Onpode
Cover art for Why over-collateralized loans work on-chain — the mechanism that replaces credit underwriting

Why over-collateralized loans work on-chain — the mechanism that replaces credit underwriting

October 7, 2026 · 13 min

Roy Halliday & June Hadley

DeFi lending protocols like Aave and Compound replace credit underwriting with overcollateralization: borrowers post more crypto than they receive, and smart contracts auto-liquidate when loan-to-value ratios breach thresholds. Liquidation bonuses of 5–12% mean a borrower's cushion can belong to the liquidator — not the borrower.

Decentralized Finance (DeFi) lending replaces traditional credit intermediation with programmable smart contracts that automate collateral management, interest rates, and liquidation.

0:0012:50
Get the next episode on Crypto →

Follow it free — new episodes land in your feed.

Or make your own — any topic, in minutes

More Onpode episodes on Crypto →

About this episode

DeFi lending protocols like Aave, Compound, and MakerDAO promise something genuinely novel: a loan with no credit officer, no credit score, and no bank — just collateral locked in a smart contract and a real-time loan-to-value ratio that enforces itself. The mechanism is elegant. But this episode doesn't stop at the mechanism. It asks what the mechanism actually guarantees, and for whom. The answer is more uncomfortable than either enthusiasts or critics usually admit. Overcollateralization does remove credit history as a barrier — that's real. But it replaces it with a collateral requirement that demands pre-existing crypto holdings, acquired through exactly the infrastructure that excluded the unbanked in the first place. The gate didn't disappear. It moved. And when prices fall, the system's safety feature — automated liquidation — becomes its amplifier. Liquidations push prices down, triggering more liquidations. Profit from that cascade flows to sophisticated bots and arbitrage firms. The borrowers with the least margin to absorb losses absorb them fastest. The episode grounds all of this in real events: Mango Markets, where a governance vote changed safety parameters and the code executed flawlessly into insolvency. And in empirical research tracking Aave and Compound across chains from 2021–2024, showing that the same protocol performs meaningfully differently depending on whether you're on Ethereum L1 or Polygon during a stress event. The math is neutral. The settlement pattern isn't.

Frequently asked

How does overcollateralized lending work in DeFi?

In DeFi protocols like Aave and Compound, borrowers deposit cryptocurrency worth more than the loan they receive. A smart contract monitors the loan-to-value ratio in real time. If collateral value drops below a set threshold, the contract automatically sells the collateral to repay the loan — no bank or credit officer involved.

What triggers a liquidation in DeFi lending?

A DeFi liquidation is triggered when a borrower's loan-to-value ratio crosses the protocol's threshold — typically caused by falling collateral prices. On Aave and Compound, third-party liquidators execute the sale and receive a bonus of 5–12% depending on collateral type, which is deducted from the borrower's position.

Can DeFi liquidations cause a price cascade?

Yes. Automated DeFi liquidations can trigger cascades: a price drop forces collateral sales, which push prices lower, which breach the next position's threshold, triggering more sales. Federal Reserve Governor Lael Brainard publicly warned that falling crypto prices can produce waves of automated DeFi liquidations that further depress asset prices.

What happened at Mango Markets?

At Mango Markets, a governance token holder controlling roughly 10% of the total supply voted to raise the loan-to-value threshold on their own collateral position. The smart contract executed the change correctly, the position became undercollateralized, and the protocol went insolvent — no code bug, no breach, just governance parameters changed by vote.

Does DeFi lending actually help the unbanked?

DeFi lending removes credit history as a requirement, but substitutes a collateral requirement: borrowers must already hold crypto assets the protocol recognizes. Aave and Compound do not accept land titles or illiquid assets. Acquiring crypto requires the same financial infrastructure that was unavailable to unbanked users in the first place — collateral ownership is the new gate.

Grounded in 11 sources
Mutation Testing for Ethereum Smart Contract ↗ · arxiv.org
Blockchain in the Banking Sector: A Review of the Landscape and Opportunities ↗ · corpgov.law.harvard.edu
Automated Risk Management Mechanisms in DeFi Lending Protocols: A Crosschain Comparative Analysis of Aave and Compound ↗ · doi.org
SoK: DeFi Lending and Yield Aggregation Protocol Taxonomy, Empirical Measurements, and Security Challenges ↗ · doi.org
Smart contract vulnerability in DeFi: Assessing security risk in blockchain-based lending platforms ↗ · doi.org
Layer-2 Optimized NFT Lending with Risk-Aware Smart Contracts and Interoperable Blockchain Protocols ↗ · doi.org
Decentralized Finance Platforms for Promoting Secure Peer-to-Peer Lending Through Trustless Smart Contracts ↗ · doi.org
Advancing financial inclusion through fintech: Solutions for ... ↗ · researchgate.net
Decentralised Finance (DeFi): A Critical Review of Related ... ↗ · researchgate.net
An Overview of Decentralized Finance (Defi) ↗ · congress.gov
Financial Inclusion | World Bank Group ↗ · worldbank.org
Read transcript

Roy Halliday: June, quick one before we start — have you ever seen an insolvency where the paperwork was flawless?

June Hadley: I mean — now that you say it that way, Mango Markets.

Roy Halliday: Mango Markets. A governance token holder — ten percent of the total supply — voted to raise the loan-to-value threshold on their own position. The smart contract executed. Perfectly. The protocol went insolvent. No bugs. No breach. Flawless paperwork.

June Hadley: That's the thing I want to sit with today, because it's actually a doorway into DeFi lending as a whole — what it is, what it promises, and what that story reveals. So the pitch from protocols like Aave, Compound, MakerDAO is: deposit cryptocurrency into a smart contract on Ethereum, receive a loan in a different asset, the contract enforces everything, no bank, no credit officer.

Roy Halliday: No credit score. The collateral is the underwriting.

June Hadley: And because collateral can fall in value, the system requires overcollateralization — you post more than you borrow — and monitors the loan-to-value ratio in real time. When that ratio crosses the threshold, automated liquidation begins. Your collateral is sold.

Roy Halliday: That's the whole architecture. The math is the intermediary.

June Hadley: And at Mango Markets the math executed correctly against parameters that a governance vote had just changed. So I keep turning this over — if the system worked exactly as designed and still produced catastrophe, what exactly is the 'math handles it' guarantee protecting?

Roy Halliday: The solvency of the protocol, given the rules. Not the rules themselves.

June Hadley: Which might be the most important distinction in this whole space. And it connects directly to the inclusion claim — because the other promise layered on top of all this is that it opens credit to the unbanked. No credit history required.

Roy Halliday: The fact is, you still need collateral. Collateral means pre-existing crypto holdings. That's not inclusion — that's a different admission requirement.

June Hadley: So the real question underneath today — the one I think we keep bumping into — is whether DeFi lending replaced a gate or just redrew it. And whether a system that executed perfectly at Mango Markets can honestly claim the math is the safety.

Roy Halliday: Look — before we get lost in Mango Markets, I want to back all the way up. Because I think most people hearing 'DeFi lending' still have no picture of what it actually is. The clearest way I know to say it: imagine a pawnshop where the pawnbroker is a computer program. You hand over your gold watch, the program lends you cash, and if the watch's price drops below a set line, the program sells it automatically. No loan officer. No credit check. Just the math.

June Hadley: That's the click, yeah. The program doesn't care who you are.

Roy Halliday: Right. And that's where the financial inclusion claim lives — anyone with digital assets and internet access can borrow from Aave or Compound without a bank account, without a credit score. The collateral is the entire underwriting.

June Hadley: So walk me through the Nairobi version of that. Concretely.

Roy Halliday: A woman in Nairobi inherits 0.5 ETH. Hears she can borrow a stablecoin against it on Aave — no bank required. She opens the protocol. And immediately, before she's borrowed a single dollar, the questions stack up. Where did she get the ETH in the first place? How does she navigate an exchange to get there? Does she know what her loan-to-value ratio is, and what happens if ETH drops thirty percent while she's asleep?

June Hadley: That thirty percent drop — that's not hypothetical. ETH has done that in a week.

Roy Halliday: More than once.

June Hadley: So what we actually swapped out is — okay, we traded a credit officer asking 'do you have a job, a payment history, a relationship with this bank?' for a protocol asking 'do you already own volatile assets that we recognize as collateral?' That's not removing the barrier. That's drawing it somewhere else on the map.

Roy Halliday: Collateral ownership is the new gate. The gate didn't disappear.

June Hadley: And I think there's something underneath that worth naming — the collateral has to be the kind the protocol recognizes. Aave and Compound don't take land title, don't take a government pension, don't take anything illiquid. It's crypto, which means to access this system you've already had to clear the hurdle of acquiring and holding crypto through exactly the kind of infrastructure that wasn't available to you in the first place.

Roy Halliday: The algorithmic interest rates are the same story. Compound sets them automatically — supply and demand in the lending pool, no negotiation. That sounds neutral. But if you don't know how to read a utilization curve, you're borrowing at a rate you don't fully understand, set by a mechanism you can't interrogate.

June Hadley: So the math being neutral isn't the same as the math being accessible. Those are two different claims that keep getting run together.

Roy Halliday: Frankly, that's the collateral paradox in one sentence. The mechanism requires you to already have what credit access was supposed to help you build.

June Hadley: And that paradox — the collateral you need to access credit being the thing credit was supposed to help you build — that's actually the setup for the part that scares me most. Because overcollateralization is the protection. But the protection only holds if the collateral holds value. So what happens the moment it doesn't?

Roy Halliday: The cascade. Price drops, LTV threshold gets breached, smart contract sells the collateral automatically. That sale puts more supply into the market. Price drops further. Next position crosses its threshold. Another automated sale.

June Hadley: Each liquidation feeds the next one.

Roy Halliday: That's not a bug in the logic. That IS the logic. The mechanism designed to keep Aave and Compound solvent is exactly the mechanism that amplifies the price drop. The safety feature and the risk engine are the same thing.

June Hadley: Which is — I mean, Lael Brainard named this specifically. A Federal Reserve Governor. She warned publicly that falling crypto prices can trigger waves of automated DeFi liquidations that further depress asset prices. That's not a crypto skeptic blogger. That's the Fed treating this as a systemic feedback risk.

Roy Halliday: Institutional acknowledgment that the feedback loop is real. Not theoretical.

June Hadley: And the research says the mechanism is 'durable and independent of token prices' — but that's not quite right, is it? Because liquidation triggers are themselves price-sensitive. The durability claim and the actual mechanism are in direct tension.

Roy Halliday: Look — there's an empirical study that makes this concrete. Cross-chain, cross-version comparison, Aave and Compound, January 2021 through December 2024. Panel regression with fixed effects, measuring TVL and total revenue. The finding: liquidation effectiveness varies meaningfully between v2 and v3, and between Ethereum L1 and Polygon L2.

June Hadley: Wait — meaningfully how? Like the mechanism works better on some chains than others?

Roy Halliday: That's the implication. Polygon runs higher throughput, lower gas fees. Liquidators can execute faster, cheaper. On Ethereum L1 during stress, network congestion rises exactly when liquidation speed matters most. So the same protocol, same rules, performs differently depending on infrastructure.

June Hadley: So if you're on the wrong chain at the wrong moment, the safety mechanism — the thing that's supposed to be automated and reliable — is actually slower than the price move it's chasing. The mechanism isn't one thing. It's several things performing differently under stress.

Roy Halliday: And liquidity is the other variable nobody prices in. Liquidators need liquid markets to actually sell the collateral. During stress events, liquidity evaporates. So you have slower execution AND thinner markets, both at the same moment the cascade is running.

June Hadley: And we haven't even touched who actually captures the profit from running those liquidations — that part makes the whole picture stranger.

Roy Halliday: Right — and who captures that profit is the part that collapses the inclusion story entirely. Compound's liquidation bonuses run five to twelve percent depending on collateral type. A borrower with a twenty percent LTV cushion can be wiped out not because the collateral hit zero — because the liquidator's guaranteed profit margin is wider than the remaining buffer. Mathematically designed that way.

June Hadley: Wait — wider than the buffer? So the cushion isn't actually the safety margin. The cushion is the liquidator's fee.

Roy Halliday: That's the structure. The discount exists to incentivize third-party liquidators to execute fast. Without the bonus, nobody runs the liquidation bot. But that means the borrower — no recourse, no negotiation, no credit officer who might call and say 'can you top up the position?' — absorbs the liquidator's profit as a loss. Execution is indifferent by design.

June Hadley: And those liquidators — I mean, they're not random participants, are they? The ones running sophisticated bots at the speed this requires — that's professional arbitrage firms, protocol insiders.

Roy Halliday: The same infrastructure that told a borrower in Lagos she was included. Yes.

June Hadley: So the person who gained access — who cleared all the hurdles we named — she's now exposed to a mechanism that guarantees profit to the people who already had capital and technical infrastructure. And she has no moment to respond. No negotiation. That's the asymmetry I couldn't quite name before you said the number.

Roy Halliday: Less sophisticated borrowers concentrate losses. That's not a side effect — it's the settlement pattern.

June Hadley: And the whole thing depends on the oracle being right. The price feed. Because if the external data source feeding real-time prices to the smart contract is wrong — manipulated, delayed — the liquidation fires on false information and there's no patch coming.

Roy Halliday: Oracle manipulation can trigger false liquidations or permit undercollateralized borrowing. Both directions. And flash loan exploits sit right next to that — borrow a massive sum within a single transaction block, move the price on a thin market, trigger liquidations, repay. The code is public. The attack surface is published.

June Hadley: And smart contract bugs can't be patched after deployment. That's — I mean, that's the part that stops me. A bank can issue a correction. A contract just executes.

Roy Halliday: Which brings you back to Mango Markets. A DAO accumulated governance tokens and voted to raise LTV parameters on their own collateral position. The code executed. Protocol went insolvent. Nobody could appeal because there was no appeals process — the governance vote was the final authority. Removing human credit assessment didn't remove human failure. It made failure algorithmic and irreversible.

June Hadley: And a human credit officer — even a flawed one — might have caught that before it completed. Not because they're smarter than the code. Because they operate at a speed that allows intervention.

Roy Halliday: The governance vote took days. The cascade took blocks. That gap is where the 'governance manages safety parameters' claim dies.

June Hadley: So the people the system most claims to help — the ones without existing relationships with institutions, without the sophistication to monitor LTV in real time — they're the ones who lose their collateral fastest, to liquidators who profit by design, on price feeds that can be moved, in contracts that can't be fixed. That's not a collateral paradox anymore. That's a risk transfer.

Roy Halliday: Risk transfer is exactly the right phrase. And I can't get past the direction of it. The inclusion claim flows toward people without existing capital. The liquidation profit flows toward people who already had it. Same mechanism, opposite directions.

June Hadley: And I keep trying to find where that resolves — like, is there a version of this where the math being neutral actually helps someone who doesn't have a credit history? And I think the honest answer is maybe. But not during a falling market. Which is precisely when they'd need it most.

Roy Halliday: The collateral ownership gate is real. That's not nothing — removing a credit score requirement does expand who can technically participate. I'll grant that. But overcollateralization means you've already passed a harder wealth test than most credit applications require.

June Hadley: That's the thing I can't settle. Both claims are true at the same time and they contradict each other. DeFi lending genuinely removes credit history as a barrier — that's real. And the collateral requirement is a higher barrier than a credit score for most of the unbanked world. I don't know how to hold those two things.

Roy Halliday: I don't either. The math is neutral. The settlement pattern isn't.

June Hadley: That's probably where we actually are. Thanks for thinking through it with me — I mean that.

Why over-collateralized loans work on-chain — the mechanism that replaces credit underwriting · Onpode