How Does Vesper Work?
Vesper Finance is a yield aggregator built for longevity, offering Grow pools (in-kind yield) and Earn pools (cross-token yield) with over 50 independent audits covering all deployed contracts. Founded by Bitcoin developer Jeff Garzik, it operates with $35M in deposits. Its B grade reflects the well-understood yield aggregation model and extensive audit coverage, with moderate risk from external protocol dependencies.
TVL
$62M
Sector
Yield
Risk Grade
B
Value Grade
D
Core Mechanisms
2.3.3
Grow pools: single-asset deposit vaults with auto-compounding yield strategies across DeFi protocols
Standard yield aggregator vault pattern established by Yearn Finance since 2020.
2.2.4
Earn pools: deposit one token, earn yield in another token through strategy rotation
Cross-token yield earning is a standard variation on yield aggregation.
5.1.1
VSP token governance for strategy approval and pool parameter management
Standard token-weighted governance for yield aggregator strategy selection.
6.4.1
Chainlink and protocol-native price feeds for strategy valuation
Standard oracle integration for vault accounting.
2.1.3
0.6% withdrawal fee plus 2% annual platform fee (capped at 50% of yield), with buyback-and-distribute to esVSP stakers
Standard yield aggregator fee structure with VSP buyback mechanism
How the Pieces Interact
Multi-protocol yield strategies create dependency on external protocol security. A Compound or Aave exploit would cascade to Vesper depositors in affected strategies.
Governance controls which strategies are deployed. With reduced VSP market cap from its peak, the cost of a governance attack to approve a malicious strategy may be relatively low.
Automatic compounding and strategy rotation execute without user intervention. A bug in the rebalancing logic could compound losses before they are detected.
Small buyback amounts ($3K/month target) may be insufficient to create meaningful buy pressure given VSP's low liquidity, making the fee-to-token value flywheel ineffective.
What Could Go Wrong
- Vesper deploys user deposits into external DeFi protocols via yield strategies (Grow and Earn pools). A vulnerability in any underlying strategy's integrated protocol (Aave, Compound, Maker, etc.) could result in loss of funds deposited through Vesper, even if Vesper's own contracts are secure.
- A rebase vulnerability was discovered by Dedaub in March 2023 that could have allowed a malicious user to intercept strategy yield via the WETH/VSP Uniswap pool. While the vulnerability was never exploited and was patched promptly, it demonstrates the complexity of multi-strategy yield aggregation.
- VSP token governance controls strategy selection and pool parameters. With diminished TVL from its 2021 peak of $1B, the economic security of governance (VSP market cap) may be low relative to controlled assets.
Underlying Strategy Protocol Exploit
TailTrigger: A DeFi protocol integrated with a Vesper Grow or Earn pool strategy is exploited, draining funds deposited through the strategy
- 1.An integrated DeFi protocol (e.g., a lending market or DEX used by a Vesper strategy) is exploited — Funds deployed by the Vesper strategy into the exploited protocol are drained
- 2.Vesper Grow/Earn pool share value drops as underlying strategy reports losses — Depositors in the affected pool face immediate losses proportional to the strategy's allocation to the exploited protocol
- 3.Trust in Vesper's strategy selection deteriorates — Depositors withdraw from other Vesper pools as a precaution, reducing overall TVL
- 4.Reduced TVL makes Vesper less attractive for new depositors — Protocol enters decline with insufficient scale to justify ongoing strategy development costs
Risk Profile at a Glance
Overall: B (25/100)
Lower score = safer