
Sommelier Review
Apache-licensed code and a written user-only withdrawal rule
of 10
Sommelier scores 6.6 out of 10 in yield aggregators, led by Apache 2.0 code across every core repository and a plain statement that only users can withdraw. No published fee rates, thin audit dating and one-line strategy descriptions hold it back. Desk research of primary sources, checked November 6, 2026.
Fees
Management fee on TVL and performance fee above high-water mark, set per cellar
Licence
Apache 2.0 across cellar-contracts, steward, gravity-bridge, sommelier
Audits
Macro reports for 32 strategies; Least Authority on Gravity Bridge
Bug bounty
Self-hosted, up to $50,000
Control
Validator-approved rebalances; only users can withdraw, per homepage
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (6.0 + 10.0 + 6.0 + 7.0 + 4.0) ÷ 5 = 6.6.
Pros
- Licence 10: Apache 2.0 files in cellar-contracts, steward, gravity-bridge and the sommelier chain
- Custody 7: homepage states users are the only ones who can withdraw assets
- Audit disclosure 6: a linked report for each of 32 listed strategies, plus a Gravity Bridge audit
- Performance fees apply only above a high-water mark, paid from a reserve, per the fee docs
Cons
- Fee disclosure 6: no per-cellar rate, cap or strategist share published; strategists can change fees
- Strategy transparency 4: one-line vault descriptions, no allocation or performance history
- Audits page names no firm in text and dates only one report (July 2022)
- No terms of service on somm.finance, only a privacy policy
How Sommelier scores in yield aggregators
Sommelier, now branded Somm, runs ERC-4626 vaults called cellars whose positions are changed by strategists, with every change approved by the validator set of Sommelier's own Cosmos SDK chain. This entry rates those cellars in our yield aggregator ranking. The basis is desk research of somm.finance, its audits and bug bounty pages, the Sommelier documentation and the PeggyJV GitHub repositories, checked on November 6, 2026. No deposit was made. The category uses five criteria, each marked 0 to 10 and weighted equally, as set out in our ratings methodology.
| Criterion | What the sources show | Mark |
|---|---|---|
| Fee disclosure | The FeesAndReserves documentation defines two fees in basis points: an annual management fee on cellar TVL and a performance fee above a high-water mark. The old platform fee is deprecated. No rate, cap or strategist split is published, and the strategist can change both fees. | 6 |
| Licence & code openness | Apache 2.0 LICENSE files in cellar-contracts, steward, gravity-bridge and the sommelier chain repository. Cellar contracts carry Apache-2.0 SPDX headers. | 10 |
| Audit disclosure | The audits page links an audit for each of 32 strategies (31 to Macro's report library, one to a Macro PDF on GitHub), plus a Least Authority audit of the Gravity Bridge. Auditors are named only in the links, and the only date is July 2022 in one filename. A self-hosted bounty pays up to $50,000. | 6 |
| Custody & control | The homepage states that users are the only ones who can withdraw assets and that validators can move assets only among the positions encoded in a vault. Governance shutdowns block deposits and adaptor calls but not withdrawals. | 7 |
| Strategy transparency | Each active vault has a one-line description naming its protocols and tokens. No allocation, APY basis or historical performance is published on the pages read, and the vault list on the app is marked "coming soon". | 4 |
The overall score is the plain average: (6 + 10 + 6 + 7 + 4) / 5 = 33 / 5 = 6.6. The previous overall was 4.6.
Three marks changed at this check. Audit disclosure rose from 2 to 6: the earlier review could not reach an official audit page, and somm.finance now publishes one with linked reports. Custody & control rose from 3 to 7 because the homepage states the withdrawal rule that the earlier review did not find. Licence & code openness rose from 8 to 10 after we confirmed Apache 2.0 files across all four core repositories, the same band the category gives to MIT and AGPL code.
Strongest criteria: licence and custody design
Licence & code openness carries the full 10. The cellar contracts, the Steward relayer, the Gravity Bridge fork and the chain itself are all published by PeggyJV under Apache 2.0, and the contract files carry matching SPDX headers. That covers every layer a deposit passes through, not just the vault.
Custody & control scores 7. Sommelier states the rule plainly: users are the only ones who can withdraw, and validators can move assets only among a vault's prescribed positions. Changes run through validator consensus on the Sommelier chain rather than a multisig, and the governance overview says an emergency shutdown stops new deposits and adaptor calls but does not block withdrawals. The mark is not higher because control is still broad. A strategist decides where funds sit within the trusted adaptors, governance decides which adaptors and positions to trust, and the bridge that carries instructions is part of the trust model. Our guide to how blockchain bridges work explains that risk.
Weakest criteria: strategy detail, then fee figures
Strategy transparency at 4 is a measured deficiency. Real Yield ETH is described as leveraged staking on Aave and Compound plus Uniswap v3 liquidity for liquid staking tokens. Real Yield USD spans Aave, Compound and Uniswap v3. Real Yield BTC is described only as "a dynamic and evolving set of strategies". None of the pages read gives allocations, leverage levels, the basis of any displayed yield or past performance. The app pages did not render for our checks, so anything shown only there is not measured.
Fee disclosure at 6 rewards a clear structure without figures. The high-water mark means a performance fee applies only to gains above the previous peak share price, and fees are paid from a reserve rather than from active positions. But the documentation gives no rate for any cellar, no maximum, and no strategist share, which governance sets per cellar. A strategist can change the fees, with the change taking effect after the next fee accrual. Peers that publish figures score higher here.
Audit disclosure at 6 sits between the two. Coverage is broad, because every listed strategy links a report. Depth of disclosure is thin: the page names no firm in its text, dates almost nothing, and 31 strategies share eight Macro reports. The chain application and the Steward relayer appear in the bug bounty scope but not on the audits page.
What the score does not cover
- APY, TVL and returns, which change with each strategy.
- The safety of Aave, Compound, Uniswap and the other protocols a cellar uses, and liquidation risk on leveraged positions.
- Validator and bridge failure modes beyond what the docs state.
- Eligibility and liability: somm.finance lists a privacy policy but no terms of service.
- The SOMM token and staking rewards.
Sommelier vs Idle Finance and Harvest Finance
| Criterion | Sommelier | Idle Finance | Harvest Finance |
|---|---|---|---|
| Fee disclosure | 6 | 8 | 7 |
| Licence & code openness | 10 | 5 | 8 |
| Audit disclosure | 6 | 9 | 8 |
| Custody & control | 7 | 6 | 5 |
| Strategy transparency | 4 | 6 | 7 |
| Overall | 6.6 | 6.8 | 7.0 |
Idle Finance scores 6.8 and Harvest Finance 7.0, both ahead of Sommelier. Sommelier leads both on licence and custody, and trails both on fees, audits and strategy detail. Peer marks are as currently published and may change when those entries are rechecked.
Who it suits
The score suits a depositor who puts open code and a written withdrawal guarantee first, and who accepts strategist-run positions approved by a validator chain. It suits less well anyone who wants published fee rates, dated audits or an allocation breakdown before depositing. Read a cellar's fees and positions on-chain or in the app before committing funds.
How it compares

Origin (OUSD)
Open code and component-level audits for a yield-bearing dollar

Convex Finance
Fees itemized to the component, under an MIT licence

Beefy
Named auditors and a plain no-custody statement

Yearn Finance
AGPL code with audits tied to each vault version

Pendle
Audit reports filed by component and a single published YT fee

Harvest Finance
Linked audits and net-of-fee APY with a 12-hour timelock

Idle Finance
Exact per-product fees and a dated, linked audit table

Yield Yak
Open code and no deposit or withdrawal fees
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Somm homepage: vaults and secure architecture — checked
- 2.Somm: Audits — checked
- 3.Somm: Bug bounty — checked
- 4.Sommelier docs: Fees and reserves — checked
- 5.Sommelier docs: Smart contracts and governance — checked
- 6.GitHub: PeggyJV/cellar-contracts LICENSE (Apache 2.0) — checked
- 7.GitHub: PeggyJV/sommelier LICENSE (Apache 2.0) — checked
Frequently asked questions
Why does Sommelier score 6.6?
It is the plain average of five equally weighted marks: fee disclosure 6, licence 10, audit disclosure 6, custody 7 and strategy transparency 4. Open code and a clear withdrawal rule are offset by missing fee figures and thin strategy detail.
What holds Sommelier's score back?
Strategy transparency at 4. Each vault gets a one-line description, with no allocation, leverage or past performance on the pages we read. Fee disclosure at 6 is next: the fee types are defined but no rates or caps are published.
Is Sommelier audited?
Its audits page links a Macro report for each of 32 strategies and a Least Authority audit of the Gravity Bridge. The firms are named only in the link addresses, and only one report carries a date (July 2022).
What changed at the November 2026 check?
Audit disclosure rose from 2 to 6 now that an official audits page is published, custody from 3 to 7 on the homepage's user-only withdrawal statement, and licence from 8 to 10 on Apache 2.0 files across all four core repositories. The overall moved from 4.6 to 6.6.
How does Sommelier compare with Idle Finance and Harvest Finance?
Sommelier's 6.6 sits behind Idle Finance at 6.8 and Harvest Finance at 7.0. It leads both on licence and custody and trails both on fees, audits and strategy transparency.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.