How Does Scallop Work?
The top lending protocol on the Sui blockchain, where you deposit tokens to earn interest or borrow against them. It holds $200M in deposits and raised $3M. Its B- grade reflects that being the biggest lender on a young blockchain means absorbing all ecosystem-wide shocks, with fewer battle-tested security tools than Ethereum.
TVL
$22M
Sector
Lending
Risk Grade
B-
Value Grade
D+
Core Mechanisms
6.1.1
Overcollateralized lending pools on Sui with per-asset risk parameters
Standard overcollateralized lending model adapted for Sui's object-centric architecture. Supports major Sui assets (SUI, wUSDC, wETH, etc.) with governance-set collateral ratios.
6.1.4
Isolated sub-accounts leveraging Sui's native account model for risk isolation
Users can manage multiple sub-accounts to isolate collateral and debt positions. Leverages Sui's unique account object model for more granular risk management than EVM-based isolation modes.
6.2.2
NovelTrilinear interest rate model with three kink points for stability-optimized rate curves
Unlike standard dual-slope (Aave/Compound) interest rate models, Scallop uses a trilinear model with three utilization kink points. This provides more granular control over rate behavior at different utilization levels but introduces additional parameter risk.
6.3.3
Soft liquidation with partial collateral seizure to minimize market impact
Borrowers' collateral is partially liquidated when health factor drops below threshold, reducing slippage compared to full liquidation. Standard partial liquidation pattern, well-proven in DeFi.
6.4.4
Multi-oracle with Pyth, Switchboard, and Supra feeds plus TWAP fallback
Uses three independent oracle providers with TWAP-based fallback for price verification. Distributed Oracle Agreement (DORA) adds tamper resistance. More oracle diversity than most Sui protocols.
5.1.3
veSCA vote-escrow governance for emission direction and protocol parameters
SCA holders lock tokens for veSCA to gain governance power and revenue share. Standard vote-escrow model (Curve-style) with time-weighted voting power.
7.1.2
Gauge-weighted SCA emission rewards directed by veSCA holders
veSCA holders vote to direct SCA emissions to specific lending pools. Standard gauge mechanism incentivizing liquidity in governance-chosen markets.
2.2.4
Revenue split between veSCA stakers, protocol treasury, and insurance fund
Protocol revenue from interest rate spreads is split between veSCA stakers (as yield), treasury (for development), and an insurance fund (for bad debt coverage).
How the Pieces Interact
If oracle feeds diverge (Pyth vs Switchboard disagreement), the trilinear rate model may use inconsistent price inputs, leading to mispriced interest rates and arbitrageable borrowing positions.
While sub-accounts isolate individual position risk, a SUI-wide price crash affects all sub-accounts simultaneously. Isolation provides false sense of diversification when underlying collateral is correlated.
Partial liquidations assume sufficient DEX liquidity to absorb collateral sales. On Sui, DEX liquidity is thin enough that even partial liquidations can cause significant slippage during stress events.
veSCA holders directing emissions to specific pools could create moral hazard — voters incentivize pools where they are positioned, rather than pools that optimize protocol safety.
Heavy SCA emissions to attract liquidity may suppress organic interest rates, making the protocol dependent on token incentives. If SCA price drops, mercenary capital exits rapidly.
What Could Go Wrong
- Single-ecosystem concentration: as Sui's top lending protocol, Scallop is fully exposed to Sui chain risk, bridge failures, and ecosystem-wide contagion
- Multi-oracle dependency (Pyth, Switchboard, Supra) on a younger chain — oracle infrastructure is less battle-tested than Ethereum equivalents
- Sui's Move-based smart contracts have a shorter audit history than Solidity, with fewer security tools and researchers available
Sui Oracle Manipulation and Cascade Liquidation
ModerateTrigger: Coordinated manipulation of Pyth/Switchboard/Supra oracle feeds on Sui, or a critical oracle downtime event during high market volatility
- 1.Oracle price feed for a major Sui asset (e.g., SUI or wUSDC) is delayed or manipulated during a volatile period — Scallop's trilinear interest rate model fails to adjust quickly enough, creating mispriced borrowing positions
- 2.Borrowers exploit stale prices to withdraw excess collateral before liquidation triggers — Protocol accumulates undercollateralized positions totaling 5-10% of affected lending pool TVL
- 3.When oracle updates resume, mass liquidations trigger across multiple isolated markets simultaneously — Liquidation volume overwhelms Sui DEX liquidity, resulting in bad debt that cannot be fully recovered
- 4.Bad debt socialized across remaining lenders in affected pools — Depositor confidence collapses, triggering bank-run withdrawals and utilization rate spikes to 100%
Risk Profile at a Glance
Overall: B- (28/100)
Lower score = safer