A liquidity provider vault is an on-chain pool that holds deposited assets and uses them to support trading, lending, or other protocol activity. In many DeFi systems, users deposit tokens into the vault and earn fees or rewards while the protocol uses that liquidity to fill trades, settle positions, or smooth market operations.
This vault matters because it concentrates value. If the vault’s rules, pricing inputs, or access controls are wrong, attackers may drain funds, distort pricing, or force losses onto liquidity providers. In real attacks, the vault is often not broken directly; instead, an attacker exploits bad oracle data, weak signing systems, or unsafe automation that causes the vault to accept harmful trades. Defenders protect it with strict input validation, capped exposure, rate limits, monitoring for abnormal price movement, and strong separation between off-chain services and on-chain settlement.