A year ago, we argued that vaults would become the default solution for onchain capital allocation. That view is now consensus, and vaults are drawing real institutional interest.

The first phase of vaults was about bootstrapping adoption. The next is about defining the standards that will let institutions and regulators embrace them at scale.

Morpho’s core purpose is to build onchain credit markets that connect lenders and borrowers, not to build vaults. We created Morpho Vaults because vaults are a necessary complement to healthy onchain credit markets. Without vaults, lending across thousands of isolated markets means tracking and maintaining every position manually. A vault turns that complexity into a single set of predetermined rules that allocates across many markets at once.

As markets become more expressive, the role of vaults becomes even more important. Morpho Midnight is a clear example: giving users the ability to express price, maturity, liquidity, and other terms increases lender choice, but it also makes capital allocation more complex. Vaults abstract that complexity, coordinating capital across increasingly diverse markets.

As SEC Commissioner Hester Peirce said in her July statement on vaults: onchain products operate on a spectrum and should be understood by how they actually work, not by the label attached to them.

Today, very different custody models, permissioning, and depositor guarantees sit under the same word: “vault.” We propose the following classification:

These vaults are designed so that curators cannot increase risk or take control of user funds without the user’s explicit or implicit approval. Allocations follow rules enforced programmatically by smart contracts that cannot be changed without first giving users the ability to exit. Noncustodial vaults are constrained by code and role-based permissions, among other safeguards.

Morpho Vaults are built around this principle. That includes:

• A timelock that requires curators to submit any change that would increase a vault’s risk profile with a minimum delay
• During that delay, users can exit before the change takes effect, while a Guardian/Sentinel can cancel it on their behalf
• Role-based access controls that limit what any single party can do
• In-kind redemptions that let depositors withdraw into underlying market positions instead of relying on a manager to unwind them
• Immutable contracts that make these protections permanent rather than dependent on any party

Discretionary vaults give managers more discretion over asset allocation and strategy, enabling activities such as market making, leverage, and cross-chain deployment.

With fewer constraints on how funds are allocated and risks are taken, depositors must place greater trust in the manager’s judgment and risk management.

Many third-party vault infrastructure providers support this model. Morpho’s open-source vault codebase can also be used to build discretionary vaults.

As the category matures, there are three areas the industry needs to focus on in its next phase:

• Regulation should reflect a vault’s actual design and safeguards, rather than treating every vault the same. A practical way to classify a vault is to ask what happens if the operator is hacked, disappears, or acts in bad faith. If users can opt out within a reasonable timeframe without relying on the curator, then the vault is noncustodial.
• Infrastructure needs to keep raising the bar on security, with strong access controls and safeguards that can’t be easily weakened over time.
• At the same time, vaults need to evolve alongside increasingly expressive credit markets coming onchain. As new credit introduces more variables: setting the rate, defining the maturity, or enabling new strategies, vaults will need to absorb that complexity for depositors.