Vault Architecture
Every fund on Tilt Protocol is an ERC-4626 vault — the standard interface for tokenized vaults on Ethereum. This means Tilt vaults are composable with the broader DeFi ecosystem.Core Design
Each vault holds a basket of ERC-20 tokens (representing stocks, ETFs, or crypto) denominated in a single base asset: tiltUSDC (a USDC-equivalent stablecoin on Robinhood L2).Share Mechanics
Deposits
When an investor deposits tiltUSDC:- Entry fee is deducted (sent to
FeeManager) - Shares are minted proportional to current NAV:
shares = (deposit * totalShares) / totalAssets - Deposited funds are held as
unallocatedDepositsuntil allocated into the portfolio
Withdrawals
When an investor withdraws:- Shares are burned
- The vault calculates the proportional claim on all held assets
- Held tokens are auto-liquidated via
TokenRouterto return tiltUSDC - Exit fee is deducted
- Net tiltUSDC is returned to the investor
NAV Calculation
TokenRouter oracle. Share price is simply totalAssets / totalShares in 18-decimal precision.
Dead Shares
The first 1,000 shares of every vault are minted toaddress(1) (burned permanently). This prevents the classic ERC-4626 inflation attack where a first depositor manipulates share pricing through donation.
Allocation and Rebalancing
Vaults maintain two distinct operations: Allocation — deploys idle tiltUSDC into target positions:- Called via
allocateIdleAssets()(permissionless — anyone can trigger it) - Buys target tokens proportional to their weight
- Only uses unallocated base asset; doesn’t sell existing positions
- Sells over-weight tokens, buys under-weight tokens
- Restricted to authorized callers (curator or
RebalanceEngine) - Configurable minimum interval between rebalances
Vault Types
Tilt supports two vault types that share the sameBaseVault core:
| Curator Vault | Oracle Vault | |
|---|---|---|
| Weight source | Curator sets weights directly | Oracle feeds weights automatically |
| Creation | Permissionless | Permissioned (protocol owner) |
| Rebalancing | Curator-triggered with time-lock | Automatic when oracle updates |
| Use case | Custom strategies, AI-driven funds | Flagship strategies (e.g., politician trackers) |
BeaconProxy instances, allowing the protocol to upgrade vault logic without redeploying individual vaults.