Isolated versus pooled lending markets: Morpho, Aave, and how risk is shared

The first generation of on-chain lending protocols pooled everything. Every supplier of a given asset deposited into one reserve, every qualified borrower drew from it against any collateral the protocol’s governance had approved, and the protocol set one rate for the whole pool. The design produced deep, liquid markets quickly, and it produced a particular kind of risk: a failure anywhere in the collateral list was a loss to everyone who had supplied the borrowed asset.

The second generation isolates. Each market pairs one collateral with one loan asset and stands alone. A failure in one market cannot reach another. The supplier gains control over exactly which risks they hold and loses the depth that pooling provides.

How pooled markets share risk

In a pooled market, bad debt arises when a borrower’s collateral falls below their debt faster than liquidators can act, or when liquidation is not profitable enough to attract them. The shortfall is not attributed to a particular supplier. It sits in the reserve, and every supplier of that asset bears it in proportion. The most instructive episode came in November 2022, when a trader borrowed a large quantity of a governance token against stablecoin collateral on Aave and sold it, in what researchers Heimbach, Schertenleib and Wattenhofer describe as an attempted short squeeze. The position was liquidated, but slippage in the thin market left the protocol with debt that could not be recovered from the collateral, and governance later voted to cover it. Suppliers of the borrowed token had been exposed to a collateral decision they had not made.

Pooled protocols have since added tools that narrow the sharing. Aave’s isolation mode lets a newly listed or riskier asset be used as collateral only for a limited set of assets and only up to a debt ceiling, so that its failure is contained. Supply caps and borrow caps limit how large any exposure can grow. These are governance-set parameters, which means they are also governance-changeable, and a supplier in a pooled market is relying on that governance to keep the collateral list conservative.

How isolated markets contain it

Morpho’s design, described in its documentation as a variable rate market, pairs one collateral asset with one loan asset and fixes five parameters at creation: the two assets, the oracle, the interest rate model and the liquidation loan-to-value. Once deployed, the market cannot be changed. The oracle address in particular is permanent, so a supplier who has reviewed it knows it will not be swapped for another. Anyone can create a market with any parameters, which means the burden of choosing well moves from a governance process to the supplier.

• Pooled: one reserve per asset, shared rate, shared bad debt, governance-managed collateral list
• Isolated: one collateral against one loan asset, fixed parameters, no contagion between markets, supplier-managed selection
• Isolation mode within a pooled protocol: a middle path that caps a risky collateral’s reach without fully separating it
• Curated vaults: an allocator that spreads deposits across isolated markets under a published mandate, reintroducing delegation on top of isolation

The cost of isolation

Depth. A pooled reserve for a major stablecoin is one of the largest liquidity pools in the market, and a supplier can enter and exit in size without moving the rate. An isolated market for the same stablecoin against one specific collateral is a fraction of that size, and there are many of them. A supplier who wants pooled-scale exposure to isolated markets has to hold many positions and monitor each, or delegate the allocation to a vault, at which point they are trusting a curator’s judgment rather than a governance process. Immutability, likewise, is protection against bad changes and also against good ones: a market with a flawed parameter cannot be fixed, only abandoned.

Choosing between them

The honest comparison is not that one design is safer. It is that they place the risk in different hands. A pooled market asks the supplier to underwrite the protocol’s whole collateral list and the governance that maintains it. An isolated market asks the supplier to underwrite one collateral, one oracle and one liquidation ratio, and to do that work for every market they enter. A supplier with the capacity to review collateral and oracles will prefer isolation and pay for it in depth. A supplier who cannot do that work is, whether they know it or not, relying on someone else’s, and the pooled protocol at least makes that reliance explicit.