How Does Gearbox Protocol Work?
A leverage protocol that lets you borrow up to 40x your deposit and deploy it across DeFi protocols like Curve, Lido, and Aave in a single transaction. It manages $400M with $8M in funding. Its C+ grade reflects the extreme amplification risk where any hack in a connected protocol hits you at 40x.
TVL
$33M
Sector
Lending
Risk Grade
B-
Value Grade
C+
Core Mechanisms
Lending/Composable-Leverage
NovelCredit Accounts enabling up to 40x leverage across DeFi protocols
Users open Credit Accounts that hold borrowed funds plus collateral. Unlike isolated lending, borrowed assets can be deployed across whitelisted DeFi protocols (Uniswap, Curve, Lido, etc.) in composable transactions.
Account/Credit-Abstract
NovelCredit Account smart contract abstraction for leveraged positions
Each Credit Account is a separate smart contract that holds user collateral and borrowed funds. The protocol enforces health factor checks after each transaction to prevent undercollateralization.
Lending/Passive-Pool
Passive lending pools providing capital for leveraged borrowers
Lenders deposit assets into pools and earn variable interest from leveraged borrowers. Lender returns depend on borrower activity and utilization rates.
Liquidation/Health-Factor
Real-time health factor monitoring with keeper liquidation
Credit Accounts are liquidated when health factor drops below 1.0. Liquidators close the position, repay borrowed funds, and claim remaining collateral minus fees.
Integration/Adapter
NovelProtocol adapters for whitelisted DeFi integrations
Adapter contracts mediate interactions between Credit Accounts and external protocols (Curve, Convex, Lido, Aave). Each adapter defines allowed operations, creating a permissioned composability layer.
Governance/GEAR
GEAR token governance with 24-hour timelocks on parameter changes
GEAR token governs protocol parameters including collateral factors, adapter whitelisting, and risk parameters. 24-hour timelocks on vault parameter changes provide defense against governance attacks.
Fee/Utilization
Utilization-based variable interest rate model
Interest rates adjust based on pool utilization. High utilization incentivizes deposits while high rates incentivize borrower repayment.
How the Pieces Interact
A single exploit in any whitelisted protocol (Curve, Convex, Lido) is amplified up to 40x for leveraged positions, potentially causing cascading liquidations that drain passive lending pools.
Composable transactions spanning multiple protocols in a single Credit Account action create emergent risk combinations that may not be captured by individual adapter risk assessments.
If leveraged positions become insolvent faster than liquidators can act (e.g., during network congestion or oracle delays), passive lenders absorb bad debt with no recourse.
Health factor calculations depend on accurate pricing of diverse collateral types across multiple protocols; oracle latency or manipulation could delay liquidations and create undercollateralized positions.
Despite 24-hour timelocks, governance could whitelist a malicious or vulnerable adapter that exposes all Credit Accounts to a new attack surface.
What Could Go Wrong
- Composable leverage up to 40x amplifies losses from any integrated protocol exploit or oracle failure
- Credit Account abstraction routes leveraged capital across multiple DeFi protocols in single transactions, compounding smart contract risk
- Passive lenders bear the risk of borrower insolvency if liquidation fails to cover leveraged positions
40x Leverage Amplified Protocol Exploit Cascade
ElevatedTrigger: A vulnerability in a whitelisted integrated protocol (Curve, Convex, Lido) is exploited while >$100M in Credit Account funds are deployed through that protocol's adapter
- 1.Exploit drains funds from a whitelisted protocol (e.g., Curve pool exploit) — Credit Account positions deployed through the affected adapter lose 50-100% of leveraged capital
- 2.40x leveraged positions become instantly insolvent — Borrowed funds exceed remaining collateral; bad debt is created at 40x the collateral loss
- 3.Liquidation bots cannot recover borrowed funds from empty positions — Passive lending pools absorb bad debt — lender principal is impaired
- 4.Remaining borrowers rush to close positions fearing contagion — Mass position unwinding creates selling pressure across all integrated protocols
- 5.Passive lenders race to withdraw from lending pools — Utilization spikes to 100%; remaining lenders are locked until positions close
Risk Profile at a Glance
Overall: B- (34/100)
Lower score = safer