> ## Documentation Index
> Fetch the complete documentation index at: https://docs.webacy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Vault Risk Detail

> Returns the full risk decomposition for a single ERC-4626 vault, including lending market data, looping markets, vault composition, code analysis findings, and a standard `risk` field compatible with the format used by other Webacy risk endpoints.



## OpenAPI

````yaml GET /vaults/{address}
openapi: 3.0.1
info:
  title: Risk Score API
  description: API definition for Webacy Risk Scores
  version: 1.2.0
servers:
  - url: https://api.webacy.com
    description: Webacy Risk Score API (Production)
  - url: https://api-development.webacy.com
    description: Webacy Risk Score API (Development)
  - url: http://0.0.0.0:3030/api/v1/risk-score
    description: Webacy Risk Score API - Local
security:
  - api_key: []
tags:
  - name: Threat Risks
    description: Analyze addresses for security threats and malicious activity
  - name: Sanction Checks
    description: Check addresses against OFAC and other sanction lists
  - name: Approval Risks
    description: Analyze token approvals and associated risks
  - name: Transaction Risks
    description: Assess risk details for blockchain transactions
  - name: Exposure Risk
    description: Understand risk profile and exposure of addresses
  - name: Contract Risk
    description: Real-time smart contract security analysis
  - name: URL Risks
    description: Analyze URLs for phishing and security threats
  - name: API Usage
    description: Monitor and manage API consumption
  - name: Holder Analysis
    description: Token holder distribution and sniper detection
  - name: Address Poisoning
    description: Detect address poisoning attack patterns
  - name: Token Analysis
    description: Comprehensive token security and market analysis
  - name: Pool Analysis
    description: Liquidity pool data and analysis
  - name: Transaction Scanning
    description: Scan and simulate transactions for risks
  - name: trading-lite
    description: Lightweight trading risk assessment
  - name: RWA & Pegged Tokens
    description: >-
      Real-world asset and pegged-token analytics (supply flows, mint/burn
      velocity)
  - name: Vault Risk v3
    description: >-
      Webacy-native v3 vault risk surface — composite grade, categories,
      coverage, and the framework taxonomy (RFC-019).
  - name: RWA Risk v3
    description: >-
      Webacy-native v3 RWA / stablecoin risk surface — composite grade,
      structural-health criteria, and batch (RFC-019).
paths:
  /vaults/{address}:
    get:
      tags:
        - Vault Risk
      summary: Get Vault Risk Detail
      description: >-
        Returns the full risk decomposition for a single ERC-4626 vault,
        including lending market data, looping markets, vault composition, code
        analysis findings, and a standard `risk` field compatible with the
        format used by other Webacy risk endpoints.
      operationId: getVaultDetail
      parameters:
        - name: address
          in: path
          required: true
          description: Vault contract address
          schema:
            type: string
            pattern: ^0x[a-fA-F0-9]{40}$
          example: '0x0deFfd509197aAD5207d2A55862835b467E8128F'
        - name: chain
          in: query
          required: true
          description: Blockchain network where the vault is deployed
          schema:
            type: string
            enum:
              - eth
              - arb
              - base
              - opt
              - pol
              - bsc
          example: eth
      responses:
        '200':
          description: >-
            Full vault risk detail with lending market data, composition, and
            code analysis
          content:
            application/json:
              example:
                metadata:
                  address: '0x0deFfd509197aAD5207d2A55862835b467E8128F'
                  chain: eth
                  name: Usual Boosted USDC
                  symbol: bbUSDC
                  protocol: morpho
                  contract_type: erc4626_vault
                  tvl_usd: 245000000
                  underlying_symbol: USDC
                  underlying_address: '0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48'
                  underlying_risk_tier: battle_tested
                  apy: 0.078
                  looping_rate: 0.12
                  listing_verdict: safe_to_list
                  attention_needed: false
                  exit_recommendation: false
                  score_delta_vs_prev: -2
                  last_scored_at: '2026-03-31T16:43:01.093Z'
                  confidence: 0.92
                  tvl_trend_pct_30d: 5.2
                  cagr_90d: 0.065
                  cagr_lifetime: 0.072
                  max_drawdown: -0.003
                  last_share_price: 1.0012
                  price_source: live
                  underlying_price: 1.0001
                  lifetime_return: 0.042
                  three_months_sharpe: 2.1
                  price_velocity_1w: 0.0001
                  tvl_flight_1w: -0.02
                  looping_usd: 29400000
                  utilization_rate: 0.82
                  withdrawal_risk: null
                  withdrawal_risk_detail: null
                  protocol_risk_label: null
                  depeg_status: null
                  has_exploit_history: false
                  owner_is_timelock: true
                  lst_collateral_pct: null
                  lst_collateral_usd: null
                  lst_collateral_symbols: null
                  enriched_at: '2026-03-31T16:43:01.093Z'
                  contract_verified: true
                  audit_count: 3
                risk:
                  score: 18
                  count: 2
                  medium: 2
                  high: 0
                  overallRisk: 18
                  issues:
                    - score: 18
                      tags:
                        - type: vault_governance_risk
                          key: vault-low-timelock
                          name: Low Timelock
                          description: Timelock shorter than recommended
                          severity: 4
                          context:
                            detected_at: '2026-03-31T16:43:01.093Z'
                      categories:
                        vault_governance_risk:
                          key: vault_governance_risk
                          name: Governance & Access Control
                          description: >-
                            Risk factors related to ownership model, admin
                            controls, and timelock configuration.
                          tags:
                            vault-low-timelock: true
                  context:
                    - name: Deposit
                      key: deposit
                      type: expected_behavior
                      description: ERC-4626 deposit function is available
                      reason: Standard vault entry point for depositing assets
                tokens: []
                looping_markets:
                  - market_key: '0xabc123'
                    loan_symbol: USDC
                    collateral_symbol: wstETH
                    supply_usd: 15000000
                    source: morpho
                vault_composition:
                  - symbol: USDC
                    address: '0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48'
                    share_pct: 1
                    depeg_score: 0
                lst_collateral_markets: null
                morpho:
                  liquidity_usd: 18000000
                  performance_fee: 0.1
                  timelock_seconds: 86400
                  curator: Steakhouse Financial
                  avg_net_apy: 0.078
                  avg_net_apy_ex_rewards: 0.052
                  not_whitelisted: false
                  bad_debt_usd: 0
                webacy:
                  code_risk_score: 12
                  contract_risk_score: 8
                  deployer_risk_score: 5
                  findings: []
                stale: false
        '400':
          description: Invalid address format or missing chain parameter
        '401':
          $ref: '#/components/responses/UnauthorizedError'
        '404':
          description: Vault not found for the given address and chain
      security:
        - api_key: []
components:
  responses:
    UnauthorizedError:
      description: Authorization information is missing or invalid
      content:
        application/json:
          example:
            message: Unauthorized
  securitySchemes:
    api_key:
      type: apiKey
      in: header
      name: x-api-key

````