Shadow Arena #007: Reaper Vaults V2

Reaper Vaults V2 is a Yearn V2-style yield aggregator built by Reaper Farm. Users deposit tokens into a vault that allocates funds across multiple strategies, each earning yield from external protocols (Granary, Aave). The vault uses share accounting, locked-profit degradation to prevent flash-deposit yield extraction, and gain/loss reporting to net strategy results. This audit also covers the integration layer with the Ethos Reserve protocol (a Liquity fork) where the ActivePool deposits collateral into Reaper vaults.

Scope (741 SLOC)

File	SLOC	Description
Ethos-Vault/contracts/ReaperVaultV2.sol	412	Core vault: share token, deposit/withdraw, strategy queue, locked-profit degradation, gain/loss report
Ethos-Vault/contracts/ReaperVaultERC4626.sol	89	ERC-4626 wrapper exposing deposit/mint/withdraw/redeem and conversion previews
Ethos-Vault/contracts/abstract/ReaperBaseStrategyv4.sol	156	Base strategy: harvest cycle, withdraw, ROI reporting, emergency exit
Ethos-Vault/contracts/ReaperStrategyGranarySupplyOnly.sol	84	Concrete strategy: supplies want token to Granary (Aave fork) for yield

Documentation

Source Code Protocol Docs

Part of the Uniswap V2 Path

This shadow audit connects to the Uniswap V2 Build module. Students who completed the CFAMM build have an advantage because they understand the core architecture.

View Build Module

Duration4 days

Total Findings5

Scope741 SLOC

PriceFree