What Are DeFi Vaults and Why Do They Matter?

February 10, 2026·29 min read

A high-yield savings account pays you around 4% APY right now. Not bad. But what if you could take that same dollar, deposit it into a smart contract, and have a professional risk manager automatically leverage it into 10-20% yield using tokenized real-world assets?

That's what DeFi vaults do. And it's why companies like BlackRock, Apollo, and a $2B risk management firm called Gauntlet are pouring capital into them.

This post breaks down DeFi vaults from scratch. No finance background required. By the end, you'll understand what vaults are, how professional risk managers use them to build leveraged yield strategies with real-world assets, and why this might be the most important infrastructure shift happening in finance right now.

The catalyst for this post is a keynote by Gauntlet at Vault Summit 2025 (hosted by Morpho in Buenos Aires). The talk lays out a compelling case for why vaults are "the connective tissue" making real-world assets useful in DeFi. Let's unpack it.

What problem are we solving?
So what is a vault?
Who decides where the money goes?
What are RWAs?
How vaults make RWAs useful
The looping strategy, explained
Why everyone wins
What is Morpho?
Pool-based vs. P2P lending
Vaults vs. funds
What's still missing
Where is this going?

What problem are we solving?

Say you own shares in a private credit fund. It earns 10% annually. You want to borrow against those shares to buy even more of the fund (leveraging your position to amplify returns). In traditional finance, you can do this. But there are two catches.

First, the minimum size is around $50 to $100 million. If you don't have that kind of capital, you're out.

Second, it's a mountain of paperwork. Weeks of back-and-forth with banks, legal teams, and compliance departments. And after all that, the loan might not even get approved.

This is the world of traditional finance. Products exist, but they're gated behind high minimums, slow processes, and opaque intermediaries. Your savings account? The bank takes your deposit, lends it out at 5-8%, and gives you a fraction back. The spread is their profit. You have no visibility into what they're doing with your money, and no way to opt out of their strategy.

DeFi (decentralized finance) removes a lot of these intermediaries. Instead of a bank deciding what to do with your money, a smart contract does. The rules are written in code, visible to anyone, and execute automatically. No paperwork, no minimums, no weeks of waiting.

But DeFi has its own problem: it's complicated. Picking which protocol to lend on, what interest rate to accept, how much risk to take, when to rebalance. Most people don't want to manage that. They want to deposit their money and have someone competent handle the rest.

That's where vaults come in.

So what is a vault?

A vault is a smart contract that pools money and puts it to work according to a predefined strategy.

You deposit assets (say, USDC). The vault gives you shares representing your portion of the pool. The vault then deploys that capital into yield-generating strategies: lending it out, providing liquidity, or investing in other protocols.

How do your shares grow in value? The share price is calculated as total assets in the vault / total shares outstanding. Say 10 people each deposit 100 USDC. The vault now holds 1,000 USDC and has issued 1,000 shares. Each share is worth 1 USDC. Over time, the vault earns 100 USDC in interest. Now the vault holds 1,100 USDC, but there are still only 1,000 shares. Each share is now worth 1.10 USDC. You didn't do anything; the vault earned yield, and your shares automatically reflect that.

When you want your money back, you redeem your shares and get your original deposit plus your portion of the profits.

Think of it like a savings account, but:

The "bank" is code running on a blockchain, not a building
The strategy is publicly visible (you can read exactly what the vault does)
There's no minimum deposit (anyone with a wallet can participate)
You can withdraw at any time (subject to available liquidity)
The fees are typically lower because there's no fund structure, no compliance team, no office lease

ERC-4626: the standard that makes vaults composable

In 2022, the Ethereum community adopted a standard called ERC-4626 for tokenized vaults. It defines a common interface: deposit, withdraw, check your balance, check the share price.

Why does this matter? Before ERC-4626, every protocol built vaults differently. Integrating with one vault didn't help you integrate with another. ERC-4626 is like USB-C for vaults. Once you support the standard, you can plug into any vault that implements it.

The adoption has been rapid. Societe Generale, a major global bank, deployed capital into permissionless ERC-4626 vaults on Ethereum mainnet in September 2025. This isn't just crypto-native anymore.

Who decides where the money goes? (Curators)

A vault without a strategy is just a wallet. Someone needs to decide: which markets should we lend into? What interest rates are acceptable? How much risk is too much? How much cash should we keep on hand for withdrawals?

That someone is a curator.

A curator is like a fund manager, but operating on-chain. They don't hold your money (the smart contract does). They set the risk parameters and strategy that the vault follows. In return, they take a performance fee, typically a percentage of the profits generated, not a percentage of your deposit.

The biggest curators manage serious capital:

Curator	Assets Managed	Profile
Gauntlet	~$2B across 40+ vaults	High-beta, aggressive strategies
Steakhouse Financial	~$1.8B	Conservative, low-volatility
MEV Capital	~$915M	Medium-to-high beta
RE7 Labs	Large (part of $2.57B combined)	High-beta

The total curated vault market is around $7.27 billion.

Gauntlet is a good case study. Founded in 2018, they started by doing risk management for DeFi protocols like Aave and Compound. They've since pivoted to vault curation. In the Vault Summit keynote, Rahul (Gauntlet's Head of Institutional Partnerships, formerly of BlackRock) explained how they went from zero to nearly $1 billion in Morpho vault deposits in about 18 months.

The key insight from the keynote: curators like Gauntlet are the distribution channel for lending protocols. If Gauntlet decides to allocate $20M of their managed capital into a protocol's USDC lending market, that protocol gets $20M in TVL (total value locked) without having to convince a single retail user. But curators won't do this unless they can control risk parameters: which markets, how much per market, what rates. That's why vault infrastructure with curator controls is so important.

What are RWAs and why does everyone keep talking about them?

RWA stands for Real World Asset. It's a catch-all term for traditional financial instruments that have been "tokenized," meaning represented as tokens on a blockchain.

Examples:

Tokenized US Treasury bills: The US government borrows money by issuing Treasury bills (T-bills). You lend the government money, and they pay you back with interest. T-bills are considered one of the safest investments in the world. A tokenized T-bill is a token on a blockchain that's backed 1:1 by actual T-bills, currently earning ~4-5% yield. BlackRock's BUIDL and Ondo's OUSG are examples.
Tokenized private credit: Private credit means loans made to businesses outside of the public stock market, typically by specialized lending funds. These loans often earn higher returns (8-12%) because they involve more risk and less liquidity than government debt. A tokenized version gives you a token representing your share of that lending fund. Apollo's ACRED is an example.
Tokenized equities: Regular stocks (Apple, Tesla, etc.) represented as tokens on a blockchain. Instead of buying shares through a brokerage like Fidelity or Robinhood, you hold them as tokens in a crypto wallet. Ondo Global Markets and Coinbase are exploring this space.
Tokenized real estate: Tokens backed by property or mortgage portfolios. Instead of buying an entire building, you can own a fraction of it through a token.

Why tokenize these things? Because once they're on a blockchain, they become programmable. They can be deposited into vaults, used as collateral for loans, traded on decentralized exchanges, and composed with other DeFi protocols. None of that is possible when they're sitting in a traditional brokerage account.

The growth has been staggering:

2022: ~$5 billion in RWAs on-chain
Late 2025: over $20 billion (excluding stablecoins), held by hundreds of thousands of investors
2025 growth: 232% year-over-year increase
BlackRock's BUIDL fund: a tokenized money market fund from BlackRock (the world's largest asset manager, with ~$11 trillion under management). A money market fund is a type of low-risk investment fund that holds short-term, highly liquid assets like T-bills and cash. Banks and institutions park money in them to earn a small, steady return while keeping it accessible. BUIDL puts this on-chain: each token is worth $1, backed by US T-bills and cash, and holders earn daily yield paid directly to their wallets. It grew from ~$530M in late 2024 to nearly $2.9B by mid-2025.
Tokenized stocks: went from $31M to $858M in 2025 alone, a 27x increase

Two companies dominate the tokenization infrastructure.

Securitize is the biggest tokenization platform, with $4B+ in assets under management. One of their flagship products is the Apollo Diversified Credit Fund (ACRED). A credit fund is a pool of money that lends to businesses and earns interest on those loans. Historically, only institutional investors (pension funds, endowments, wealthy individuals) could access funds like this because of high minimums and legal complexity. By tokenizing ACRED, Securitize turned it into a token anyone with a crypto wallet can buy, giving regular investors access to the same lending returns that institutions earn. Securitize is going public at a $1.25 billion valuation, with backing from BlackRock and Ark Invest.

Ondo Finance has over $2.5B in TVL and is one of the largest RWA protocols on-chain. They're also the single largest holder of BlackRock's BUIDL. Their two flagship products:

OUSG (Ondo Short-Term US Government Bond Fund): a token backed by short-term US Treasuries (primarily through BlackRock's BUIDL). You buy OUSG, and its price goes up over time as the underlying T-bills earn interest. It targets institutional and qualified investors.
USDY (US Dollar Yield): a token backed by T-bills and bank deposits, earning ~4.25% APY. Unlike a regular stablecoin (like USDC, which always stays at $1 and earns you nothing), USDY's price increases daily as yield accrues. If you buy 100 USDY at $1.00 each, a month later each token might be worth $1.0035. You don't receive interest payments; the yield is baked into the token price itself. (Ondo also offers a rebasing version called rUSDY that stays at $1.00 but gives you more tokens instead.)

Ondo also launched Ondo Global Markets, a platform for tokenized US equities, now integrated directly into MetaMask with 200+ tokenized stocks and ETFs.

But here's the problem Rahul flagged in the keynote: RWAs have been growing without much actual DeFi usage. Institutions tokenize a product, people buy it, and it just sits there. A tokenized Treasury bill earning 5% is fine, but it's not fundamentally different from buying the same Treasury through a brokerage. It's a 10% improvement, not a 10x improvement.

As Rahul put it: "Financial institutions think, 'Hey, we create a bunch of RWAs, people just buy them, everyone's happy.' What we've seen is that's not really the case."

The missing piece: how vaults make RWAs actually useful

So RWAs exist on-chain. You buy a tokenized Treasury bill, and it earns you 5%. That's real yield from a real asset. But that's all it does. The token just sits in your wallet earning its fixed rate. Nobody is using it as collateral to borrow against, nobody is combining it with other assets to optimize returns, nobody is automatically rebalancing your exposure when market conditions change.

This is what the keynote calls "the missing piece." Step one is tokenization (create the RWA). Step three is the end customer getting a better product. Step two, the one everyone skips, is vault infrastructure that makes the RWA composable and useful within DeFi.

Vaults turn static RWAs into building blocks for sophisticated strategies. A curator can take a 10% yielding RWA and, through a vault, amplify that to 15-20% using leverage. They can diversify across multiple RWAs. They can automatically rebalance when market conditions change. They can keep a liquidity buffer so investors can withdraw on demand.

Without vaults, an RWA is like having a power tool with no outlet to plug it into. The vault is the outlet.

The looping strategy, explained step by step

The keynote walks through a specific product that Gauntlet built in partnership with Apollo, Securitize, and Morpho. It's a leveraged RWA strategy, and it follows the same logic as the popular ETH/stETH "looping" strategy, just with real-world assets instead of crypto.

Here's how it works:

Before we walk through the steps, two terms you need to know:

Collateral is something valuable you pledge as security when you borrow. Like putting your house up when you get a mortgage. If you can't repay, the lender takes your collateral. In this case, the RWA is the collateral, and the vault is borrowing USDC against it.

Leverage means using borrowed money to amplify your position. If you have $100 of RWA and borrow $80 to buy more, you now have $180 of RWA earning yield, but you only put up $100 of your own money. Your gains (and losses) are amplified.

Now let's walk through the steps with actual numbers.

A realistic scenario with real math

Say you deposit $1,000 worth of a tokenized private credit fund (like Apollo's ACRED) that earns 10% annually. The Morpho lending market lets you borrow up to 80% of your collateral value (this is called the loan-to-value ratio, or LTV). The USDC borrow rate is 3%.

Loop 1:

You deposit $1,000 of RWA as collateral
You borrow $800 USDC (80% of $1,000)
You use that $800 to buy more RWA
You now hold $1,800 of RWA, but owe $800

Loop 2:

You deposit the new $800 of RWA as additional collateral
You borrow $640 USDC (80% of $800)
You buy $640 more RWA
You now hold $2,440 of RWA, and owe $1,440

Loop 3:

Deposit the $640 RWA, borrow $512, buy more RWA
You now hold $2,952 of RWA, and owe $1,952

Each loop adds less than the one before (because you can only borrow 80% of the new collateral). After several loops, the vault might reach roughly 3x leverage: you control ~$3,000 of RWA from your original $1,000.

How does 10% become ~17%?

Here's the annual math on that 3x leveraged position:

You earn 10% on $3,000 of RWA = $300 in yield
You pay 3% on $2,000 of borrowed USDC = $60 in interest
Net profit = $300 - $60 = $240
Your original deposit was $1,000, so your effective yield is $240 / $1,000 = 24%

In practice, vaults don't loop to the maximum. Gauntlet's risk engine keeps a safety buffer to avoid liquidation (if the RWA's value drops, your collateral might not cover the loan, and the protocol would sell your position). A more conservative 2x leverage gives you roughly $170 net on $1,000, or ~17% effective yield, from an asset that natively earns 10%.

The exact numbers depend on three variables: the RWA's native yield, the USDC borrow rate, and how many times the vault loops. If the borrow rate rises above the RWA yield, the trade becomes unprofitable, which is why vaults need active risk management.

What are the risks?

This is not risk-free. The RWA could lose value. The borrow rate could spike above the RWA's native yield, making the trade unprofitable. The smart contract could have a vulnerability. The underlying credit fund could face defaults. And leverage amplifies losses the same way it amplifies gains: if you start with 3x leverage and the RWA drops 33%, your position is wiped out.

Why does this work? Because everyone wins

One of the most important points from the keynote: this product works because every participant is incentivized to help it grow.

Rahul called it a "win-win-win-win-win" (five wins):

RWA issuers (like Apollo) get higher TVL and more fees. The looping creates more of their RWA outstanding, so they're generating more revenue without finding new investors.
Tokenization platforms (like Securitize) get higher TVL and new demand from issuers. Leveraged borrowing against assets exists in traditional finance (margin loans, securities-backed lending), but it requires large minimums and broker relationships. The vault automates it for anyone with a wallet.
RWA investors (you) get higher levered returns and a much better experience than the TradFi alternative. No $50M minimums, no months of paperwork.
Morpho lenders (people who lend USDC into the pool) benefit from increased borrowing demand. More borrowers means higher yields for lenders, backed by high-quality collateral.
Morpho protocol benefits because its isolated market design is uniquely suited for this product.

When everyone benefits, everyone is motivated to promote, improve, and grow the ecosystem. This creates a flywheel: more RWAs attract more curators, who attract more depositors, who create more borrowing demand, which attracts more lenders.

What is Morpho? And what are isolated lending markets?

The keynote emphasized that Morpho is critical to making this work. So what is it, and why does it matter?

Morpho Blue is a permissionless lending protocol. It lets anyone create a lending market by specifying: what token people are lending, what token can be used as collateral, which price oracle to use, and what the liquidation rules are. No governance vote required. No committee approval. You just deploy it.

This is a big deal for RWAs. When a new tokenized asset launches, you need a lending market for it. On Morpho, anyone can create that market in minutes. On protocols like Aave, adding a new collateral type requires governance proposals, risk committee reviews, and community votes, a process that can take months.

Isolated markets mean each lending market is completely separate. A USDC/RWA market is isolated from a USDC/ETH market. If something goes wrong with one RWA, it doesn't affect any other market. This is critical for institutional comfort. When Gauntlet tells a client "the liquidation logic for your RWA works exactly the same as for any other asset on Morpho," it removes a major objection.

Morpho provides three pillars (from the keynote slide):

Borrow supply: billions in total deposits. There's a deep pool of USDC lenders ready to supply capital.
Liquidation logic: battle-tested, same process for RWAs as for any crypto asset.
Permissionless market creation: anyone can spin up a new market, instantly.

Pool-based vs. P2P lending

Everything we've covered so far uses pool-based lending: lenders deposit into a shared pool, borrowers take from that pool, and an algorithm sets the interest rate based on how much of the pool is being used. Aave, Morpho, Compound, and Euler all work this way. It's the dominant model in DeFi, with over $55 billion in TVL across these protocols.

But there's another architecture: peer-to-peer (P2P) lending, where each loan is a direct agreement between one specific lender and one specific borrower. No shared pool. No algorithmic rates. The two parties agree on terms (rate, duration, collateral type, LTV), and the loan is created as an isolated contract between them.

Think of it like the difference between a hotel and Airbnb. In pool-based lending (the hotel), you deposit your money into a big communal fund and the protocol decides what to do with it. You earn whatever rate the algorithm gives everyone. In P2P lending (Airbnb), you negotiate directly with a counterparty. You pick who you lend to, what rate you charge, and what collateral you accept.

How the two models differ

Risk isolation. In a pool, if one borrower defaults and their collateral can't cover the debt, every depositor in the pool absorbs a share of that loss. A conservative lender earning 3% on USDC can lose part of their deposit because of someone else's risky position. In October 2025, $9.89 billion was liquidated across DeFi lending pools in 40 minutes during a market-wide cascade: one liquidation crashed collateral prices, which triggered more liquidations, which crashed prices further, and every depositor in those pools suffered. In P2P lending, if a loan goes bad, only the one lender who funded that specific loan takes the loss. Every other lender is completely unaffected.

Rate predictability. Pool-based rates change every block (roughly every 12 seconds on Ethereum). A borrower paying 3% today could be paying 50%+ tomorrow if utilization spikes. This is particularly dangerous for leveraged strategies like the looping strategy described above, where borrowing costs can spike unpredictably while the yield on the collateral stays fixed. In P2P lending, the rate is fixed at origination. Both the lender and borrower know exactly what they're getting for the entire loan duration.

Collateral flexibility. Adding a new collateral type to Aave requires a governance vote that can take weeks. On Morpho, someone has to deploy a new market with specific parameters. In a P2P model, a lender can individually decide to accept any on-chain asset as collateral (tokenized Treasuries, equities, NFTs, LP tokens) without any protocol-level change. This is particularly relevant for RWAs, where new tokenized assets launch frequently and can't wait months for governance approval.

The tradeoff

P2P lending gives up something important in exchange: instant liquidity. In Aave, a lender can withdraw their deposit at any time (as long as the pool has enough unborrowed capital). In P2P, your capital is locked until the loan matures or the borrower repays early. There's no early exit.

There's also matching friction. In a pool, you deposit and you're done. In P2P, someone has to actively find a compatible counterparty. Protocols like Loopscale (on Solana, ~$100M in deposits) use an on-chain order book for this. Others use off-chain signed messages (called "intents") where a solver bot matches compatible lenders and borrowers and submits the matched pair on-chain.

And pool-based lending has proven scale. Aave has $20B+ TVL. Morpho has $8-10B. P2P lending protocols are much earlier: Loopscale crossed $100M in Q3 2025, PWN (multi-chain P2P) has processed $10M+ in cumulative volume, and Floe (EVM, intent-based P2P on Base) is live with fixed-rate, per-loan isolated lending using off-chain signed intents and solver matching.

Why this matters for vaults

Here's the connection: P2P lending protocols need vaults even more than pool-based ones do. In a pool, depositing is simple: you put in USDC and earn yield. The pool handles everything. In P2P, a lender has to decide: what markets to lend into, what rates to accept, what collateral to require, how much risk to take, and when to redeploy capital after a loan is repaid. That's a lot of active management.

A vault automates all of that. A curator sets the strategy (which markets, what rates, what risk parameters), an allocator bot deploys capital, a keeper bot tracks repayments, and the vault handles accounting. Depositors just deposit USDC and earn yield, exactly like a pool, but the underlying loans are still isolated P2P agreements with fixed rates and per-loan risk.

In other words, vaults give P2P protocols the UX of pool-based lending while preserving the risk isolation and rate predictability of P2P.

Vaults vs. funds: why not just use a hedge fund?

This came up in the keynote Q&A: "A lot of what you described could be done in a closed-end fund. Why a vault?"

Five reasons:

Transparency. A vault's strategy is code running on a public blockchain. You can see every transaction, every allocation, every rebalance. A fund is a black box. You give someone money and hope they do what they promised.

Cost efficiency. A vault doesn't need a fund administrator, a prime broker, lawyers for subscription documents, or a compliance team to process investor applications. Lower operational costs mean lower fees, which means higher net returns for you.

Self-custody. Your vault shares sit in your own wallet. You control them. You can withdraw at any time (subject to the vault's available liquidity). There's no lockup period, no gate provisions, no "sorry, redemptions are suspended."

Accessibility. No $50M minimums. No accreditation requirements (for crypto-native assets). Anyone with a crypto wallet can deposit $100 into a vault.

Automation. The vault executes its strategy 24/7, 365 days a year. No waiting for quarterly rebalancing. No phone calls to your portfolio manager. The code runs continuously.

The keynote was careful to note: vaults and funds are analogous, not identical. Curators like Gauntlet are aware that as the space matures (especially with RWAs), they may face regulatory questions about whether vault curation constitutes asset management. They're US-based and proactively engaging with regulators.

What's still missing

The keynote closed with an honest look at what's not solved yet.

More RWAs designed for vaults. RWAs have existed since 2017 (Centrifuge and Securitize started back then). But most weren't built with DeFi or vault integration in mind. The industry has been "contorting" DeFi infrastructure to fit existing products. The future is tokenizing assets specifically designed to be composable with vault architecture.

Better KYC tooling. The biggest difference between an RWA and a permissionless crypto asset is KYC (Know Your Customer). Most RWAs require identity verification at some point in the lifecycle. This creates friction. Portable KYC (verify once, use across multiple providers) would open the market significantly. The Q&A revealed this is still an unsolved problem: some issuers want permissionless access for crypto-native users, others want full KYC for traditional investors, and many want both without knowing how to achieve it.

Secondary markets and liquidators. Permissionless crypto assets have deep DEX (decentralized exchange) liquidity. Most RWAs don't. If an RWA position needs to be liquidated, who buys the collateral? Gauntlet works with a set of KYC-approved liquidators, but it's a narrow market. Several teams are working on solutions, but it doesn't feel fully solved yet.

Credit analytics and risk ratings. How do you evaluate the credit quality of a tokenized private credit fund? S&P, Redstone, and Chainlink have made progress, but on-chain credit analytics is still nascent compared to the traditional ratings infrastructure.

Fixed-rate borrowing. Remember the looping math: the strategy only works because you earn more on the RWA (10%) than you pay to borrow (3%). But on most DeFi lending markets, borrow rates are variable. They change based on supply and demand, sometimes hourly. If lots of people want to borrow USDC at the same time, the rate could jump from 3% to 12%. Now you're paying 12% on your borrowed USDC but only earning 10% on the RWA. You're losing money on every loop. Fixed-rate borrowing would let you lock in that 3% for a set period (like a fixed-rate mortgage vs. a variable-rate one), making the strategy's profitability predictable. Morpho has been working on this, but it's not widely available yet.

Tokenized equities. Coinbase, Robinhood, BlackRock, and others are exploring tokenized stocks. Unlike private credit (which is often KYC-gated), tokenized equities tend to be permissionless on the secondary market. This opens up new vault strategies with much broader accessibility.

Where is this all going?

The numbers tell a story:

Securitize is going public at a $1.25B valuation, with their CEO projecting $50B in RWA within 18 months
BlackRock's BUIDL fund grew over 400% in under a year
Societe Generale, a 160-year-old bank, is deploying capital into permissionless DeFi vaults
MetaMask now lets you buy 200+ tokenized US stocks directly from a self-custodial wallet via Ondo
RWA forecasts suggest $100B+ on-chain by end of 2026

The keynote's closing line: "This really requires a village." RWA issuers, tokenization platforms, vault curators, lending protocols, liquidators, oracle providers, KYC solutions, credit rating systems. No single company can build the full stack. But the pieces are assembling fast.

Vaults aren't just smart contracts that earn yield. They're becoming the infrastructure layer that connects traditional finance to DeFi. The combination of standardized interfaces (ERC-4626), professional risk management (curators like Gauntlet), and permissionless lending markets (Morpho) is creating a financial system that's more accessible, more transparent, and more efficient than what came before it.

Whether you're an engineer building the next vault, an investor looking for yield, or just someone trying to understand where finance is headed: vaults are the layer worth paying attention to.