Vault infrastructure providers: 11 compared for 2026
For Fintechs & Neobanks
04 Oct 2026

Vault infrastructure providers: 11 compared for 2026

Ethan Luc
Written by Ethan Luc
Vaults
Stablecoin Yield
Institutional
Risk Management

Eleven platforms let a fintech, exchange or treasury team launch a stablecoin vault without writing smart contracts, and they split on two things above all: where a vault can put the money, and who holds the keys to change the contracts.

Imagine you run product at a neobank holding $40 million of customer USDC, and the board wants an Earn tab live by the end of next quarter with no in-house Solidity team. The stablecoin vault infrastructure providers you can launch on in 2026 are Upshift, Morpho, Lagoon, Mellow, Midas, Enzyme Onyx, Gauntlet Aera, Veda, Concrete, Kiln and IPOR Fusion.

Each supplies audited vault contracts, an SDK or API and a model for who runs the strategy. Morpho runs an open curator market on immutable contracts, Veda and Kiln power Earn tabs at Kraken, Ledger Live and Trust Wallet, and Upshift covers 24/7 tokenized money market funds, onchain lending and centralized venues on one integration.

Rows cite each provider's own website, docs or GitHub as of 4 October 2026. For a narrower three-way look at custody and exits, see how Upshift, Mellow and Lagoon compare.

Vault infrastructure providers compared

Provider

What it offers

Contract standard

Chains (own docs)

Centralized venues

Who runs the strategy

SDK or API

Upshift

Tokenized funds, lending and CeFi strategies behind one integration

ERC-4626 single-asset and multi-asset vaults, plus Solana and Stellar programs

30+, including Solana and Stellar

Yes, through the Upshift prime stack

Professional curators such as Sentora, within onchain policy limits

TypeScript SDK (EVM, Solana, Stellar), REST API, CLI, MCP server

Morpho Vault V2

Lending vaults on immutable contracts, with an open curator market

ERC-4626

Vault factory on 49 mainnets

None documented

Permissionless curators, such as Steakhouse, Gauntlet and Galaxy

Morpho SDK, GraphQL API

Lagoon

Self-deployed vaults, with the manager's own custody

ERC-7540

13 mainnets in docs

Through the curator's own wallet

Any curator, permissionlessly

GraphQL API, TypeScript SDKs

Mellow

Curator vaults with limits checked by onchain verifiers

Core Vaults, exposing ERC-4626 and ERC-7540 interfaces

10

Through off-exchange settlement (Copper ClearLoop, Ceffu)

Designated curators, checked by onchain verifiers

REST API, CLI

Midas

ERC-20 mTokens for external managers, sold to non-US investors

ERC-20 mTokens with deposit and redemption contracts

16 in its registry

Yes, assets can sit at exchanges, custodians or brokers

External managers, with Midas as issuer

No public integrator SDK found

Enzyme Onyx

Issuance and administration tools for tokenized funds

ERC-20 shares with ERC-7540-like queues

4 with contracts

Through the manager's wallet

The fund manager

Onyx API and SDK

Gauntlet Aera

Vaults where Gauntlet acts as guardian and risk manager

Custom multi-depositor vault

10+ EVM networks

None documented

A guardian, usually Gauntlet

Gauntlet App and API

Veda

Modular BoringVault contracts, managed through a console

BoringVault (custom ERC-20 with modules)

16 supported, including Solana

None documented

The partner, a third-party curator or Veda Curation Services

Veda API and Console

Concrete

Custody-linked and pre-deposit campaign vaults

ERC-4626, with async and pre-deposit variants

6 in its SDK

No direct exchange integration documented; multisig strategies and custodied AssetCX tokens

Concrete's allocator, or the partner's own strategy

Earn V2 SDK, subgraph

Kiln DeFi

Staking and lending vaults behind a widget and API

ERC-4626 and ERC-7540

6 with contracts

None at contract level

Kiln, with curated strategies from asset managers

Kiln Connect API, JS SDK, widget

IPOR Fusion

Rules-based strategies with role-based limits

ERC-4626

10

None documented

An "Atomist" sets limits and an "Alpha" executes

Python SDK, API, MCP server

Chain counts use each provider's own definition, which varies: Morpho counts factory deployments, Veda counts chains its API supports, and Concrete's figure is its SDK list. Headline sizes aren't comparable either, since Morpho shows protocol-wide deposits and Veda shows transaction volume.

What a stablecoin vault platform supplies

A vault platform can supply up to five pieces a fintech would otherwise build: the SDK or API its app calls, the vault contract that issues shares and enforces the rules, a framework that lets a curator run the strategy inside limits set in advance, a pricing engine that values every holding so anyone can check the share price (the vault's NAV), and distribution to depositors and partner channels. Upshift supplies all five, including NAV verification and distribution through partner apps and more than 66,000 depositors.

A curator is the professional team picking the investments, usually a hedge fund or asset manager. The partner keeps its own app, brand and customer relationship.

What a stablecoin vault infrastructure provider supplies Four boxes from left to right. Your app, such as an Earn tab or treasury dashboard, calls the provider SDK or API for deposits, redemptions, balances and history. The SDK talks to the vault contract, which issues shares and enforces the whitelist, fees, pause and upgrade rules. A curator runs the strategy within limits set in advance. The vault provider supplies the middle three, shaded green. Underneath, the money goes to one of three places: tokenized money market funds, onchain lending and liquidity markets, or centralized venues such as exchanges and OTC desks. Platforms differ most in which of these three they can reach. Your app Earn tab, treasury dashboard or API SDK or API deposits, redemptions, balances, history Vault contract shares, whitelist, fees, pause, upgrades Curator runs the strategy within set limits What the vault provider supplies Tokenized money market funds Onchain lending and liquidity Centralized venues exchanges, OTC Platforms differ most in which of these three a single vault can reach, and whether one integration covers all of them.

The vault provider supplies the SDK, the vault contract and the curator framework. The curator places the money in one or more of the three venues in the bottom row.

In the diagram, money moves from your app through the SDK into the vault contract, and the curator places it in one or more of three venues: tokenized money market funds, onchain lending and liquidity markets, or centralized venues such as exchanges and OTC desks. Every platform in the table reaches onchain markets, and fewer reach the other two.

Contract standards and vault templates

ERC-4626 is Ethereum's standard interface for yield vaults: deposit an asset, receive shares, redeem shares for the asset plus or minus performance. Upshift, Morpho, Concrete, Kiln and IPOR Fusion build on it.

ERC-7540 adds request-based deposits and redemptions for strategies that can't pay out instantly, and Lagoon is built on it, while Kiln supports both. Veda's BoringVault and Gauntlet's Aera use their own designs with separate modules for deposits, accounting and strategy calls. Our ERC-4626 explainer covers how shares are priced.

The standard matters mostly for integration. An ERC-4626 share token plugs into wallets, lending markets and custodians that already read the interface. A custom contract can add logic inside one vault (Veda's Merkle-verified manager, for example), though every integrator has to learn it once. Upshift's multi-asset vaults take several deposit coins, such as USDC and USDT, and redeem everything in one reference asset.

When teams ask for vault contract templates for yield products, they usually mean a pre-audited contract plus a set of roles and parameters they can fill in. Lagoon and Morpho let anyone deploy from a factory.

Upshift, Mellow, Concrete, Kiln and Enzyme deploy alongside the partner and configure the fees, whitelist, redemption schedule and curator roles. Gauntlet asks teams to contact it before running a guardian. How to launch a vault covers the steps from mandate to a live vault, and who holds which keys.

Chains and multi-chain deployment

Each provider lists its chains in its own docs:

  • Upshift runs vaults on more than 30 chains, including Solana and Stellar, which need separate contract languages and their own audits. Halborn audited the Stellar vault in April 2026 and OtterSec the Solana vault in September 2025.
  • Morpho lists its Vault V2 factory on 49 mainnets.
  • Midas's registry shows 16 networks.
  • Lagoon lists 13 mainnets in its docs.
  • Mellow lists 10.
  • IPOR Fusion lists 10.
  • Veda's chain support page lists 16 chains, Solana among them.
  • Gauntlet Aera works on EVM chains, and its docs say cross-chain to non-EVM chains isn't supported yet. Gauntlet's gtUSDa vault takes deposits on Ethereum, Base, Arbitrum and OP.
  • Kiln, Concrete and Enzyme Onyx list between 4 and 6.

Few vault platforms run on Solana or Stellar, and fewer hold real deposits there: Upshift's vaults held about $30 million on Stellar and about $9 million on Solana on 4 October 2026, by its own API.

A chain listed in docs and a chain with a live vault aren't always the same thing. Lagoon's own API showed vaults on 5 chains on 4 October 2026 against 13 in its docs.

Tokenized funds and centralized venues

A strategy that holds tokenized T-bills, runs a basis trade or lends to an institution through an exchange needs more than an onchain lending market. Four platforms reach centralized venues from the vault itself: Upshift, Mellow, Midas and Concrete. Lagoon and Enzyme reach them through the manager's own wallet, and Morpho, Veda, Aera, Kiln and IPOR Fusion document onchain venues only.

  • Upshift runs CeFi and onchain strategies in one vault through the Upshift prime stack: a policy engine that limits activity by chain, protocol, token and contract function, an institutional lender network, and execution across onchain protocols and centralized venues from one smart contract account, for curators on Upshift prime accounts.
  • Mellow uses Copper ClearLoop and Ceffu for off-exchange settlement on venues including Binance, Bybit, Deribit, OKX and Kraken.
  • Concrete routes funds to a Safe or Fordefi wallet with values reported back onchain, or mints AssetCX tokens 1:1 against balances held at a qualified custodian.
  • Midas monitors exchange, custodian and broker positions held by its strategy managers.

On Upshift, a partner can start with a Conservative vault holding 24/7 tokenized money market funds, then add Core and Enhanced vaults that lend onchain or run basis trades, all on the same SDK and contracts. We see this pattern most with neobanks and payment companies, which want the first vault to look like a cash product and keep the option of higher-yield strategies later. Tokenized money market funds vs stablecoin vaults sets out the trade-offs.

Who runs the strategy and what limits them

Every platform separates the team that picks investments from the contract that holds deposits, and each puts the limit in a different place:

  • Upshift's policy engine blocks any call outside the protocols, contracts, functions and tokens approved for that vault, and Upshift validates the curator's net asset value before it reaches depositors.
  • On Morpho, any curator can deploy, and the Vault V2 design timelocks curator changes for 0 to 3 weeks, with a sentinel role that can cancel a pending change.
  • Mellow checks every curator action against onchain verifiers.
  • IPOR Fusion splits the job between an "Atomist" who sets the allowed assets and risk bounds and an "Alpha" who trades inside them.
  • Lagoon moves assets to the curator's own Safe, MPC or single-key wallet at settlement, and the limits are whatever that custody setup enforces.
  • Veda's manager only executes calls on a Merkle-tree allowlist.
  • Aera uses the same allowlist idea for its guardians.

The Block reported in July 2026 that curated vaults held about $8.75 billion across 811 products run by 110 firms, citing vaults.fyi. Curators work across several platforms at once.

SDKs and APIs for vault integrations

Each platform ships its own integration tools:

  • Upshift's TypeScript SDK is one client for EVM, Solana and Stellar that reads vault data and builds deposit, withdrawal and claim transactions, and Upshift also ships a REST API, a CLI and a read-only MCP server for AI agents. Tria went live with Upshift vaults in its app two weeks after it started integrating the SDK.
  • Morpho offers a viem-based SDK and a GraphQL API.
  • Concrete's Earn V2 SDK targets React and Wagmi apps.
  • Kiln adds a no-code white-label widget on top of its Connect API, which lets a wallet launch Earn without building a front end.
  • Lagoon works through a keyless GraphQL API and TypeScript SDKs.
  • IPOR Fusion works through a Python SDK.
  • Veda works through its API and Console.
  • Midas lists no public integrator SDK.
  • Aera's guardian SDKs are available on request.

Audits and who controls upgrades

Provider

Audits listed by the provider

Upgrade control

Upshift

11 by 6 firms: Halborn, Hacken (5), OtterSec, ChainSecurity, Sigma Prime, Zellic (2)

Code upgrades need the ProxyAdmin multisig, typically 4 of 6 signers from the asset issuer, Upshift and the curator; parameter changes go through a Safe owner with a delay set per vault

Morpho Vault V2

11 on Vault V2 from 6 firms, including Spearbit, Certora, ChainSecurity and Zellic

Immutable contracts; curator changes timelocked 0 to 3 weeks

Lagoon

12 reports: Nethermind, Trail of Bits, Bretzel

Opt-in upgrades to whitelisted versions after a 24-hour to 30-day delay; can be made immutable

Mellow

13 on Core Vaults: Nethermind, Sherlock, MixBytes

Upgradeable proxies with a timelock controller per vault

Midas

15 from 4 auditors, including Sherlock, Hacken and Halborn

48-hour timelock on every upgrade

Enzyme Onyx

3 ChainSecurity reports on Onyx

Upgradeable proxies controlled by a global owner

Gauntlet Aera

3 (Spearbit, OpenZeppelin) plus a Cantina competition

Immutable vaults; owner can swap modules behind a timelock

Veda

14 reports, mostly 0xMacro, plus Spearbit

Modules can be upgraded and restricted independently

Concrete

31 reports, mostly Halborn, plus Cantina, Zellic, Code4rena

Upgradeable; each vault owner accepts upgrades

Kiln DeFi

Quantstamp and Spearbit on v1, plus Trail of Bits on its async vault

Beacon proxy run by a multisig of Kiln and third parties

IPOR Fusion

BlockSec and Protofire on live contracts

Per-role timelocks set by the owner; strategy adapters immutable

Audit counts aren't a quality score on their own. Concrete counts every Halborn report separately, and Veda's 14 cover many modules. Upshift's code upgrades aren't timelocked, which lets a fix ship fast and puts the check in the 4-of-6 multisig split across three parties; Midas and Lagoon run delays instead. Our vault provider due diligence list has the questions to ask each one.

Provider notes

Upshift: best for one integration from tokenized funds to DeFi

Upshift is onchain yield infrastructure for fintechs and asset managers with stablecoin balances. It has held more than $550 million in deposits at peak and runs 50+ vaults on more than 30 chains for over 66,000 users, with vaults in three risk bands: Conservative, Core and Enhanced. Partners offer the vaults under their own name through the SDK, API or app, with a fee share. Institutional teams on Fordefi have been able to deposit from Fordefi Earn since 8 September 2026, and Kraken Institutional clients reach permissioned Upshift vaults from qualified custody. Upshift raised a $10 million Series A led by Dragonfly in March 2025. Its parent company is August Digital.

Morpho: lending vaults on immutable contracts

Morpho's site showed $16.9 billion in total deposits across the protocol on 4 October 2026. Its vaults allocate into Morpho lending markets, and partners it names include Coinbase, Crypto.com, Kraken, Ledger and Bitget. What is Morpho covers the markets underneath.

Lagoon: permissionless vault deployment

Lagoon lets any curator deploy a vault with no approval or upfront fee, and it reported $159 million+ in assets across 86+ vaults on its homepage on 4 October 2026. Listing on Lagoon's own app is approved separately.

Mellow: curator vaults checked by onchain verifiers

Mellow's own API summed to $342.4 million across its vaults on 4 October 2026, with partners including Lido, Ethena, Flow Traders and Keyrock. Strategies sit in isolated subvaults, one per strategy.

Midas: ERC-20 mTokens with external managers

Midas issues mTokens under a prospectus and excludes US persons, and its docs describe the tokens as financial instruments, separate from stablecoins. Strategy managers named on its site include Apollo, Fasanara and Wellington Management, and its homepage showed $735.6 million in TVL on 4 October 2026.

Enzyme Onyx: tokenized fund issuance and administration

Onyx is Enzyme's stack for issuing and administering tokenized funds, rolled out on request, with compliance policies through Chainlink's policy engine. CV5 Capital, a Cayman fund platform, adopted it in November 2025.

Gauntlet Aera: vaults with Gauntlet as guardian

Gauntlet reported $100 million+ in Aera vaults on its product page on 4 October 2026. KAST and Exa run Earn products on it.

Veda: modular BoringVault contracts

Veda powers Kraken DeFi Earn, ether.fi and Lido Earn, and its homepage reported $32 billion+ in total volume and 320,000+ users on 4 October 2026. Funds stay onchain, with the manager limited to whitelisted protocol calls.

Concrete: custody-linked and pre-deposit vaults

Concrete reported $1.34 billion in assets on platform on 4 October 2026 and names BitGo as a custody partner. Its enterprise vaults have hosted pre-deposit campaigns for Stable and USDai.

Kiln DeFi: best for staking yield

Kiln runs Earn for Ledger Live, Trust Wallet, Bitpanda and Safe, and reports $2 billion+ in total deposits. Its async vault is built on Lagoon's v0.6 contracts.

IPOR Fusion: rules-based mandates with role timelocks

Tesseract, a MiCA-authorised crypto-asset service provider, chose Fusion in March 2026 for dedicated client vaults, with BitGo custody access added in June.

Vault yields vary and aren't guaranteed. Vaults carry smart contract, strategy, counterparty and liquidity risk, with no deposit insurance, and stablecoins can trade below their peg.

Always make sure to do your own research and be aware of the above and any other risks before depositing.

Comparing vault platforms for an Earn launch? Tell us your coins, chains and how fast customers need their money back, and we'll map which Upshift vaults fit, from tokenized money market funds up.

Book a 30-minute call

Frequently asked questions

What are the top vault contract platforms for DeFi?

The eleven platforms partners launch on are Upshift, Morpho, Lagoon, Mellow, Midas, Enzyme Onyx, Gauntlet Aera, Veda, Concrete, Kiln and IPOR Fusion. On their own sites in October 2026, Morpho showed $16.9B in protocol-wide deposits, Kiln $2B+, Concrete $1.34B on platform and Upshift $550M+ at peak, and each counts deposits differently.

What are the best vault contract platforms for stablecoin yield?

For stablecoins specifically, the split is between platforms that also hold tokenized T-bill funds and those focused on lending. Upshift and Midas both run tokenized fund strategies, while Morpho, Kiln and IPOR Fusion route mainly to lending markets such as Aave and Morpho.

Which vault contract platforms have built-in risk management?

All eleven set limits in code. Upshift's policy engine restricts calls by chain, protocol, token and function; Mellow uses onchain verifiers with over 60 permission types; Veda and Aera use Merkle-tree allowlists; and Morpho adds caps that curators can cut at once while increases wait out a timelock.

Which vault contract providers are built for institutions?

Providers with permissioned vaults and named institutional clients include Upshift (Kraken Institutional, Fordefi Earn), Enzyme Onyx (CV5 Capital), IPOR Fusion (Tesseract, BitGo custody) and Concrete (BitGo). Midas restricts some strategies to professional investors.

Which vault contract solutions support multi-chain deployment?

Morpho lists its vault factory on 49 EVM mainnets. Upshift, Midas and Veda list Solana as well as EVM chains, and Upshift is the only one of the eleven with Stellar vaults in its docs.

What are the best SDK integrations for vault contracts?

Upshift's SDK installs as @augustdigital/sdk from npm and covers EVM, Solana and Stellar in one client. Kiln offers a no-code widget on top of its Connect API, and Morpho's SDK runs on viem.

Keep reading

Share this post:

Launch a vault with Upshift

Upshift builds custom, permissioned vaults for custodians, exchanges, neobanks and asset managers. Tell us what you are building and the team will follow up.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.