From the Lehman crisis to on-chain lending: How can Morpho, Aave V4, and Euler V2 reshape institutional-grade risk isolation architecture?
Written by: Tiger Research
Compiled by: AididiaoJP, Foresight News
As institutional investors enter the on-chain lending market, DeFi is shifting from a single shared pool architecture to a structure that can isolate risks and specialize operational layers.
Key points
- The Lehman Brothers crisis and the Kelp DAO incident both exposed the same structural flaw: a single shared pool architecture can amplify the failure of a single asset into a systemic crisis.
- TradFi addresses this by separating the various functional layers of the financial stack.
- The DeFi ecosystem is converging on the same answer: a modular architecture built around risk isolation.
- This shift is accelerating as RWA assets begin to flow onto the blockchain in large quantities.
- In a modular architecture, the capabilities of the operations layer (the layer that actually manages the product) become a key differentiator.
Lessons from the Lehman crisis
In September 2008, the collapse of Lehman Brothers triggered an unprecedented crisis. The world's third-largest money market fund, the Reserve Primary Fund (RPF), suspended all redemptions within a single day.
At the time, RPF's exposure to Lehman Brothers debt accounted for only 1.2% of its assets under management. When Lehman's bankruptcy rendered this 1.2% unrecoverable, the fund's total asset value plummeted from $1 per share to 98.8 cents. This was enough to break the fundamental principle of the money market fund industry to maintain a fixed net asset value of $1 per share. The fund's value per share fell below $1, to $0.97.
Once the loss of principal became visible, panic spread almost immediately. The fear that waiting would lead to further losses triggered an unprecedented run on the fund, with redemption requests reaching $40 billion within two days. Unable to withstand the pressure, the fund froze and halted all withdrawals.
The Lehman Brothers collapse forced a comprehensive restructuring of traditional capital markets. In the MMF (Multi-Level Fund) sector, guidelines for risk-stratified liquidity buffers and redemption restrictions were completely overhauled. In the hedge fund sector, the industry learned from the lessons of Lehman's recollateralization risk—a single prime broker centralized custody of client assets.
The result was a structural shift: no longer concentrating assets and credit on a single intermediary. Separating execution infrastructure from risk management and distributing exposure across multiple prime brokers became the global standard for risk isolation. Built upon this institutional safeguard of separating infrastructure from risk to curb contagion, the asset management industry was able to rebuild operational trust and resume growth.
How can traditional capital markets solve this problem?
In 2014, the U.S. Securities and Exchange Commission (SEC) restructured the MMF framework. Funds are segmented according to their capital structure, with different standards applied to different categories. The aim is to prevent runs or failures in one segment from spreading to other fund types or the entire system, with each category having its own dedicated buffer.
The core concept of traditional financial risk control is separation. Power is divided so that risk is not concentrated at a single point, and independent verification is inserted at each stage of capital flow.
This principle is best exemplified by prime brokerage firms in the capital markets. Investment power rests with hedge funds, while risk oversight falls to brokers. These two functions are deliberately separated. In traditional lending markets, the same logic applies: credit assessment, underwriting, collateral management, and custody each become the domain of independent, self-contained participants.
However, as asset management and lending began to migrate to DeFi, the layered intermediary structure established by traditional finance was compressed into a single layer. Early DeFi protocols focused on eliminating the intermediaries required by the split structure, directly encoding the relevant mechanisms into smart contracts, automating tasks previously handled by multiple participants.
From shared pools to modular architecture
Early DeFi initiatives reduced intermediary costs by compressing all lending mechanisms into a single smart contract, but also concentrated every type of risk in a single protocol. Because credit assessment, underwriting, and collateral management operate within a single codebase rather than as independent functions, the failure of a single asset or a liquidation malfunction could directly cripple the liquidity of the entire system.
This potential for contagion forces protocol governance to conservatively set risk parameters. Assets with short track records or high volatility (any asset other than Bitcoin and Ethereum) are structurally excluded from collateral eligibility. Compacting functionality into a single contract creates the opposite of capital efficiency: limited asset diversity and restricted market access.
@SiloFinance addresses the risk concentration problem of unified pools by introducing segregated lending pools for each asset. By confining price manipulation or sharp value declines to a single collateral pool and preventing that risk from spreading to other pools, Silo demonstrates that governance approval thresholds can be lowered and new lending markets can open more quickly. This architecture shows that a single large pool can be broken down and risk isolated at the market level, pointing to the subsequent emergence of layered, modular structures.
Silo's modular system, pioneered by Silo, has become the foundational standard for on-chain lending as RWA assets (including tokenized government bonds and private credit) begin to flow onto the chain in large quantities. Each type of RWA differs fundamentally in terms of transaction timing, oracle reliability, regulatory requirements (such as KYC and AML), and liquidation procedures. Under the early shared pool model, managing such diverse assets with a single, uniform set of parameters was not feasible.
The influx of RWA has created a need that goes beyond simple asset segregation. It necessitates transplanting mature risk control frameworks from traditional finance to the on-chain environment. As assets diversify, the risks emerging on-chain become more complex. Mitigating these risks requires a structural separation between the immutable infrastructure layer that handles clearing and settlement and the operational layer that has the real-time authority to adjust and assume responsibility for risk parameters.
Early DeFi compressed the middle layers of finance into a single codebase. As RWA assets flowed in and the lending market matured, the path changed: clearing and settlement efficiency was delegated to the blockchain, while risk oversight was decoupled to a separate layer. In absorbing greater asset complexity, on-chain lending has reached a structure similar to that already built in traditional finance—primary brokers and independent credit assessments, where investment and risk oversight remain separate. This modular architecture has become the new standard in the on-chain lending market.
Institutional-level risk isolation and aggregation
Although the modular architecture originated within the DeFi ecosystem, it precisely converges with the risk control standards required by institutional participants.
Morpho's decision to prioritize complete risk isolation at the infrastructure layer (at the cost of some capital efficiency) created institutional demand. This demand became an inflection point, attracting other major lending protocols (those that initially adopted a shared pool structure) to move in the same direction.
Morpho Blue: Prime Broker
@Morpho was originally an intermediary layer optimizing interest rates for first-generation DeFi lending protocols such as @aave and @Compound. In that form, it could not exist independently. In 2023, Morpho released the Morpho Blue white paper, and in early 2024, it launched Morpho Blue and Morpho Vaults, effectively declaring its independence.
This transformation moves away from a structure where governance makes all risk decisions across all markets, separating market creation and risk assessment from the agreements themselves. This separation forms the structural basis for allowing institutional participants to select and control risk according to their own compliance standards.
structure
- Morpho Blue: An immutable protocol. Five parameters are fixed at market creation time: collateral, borrowed assets, liquidation loan-to-value ratio (LLTV), price oracle, and interest rate model. Anyone can create a market without permission. The protocol itself is only responsible for executing code.
- Morpho Vaults: Risk management team, independent curators select qualified markets, set supply limits, and allocate capital. Each vault has a different risk profile.
- Lenders: Depositors with different risk appetites (including DAOs, agreements, individuals, and hedge funds) choose vaults that match their profiles and provide capital.
Traditional prime brokers are expected to perform four functions: clearing, custody, leverage provision, and risk monitoring. Morpho automates clearing and leverage provision at the protocol layer through smart contracts. However, its non-custodial structure means it cannot provide the custodial environment required for institutional regulatory compliance. Therefore, integration with external custodians (such as @coinbase or @Anchorage) is necessary.
Risk monitoring also doesn't rely on protocols, but rather on each curator's ability to select assets and manage exposure. This creates a persistent risk: inconsistent curator quality. The xUSD and Stream Finance incidents of 2025 directly illustrated this vulnerability. Multiple Morpho vaults held xUSD exposure and incurred bad debts. Since then, the market has begun to scrutinize curators' asset selection capabilities and real-time risk management more rigorously, with institutional capital concentrated around top-tier curators with strong track records, including @SteakhouseFi, @gauntlet_xyz, and @SentoraHQ.
Traditional prime brokers tie liquidation, custody, leverage, and collateral management to a single institutional counterparty. Morpho replaces this model with a division of labor, distributing each function among specialized participants in the ecosystem, rather than concentrating it in a single institution.
Institutional adoption is now happening on a large scale, and it started with centralized exchanges.
- Coinbase: A USDC lending service built on Morpho Blue, curated by Steakhouse Financial.
- Binance: It adopts the same structure and is curated by Steakhouse Financial and Gauntlet.
Users can obtain loans by pressing the "Lend" button within the Coinbase or Binance apps. The world's two largest exchanges by trading volume have chosen the same infrastructure. This adoption has been extended to traditional financial institutions.
- SG-FORGE: Deploy MiCA compliant stablecoins EURCV and USDCV on Morpho.
- Apollo: Puts the private credit fund ACRED on-chain and uses it as collateral for Morpho.
- Bitwise: Curating risk directly on top of Morpho Vaults.
If tokenization opens up access to assets, Morpho opens the path for using those assets as productive capital. The trajectory set by Morpho is beginning to show an evolutionary direction that cannot be ignored, given the many lending protocols that start from very different points in the way.
Aave V4: Universal Bank
@aave initially started as ETHLend (a peer-to-peer lending matching model), and subsequently evolved into a shared pool architecture through V1, V2, and V3. In March 2026, it activated V4 on the Ethereum mainnet—a modular architecture. While Morpho opted for a structural separation of infrastructure and operations, Aave V4 chose a hybrid model to maintain liquidity efficiency while controlling risk.
Aave recognizes the tension between risk isolation and capital efficiency. Moving towards isolation can curb the contagion of bad debts, but it weakens liquidity network effects and reduces capital efficiency. V4 is designed to structurally address this trade-off.
structure
- Hub: The central layer, integrating liquidity and accounting. It allocates credit lines to each branch, limiting the liquidity available for withdrawal in any given market. These per-branch limits and local parameters constitute the basic risk firewall.
- Spoke: A single lending market with independent parameters for each asset. When a particular branch or asset experiences problems, governance and risk managers can limit exposure by adjusting the credit limit for that branch, restricting new lending, or activating emergency controls. Because the maximum exposure is fixed at the credit limit cap, the structural spread of contagion is limited by design.
In traditional finance, this structure resembles the credit allocation system within a universal bank. Headquarters allocates credit lines to each department, and when a department encounters trouble, headquarters adjusts these lines to prevent contagion. The Hub acts as headquarters, while each Spoke operates independently like a business unit. Unlike Morpho's fully segregated model (where capital is strictly locked within each asset pair), the Hub-and-Spoke structure allows unused liquidity in one Spoke to be flexibly reallocated to more productive Spokes via the Hub's credit lines. The result is higher capital efficiency.
This structure becomes a significant advantage in the RWA market. Emerging RWA markets may struggle to attract initial liquidity, but in Aave V4, existing liquidity hubs can serve as a seed mechanism for new Spoke markets. By structuring tokenized assets into independent Spokes and setting credit limits on the hub, new asset classes can enter the market with lower bootstrapping costs, while initial exposure remains within credit limits.
Institutions are organized around Horizon. Horizon was launched as a standalone RWA lending instance built on Aave v3.3, but its design philosophy aligns with V4's unified liquidity and risk separation approach. As it integrates more deeply with V4's credit line structure, Horizon is likely to further solidify its position as Aave's institutional RWA layer.
Horizon aims to allow regulated tokenized government bonds, money market funds, and institutional funds to serve as collateral for stablecoin lending, with a scope that can be extended to asset classes such as tokenized stocks and ETFs.
Because approved institutional assets within Horizon are linked to the same institutional liquidity layer, any newly added RWA can immediately utilize existing stablecoin liquidity.
The roles within this liquidity layer are divided as follows:
- Issuer: Investor onboarding and KYC/AML whitelist management.
- Risk Manager (LlamaRisk): RWA due diligence and risk framework and parameter proposal.
- Oracle (Chainlink): Provides on-chain price oracles.
- Protocol (Aave): Execution of smart contracts.
In traditional Aave markets, adding new assets requires DAO governance review and voting, which slows down the process. Horizon separates these responsibilities: issuers handle compliance for each asset, LlamaRisk handles risk due diligence, and Chainlink handles price verification. This structure allows institutional asset onboarding and risk adjustment to be faster than routing each decision through general DAO governance.
Morpho minimizes governance involvement and externalizes market creation and risk management, choosing speed and option; Aave takes a different path: controlled governance delegation and shared liquidity, preserving capital efficiency.
Both approaches are coherent solutions that transplant traditional financial risk allocation philosophies to an on-chain environment, but it remains to be seen which side the RWA market will ultimately converge on.
Euler V2: Multi-Strategy Hedge Fund
In March 2023, @eulerfinance suffered a $197 million vulnerability attack. The attack exploited a flaw in the smart contract code, as multiple asset markets were connected within a single protocol accounting and clearing structure, causing damage to spread across multiple assets.
After approximately three weeks of negotiations, most of the stolen assets were recovered. Nevertheless, Euler chose to rebuild its structure rather than simply fix it, subsequently repositioning itself as a flexible institutional lending infrastructure.
Euler's entry into the RWA and institutional credit markets is driven by a gap in the traditional financial asset tokenization effort. Banks are issuing tokenized bonds, funds, and government bonds, but these assets lack on-chain infrastructure for lending or credit provision.
Instead of drawing institutional demand into the volatile long-tail crypto asset market, Euler has begun to position itself as the credit layer for institutional finance—providing on-chain liquidity for these assets.
structure
- EVK (Euler Vault Kit): A toolkit for creating credit vaults with lending capabilities based on ERC-4626. Each vault holds independent parameters for specific asset and risk configurations and is connected to other vaults via EVC to form a lending market.
- EVC (Ethereum Vault Connector): A core immutable primitive that connects collateral and debt relationships scattered across multiple vaults, managing them within a single account. In traditional financial terms, it's similar to merging multiple disparate asset accounts into a single margin account that provides cross-collateralization.
EVK enables independent design at the asset level, while EVC connects assets that would otherwise be fragmented into a unified account and position management framework.
In traditional financial terminology, Euler shares some characteristics with the Pod structure of multi-strategy hedge funds. Independent Pods operate their own strategies and risk limits while sharing technical infrastructure and capital management systems.
The key difference is that Euler is not an internal organization of a single company, but rather an open infrastructure where multiple independent participants can create and connect vaults.
By analogy, Morpho resembles the division of labor model of prime brokers, Aave resembles the shared liquidity model of universal banks, and Euler resembles the modular structure of multi-strategy hedge funds. The flexibility and capital efficiency enabled by this architecture also create the possibility of indirect risk transmission from one asset to other positions in the connected vault ecosystem. Therefore, the curator's risk management capabilities remain a central challenge for the Euler V2 ecosystem.
Euler's institutional adoption is moving towards adapting to asset-specific characteristics and regulatory requirements. The first front is tokenized stocks. Equity assets traded in a 24/5 environment require price oracles that can reflect corporate events such as dividends and stock splits. Building isolated markets that meet these conditions is not feasible under a single, shared risk structure. EVK makes independent design at the asset level possible.
In partnership with @OndoFinance, Euler launched STEY, a lending marketplace that accepts SPYon (S&P 500), QQQon (Nasdaq 100), and TSL Aon (Tesla) as collateral.
STEY Market Structure
- Collateral: Ondo tokenized shares (SPYon, QQQon, TSLAon)
- Loan Asset: PYUSD (PayPal Stablecoin)
- Price Oracle: Chainlink Real-Time Equity Price Oracle
- Risk Management: Curated by Sentora
Just as traditional finance uses Lombard loans to unlock liquidity from stock holdings, the STEY market replicates this mechanism on-chain. Investors can maintain price exposure to tokenized stocks while redeploying borrowed stablecoins into on-chain yield strategies to maximize capital efficiency.
The second front involves combining tokenized government bonds with CLOs (collateralized loan obligations). Euler launched the KPK USDC Prime RWA Vault to demonstrate this structural flexibility.
KPK USDC Prime RWA Vault Structure
- Collateral: VBILL (VanEck Tokenized Treasury Bonds), STAC (Securitize AAA-rated CLO)
- Loan Asset: USDC
- Price Oracle: RedStone Daily NAV Oracle
- Risk Management: Curated by Sentora
CLOs require regular NAV pricing and asset-specific liquidation standards via oracles. Tokenized government bonds require strict compliance controls. Without a modular infrastructure that allows for the customization of independent hooks and parameters at the vault level, onboarding any asset class as collateral for on-chain lending would be extremely difficult.
The potential for indirect risk transmission from cross-exposures to the same assets, oracles, and collateral remains, and Euler V2 faces the ongoing challenge of calibrating a balance between flexibility and control.
All three agreements address institutional barriers from different starting points and with different approaches.
- Morpho: By fully externalizing market creation and risk management to maximize speed and availability, the quality of the curatorial team is a key variable that needs to be validated.
- Aave: A hybrid approach that combines controlled governance delegation with V4’s Hub-and-Spoke architecture, aiming to preserve capital efficiency without compromising stability.
- Euler: Using EVK and EVC to simultaneously ensure asset independence and cross-collateralization flexibility, seeking the best risk balance within a multi-strategy structure.
Their approaches differ, but they all converge on the same structural direction: separating the basic execution infrastructure from the risk assessment layer and designing asset-specific risk parameters for each type of collateral.
in conclusion
In traditional capital markets, prime brokers spent decades establishing themselves as the core infrastructure supporting hedge fund trading, custody, settlement, leverage, and risk management. The Lehman Brothers collapse and the Reserve Primary Fund run in 2008 each exposed different types of systemic risk, leading to increased market focus on custody, collateral, liquidity management, and role separation.
The DeFi ecosystem reached structurally similar conclusions in a much shorter time. The reason it can move so quickly is that code moves faster than regulation.
After encountering governance bottlenecks and experiencing unexpected exposure and bad debt contagion in their early shared risk structures, @Morpho, @aave, and @eulerfinance each implemented risk isolation and operational separation on-chain in far less time than traditional finance. Through repeated cycles of actual capital losses and architectural reconstruction, the DeFi market has compressed the process that traditional finance took decades to complete into just a few years.
The history of traditional finance shows that the maturation of infrastructure like prime brokers is one of the conditions that allows the hedge fund industry to grow. After 2008, as infrastructure stabilized and institutional capital began to flow in, total hedge fund AUM approached $2 trillion. Between 2015 and 2025 alone, the industry grew from $1.4 trillion to $4.5 trillion. As infrastructure matures, real competition in strategy and risk management begins at the operational level above, with managers demonstrating exceptional capabilities attracting capital from the market.
The on-chain lending market is entering a similar turning point. With Morpho, Aave V4, and Euler V2 all converging on risk isolation and operational decoupling, the core issue now is the competition that will unfold at the operational layer on top of this infrastructure.
The total assets under management (AUM) of on-chain curated vaults are currently around $7.4 billion. Given how much the hedge fund industry has grown since its infrastructure was established, today's on-chain credit market resembles the early stages of a larger expansion.
In traditional finance, @GoldmanSachs and @MorganStanley hold near duopoly control over prime brokerage infrastructure, and hedge funds must accept their terms to gain access. On-chain infrastructure operates differently. Opening a market on Morpho or Euler requires no institutional permission.
With the breaking of infrastructure monopolies, competition at the on-chain operational layer is likely to unfold more openly and rapidly than in traditional finance. In traditional markets, platforms like Bridgewater, Millennium, and Citadel, as well as alternative asset management firms like Blackstone and Apollo, have attracted significant capital through a combination of operational capabilities and infrastructure access.
On-chain, any participant capable of assessing collateral, designing risk parameters, navigating institutional regulatory requirements, and establishing a record now has the opportunity to gain a foothold in emerging credit markets on an infrastructure that is more accessible than traditional finance has ever offered.
