Vault Bridge
About
Vault Bridge is a revenue primitive for blockchains built for Agglayer chains, powered by Morpho. It turns idle bridged assets into productive reserves by routing them to yield-generating vaults on Ethereum, providing chains with sustainable, non-inflationary revenue streams that scale with TVL without token emissions.
Where Does Yield Come From?
Yield is generated by professional-grade decentralized finance (DeFi) strategies on Ethereum, using Morpho vaults (which follow a common standard for tokenized vaults). Supported assets (like USDC, USDT, USDS, ETH, WBTC) that users deposit into Vault Bridge are sent to selected yield vaults managed by Morpho, with risk oversight by Gauntlet and Steakhouse Financial. These assets earn yield from lending and borrowing activities on Ethereum. The yield builds up over time and is paid out as newly created bridge tokens (vbTokens) to a wallet designated by each connected blockchain, held by an independent third-party escrow. Blockchains receive this revenue in proportion to the total value of assets bridged through Vault Bridge, and there are no fees for chains connected via Agglayer. The yield comes specifically from professional-grade strategies in Morpho's lending vaults, though exact yield rates are not shared; it is described as secure yield infrastructure with professional risk management.
Audits
| Audit / Date | Findings | Verdict |
|---|---|---|
| The audit identified one critical cross-chain data mismatch and several medium-severity issues, but the development team resolved most vulnerabilities prior to report publication, leaving the system with addressed security concerns and improved robustness. | |
| The audit found no critical vulnerabilities and all identified issues were resolved, resulting in a codebase that provides a good level of security for the Vault Bridge protocol according to ChainSecurity's assessment. | |
Certora22-04-2025 - 06-05-2025 |
| The audit identified several critical security vulnerabilities, including two high-severity issues that could cause fund loss, all of which were promptly fixed by the Vault Bridge team before deployment. While most findings were resolved, one low-severity denial-of-service vector remains unaddressed but poses minimal risk given its cost requirements and manual workarounds. |
Certora13-05-2025 - 23-06-2025 |
| The formal verification successfully validated mathematical correctness of the vault bridge's core financial operations, with only two minor rounding issues identified and resolved, demonstrating robust protocol safety for yield-generating cross-chain bridging. |
Certora22-09-2025 - 14-10-2025 |
| The audit revealed no critical or high severity vulnerabilities, with most medium issues addressed through fixes. The protocol demonstrates adequate security posture with some acknowledged design considerations requiring ongoing attention. |
Certora03-11-2025 - 17-11-2025 |
| The audit revealed several medium and low severity issues in migration accounting, pause handling, and configuration logic, with most findings already addressed and plans for architectural improvements in V2. Overall security posture appears manageable with continued operational diligence around migration coordination and pause-state recoverability. |
Legal
Legal form
Not specifically disclosed (operates as part of Polygon Labs ecosystem)
Registration jurisdiction
Cayman Islands (Polygon Labs UI (Cayman) Ltd.)
Status and notes
Vault Bridge protocol is operated by Polygon Labs ecosystem. Official terms of use apply from Polygon Labs UI (Cayman) Ltd. Documentation copyright © PT Services DMCC 2025. Before using Vault Bridge, certain legal documentation is necessary including entry into an agreement with the escrow agent. No specific legal entity disclosed for Vault Bridge protocol itself in official sources.
