How Does Marginfi Work?

Marginfi: overcollateralized lending with multi-market architecture (global, isolated, native stake)

Standard overcollateralized lending model similar to Aave/Compound but with a multi-market structure that separates risk across global interconnected markets, isolated per-asset markets, and native stake markets.

Isolated lending pools for higher-risk long-tail Solana tokens with independent risk parameters

Each isolated market has its own collateral factors, interest rates, and liquidation thresholds, preventing toxic asset contagion to the core lending pool.

Kinked utilization curve with dynamic rate adjustment across multiple market types

Standard kinked interest rate model where rates spike above a utilization threshold to incentivize repayment and ensure withdrawal liquidity.

Partial liquidation with insurance fund backstop for bad debt

Positions are partially liquidated to minimize market impact. An insurance fund absorbs bad debt when liquidations fail to fully cover shortfalls.

Flash loan facility with account transfer capability (patched vulnerability in Sept 2025)

Flash loans allow atomic borrow-and-repay within a single transaction. The transfer_to_new_account instruction introduced a vulnerability that could bypass repayment checks, patched after Asymmetric Research disclosure.

Redundant oracle system with Pyth and Switchboard price feeds

Uses multiple oracle sources for price data to reduce single-oracle dependency. Oracle staleness checks prevent stale prices from triggering incorrect liquidations.

Points program with 1:1 migration promised to MRGN token under Project 0 acquisition

User activity earns points that will convert to MRGN tokens at TGE. The 1:1 migration promise under new ownership creates uncertainty about actual conversion terms and timeline.

Isolated markets for low-liquidity Solana tokens may experience failed liquidations during market stress, as liquidators cannot profitably close positions without sufficient DEX depth, leading to socialized bad debt.

The interaction between flash loans and account transfers created a vulnerability (Sept 2025) where liabilities could be shifted to disposable accounts, bypassing repayment. Future similar logic errors remain a risk in complex instruction sets.

During rapid price movements, oracle update latency on Solana can cause liquidation thresholds to be breached before bots can act, especially for volatile long-tail assets in isolated markets.

The insurance fund may be insufficient to cover simultaneous bad debt events across multiple isolated markets during a correlated Solana ecosystem downturn.

Acquisition changes may alter point conversion terms or timelines, causing point farmers to withdraw deposits preemptively and creating a TVL exodus before TGE.