Movement network · Move · DeFi

Canopy

A yield-aggregation protocol. Vaults take a single deposit and route it across lending venues through composable strategy packages.

The stack

Explore the deployed system

Every package below is live on Movement mainnet and was published with its source attached. Select a component to see what it does, its address, and the modules that implement it — each one linking to its verified source on the explorer.

Deposit path

How a deposit reaches a lending market

01The router takes the deposit and wraps it in a transfer type that records the depositor.
02The vault prices shares against its own accounting, credits idle balance, and mints vault shares back to that depositor.
03Idle funds are split across the vault's strategies pro rata by capacity, so one deposit can land in several venues at once.
04Each strategy draws its allocation as debt against the vault and issues debt shares, keeping the vault's claim on deployed funds explicit.
05The strategy hands the assets to its venue adapter, which unwraps them and supplies the external lending market.

Value crossing a package boundary is wrapped in a type the language will not let a contract store, copy, or discard — so an intermediate step physically cannot retain funds. It must pass them on, and the compiler rejects any path that doesn't.

Vault accounting

Share price is computed from internal state

A vault values itself as idle balance plus deployed debt, rather than by reading its own token balance. Assets sent directly to a vault therefore do not move the share price; only accounted inflows do. Resyncing the two is a privileged operation.

Harvested profit is released on a linear schedule instead of landing in one step, so a deposit arriving immediately after a harvest cannot capture yield it wasn't present for. Withdrawals draw from idle funds first and touch a venue only for the shortfall.

Security review

Six audits across three firms

Reviewed continuously from first deployment through the rewards system, with core accounting audited twice and the cross-chain campaign reviewed independently by two firms.

DateScopeFirm
2024-06Asset management contractsMoveBit
2024-12Core strategiesHalborn
2025-02Core strategies — re-auditHalborn
2025-02Cornucopia campaignMoveBit
2025-03Cornucopia campaignOtterSec
2025-07Autocompounding rewardsHalborn