How Does Scallop Work?

Lending|Risk B-|8 mechanisms|5 interactions

The top lending protocol on the Sui blockchain, where you deposit tokens to earn interest or borrow against them. It holds $200M in deposits and raised $3M. Its B- grade reflects that being the biggest lender on a young blockchain means absorbing all ecosystem-wide shocks, with fewer battle-tested security tools than Ethereum.

TVL

$22M

Sector

Lending

Risk Grade

B-

Value Grade

D+

Core Mechanisms

6.1.1

Overcollateralized lending pools on Sui with per-asset risk parameters

Standard overcollateralized lending model adapted for Sui's object-centric architecture. Supports major Sui assets (SUI, wUSDC, wETH, etc.) with governance-set collateral ratios.

6.1.4

Isolated sub-accounts leveraging Sui's native account model for risk isolation

Users can manage multiple sub-accounts to isolate collateral and debt positions. Leverages Sui's unique account object model for more granular risk management than EVM-based isolation modes.

6.2.2

Novel

Trilinear interest rate model with three kink points for stability-optimized rate curves

Unlike standard dual-slope (Aave/Compound) interest rate models, Scallop uses a trilinear model with three utilization kink points. This provides more granular control over rate behavior at different utilization levels but introduces additional parameter risk.

6.3.3

Soft liquidation with partial collateral seizure to minimize market impact

Borrowers' collateral is partially liquidated when health factor drops below threshold, reducing slippage compared to full liquidation. Standard partial liquidation pattern, well-proven in DeFi.

6.4.4

Multi-oracle with Pyth, Switchboard, and Supra feeds plus TWAP fallback

Uses three independent oracle providers with TWAP-based fallback for price verification. Distributed Oracle Agreement (DORA) adds tamper resistance. More oracle diversity than most Sui protocols.

5.1.3

veSCA vote-escrow governance for emission direction and protocol parameters

SCA holders lock tokens for veSCA to gain governance power and revenue share. Standard vote-escrow model (Curve-style) with time-weighted voting power.

7.1.2

Gauge-weighted SCA emission rewards directed by veSCA holders

veSCA holders vote to direct SCA emissions to specific lending pools. Standard gauge mechanism incentivizing liquidity in governance-chosen markets.

2.2.4

Revenue split between veSCA stakers, protocol treasury, and insurance fund

Protocol revenue from interest rate spreads is split between veSCA stakers (as yield), treasury (for development), and an insurance fund (for bad debt coverage).

How the Pieces Interact

Multi-oracle price feedsTrilinear interest rate modelHigh

If oracle feeds diverge (Pyth vs Switchboard disagreement), the trilinear rate model may use inconsistent price inputs, leading to mispriced interest rates and arbitrageable borrowing positions.

Isolated sub-accountsSui ecosystem concentrationHigh

While sub-accounts isolate individual position risk, a SUI-wide price crash affects all sub-accounts simultaneously. Isolation provides false sense of diversification when underlying collateral is correlated.

Soft liquidationSui DEX liquidity depthMedium

Partial liquidations assume sufficient DEX liquidity to absorb collateral sales. On Sui, DEX liquidity is thin enough that even partial liquidations can cause significant slippage during stress events.

veSCA governanceLending pool parametersMedium

veSCA holders directing emissions to specific pools could create moral hazard — voters incentivize pools where they are positioned, rather than pools that optimize protocol safety.

SCA gauge emissionsInterest rate spreadsLow

Heavy SCA emissions to attract liquidity may suppress organic interest rates, making the protocol dependent on token incentives. If SCA price drops, mercenary capital exits rapidly.

What Could Go Wrong

  1. Single-ecosystem concentration: as Sui's top lending protocol, Scallop is fully exposed to Sui chain risk, bridge failures, and ecosystem-wide contagion
  2. Multi-oracle dependency (Pyth, Switchboard, Supra) on a younger chain — oracle infrastructure is less battle-tested than Ethereum equivalents
  3. Sui's Move-based smart contracts have a shorter audit history than Solidity, with fewer security tools and researchers available

Sui Oracle Manipulation and Cascade Liquidation

Moderate

Trigger: Coordinated manipulation of Pyth/Switchboard/Supra oracle feeds on Sui, or a critical oracle downtime event during high market volatility

  1. 1.Oracle price feed for a major Sui asset (e.g., SUI or wUSDC) is delayed or manipulated during a volatile period Scallop's trilinear interest rate model fails to adjust quickly enough, creating mispriced borrowing positions
  2. 2.Borrowers exploit stale prices to withdraw excess collateral before liquidation triggers Protocol accumulates undercollateralized positions totaling 5-10% of affected lending pool TVL
  3. 3.When oracle updates resume, mass liquidations trigger across multiple isolated markets simultaneously Liquidation volume overwhelms Sui DEX liquidity, resulting in bad debt that cannot be fully recovered
  4. 4.Bad debt socialized across remaining lenders in affected pools Depositor confidence collapses, triggering bank-run withdrawals and utilization rate spikes to 100%

Risk Profile at a Glance

Mechanism Novelty2/15
Interaction Severity6/20
Oracle Surface2/10
Documentation Gaps3/10
Track Record0/15
Scale Exposure3/10
Regulatory Risk5/10
Vitality Risk7/10
B-

Overall: B- (28/100)

Lower score = safer

More on Scallop

Related Lending Explainers