Receipt Token

What Is a Receipt Token?

A receipt token is a tokenized claim issued to users when they deposit assets into a DeFi protocol. It functions like a claim check: you hand over your underlying asset (ETH, USDC, DAI), and the protocol hands back a token that represents your share of the pool. When you want your assets back, you redeem the receipt token for the underlying, plus any returns that accrued while it was deposited.

Receipt tokens are central to how DeFi protocols manage deposits. Rather than maintaining an internal ledger of who deposited what, protocols issue freely transferable tokens that encode ownership on-chain. This design means your position is not locked inside the protocol: you can move it, trade it, or plug it into another protocol entirely.

The most well-known receipt tokens include Aave's aTokens, Compound's cTokens, Uniswap and Curve LP tokens, Yearn's yvTokens, and liquid staking derivatives like Lido's stETH and wstETH. While each protocol implements receipt tokens differently, they all share the same core property: they represent a redeemable claim on deposited assets whose value grows over time.

How It Works

Receipt tokens use one of three primary mechanisms to track value accrual. The choice of mechanism affects how the token behaves in wallets and how easily it integrates with other protocols.

Exchange Rate Model

Compound's cTokens pioneered this approach. When you deposit an asset, you receive cTokens at an exchange rate that starts low and increases over time as interest accrues. Your cToken balance stays constant, but each token becomes redeemable for more of the underlying asset.

The exchange rate is calculated from the pool's state:

exchangeRate = (getCash() + totalBorrows() - totalReserves()) / totalSupply()

// Example: Compound cDAI
// Initial exchange rate: 0.020000
// Supply 1,000 DAI at rate 0.020070 → receive 49,825.61 cDAI
// After one year, rate rises to 0.021591
// Redeem 49,825.61 cDAI → receive 1,075.78 DAI

The exchange rate only updates when someone interacts with the contract (deposit, withdraw, borrow, repay), triggering the accrueInterest method. Between interactions, the rate is effectively frozen, though it can be computed off-chain at any time. cTokens use 8 decimal places regardless of the underlying asset's decimals.

Rebasing Model

Aave's aTokens take a different approach: your token balance increases automatically as interest accrues. If you deposit 1,000 USDC, your aUSDC balance gradually ticks upward to 1,001, 1,002, and so on. The token maintains a 1:1 nominal peg with the underlying.

Under the hood, Aave stores a "scaled balance" and a global liquidity index:

scaledBalance = amountDeposited / currentLiquidityIndex
visibleBalance = scaledBalance * currentLiquidityIndex

// Example: Aave aUSDC
// Deposit 1,000 USDC when liquidityIndex = 1.0
// scaledBalance = 1,000 / 1.0 = 1,000
// After time passes, liquidityIndex = 1.05
// visibleBalance = 1,000 * 1.05 = 1,050 aUSDC

This design is gas-efficient: rather than updating every depositor's balance on each interest accrual, the protocol stores one global index and computes balances on demand. However, rebasing tokens can cause compatibility issues with protocols that cache token balances, which is why Lido created wstETH as a non-rebasing wrapper around its rebasing stETH.

Share-Based Model (ERC-4626)

The ERC-4626 tokenized vault standard, finalized in 2022, unified the fragmented vault landscape. Before ERC-4626, every protocol had its own deposit/withdraw interface, requiring custom integration code. ERC-4626 defines a single API for any contract that accepts ERC-20 deposits and issues shares.

In the share-based model, users deposit assets and receive vault shares. The vault's totalAssets() grows as yield accrues, but the share supply stays constant (absent new deposits or withdrawals). The share price simply rises:

sharePrice = totalAssets() / totalSupply()

// Example: Yearn yvUSDC vault
// Deposit 1,000 USDC at sharePrice = 1.0 → receive 1,000 shares
// Vault earns yield, sharePrice rises to 1.004
// Redeem 1,000 shares → receive 1,004 USDC

ERC-4626 standardizes core operations (deposit, mint, withdraw, redeem), preview functions that account for fees, and conversion helpers between shares and assets. As of 2026, over 1,300 ERC-4626-compliant vaults exist, with approximately $25 billion in total value locked. Major adopters include Yearn v3, Morpho Blue, and numerous yield aggregators.

LP Token Model

Automated market makers like Uniswap and Curve issue LP tokens when users provide liquidity. For a new Uniswap V2 pool, the initial LP tokens minted equal the square root of the product of the two deposit amounts:

// Initial LP mint for a new pool
lpTokens = sqrt(amountA * amountB)

// Example: new ETH/USDC pool
// Deposit 10 ETH + 10,000 USDC
// LP tokens = sqrt(10 * 10000) = 316.23

LP tokens accrue value from trading fees collected by the pool (0.3% per swap on Uniswap V2). However, liquidity providers also face impermanent loss if the relative price of the pooled assets changes, which can offset or exceed fee income.

Use Cases

Collateral in Lending Markets

The most powerful use of receipt tokens is as collateral in other protocols. Deposit ETH into a lending protocol to receive a receipt token, then use that receipt token as collateral to borrow stablecoins. Your ETH continues earning yield through the receipt token while simultaneously backing a loan. This layering of positions is a core driver of capital efficiency in DeFi.

Liquid staking tokens like wstETH are widely accepted as collateral across Aave, MakerDAO, and other lending markets, enabling users to earn staking rewards while maintaining borrowing power.

Yield Aggregation

Yield aggregators accept receipt tokens from one protocol and deploy them into optimized strategies across multiple protocols. A user might deposit USDC into a vault that automatically rotates between Aave, Compound, and Morpho based on which offers the highest APY. Each layer issues its own receipt token, creating a stack of composable positions.

Liquid Staking and Restaking

Liquid staking protocols like Lido issue receipt tokens (stETH, wstETH) representing staked ETH. These tokens earn staking rewards while remaining liquid and usable across DeFi. Liquid restaking extends this further: protocols like EigenLayer issue receipt tokens for restaked positions, adding additional yield layers from actively validated services.

Transferable Positions

Because receipt tokens are standard ERC-20 tokens, DeFi positions become transferable and tradeable. A user can sell their vault shares on a decentralized exchange without withdrawing from the underlying protocol, or transfer a lending position to another wallet in a single transaction. This transferability also enables integration with portfolio trackers, tax tools, and institutional custody solutions.

Why It Matters

Receipt tokens are the mechanism that makes DeFi composability possible. Without them, every deposit would be a locked position visible only to the protocol that holds it. With receipt tokens, deposits become portable, composable building blocks that can flow through the entire DeFi ecosystem.

The standardization brought by ERC-4626 has accelerated this trend. New protocols can integrate with any ERC-4626-compliant vault using a single interface, reducing development time and audit surface area. Extension standards like ERC-7540, finalized in 2024, add support for asynchronous deposit and withdrawal flows, enabling receipt tokens for real-world asset funds and cross-chain yield strategies.

For a deeper look at how yield mechanics work across DeFi, see the research article on yield-bearing stablecoins and the analysis of synthetic yield mechanics.

Risks and Considerations

Smart Contract Risk

Receipt tokens inherit the smart contract risk of their issuing protocol. If the vault or pool contract is exploited, receipt tokens can become worthless. A smart contract audit reduces but does not eliminate this risk. Even audited protocols have suffered exploits: the Kelp DAO restaking exploit in April 2026 resulted in approximately $300 million in losses and triggered $5.4 billion in withdrawals across the restaking sector.

Depeg from Underlying

Receipt tokens can trade at a discount to their underlying value on secondary markets, particularly during periods of market stress. In June 2022, Lido's stETH traded as low as 0.93 ETH (a 7% discount) during the Terra/Luna contagion, despite the underlying ETH stake being fully intact. The depeg reflected secondary market liquidity conditions, not fundamental insolvency. Ethereum's Shanghai upgrade in April 2023 enabled direct withdrawals, creating an arbitrage mechanism that has prevented similar depegs since.

Oracle Risk

Protocols that accept receipt tokens as collateral need accurate price feeds to value them correctly. If oracle data is stale or manipulated, it can trigger improper liquidations or allow undercollateralized borrowing. This risk is amplified for receipt tokens because their value depends on both the underlying asset price and the protocol's exchange rate, making oracle manipulation a multi-vector threat.

Cascading Composability Risk

Layered receipt token positions (staking, then restaking, then lending, then LP provision) create dependency chains. If any protocol in the chain fails, changes its interface, or suffers a liquidation cascade, the entire stack is affected. Each additional layer multiplies the counterparty risk and increases the difficulty of accurately assessing the overall position's risk profile.

Liquidity Risk

Not all receipt tokens have deep secondary market liquidity. Large holders attempting to exit positions may face significant slippage when selling on a DEX. Redemption through the underlying protocol may also involve delays: Ethereum unstaking queues, vault withdrawal cooldowns, or asynchronous settlement periods can all prevent immediate access to underlying assets.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.