Vault admin

An overview of the Vault Admin role.

The Vault Admin is the governance and safety role of a Lagoon vault. It controls critical configuration and defines who holds key permissions. This role does not run the strategy. It sets the rules and the control surface.

Because the Vault Admin can change sensitive parameters, it should be held by a robust custody setup such as a Safe multisig or an institutional MPC, with clear internal controls and clear disclosure to users.

The Vault Admin can update core addresses, pause the vault, and initiate closure. Treat this role as a high privilege role and secure it accordingly.

Responsibilities

The Vault Admin is responsible for:

• Assigning and updating key roles and addresses

• Managing emergency controls

• Managing fee configuration

• Managing the vault lifecycle state

• Maintaining public facing vault metadata used by front ends, when applicable

What the Vault Admin can do

Goverance

• Transfer ownership using a two step process where the new admin must accept ownership

• Renounce ownership, permanently removing admin authority

Security and Access control

• Pause and unpause the vault. cf: Pause Vault

• Switch between black and whitelist

• Enable async-only mode, permanently disabling synchronous deposits and redeems

Fees and Parameters

• Update management and performance fee rates, when enabled

• Apply cooldown rules for fee changes, when configured

• Configure entry and exit fees, when enabled

Front end information

• Update vault metadata used by front ends, such as name, description, logo, links, and tags, when supported by the chosen interface

Lifecycle management

• Initiate vault closing by changing the vault status from Open to Closing

Operational configuration

• Update the Valuation Provider address

• Update the Fee Receiver address

Recommended custody setup

For most teams, the Vault Admin should be held by:

• A Safe multisig with a clear signer policy

• An institutional MPC setup

What this means for users

Users can always verify the current Vault Admin address and role assignments on-chain. Vault curators are responsible for accurately presenting their product and disclosing all relevant permissions and controls to users, who can independently verify these settings on-chain.