Aera V3

The research assessment is adverse because Aera V3 has no regulatory registration anywhere, its relationship with Gauntlet is unclear, and it offers no fixed redemption timeline. The judgment is not based on a disclosure failure. Aera V3 provides genuinely better disclosure than its closest comparator, Mellow Core, which this registry has already rejected. Its Terms of Service were available and plainly name the operator as Aera Foundation under Cayman Islands law. It has audit coverage from Spearbit, OpenZeppelin, and Cantina, plus an active $500,000 Immunefi bug bounty. But the Terms state that Aera Foundation is not registered in any capacity with the SEC, CFTC, or the Cayman Islands Monetary Authority, including as an investment adviser, broker-dealer, commodity pool operator, or virtual asset service provider. DefiLlama’s description says Aera was ”built by the team at Gauntlet.” This review could not confirm through any independent source whether Aera Foundation is now fully separate or remains tied to Gauntlet. The claim comes only from Aera’s own marketing. Multi-depositor vaults also use solver-filled, asynchronous redemptions with no stated limit on settlement time.

Review triggers: events that reopen the verdict
• Aera Foundation’s current relationship to Gauntlet, fully independent or still affiliated, is independently confirmed
• A bounded maximum settlement time for multi-depositor vault redemptions is disclosed
• Any regulatory registration relevant to the products offered is obtained and disclosed
• Protocol-level fee, oracle, and guardian-whitelist authority is placed under a disclosed multisig with a meaningful timelock

Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-19.

The research file

Mechanism

A vault owner deposits assets and appoints one or more Guardians. These off-chain actors submit on-chain transactions subject to a Merkle-tree whitelist that states exactly which contract calls each guardian may make. Pre- and post-execution hooks check each transaction. Any transaction outside the whitelist or in breach of a hook reverts on-chain. Guardians cannot deposit or withdraw funds, change their own permissions, or appoint other guardians. Owners of single-depositor vaults can withdraw at once. Multi-depositor vaults send deposits and redemptions through a solver-filled Provisioner contract instead of settling them atomically.

No regulatory registration and an unclear Gauntlet relationship

Aera Foundation’s Terms of Service expressly state that it is not registered with the SEC, CFTC, or the Cayman Islands Monetary Authority as an investment adviser, broker-dealer, commodity pool operator, or VASP. They also state that Aera does not hold custody or broker trades. This is a standard unregulated-DeFi position, stated plainly rather than buried. DefiLlama and Aera’s own site both describe the protocol as ”built by Gauntlet,” using Gauntlet’s economic research team and Auditless’s smart-contract engineers. But no independent source confirmed whether Aera Foundation is now a fully separate entity or remains operationally tied to Gauntlet. This review could not resolve that important ownership question.

Control

The vault owner has final control. The owner appoints and removes guardians, sets hooks, and pauses the vault. But the Aera team holds central authority at the protocol level. It sets the protocol fee recipient, manages the oracle registry, and maintains the guardian whitelist contract. Oracle updates have a 21-day delay, but many other parameters do not have the same protection. Aera’s own documentation admits that guardians limited to whitelisted contracts may still act carelessly or in their own interest within those limits. They can, for example, atomically sandwich a transaction that they initiated themselves.

Eligibility and redemption

The Terms of Service require users to state that they are not on OFAC, UK, or Cayman Islands sanctions lists. Aera also reserves the right, in its sole discretion, to restrict availability ”to any person, geographic area, or jurisdiction.” This is a broad, undefined reservation, not a specific eligibility rule. Single-depositor vaults settle at once for the owner. Redemptions from multi-depositor vaults are asynchronous and filled by solvers. Users can obtain refunds for unfilled requests after a deadline, but no source available to this review stated a maximum settlement time.

Track record and comparison

Tracked TVL is roughly $142M across Base and Ethereum. Morph shows no current balance. TVL grew from a small base in early 2025. DefiLlama’s hacks tracker shows no hack or exploit specific to Aera, though this review’s search of incident history was not exhaustive. Aera’s disclosure of its company and jurisdiction is materially better than Mellow Core’s. Aera provides real, accessible Terms of Service that name a specific entity and governing law, while Mellow’s document was unreadable and blocked by IP. But Aera still has no confirmed regulatory registration, no settled account of its ownership relationship with Gauntlet, and no fixed redemption guarantee for the multi-depositor structure that most clients would actually use.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Aera — Terms of Service · primary · accessed 2026-08-19
  Supports: Aera Foundation Cayman Islands entity, no SEC, CFTC, or CIMA registration disclaimer, sanctions representation and sole-discretion access restriction
• Aera documentation — protocol mechanism · primary · accessed 2026-08-19
  Supports: guardian merkle-whitelist and hook design, single versus multi-depositor vault mechanics, protocol-level fee and oracle authority
• Immunefi — Aera bug bounty program · primary · accessed 2026-08-19
  Supports: active $500,000 bug bounty, covered chains
• DefiLlama — Aera V3 protocol data · secondary · accessed 2026-08-19
  Supports: built-by-Gauntlet description, current TVL by chain
• Aera — mission and team page · secondary · accessed 2026-08-19
  Supports: Gauntlet and Auditless team origin claim

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.