How Does Aera V2 Work?

Noncustodial vault holding ERC20 and ERC4626 yield-bearing tokens, managed by a guardian with constrained execution authority

Novel trustless treasury management model. The vault owner sets constraints (whitelisted assets, DeFi protocols) while the guardian handles execution. Owner retains withdrawal rights but guardian controls rebalancing.

Off-chain optimization algorithm that submits portfolio operations to the vault based on market conditions and objective functions

The guardian is an off-chain bot built by Gauntlet with access to market intelligence. This creates a centralization point — if the guardian algorithm has bugs or is compromised, vault assets are at risk within the whitelisted action space.

Strict role separation where the vault owner sets parameters and the guardian executes within those bounds, with on-chain enforcement of constraints

The hooks module enforces constraints on-chain. Guardian cannot add new assets, change whitelists, or withdraw to external addresses. But within the action space, the guardian has full discretion.

On-chain oracle checks to validate guardian rebalancing actions, ensuring trades execute within acceptable price ranges

Oracle safeguards protect against obviously bad guardian submissions. However, for less liquid assets the oracle quality may be poor, reducing safeguard effectiveness.

Vaults can interact with whitelisted DeFi protocols (lending, DEXs, yield farming) to optimize returns on treasury assets

Composability with external DeFi protocols introduces dependency risks. If a whitelisted protocol is exploited, vault assets deposited there could be lost.

Vault owner (typically a DAO multisig) retains ultimate control over vault parameters, asset whitelists, guardian appointment, and emergency withdrawals

Owner governance provides a safety backstop. However, DAOs are slow to act — by the time a governance proposal passes to change guardian parameters, damage may already be done.

A bug in the off-chain guardian code could submit a series of suboptimal rebalancing operations that systematically degrade vault value. Because the guardian operates autonomously and frequently, small errors compound before the vault owner notices.

If a whitelisted DeFi protocol suffers an exploit, the guardian may be unable to withdraw vault assets quickly enough. The guardian's rebalancing algorithm may not have logic to handle protocol-level emergencies in underlying yield sources.

Oracle safeguards for illiquid assets may use stale or low-quality price feeds. The guardian could execute trades at unfavorable prices that pass oracle checks but result in material value loss for the vault.

In a crisis requiring immediate parameter changes, the vault owner (often a DAO multisig) may be too slow to act. The guardian operates within fixed constraints and cannot adapt its action space without owner intervention.

ERC4626 share price manipulation (donation attacks) in underlying yield tokens could cause the vault to overvalue its holdings, leading the guardian to make rebalancing decisions based on inflated asset values.