The product sits within Kraken's Earn suite and is built on vault infrastructure provided by Veda, an infrastructure provider using ERC-4626 vault architecture. A risk management firm called Sentora monitors and allocates deposits across three lending protocols: Aave, Morpho, and Tydro. Sentora tracks six risk categories, including concentration, liquidity, interest rate, duration, leverage/looping, and correlation, and shifts capital dynamically between the protocols.

Rewards are paid in native BTC, not wrapped BTC tokens, which reduces custodial bridge risk for users.

"Many Bitcoin holders on Kraken have made it clear they want simple, safe ways to earn on the bitcoin they already plan to hold," said John Zettler, GM of Payward Services and Director of Product for Kraken Earn. "Bitcoin Vault is built for that mindset." Readers evaluating that framing should note that Bitcoin Vault is an unregulated product, and users in most eligible markets have no direct regulatory recourse tied to it.

What the On-Chain Data Shows

The three underlying protocols vary considerably in scale. Aave V3 holds $14.08 billion in total value locked (TVL) across chains including Ethereum, Arbitrum, and Base, generating $662.86 million in annualized fees. (The $48.5 billion and $30.7 billion TVL figures cited later in this piece refer to the broader Aave protocol across all versions at the time of the April 2026 Kelp DAO exploit, not Aave V3 alone.)

Morpho Blue carries $7.42 billion in TVL spread across Ethereum, Base, and Hyperliquid.

Tydro, the third protocol, launched with roughly $140 million in TVL and operates on Ink, Kraken's own Layer 2 blockchain built on the Optimism Superchain. One structural detail is critical for understanding user risk: Tydro is itself built on Aave v3. Users depositing into Bitcoin Vault therefore carry indirect Aave exposure not only through the direct Aave allocation but also through Tydro, compounding their concentration risk to Aave's smart contract surface.

That layered exposure matters for users assessing risk. Tydro is not an independent third party. It was built by Ink, which is itself a Kraken project, meaning Kraken holds a commercial interest in one of the three protocols receiving user deposits. This concentration of ecosystem relationships is worth factoring into any assessment of the product.

Kraken's 2.5% APY ceiling is also variable, not guaranteed. Morpho Blue's own average yield across 977 pools currently sits at approximately 2.35%, which aligns with Kraken's stated ceiling but leaves little headroom. BTC yield in lending markets depends on demand from traders borrowing against Bitcoin collateral. When that demand falls, so do rates.

A Difficult Week for DeFi Security

The launch coincided with renewed scrutiny of DeFi protocol safety. Manuel Aráoz, co-founder of smart contract security firm OpenZeppelin, issued a public warning this week advising users to exit DeFi protocols including Aave and Compound. "Coding agents are superhuman at finding vulnerabilities, and smart contract security is too asymmetric: defenders need to fix every bug while attackers need just one exploit to steal funds," Aráoz wrote.

The warning followed a turbulent period. April 2026 was the worst month by incident count for DeFi exploits so far this year, and total losses in 2026 have exceeded $1 billion. In April, the Kelp DAO exploit extracted $292 million and left $196 million in bad debt absorbed by Aave, causing Aave's TVL to drop from $48.5 billion to $30.7 billion in a single day and triggering reserve freezes across multiple chains. In the same week as Kraken's launch, a separate Stake DAO exploit involving a compromised deployer key and the minting of 5.4 trillion fake tokens extracted approximately $91,000, illustrating the breadth of attack vectors currently active across the DeFi ecosystem.

Kraken's product terms acknowledge that withdrawals may not be instant during "liquidity constraints," a scenario the Kelp DAO event demonstrated is not theoretical.

Kraken Bitcoin Vault is operated under Payward Wallet, LLC and is explicitly labeled as an unregulated product. Users in most eligible markets have no direct regulatory recourse tied to this product.

Regional Access and Practical Limits

The geographic eligibility list carries real significance. India ranks first globally in crypto adoption according to the CryptoNewsNavigator 2026 Global Crypto Adoption Index. Nigeria ranks second. Pakistan ranks eighth. Kenya ranks thirteenth. All four countries are eligible for Bitcoin Vault.

Kenya's inclusion is notable beyond its ranking. The country's Capital Markets Authority has developed an active framework for crypto oversight, and Kenya has seen substantial growth in mobile-money-adjacent crypto use, making it a meaningful market for a product tied to BTC holdings rather than speculation.

South Asia saw crypto transaction volume grow from $1.4 trillion to $2.36 trillion year over year, an increase of approximately 69%.

For holders in these markets who already hold BTC and have no intention of selling, a 2.5% yield paid in native BTC is a meaningful option that did not previously exist as a native BTC yield product through a mainstream exchange interface.

For Indian users specifically, rewards received in BTC rather than sold may defer taxable events under India's 30% crypto gains tax, though local tax advice is essential before assuming that treatment. Indian users should also account for India's 1% tax deducted at source (TDS) on crypto transactions, which applies independently of the capital gains framework and is a material compliance consideration regardless of how rewards are classified.

For users in Nigeria and Kenya, the unregulated status of Bitcoin Vault carries particular weight. Nigeria's Securities and Exchange Commission and Central Bank of Nigeria, alongside Kenya's Capital Markets Authority, have each signaled active oversight of crypto products operating in their markets. As an explicitly unregulated offering, Bitcoin Vault exists in a grey area under these emerging frameworks, and users in those jurisdictions should assess that status carefully before participating.

The practical barrier across all eligible markets is capital. At current BTC prices near $105,000, a 0.1 BTC deposit would generate roughly $2,625 annually at the ceiling rate. That positions the product more toward higher-net-worth holders and institutions than grassroots retail users, particularly in African markets where the DeFi risk profile is not yet widely understood.

What Comes Next

Bitcoin Vault extends an architecture Kraken already validated with stablecoins. Its DeFi Earn product, covering USDC and a range of stablecoin-denominated vaults with yields marketed at up to 8% annually, launched in January 2026 and crossed $240 million in assets without token incentives. The difference between that 8% ceiling and the 2.5% ceiling for BTC reflects the gap in borrowing demand between dollar-denominated and Bitcoin-denominated lending markets.

Extending the same infrastructure to BTC is a logical next step, and the underlying Veda and Sentora stack is replicable in principle. Regional exchanges in South Asia and Africa looking to offer exchange-abstracted yield products now have a working template to study. Whether replication is feasible for any given exchange will depend on its regulatory standing, technical capacity, and access to risk management infrastructure comparable to what Sentora provides.

For prospective users across all eligible markets, Bitcoin Vault carries a combination of risk factors worth weighing together: the product is unregulated, the yield is variable and not guaranteed, withdrawals may be constrained during periods of low liquidity, and users carry compounded smart contract exposure through both the direct Aave allocation and Tydro's Aave v3 architecture. Those considerations apply with particular force in markets where regulatory frameworks for such products are still developing.