Shadow Arena #007: Reaper Vaults V2

Reaper Vaults V2 is a Yearn V2-style yield aggregator built by Reaper Farm. Users deposit tokens into a vault that allocates funds across multiple strategies, each earning yield from external protocols (Granary, Aave). The vault uses share accounting, locked-profit degradation to prevent flash-deposit yield extraction, and gain/loss reporting to net strategy results. This audit also covers the integration layer with the Ethos Reserve protocol (a Liquity fork) where the ActivePool deposits collateral into Reaper vaults.

Scope (741 SLOC)

File	SLOC	Description
Ethos-Vault/contracts/ReaperVaultV2.sol	412	Core vault: share token, deposit/withdraw, strategy queue, locked-profit degradation, gain/loss report
Ethos-Vault/contracts/ReaperVaultERC4626.sol	89	ERC-4626 wrapper exposing deposit/mint/withdraw/redeem and conversion previews
Ethos-Vault/contracts/abstract/ReaperBaseStrategyv4.sol	156	Base strategy: harvest cycle, withdraw, ROI reporting, emergency exit
Ethos-Vault/contracts/ReaperStrategyGranarySupplyOnly.sol	84	Concrete strategy: supplies want token to Granary (Aave fork) for yield

Documentation

Source Code Protocol Docs

Part of the Yearn V2 Path

This shadow audit connects to the Yearn V2 Build module. Students who completed the vault-strategy build have an advantage because they understand locked-profit reporting, gain/loss accounting, and strategy chains.

View Build Module

Duration4 days

Total Findings5

Scope741 SLOC

PriceFree