High-Risk Beta
This platform is experimental. Smart contracts are unaudited. Use at your own risk.
A multi-chain capital management system that accepts ETH deposits on Base L2, earns yield on idle reserves through Morpho, bridges capital to Arbitrum, and deploys it to an autonomous HyperLiquid perpetual futures strategy. Share price updates daily via onchain NAV reporting.
Capital flows through a pipeline of smart contracts across two chains. Each step is managed by a specific contract with its own access controls and accounting. The diagram below shows the full lifecycle from deposit to strategy deployment and back.
Depositors receive fungible ERC-20 shares representing their claim on vault assets. Virtual offset (1e3) prevents first-depositor inflation attacks.
A designated reporter pushes offchain strategy equity onchain daily. Delta-bounded by maxNavDeltaBps (10%) to limit single-report manipulation.
Fee charged only on realized positive strategy PnL when capital is returned. Capped at 20% (MAX_PERFORMANCE_FEE_BPS = 2000).
The vault divides its total managed assets into four sleeves, each serving a distinct purpose. The allocator role manages the balance between sleeves based on market conditions and strategy needs.
Immediately available for withdrawals. WETH held in vault contract.
Earning yield in Morpho ERC-4626 vault. Redeemable for withdrawals.
In transit between Base and Arbitrum. Tracked by BridgeRouter state machine.
Deployed to HyperLiquid via hot wallet. Illiquid until strategy returns.
| Contract | Chain | Sleeve | Role |
|---|---|---|---|
| BaseCapitalVault | Base | All | Core vault — accepts deposits, issues ERC-20 shares, manages capital sleeves |
| MorphoReserveAllocator | Base | Reserve | Deposits idle WETH into Morpho ERC-4626 vault for yield on reserves |
| BridgeRouter | Base | Bridge | Coordinates outbound/inbound cross-chain routes with state machine lifecycle |
| ExecutorAssetConverter | Base | Bridge | Converts WETH to bridge-compatible asset (and back) at admin-set rates |
| ExecutorBridgeAdapter | Base | Bridge | Wraps the actual cross-chain bridge transfer via executor EOA |
| ArbTransitEscrow | Arbitrum | Bridge/Strategy | Holds assets in transit on Arbitrum between bridge arrival and strategy deployment |
| HLStrategyManager | Arbitrum | Strategy | Releases assets from escrow to hot wallet for HyperLiquid perps trading |
| NavReporter | Base | Accounting | Pushes daily NAV updates to vault — reconciles strategy equity with share price |
| WithdrawalQueue | Base | Withdrawals | Manages queued withdrawal requests when liquid assets are insufficient |
| MoralityAgentVault | Base | Legacy | Simpler ETH-native vault (legacy) — direct balance-based accounting |
The vault system relies on a hierarchy of privileged roles. Each role has specific powers bounded by onchain constraints. The contracts are custodial infrastructure — actual fund safety depends on the integrity of these key holders.
Can change all role addresses, set parameters, pause/unpause. Should be behind a timelock + multisig.
Can move capital between vault sleeves (liquid, reserve, bridge, strategy). Pure bookkeeping — no direct token transfers.
Updates share price via daily NAV settlement. Bounded by maxNavDeltaBps (10% default) per report.
Controls all bridge route state transitions. No cross-chain proof verification — fully trusted oracle.
Initiates bridge routes and strategy deployments. Cannot directly move funds without executor.
EOA that holds funds on HyperLiquid. No smart contract enforcement for return. Must maintain ERC-20 approval.
All 10 contracts underwent automated security analysis. 52 findings were identified and addressed prior to deployment. The full audit report is available in the repository at contracts/SECURITY_AUDIT.md.
This was an automated static analysis, not a formal audit by a professional security firm. Before deploying contracts that manage real user funds, engage a reputable auditor (Trail of Bits, OpenZeppelin, Spearbit, etc.) for a manual review.