On-chain lending protocols are among the riskiest financial systems in the DeFi ecosystem. Unlike simple token transfers or spot trading, a lending protocol must simultaneously manage asset custody, interest rate markets, liquidation logic, oracle prices, and protocol solvency. If any single module fails, the entire system can be compromised.
As the Kaspa ecosystem expands into Layer2 and smart contract infrastructure, Kaskad has emerged as a core lending protocol within this ecosystem. Its security design impacts not only the protocol itself but also the overall liquidity and financial stability of the future Kaspa DeFi ecosystem.
Kaskad employs a non-custodial smart contract architecture, meaning the protocol does not directly control user assets like a centralized platform. All deposit, lending, interest calculation, and liquidation logic are automatically executed by on-chain smart contracts.
This model offers high transparency—all rules are publicly verifiable—while reducing centralized custody risks. However, it also means that protocol security is heavily reliant on the smart contract code itself.
Kaskad's overall security structure includes:
These modules collectively determine the protocol's ability to maintain solvency during market volatility.
| Risk Levels | Risk Source | Potential Impact | Kaskad Mitigation Mechanism |
|---|---|---|---|
| Liquidation Risk | Rapid decline in collateral asset price | User position liquidated | Partial Liquidation |
| Oracle Risk | Abnormal or manipulated price data | Erroneous liquidation, protocol bad debt | COB Oracle & multi-source price mechanism |
| Liquidity Risk | Insufficient market depth | Inability to liquidate in time | Dynamic interest rates to incentivize liquidity |
| Layer2 Risk | Network outage or state anomaly | Withdrawal delays, transaction failures | Igra Layer2 infrastructure optimization |
| Cross-Chain Risk | Bridge or asset mapping issues | Asset freeze or loss | Hyperlane cross-chain framework |
| Market Volatility Risk | Extreme crypto market fluctuations | Mass cascading liquidations | Health Factor real-time monitoring |
Kaskad uses an over-collateralization mechanism, the core risk control method for most DeFi lending protocols today.
Since on-chain lending cannot assess user credit like traditional banks, the protocol requires users to post collateral valued higher than the loan amount. For example, when an asset's Loan-to-Value (LTV) ratio is 70%, users can borrow only up to 70% of the collateral's value.
This mechanism reduces the likelihood of protocol bad debt.
If the collateral's price drops, the system still has a chance to recover the debt through liquidation. However, during extreme market volatility, even over-collateralization may not fully protect against risks from rapid price declines or liquidity shortages.
Therefore, over-collateralization does not mean "absolute safety"—it is a mechanism to reduce systemic risk.
Traditional lending protocols often use a full liquidation model. When a user's position falls below the safety threshold, the system may sell a large amount of collateral at once.
While this model quickly reduces bad debt risk, it easily triggers a "cascading liquidation" during sharp market movements, further driving down prices.
Kaskad adopts a partial liquidation mechanism.
When a position becomes too risky, the protocol does not liquidate all collateral immediately. Instead, it repays part of the debt first to restore the position to a safe range. This design reduces instantaneous selling pressure while limiting users' one-time losses.
For the protocol as a whole, partial liquidation helps enhance market stability, particularly in environments with weak liquidity or high price volatility.
Oracles are among the most critical pieces of infrastructure in lending protocols.
Kaskad relies on oracles to fetch real-time asset prices; otherwise, the system cannot determine collateral value, loan amounts, or liquidation conditions.
Abnormal oracle data can lead to:
In DeFi history, many lending protocol security incidents have been tied to oracle manipulation. For example, attackers may temporarily inflate or deflate prices in a low-liquidity market, thereby affecting the protocol's judgment.
Kaskad currently integrates the COB Oracle and other price systems to improve data reliability and manipulation resistance. However, oracle risk can never be fully eliminated.
Since all fund logic in Kaskad is executed automatically by smart contracts, code security is paramount.
If vulnerabilities exist in the contract, attackers could exploit them to steal funds, bypass liquidation logic, or manipulate protocol state.
Common smart contract risks in DeFi history include:
Kaskad has undergone smart contract audits, but audits do not guarantee the absence of all vulnerabilities. Smart contract security can only reduce risk, not eliminate it entirely.
Therefore, most DeFi protocols continuously engage in security testing, bug bounty programs, and code upgrades.
Kaskad currently runs on the Igra EVM Layer2, so beyond the lending protocol's own risks, it must also contend with Layer2 and cross-chain infrastructure risks.
For example:
If the cross-chain bridge or Layer2 system encounters problems, users may be unable to withdraw assets or perform liquidations in a timely manner.
Additionally, since the Kaspa DeFi ecosystem is still in its early stages, its overall liquidity depth may be lower than that of mainstream Ethereum DeFi markets. In extreme market conditions, insufficient liquidity can amplify liquidation risk.
For ordinary users, risk management is often more important than returns.
When participating in Kaskad lending, users typically need to monitor:
In addition, many users voluntarily maintain a higher collateral ratio to reduce the risk of liquidation.
In highly volatile markets, even if the protocol operates normally, users may still incur losses due to improper position management.
Kaskad is a decentralized lending protocol running on the Kaspa ecosystem's Igra Layer2. Its security model includes over-collateralization, Health Factor, partial liquidation, an oracle price system, and bounded governance.
Compared to the traditional full liquidation model, Kaskad places greater emphasis on market stability and risk buffering. However, like all DeFi lending protocols, Kaskad still faces risks from smart contract vulnerabilities, oracle manipulation, Layer2 issues, and market volatility.
Kaskad uses non-custodial smart contracts, partial liquidation, and oracle risk control mechanisms, but still carries smart contract, market volatility, and Layer2 risks.
Kaskad has undergone smart contract audits, but audits cannot completely eliminate all potential vulnerability risks.
The main risks include smart contract vulnerabilities, oracle data anomalies, extreme market volatility, insufficient liquidity, and cross-chain infrastructure risks.
Users can generally reduce liquidation risk by increasing their collateral ratio, reducing the borrowed amount, and continuously monitoring the Health Factor.





