KETJU Research

← The Register

Other

Lagoon

Not approved Yield aggregators are outside the approved structures
Issued
2026-08-14
Last confirmed
2026-08-14
Next check due
2026-11-15
Chains
Ethereum · No freeze key, Arbitrum One · Mixed control, Avalanche · Governed, no freeze, Base · Mixed control

Lagoon supplies ERC-7540 vault infrastructure for asset managers running DeFi, RWA and off-chain mandates. DefiLlama recorded about $129.7M on 2026-08-14, so the inherited below-materiality basis was false. A curator chooses allocations and validates valuation before asynchronous subscriptions and redemptions settle. The correct rejection is delegated allocation: the tracked platform is infrastructure for many manager-controlled mandates, not one portfolio an adviser can approve.

The research file

Mechanism

Each Lagoon vault issues shares through asynchronous ERC-7540 request and claim flows. Assets may be deployed through on-chain protocols or held in real-world and off-chain strategies. A valuation oracle proposes total-assets values and the curator validates them before the vault settles pending deposits and redemptions at the resulting share price.

Control and operating evidence

The curator controls asset allocation, validates valuations and can delegate execution; other roles govern settlement, safe custody and emergency actions. Lagoon publishes role documentation and a Nethermind audit of core contracts. Those controls support infrastructure diligence but do not establish that every curator, mandate, valuation source or underlying asset is acceptable.

Exit consequences

Redemption is a request rather than an atomic withdrawal and cannot be cancelled after submission. Settlement waits for a valuation and sufficient liquidity from the manager’s positions; off-chain assets can add market calendars, transfer gates and realization risk. A reported NAV therefore is not the same as immediately available cash.

Why the class rule decides

Lagoon delegates portfolio construction, execution and valuation validation to a vault curator. The aggregate slug mixes mandates and managers whose allocations can change after deposit, so the delegated-allocation class is decisive even above the size threshold. A named vault can reopen only with a fixed mandate, caps, disclosed roles, valuation controls, holdings and stressed redemption terms.

Class rule

The delegated allocation class is outside the approved structures, so every protocol in it is not approved until the rule changes. The rule is about the structure, not an adverse finding about this protocol, and it is not a client instruction. The events that would reopen it are listed with the memo.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.

ChainVerdictControlControl constraint
EthereumApproved No freeze key No sequencer, no upgrade key, no operator who can be compelled. Rule changes require social consensus.
Arbitrum OneApproved with limits Mixed control a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock.
AvalancheApproved with limits Governed, no freeze no party can freeze or seize C-Chain funds, but one vendor writes the only production client and Messari measured over a third of stake hosted on AWS.
BaseApproved with limits Mixed control Coinbase, one regulated US company, operates the only sequencer, and admin keys can upgrade bridge contracts within ~7 days.
The memo is public. Monitoring connects the research to positions clients actually hold and flags evidence changes for advisor review. $49 per advisor per month, first 14 days free. Start the trial.