, continuous, and model-driven. The team runs proprietary simulation models that stress-test vault allocations against historical and hypothetical market scenarios, including liquidity shocks, stablecoin depegs, and protocol exploits. These models inform allocation decisions and risk limits in real time, not just at onboarding. Key elements of the approach include:

Real-time monitoring and response. Gauntlet’s systems continuously track APYs, liquidity depth, collateral quality, and protocol health across every venue the vault interacts with. When conditions deteriorate, the guardian can adjust allocations or exit positions before losses materialize.

Concentration and liquidity risk limits. Position sizing is tied to real-time DEX and vault liquidity. Exposure to any single venue, asset, or chain is bounded by dynamically updated caps that account for how the vault’s own allocation affects underlying market conditions.

Stablecoin risk parameters. Aggregate exposure to non-blue-chip stablecoins is capped (e.g., 40% in gtUSDa), with collateral exposure constrained by spot DEX liquidity. This limits tail risk from stablecoin depegs.

Stress testing and backtesting. Every strategy is evaluated against historical data and simulated adverse scenarios before deployment. Ongoing performance is benchmarked against the opportunity set, and risk parameters are adjusted as market conditions evolve.

Guardian Service: Data, Execution, and Risk-Off Capabilities

The smart contract layer defines what a vault can do. The guardian service determines what it actually does, and how quickly, reliably, and safely. For integration partners, this operational layer governs the day-to-day experience their users have: whether yields are captured efficiently, whether the vault responds to market dislocations, and whether redemptions are processed predictably. Aera’s transaction execution services are second to none in this space, providing the data to react to onchain market events, onchain safety limits that bound the guardian’s actions, and the infrastructure to execute on them with single-block response time.

Data and strategy intelligence. The guardian operates a continuous data pipeline that monitors APYs, liquidity conditions, collateral quality, and market volatility across all approved protocols and chains. This feeds into Gauntlet’s optimization engine, which evaluates allocation decisions against a risk-adjusted objective function informed by years of quantitative DeFi research. A guardian admin panel provides full visibility into current allocations, parameter settings, historical rebalances, and projected yields, available to integration partners for their own monitoring and compliance requirements.

Automated execution with single-block response time. The guardian executes rebalances, reward claiming, compounding, and cross-chain transfers on a configurable cadence. For strategies where response speed is critical, such as leveraged positions where adverse price moves can erode the liquidation buffer, the guardian can respond to onchain events within a single block on supported chains, using an HSM-backed key management service from isolated infrastructure.

Strategy overrides and pause capabilities. In extreme conditions, such as a liquidity crunch, an oracle failure, or a protocol exploit, the operator can pause the guardian service and trigger risk-off actions, including withdrawing from positions or holding funds idle. Parameterized strategies enable the team to execute these overrides with a single command. This reflects a deliberate design choice: prioritizing capital preservation and withdrawal availability over temporary yield during periods of stress.

Precise NAV calculation. Accurately pricing DeFi positions in real time is a non-trivial challenge that many vault providers leave to integrators. Aera’s guardian service includes precise net asset value (NAV) computation across all underlying positions, accounting for lending rates, LP positions, reward accruals, and cross-chain holdings. This gives institutional partners the pricing accuracy their reporting and settlement workflows require.

Security

Aera’s security model operates across multiple layers:

Onchain submission verification. Every guardian operation must pass through two gates: the approved allowlist (restricting which contracts and functions the guardian can call) and the hook system (enforcing parameter-level constraints on each operation). Hooks can limit slippage, cap bridging fees, restrict interactions to specific assets, and constrain borrowing factors. Because hooks are custom smart contracts, constraints of arbitrary complexity can be enforced. 

Fine-grained permission system. Multiple guardians can operate with distinct permissions, for example, separating reward claiming from core allocation, narrowing each system’s authorization. At the contract level, permissions can include optional timelocks for governance actions, while at the guardian level, role separation provides operational security. Vault owners retain emergency controls: pause halts all guardian submissions, and owners can remove guardians and update approved operations. 

Onchain Circuit Breakers. Aera’s contracts include configurable, onchain auto-pausing circuit breakers that activate during unexpected price volatility. This prevents deposits and redemptions from occurring at erroneous prices. Once markets stabilize and signals recover, onchain deposits and redemptions can safely resume.

Entry and exit security. The provisioner’s synchronous mode includes cooldowns and refund controls; asynchronous requests are filled by solvers at validated prices, with batch solving supported. These mechanics give fintech integrators the settlement predictability their products require.

Audit and adversarial testing. Aera contracts have been audited by Spearbit and OpenZeppelin. A Cantina security competition targeted the architecture, and an active Immunefi bug bounty program runs alongside.

Use Cases

Integrating Stablecoin Yield in Fintech Apps: KAST

KAST is a global financial platform built on stablecoin rails, offering services including a stablecoin credit card, fiat on/off-ramp integrations, and crypto spending across 150 million merchants in over 160 countries. In January 2026, KAST launched KAST Earn, powered by the Aera-based Gauntlet USD Alpha (gtUSDa) strategy, making sustainable DeFi yield available to its 500,000+ users worldwide. The product currently offers a variable APY of 4 to 9% on USDC and USDT, with capital automatically rebalanced across Base, Arbitrum, Optimism, and Ethereum Mainnet to capture the most competitive rates.

The integration abstracts DeFi complexity entirely from the end user: deposits are one-click, gas fees are absorbed by the vault, and there are no lock-up periods. Earnings accrue through vault share tokens, and users can transfer funds back to their KAST spending account at any time, creating a seamless loop between saving and spending. Under the hood, the vault allocates to various strategies, including Morpho lending markets and automatically, gaslessly re-allocates based on Gauntlet’s optimization engine.

From a vault infrastructure perspective, KAST maps directly onto Aera’s design: a tokenized multi-depositor vault with ERC20 units; a provisioner handling synchronous and request-based flows; cross-chain allocation that accesses yield across networks without requiring KAST to manage multi-chain infrastructure; and a guardian service whose execution and risk management capabilities support the operational reliability a consumer-facing product demands.

Unlocking Token Utility for RWA Issuers: FalconX and Apollo/Securitize

While the KAST integration illustrates a consumer-facing earn product, Aera’s infrastructure also enables a distinct category of use case: giving token issuers the tools to add programmable, composable functionality to their tokens through onchain vault strategies.

The FalconX levered RWA strategy demonstrates this pattern. Pareto Credit Vaults are onchain structured credit facilities where liquidity providers fund institutional loans and receive credit vault (CV) tokens. The Gauntlet-powered, Aera-based strategy uses FalconX CV tokens as collateral on Morpho to borrow USDC, which is used to purchase additional CV tokens, a looping strategy that amplifies the underlying credit yield within risk parameters enforced by the hook system. For FalconX as an issuer, the vault transforms a static tokenized position into a composable, yield-enhanced strategy with functionality that would not exist without programmable vault infrastructure.

The Apollo/Securitize collaboration, launched in April 2025, applies the same pattern: Securitize’s sACRED, the tokenized version of Apollo’s Diversified Credit Fund, is deposited into a Gauntlet-curated vault on Morpho, where the looping strategy borrows USDC against sACRED collateral and reinvests, enhancing the underlying credit yield through DeFi composability. 

For RWA issuers and platforms evaluating Aera, these use cases point to a broader proposition: vault infrastructure that turns tokenized assets from passive holdings into active, composable instruments, with onchain constraints governing leverage, execution managed by a dedicated guardian service with single-block response time, and a credible risk-off path when conditions warrant it.

Blog

View the full presentation

Read the full paper

Want Gauntlet in

your inbox?

Sign up to get notified about our latest research.

Thank you. You'll hear from us soon.

Contact our team

Tell us about your protocol’s needs

1/4 Name

First, tell us your name

2/4 Contact Info

Tell us know to reach you.

Contact method

Address must be correctly formatted

3/4 Protocol Info

Tell us about your protocol.

Protocol type

4/4 Details

Just one more thing...

Success!

Thank you! You'll hear from us soon.

Monthly Email Updates

Stay connected to Gauntlet research and analysis

Receive a roundup of our latest research, analysis,
and product updates each month

Thank you for subscribing to our email list! Check your inbox for the latest form Gauntlet’s team.
Oops! Something went wrong while submitting the form.