YieldPilot: Automated Yield Optimization on Solana
A non-custodial protocol that automatically routes deposits across Solana's highest-yielding lending and liquid staking protocols, compounding returns and rebalancing every 45 minutes.
Abstract
YieldPilot is a non-custodial yield optimization protocol built on Solana. Users deposit USDC or SOL into smart contract vaults. A keeper bot continuously monitors APYs across leading Solana lending and liquid staking protocols — including Kamino, Marinade, Jito, and Solend — and automatically rebalances the vault to maximize returns.
Users receive vault shares representing their proportional ownership. Shares appreciate in value as yield accrues. Depositors can withdraw at any time, receiving their principal plus earned yield minus a performance fee charged only on profits.
The Problem
Solana DeFi offers some of the highest yields in crypto — but capturing those yields requires constant manual monitoring. APYs shift across protocols hour by hour. A depositor who puts funds into one protocol today may be earning meaningfully less than a competing protocol by tomorrow, with no automatic mechanism to move their funds.
Most users either leave money idle in a single protocol, or spend hours manually chasing rates. YieldPilot solves this by automating the entire process.
| Manual Yield Farming | YieldPilot | |
|---|---|---|
| Rate monitoring | Manual, time-consuming | Automated every 45 min |
| Rebalancing | Manual transactions | Automated keeper bot |
| Compounding | Manual harvest required | Hourly auto-compound |
| Custody | Protocol-held funds | Non-custodial vault shares |
How YieldPilot Works
3.1 Deposit
Users deposit USDC or SOL into a YieldPilot vault. Vault shares are minted proportional to the current share price — total vault assets divided by total shares outstanding. Each depositor owns an exact, verifiable fraction of the pool.
3.2 Winner-Takes-Most Routing
When the keeper bot identifies the highest-yielding protocol, it routes 80% of vault assets there and keeps 20% in the runner-up. This captures most upside while maintaining diversification. Rebalancing only triggers when the APY spread exceeds 0.5%, preventing unnecessary churn from minor fluctuations.
3.3 Auto-Compound
Every hour, the keeper bot harvests accrued rewards and reinvests them back into the vault. This compounds returns continuously, improving long-term yield versus protocols that require manual harvest.
3.4 Withdrawal
Users burn their vault shares at any time to receive their proportional share of vault assets. The redemption value reflects principal plus all earned yield. A tiered performance fee is deducted from profits only — the rate depends on your $YPILOT holdings. No fee is charged if no profit was earned.
Smart Contract Architecture
YieldPilot is built with the Anchor framework on Solana. The vault program manages deposits, withdrawals, share minting, rebalancing, and fee collection entirely on-chain.
| Instruction | Description | Authority |
|---|---|---|
| initialize_vault | Create vault with config params | Admin |
| deposit | Mint shares in exchange for tokens | Any user |
| withdraw | Burn shares, receive tokens + yield | Any user |
| rebalance | Update protocol target allocations | Keeper |
| compound | Harvest and reinvest rewards | Keeper |
| deploy_to_* / recall_from_* | Move funds to/from a protocol | Keeper |
| set_paused | Pause / unpause new deposits | Admin |
| raise_tvl_cap | Raise the vault's maximum TVL (one-way only, cannot decrease) | Admin |
| set_gate_mint | Set the token-gate mint (one-time only, immutable after) | Admin |
| set_keeper | Update keeper wallet address | Admin |
| propose_admin / accept_admin | Two-step admin ownership transfer | Admin / new admin |
| update_tier_thresholds | Adjust $YPILOT tier thresholds | Admin |
| emergency_close | Reclaim rent from an empty vault only | Admin |
Program ID (mainnet): CVJrJGoKjseTJqiFGctssYde3pLAnPaRZtjAaKXd8pWk — verifiable on Solscan.
Fee Structure
YieldPilot charges a single fee type: a performance fee on profits at withdrawal, tiered by $YPILOT holdings. The fee is automatically deducted and routed to the YieldPilot treasury wallet on-chain — fully transparent and verifiable by anyone.
| Fee Type | Amount | When Charged |
|---|---|---|
| Performance fee (Standard — no $YPILOT required) | 9% of profit | On withdrawal, profits only |
| Performance fee (Bronze) | 6% of profit | On withdrawal, profits only |
| Performance fee (Silver) | 3% of profit | On withdrawal, profits only |
| Performance fee (Gold) | 0% | No fee |
| Deposit fee | None | — |
| Withdrawal fee | None | — |
| Management fee | None | — |
Example: you hold Silver tier and deposit $5,000 USDC. At a representative ~8% APY, after one year your position grows to roughly $5,400. Your $400 profit incurs a 3% fee ($12). You receive approximately $5,388. Gold tier holders pay no fee at all. No fee is ever charged on principal — only on realized profit.
Token-Gated Access Tiers
Access to YieldPilot's fee tiers is gated by holding $YPILOT tokens, measured as an absolute token balance — not a percentage of supply. The more $YPILOT you hold, the lower your performance fee.
| Tier | $YPILOT Required | Performance Fee |
|---|---|---|
| Gold | 1,000,000+ | 0% |
| Silver | 100,000+ | 3% |
| Bronze | 10,000+ | 6% |
| Standard | None required | 9% |
This tiered model rewards $YPILOT holders with progressively better terms. Gold holders pay zero performance fees — all yield is theirs. Everyone can deposit and withdraw any amount regardless of holdings — there is no deposit cap at any tier. The tier only affects the performance fee rate charged on profit. The $YPILOT token is available on pump.fun.
Security Model
Non-Custodial
YieldPilot never holds user funds directly. All assets are held in on-chain program-derived accounts (PDAs) controlled by the vault smart contract. No individual — including the YieldPilot team — can access or move user funds outside of the defined program instructions.
Verifiable On-Chain
The smart contract is deployed at a fixed program ID on Solana. Anyone can verify the vault state, fee parameters, and treasury address directly on-chain at any time — no need to trust our word.
Emergency Pause
The vault admin can pause new deposits in the event of an emergency. Withdrawals remain available at all times — users can always retrieve their funds even when the vault is paused.
TVL Cap
A configurable TVL cap limits total deposits during the early phase, reducing exposure while the protocol matures. The cap can only be raised, never lowered — it cannot be used to trap funds or block withdrawals.
Separated Admin & Keeper Wallets
The admin wallet (which controls vault configuration) and the keeper wallet (which executes rebalances) are separate keypairs with separate on-chain authorities. Compromising the keeper grants no ability to change fees, pause the vault, or access funds.
Audit Status
The code has not yet been formally audited by a third party. A professional audit is planned once the protocol has demonstrated real user demand. The TVL cap will be raised incrementally as the protocol matures. Until then, deposit only what you are comfortable risking.
Roadmap
| Phase | Milestone | Status |
|---|---|---|
| Phase 1 | Smart contract development & testing | Complete |
| Phase 1 | Keeper bot — live APY routing & auto-compound | Complete |
| Phase 1 | Kamino, Marinade, Jito, Solend integrations | Complete |
| Phase 1 | Frontend | Complete |
| Phase 1 | Devnet deployment & vault initialization | Complete |
| Phase 1 | Admin / keeper wallet separation | Complete |
| Phase 1 | Mainnet launch with $YPILOT token gating | Pending |
| Phase 2 | Third-party smart contract audit | Planned, pending demonstrated demand |
| Phase 2 | Referral system — earn a share of referred yield fees | Planned |
| Phase 2 | Orca / Raydium LP integration | Planned — opt-in only, carries impermanent loss risk |
| Phase 3 | Cross-chain deposits via Wormhole | Research |
| Phase 3 | Auto-bridge to highest cross-chain yield | Research |
Disclaimer
This document is for informational purposes only and does not constitute financial advice or a solicitation to buy or sell any asset. DeFi protocols carry significant risks including smart contract vulnerabilities, protocol failures, and potential loss of funds. Never deposit more than you can afford to lose.
YieldPilot is deployed on Solana mainnet. Always verify transaction details before signing.