Modular yield aggregation protocol that combines ERC-4626 with the Diamond proxy pattern (EIP-2535), giving every yield strategy its own independently upgradeable facet behind a single curated vault.
Vault Router is a modular yield aggregation protocol that combines ERC-4626 and the Diamond proxy pattern (EIP-2535) to route depositor funds across multiple DeFi yield strategies like Morpho Blue, Aave V3, and Pendle PT from a single vault interface.
Most curated vaults today use cloned proxies or simple upgradeable proxies, which lock every strategy into one monolithic contract. Vault Router gives each yield strategy its own Diamond facet instead, so strategies can be added, replaced, or removed through diamondCut without redeploying the vault or migrating user funds. The ERC-4626 surface stays stable while the strategy layer evolves, an onchain Strategy Registry formally allow lists what capital can touch, and ERC-7201 namespaced storage keeps every facet collision-free across upgrades.
A curator role governs target allocations across strategies, but it is deliberately low-privilege: it can only move capital between owner-allow-listed strategies and only within owner-set per-strategy caps and an idle reserve floor that keeps funds liquid for instant withdrawals. The curator can never upgrade facets, change fees, or withdraw funds, which makes it safe to delegate day-to-day rebalancing and harvest cycles to an automated offchain operator.
Around that core sits a production-grade safety layer. A NAV circuit breaker bounds how far the share price may move between checkpoints, reverting anomalous deposits and withdrawals on the hot path and latching the vault into a paused state on a keeper-detected breach. Strategy quarantine isolates a failing, exploited, or stuck protocol so it cannot brick vault-wide pricing while the rest keeps operating. An async withdrawal queue handles exits larger than idle liquidity, a post-deposit share-lock window blocks deposit-harvest sandwiching, and performance fees are gated behind a High Water Mark so they are only ever taken on net new gains.
The result is a curator-driven vault architecture that gives DeFi protocols and asset managers a more modular, auditable, and upgradeable foundation than the monolithic curated vaults currently in production.
Keeper Network: https://github.com/saintsama98/banana-markets-rebalancer
Interface: https://github.com/saintsama98/banana-markets-interface
Vault Router was built end to end during the hackathon, from an empty repo to a tested, multi-strategy vault. We started from the core thesis that curated vaults should not lock every strategy into one monolithic contract, and built outward from there. We first stood up the Diamond core (EIP-2535) with an ERC-4626 vault surface on top, then moved all facet state onto ERC-7201 namespaced storage so strategies can be cut in and out without collisions. On that base we shipped four yield-strategy facets behind a uniform IStrategy shape: Aave V3, Morpho Blue, Pendle PT, and Compound V3 (Comet), each addable or replaceable through diamondCut with no vault redeploy or fund migration. We then built the curator and allocation layer: an onchain Strategy Registry that allow-lists what capital can touch, a low-privilege curator role gated by owner-set per-strategy caps and an idle-reserve floor, and a rebalancer that is fault-tolerant so one misbehaving strategy is skipped rather than bricking the batch. Finally we added the production safety layer: a NAV circuit breaker that bounds share-price movement and latches the vault on a breach, strategy quarantine that isolates a failing protocol from vault-wide pricing, an async withdrawal queue for exits larger than idle liquidity, a post-deposit share-lock window against deposit-harvest sandwiching, and High-Water-Mark-gated performance fees. Throughout, every facet was covered by unit tests against mocks plus RPC-gated fork tests against live Arbitrum protocols. The suite finished the hackathon at 194 passing tests, with an ERC-7201 storage-namespace invariant and slither/fmt checks wired into CI.
Not started.
