How Does Echelon Work?
The leading lending protocol on Aptos where you deposit crypto to earn interest or borrow against your holdings. It manages $400M in deposits across Aptos, Movement, and Initia. Its B- grade reflects the unusual risk of accepting four different wrapped Bitcoin tokens as collateral, each backed by a different bridge that could fail.
TVL
$29M
Sector
Lending
Risk Grade
B-
Value Grade
C
Core Mechanisms
Lending/Over-Collateralized
Non-custodial over-collateralized lending across Aptos, Movement, and Initia
Standard over-collateralized lending model built in Move language. Users deposit collateral to borrow assets at variable rates. Core lending logic is shared across three Move-compatible chains.
Lending/Multi-Collateral-BTC
Multiple BTC representations (sBTC, xBTC, WBTC, aBTC) accepted as collateral
Echelon accepts four different wrapped/bridged BTC tokens as collateral, each with different bridge and custody trust assumptions. This is novel in the Move ecosystem and introduces complex cross-bridge correlation risks.
Lending/Interest-Rate-Curve
Kinked utilization curve with governance-adjustable parameters
Standard kinked interest rate model where rates jump sharply above an optimal utilization threshold. Parameters adjustable via ELON governance.
Oracle/Multi-Source
Multi-oracle setup with Chainlink, Pyth, and Switchboard as complementary feeds
Echelon uses Chainlink Price Feeds as primary oracle with Pyth and Switchboard as complementary sources. This multi-layered approach reduces single-oracle failure risk but introduces complexity in feed arbitration.
Governance/Token
ELON governance token directing protocol upgrades, asset listings, and emission allocation
ELON token (100M fixed supply) serves as governance backbone. 8.5% allocated to community airdrop. Launched February 2026. Token holders vote on protocol parameters and direct emissions.
Yield/Structured-Products
Fixed yield strategies and composable integrations for institutional DeFi assets
Echelon's structured product layer provides fixed yield strategies built on top of the lending protocol. This is novel for Move-language protocols and targets institutional users with yield-generating stablecoins and staked BTC.
How the Pieces Interact
Four different BTC tokens with different bridge trust assumptions share lending pool capital. A single bridge failure makes one BTC token worthless, but the bad debt is borne by lenders who provided real assets (stablecoins, APT) against that collateral.
Pre-airdrop points incentivize depositing purely for allocation. Post-airdrop, mercenary capital exits en masse, causing utilization spikes that can trap remaining depositors and create bad debt from forced liquidations.
Oracles may price all BTC representations at the same BTC price, even when individual bridge tokens should trade at a discount due to bridge-specific issues. This prevents timely liquidation of depegging BTC collateral.
Deploying across Aptos, Movement, and Initia means a vulnerability in shared Move contracts can be exploited on all three chains simultaneously before patches propagate, multiplying potential losses.
Fixed yield commitments from structured products may conflict with variable rate lending pool dynamics. If yields are promised but pool rates decline, the protocol may face a funding gap or need to subsidize from treasury.
What Could Go Wrong
- Multiple BTC bridge representations (sBTC, xBTC, WBTC, aBTC) as collateral multiplies bridge custodian risk; one bridge failure contaminates the entire BTC lending market
- Post-airdrop mercenary capital flight could cause a liquidity crisis with utilization spikes trapping remaining depositors
- Multi-chain deployment (Aptos, Movement, Initia) spreads security resources thin across three Move-language chains
Multi-BTC Collateral Depeg and Bad Debt Accumulation
ModerateTrigger: One or more BTC bridge representations (sBTC, xBTC, WBTC, aBTC) depegs from native BTC due to a bridge exploit or custodian failure, creating bad debt in Echelon lending markets
- 1.A bridge securing one BTC representation (e.g., xBTC) is compromised or custodian becomes insolvent — The affected wrapped BTC token depegs from native BTC value; holders rush to exit
- 2.Borrowers with affected BTC collateral see their position health deteriorate; liquidations begin — Liquidators receive depegged BTC tokens as liquidation reward, which they immediately dump, deepening the depeg
- 3.Contagion spreads to other BTC representations as market loses confidence — All wrapped BTC tokens on Aptos trade at discounts; lenders across multiple BTC markets face simultaneous bad debt
- 4.Echelon cannot absorb bad debt across multiple BTC markets simultaneously — Stablecoin and APT lenders who funded BTC-collateralized loans face socialized losses
Risk Profile at a Glance
Overall: B- (29/100)
Lower score = safer