---
title: "How to Deploy a Permissionless Vault on Lagoon in Minutes"
description: "Deploy an onchain vault across 18+ EVM chains with no approvals, no minimum TVL, and no operational overhead. Here's how Lagoon's Vault Factory works."
date: "2026-03-04"
author: "Lagoon"
category: "Product"
tags: ["vaults", "deployment", "EVM", "asset-management", "ERC-7540", "permissionless"]
url: "https://lagoon.finance/blog/deploy-permissionless-vault"
readingTime: "5 min read"
---
Lagoon's Vault Factory lets anyone deploy a fully onchain vault in minutes, across 18+ EVM networks, with no team approvals or minimum TVL. You choose a chain, pick an asset, assign governance roles, set fees, and deploy. The contracts are backed by 8+ audits from NethermindSec and Trail of Bits. This guide walks through each step.
## Introduction
Launching an onchain vault has historically meant navigating protocol-specific integrations, waiting on team approvals, and committing capital before you could even test your strategy. For curators and asset managers, this friction slowed experimentation and made multi-chain deployment impractical.
Lagoon's Vault Factory changes this. It enables fully permissionless vault deployment: anyone can spin up a production-ready vault across 18+ EVM chains in a single session. No gatekeepers, no operational overhead, no minimum TVL required.
This article walks through the six-step deployment process and explains what each configuration choice means for your vault.
## Why permissionless deployment matters
Traditional vault platforms require curators to commit before they can prove anything. You need a minimum TVL, a partnership agreement, or protocol approval just to get started. That model penalizes experimentation and testing.
With Lagoon, curators can launch empty vaults in production or staging environments, test multi-chain strategies freely, and scale on their own terms when they're ready. The barrier is gone: if you have a wallet and a strategy, you can deploy.
**Important:** Once deployed, some contract parameters are immutable, while others can only be changed after a time-lock period. Review your configuration carefully before confirming.
## Six steps to deploy your vault
### Step 1: select your network
Choose from 18+ supported EVM chains including Ethereum Mainnet, Arbitrum, Base, and more. If you need a specific chain that isn't listed, the Lagoon team can add it on request.
| Supported Networks | Status |
| --- | --- |
| Ethereum Mainnet | Live |
| Arbitrum | Live |
| Base | Live |
| + 15 additional EVM chains | Live |
| Custom chain requests | On request |
### Step 2: define asset & symbol
Pick an underlying asset from the preset list or add any custom ERC-20 token address. Then assign a ticker symbol for your vault share token (e.g., lagUSDC). This symbol is how LPs will identify your vault onchain.
### Step 3: add your curation wallet
Connect the address that will manage vault assets. This can be a multisig (Safe, Squads), an MPC wallet (Fireblocks, Fordefi), or any other curation address. The curation wallet has execution authority over the vault's assets.
### Step 4: configure governance
Assign roles and distribute permissions across your team. Lagoon's governance model separates concerns into distinct roles:
| Role | Responsibility |
| --- | --- |
| Vault Administrator | Top-level admin with full configuration control |
| Valuation Provider | Responsible for NAV calculations and asset pricing |
| Delay Proxy Admin | Authority over contract upgrades (time-locked) |
| Whitelist Manager | Controls investor access (if whitelisting is enabled) |
| Security Council | Emergency safety role (coming Q1) |
### Step 5: set your fee structure
Define performance fees and management fees, and designate the address that receives fee payouts. Lagoon supports high-water mark tracking to ensure performance fees are only charged on new gains.
*Coming soon:* entry and exit fee types will be available in the next protocol iteration.
### Step 6: review and deploy
Review your full configuration. If anything needs adjustment, you can reset with a single click. Once confirmed, your vault is deployed onchain and immediately accessible.
Each deployed vault gets a lightweight UI and a unique shareable link for LP onboarding:
`app.lagoon.finance/vault/[CHAIN_ID]/[VAULT_ADDRESS]`
## After deployment: what you can configure
Currently, contract parameter changes (fees, roles, whitelist updates, sync deposit module, vault closure) require proxy verification and block explorer interaction. A dedicated configuration UI is in development.
Vaults deployed through the factory automatically receive access to new protocol upgrades on an opt-in basis; no redeployment required.
## Security
Lagoon's smart contracts have undergone 8+ audits by **NethermindSec** and **Trail of Bits**. The vault architecture is built on the ERC-7540 standard, which provides asynchronous deposit and withdrawal flows designed for real-world asset management use cases.
- **Permissionless:** Anyone can deploy a vault: no approvals, no partnerships, no minimum TVL.
- **Multi-chain:** 18+ EVM networks supported out of the box, with custom chain requests available.
- **Production-ready in minutes:** Six-step configuration, from chain selection to live deployment.
- **Audited:** 8+ security audits by NethermindSec and Trail of Bits on the underlying smart contracts.
- **Upgradeable:** Opt-in protocol upgrades without redeployment.
Ready to deploy? Launch your first vault. The factory is live across all supported chains.