From the Lehman Crisis to On-Chain Lending: How Morpho, Aave V4, and Euler V2 Are Reshaping Institutional-Level Risk Isolation Architectures?

Written by: Tiger Research

Translated by: AididiaoJP, Foresight News

As institutional investors enter the on-chain lending market, DeFi is shifting from a single shared pool architecture to a structure capable of isolating risks and specializing operational layers.

Key Points

• The Lehman crisis and the Kelp DAO incident both exposed the same structural flaw: the single shared pool architecture amplifies the failure of a single asset into a systemic crisis.
• TradFi responds by separating various functional layers of the financial stack.
• The DeFi ecosystem is converging on the same answer: a modular architecture built around risk isolation.
• This shift is accelerating as RWA assets begin to flow en masse onto the chain.
• In a modular architecture, the capabilities of the operational layer (the level managing the products) become a key differentiator.

Lessons from the Lehman Crisis

In September 2008, the collapse of Lehman Brothers triggered an unprecedented crisis. The world's third-largest money market fund, Reserve Primary Fund (RPF), suspended all redemptions within a day.

At that time, RPF's exposure to Lehman Brothers' debt was only 1.2% of the managed assets. When Lehman's bankruptcy rendered that 1.2% unrecoverable, the total asset value of the fund fell from $1 per share to 98.8 cents. This was enough to break the fundamental principle of the money market fund industry, which maintained a fixed net asset value of $1 per share. The fund's value per share dropped below $1, to 97 cents.

Once the principal loss became visible, panic spread almost immediately. Fears that waiting would lead to further losses triggered an unprecedented amount of withdrawals, with redemption requests reaching $40 billion within two days. The fund could not withstand the pressure, freezing and halting all withdrawals.

The Lehman event forced a complete restructuring of traditional capital markets. In the MMF sector, risk-labeled liquidity buffers and redemption restriction guidelines were fully reformed. In the hedge fund sector, the industry learned from Lehman's remortgaging risks—concentration of customer assets with a single prime broker.

The result was a structural transformation: no longer concentrating assets and credit with a single intermediary. Separating execution infrastructure from risk management and diversifying exposures across multiple prime brokers became the standard for global risk isolation. Built on this separation of infrastructure from risk to curb contagion, the asset management industry was able to rebuild operational trust and resume growth.

How Traditional Capital Markets Addressed This Issue

In 2014, the U.S. Securities and Exchange Commission (SEC) restructured the MMF framework. Funds were segmented based on capital nature, with different categories applying different standards. The goal was to prevent a run or failure in one niche market from spilling over to other fund types or the entire system, with each category having its dedicated buffers.

The core concept of traditional financial risk control is separation. Power is fractured so that risks do not concentrate at a single node, with independent validation inserted at every stage of capital flow.

The prime brokerage in capital markets most clearly embodies this principle. Investment power rests with hedge funds, while risk oversight is held by brokers. These two functions are intentionally separated. In traditional lending markets, the same logic is established: credit assessment, underwriting, collateral management, and custody each become the domain of independent, standalone participants.

However, when asset management and lending began to migrate to DeFi, the layered intermediary structure established by traditional finance was compressed into a single layer. Early DeFi protocols focused on eliminating the intermediaries needed for a separation structure by directly encoding relevant mechanisms into smart contracts, automating tasks previously handled by multiple participants.

From Shared Pools to Modular Architecture

Early DeFi's practice of compressing all lending mechanisms into a single smart contract reduced intermediary costs but concentrated each type of risk within a single protocol. Since credit assessment, underwriting, and collateral management operated within one codebase rather than as independent functions, the failure or liquidation failure of a single asset could directly cripple the liquidity of the entire system.

This possibility of contagion forced governance bodies of protocols to conservatively set risk parameters. Assets with shorter track records or higher volatility (any asset outside of Bitcoin and Ethereum) were structurally excluded from collateral eligibility. Compressing functions into a single contract produced the opposite of capital efficiency: limited asset diversity and restricted market access.

@SiloFinance solved the risk concentration issue of a unified pool by introducing isolated lending pools for each asset. By limiting price manipulation or severe value declines to a single collateral pool, and preventing that risk from spreading to others, Silo demonstrated that governance approval thresholds could be lowered and new lending markets could open up more quickly. This architecture suggests that a single large pool can be split and risk isolated at the market level, pointing to the subsequent appearance of layered modular structures.

The modular system pioneered by Silo has become the foundational standard for on-chain lending as RWA assets (including tokenized government bonds and private credit) begin to flow into the chain in large volumes. Each category of RWA has fundamental differences regarding trading times, oracle reliability, regulatory requirements (like KYC and AML), and liquidation processes. Under the early shared pool model's requirements, it is not feasible to manage such diverse assets with a single unified parameter set.

The influx of RWA has created a demand that goes beyond simple asset isolation. It requires transplanting mature risk control frameworks from traditional finance into the on-chain environment. As asset diversity increases, the risks emerging on-chain become more complex. Containing these risks requires a structural separation of the immutable infrastructure layer that handles clearing and settlement from the operational layer, which has real-time authority adjustments and assumes responsibility for risk parameters.

Early DeFi initially compressed the middle layer of finance into a single codebase. As RWA assets flowed in and the lending market matured, the path diverged: clearing and settlement efficiency was delegated to the blockchain, while risk oversight powers were separated into independent layers. In absorbing greater asset complexity, on-chain lending reached a structure similar to that which traditional finance has already built—prime brokers and independent credit assessments, where investment and risk oversight remain separated. This modular architecture has become the new standard in the on-chain lending market.

Institutional-Level Risk Isolation and Convergence

Although the modular architecture originates from within the DeFi ecosystem, it precisely converges with the risk control standards required by institutional participants.

Morpho decided to prioritize complete risk isolation at the base infrastructure layer (at the cost of some capital efficiency), creating institutional demand. This demand became an inflection point, attracting other major lending protocols (those that originally adopted shared pool structures) to develop in the same direction.

Morpho Blue: Prime Broker

@Morpho initially served as an intermediary layer optimizing interest rates of first-generation DeFi lending protocols (like @aave and @Compound). In that form, it could not stand alone. In 2023, Morpho released the Morpho Blue white paper and launched Morpho Blue and Morpho Vaults in early 2024, effectively declaring independence.

This transformation moved away from a structure in which governance made all risk decisions across the market, separating market creation and risk assessment from the protocol itself. This separation became the structural foundation that allows institutional participants to select and control risks based on their compliance standards.

Structure

• Morpho Blue: An immutable protocol. Five parameters are fixed when markets are created: collateral asset, borrowing asset, liquidation loan-to-value ratio (LLTV), price oracle, and interest rate model. Anyone can create a market without permission. The protocol itself is only responsible for executing according to the code.
• Morpho Vaults: A risk management layer where independent curators select qualifying markets, set supply limits, and allocate capital. Each vault has a different risk profile.
• Lenders: Depositors with varying risk preferences (including DAOs, protocols, individuals, and hedge funds) choose vaults that match their profiles and provide capital.

Traditional prime brokers are expected to perform four functions: clearing, custody, leverage provision, and risk monitoring. Morpho automates clearing and leverage provision at the protocol layer through smart contracts. However, its non-custodial structure means it cannot provide the custodial environment required for institutional regulatory compliance. Therefore, integration with external custodians (like @coinbase or @Anchorage) is necessary.

Risk monitoring similarly does not rely on the protocol, but rather on each curator's ability to choose assets and manage exposures. This creates a continuous risk: the quality of curators varies. The events of xUSD and Stream Finance in 2025 highlighted this vulnerability directly. Multiple Morpho vaults held xUSD exposure and generated bad debts. Consequently, the market began scrutinizing curators' ability to choose assets and manage real-time risks more closely, concentrating institutional capital around top-tier curators with good track records, including @SteakhouseFi, @gauntlet_xyz, and @SentoraHQ.

Traditional prime brokers bundle clearing, custody, leverage, and collateral management into a single institutional counterparty. Morpho replaced this model with a division of labor, decentralizing each function to specialized participants in the ecosystem rather than concentrating it in a single institution.

Institutional adoption is now occurring on a large scale, beginning with centralized exchanges.

• Coinbase: USDC lending service built on Morpho Blue, with Steakhouse Financial as the curator.
• Binance: Adopting the same structure, with Steakhouse Financial and Gauntlet as curators.

Users can obtain loans by pressing the "lend" button within the Coinbase or Binance App. The two largest exchanges by global trading volume have chosen the same underlying infrastructure. Adoption has expanded to traditional financial institutions.

• SG-FORGE: Deploying MiCA-compliant stablecoin EURCV and USDCV on Morpho.
• Apollo: Tokenizing the private credit fund ACRED and using it as collateral on Morpho.
• Bitwise: Curating risks directly on top of Morpho Vaults.

If tokenization opens asset access, Morpho opens the path to using these assets as productive capital. The trajectory set by Morpho is beginning to exhibit an evolutionary direction that many lending protocols with starkly different starting points cannot ignore.

Aave V4: Universal Bank

@aave initially started as ETHLend (a peer-to-peer loan matching model), and then evolved into a shared pool architecture through V1, V2, and V3. In March 2026, it activated V4 on the Ethereum mainnet—a modular architecture. Morpho chose to structurally separate infrastructure from operations, while Aave V4 chose a hybrid model that maintains liquidity efficiency while controlling risk.

Aave recognized the tension between risk isolation and capital efficiency. Moving towards isolation can curb the contagion of bad debts but may undermine liquidity network effects and reduce capital efficiency. The design of V4 aims to structurally resolve this trade-off.

Structure

• Hub: Central layer that integrates liquidity and accounting. It allocates credit limits for each branch, restricting the liquidity that can be extracted from any given market. These limits per branch and local parameters constitute the fundamental risk firewalls.
• Spoke: Individual lending markets with independent parameters for each asset. When a specific branch or asset encounters issues, governance and risk managers can limit exposure by adjusting that branch's credit limits, restricting new loans, or activating emergency controls. Since the maximum exposure is fixed at the credit limit cap, the structural spread of contagion is inherently limited by design.

In traditional finance, this structure resembles the credit limit allocation system within a universal bank. The headquarters allocates credit limits to each department, and when one department encounters trouble, they adjust those limits to contain the spread. The Hub acts as the headquarters, while each Spoke operates independently like business units. Unlike Morpho's complete isolation model (where capital is strictly locked within each asset pair), the Hub-and-Spoke structure allows unused liquidity from one Spoke to be flexibly redirected through the Hub's credit limits to a more productive Spoke. The result is higher capital efficiency.

This structure becomes a significant advantage in the RWA market. Emerging RWA markets may struggle to attract initial liquidity, but in Aave V4, an existing liquidity Hub can serve as a seed mechanism for new Spoke markets. By structuring tokenized assets as independent Spokes and setting credit limit caps at the Hub, new asset classes can enter the market with lower onboarding costs while keeping initial exposures within credit limits.

Institutional adoption is organized around Horizon. Horizon launches as an independent RWA lending instance built on Aave v3.3 but aligns with the directional focus of V4's unified liquidity and risk separation. As it integrates further with V4's credit limit structure, Horizon is likely to solidify as Aave's institutional RWA layer.

Horizon aims to allow regulated tokenized government bonds, money market funds, and institutional funds to serve as collateral for stablecoin lending, with potential expansion to asset classes like tokenized stocks and ETFs.

Because the institutional assets approved within Horizon connect to the same institutional liquidity layer, any newly added RWA can immediately benefit from existing stablecoin liquidity.

The role distribution within this liquidity layer is as follows:

• Issuer: Investment onboarding and KYC/AML whitelist management.
• Risk Managers (LlamaRisk): RWA due diligence and proposal of risk frameworks and parameters.
• Oracles (Chainlink): On-chain price oracle provision.
• Protocol (Aave): Smart contract execution.

In the traditional Aave market, adding new assets requires DAO governance deliberation and voting, which slows down the process. Horizon separates these responsibilities: the issuer handles compliance for each asset, LlamaRisk manages risk due diligence, and Chainlink handles price verification. This structure allows institutional asset onboarding and risk adjustments to be faster than routing each decision through general DAO governance.

Morpho minimizes governance participation and externalizes market creation and risk management, favoring speed and optionality; Aave chose a different path: controlled governance delegation and shared liquidity while retaining capital efficiency.

Both approaches are coherent solutions for transplanting traditional financial risk allocation philosophies into the on-chain environment, but which side the RWA market will ultimately converge on remains to be seen.

Euler V2: Multi-Strategy Hedge Fund

In March 2023, @eulerfinance suffered a $197 million vulnerability attack. The attack exploited flaws in the smart contract code since multiple asset markets were interconnected within a single protocol accounting and clearing structure, causing damage to spread across multiple assets.

After about three weeks of negotiations, most of the stolen assets were recovered. Nevertheless, Euler chose to rebuild its architecture rather than simply patch it, subsequently repositioning itself as flexible institutional lending infrastructure.

Euler's entry into the RWA and institutional credit market was driven by a gap in traditional finance's tokenization efforts for assets. Banks are issuing tokenized bonds, funds, and government bonds, but these assets lack on-chain infrastructure for lending or credit provision.

Euler did not draw institutional demand into the volatile long tail of crypto assets but began positioning itself as the credit layer for institutional finance—providing on-chain liquidity for these assets.

Structure

• EVK (Euler Vault Kit): A toolkit for creating credit vaults with lending functionality based on ERC-4626. Each vault holds independent parameters for specific assets and risk configurations, connecting to other vaults via EVC to form a lending market.
• EVC (Ethereum Vault Connector): The core immutable primitive that connects collateral and debt relationships scattered across multiple vaults, managing them within a single account. In traditional financial terms, it is akin to consolidating multiple disjointed asset accounts into a single margin account that provides cross-collateralization.

EVK enables independent design at the asset level, while EVC connects what would otherwise be fragmented assets into a unified account and position management framework.

In traditional financial terms, Euler shares certain commonalities with the Pod structure of multi-strategy hedge funds. Independent Pods each operate their strategies and risk limits while sharing technological infrastructure and capital management systems.

The key distinction is that Euler is not organized within a single company but operates as open infrastructure, allowing multiple independent participants to create and connect vaults.

Analogously, Morpho resembles the labor division model of prime brokers, Aave resembles the shared liquidity model of universal banks, and Euler resembles the connected modular structure of multi-strategy hedge funds. The flexibility and capital efficiency enabled by this architecture also create the potential for indirect risk transmission from one asset to other positions within the connected vault ecosystem. Thus, the risk management capacity of curators remains a central challenge of the Euler V2 ecosystem.

Euler's institutional adoption is evolving towards accommodating asset-specific characteristics and regulatory requirements. The first frontline is tokenized stocks. Equity assets trade in a 24/5 environment and require price oracles capable of reflecting corporate events such as dividends and stock splits. Under a single shared risk structure, constructing isolated markets that meet these conditions is not feasible. EVK enables independent design at the asset level.

In partnership with @OndoFinance, Euler launched STEY, a lending market that accepts SPYon (S&P 500), QQQon (Nasdaq 100), and TSLAon (Tesla) as collateral.

STEY Market Structure

• Collateral: Ondo tokenized stocks (SPYon, QQQon, TSLAon)
• Borrowing Asset: PYUSD (PayPal stablecoin)
• Price Oracle: Chainlink real-time equity price oracle
• Risk Management: Curated by Sentora

Just as traditional finance uses Lombard loans to unlock liquidity from stock holdings, the STEY market replicates this mechanism on-chain. Investors can maintain price exposure to tokenized stocks while redeploying borrowed stablecoins into on-chain yield strategies to maximize capital efficiency.

The second frontline is the combination of tokenized government bonds and CLOs (Collateralized Loan Obligations). Euler launched the KPK USDC Prime RWA Vault to showcase this structural flexibility.

KPK USDC Prime RWA Vault Structure

• Collateral: VBILL (VanEck tokenized government bonds), STAC (Securitize AAA-rated CLO)
• Borrowing Asset: USDC
• Price Oracle: RedStone daily NAV oracle
• Risk Management: Curated by Sentora

CLOs require regular NAV pricing and asset-specific liquidation standards through oracles. Tokenized government bonds require strict compliance controls. Without modular infrastructure allowing for customizable designs of independent hooks and parameters at the vault level, onboarding any asset category as collateral for on-chain lending would be extremely challenging.

The potential for indirect risk transmission from overlapping exposures across the same assets, oracles, and collateral still exists, presenting Euler V2 with the ongoing challenge of calibrating the balance between flexibility and control.

All three protocols are addressing barriers to institutional entry from different starting points and approaches.

• Morpho: Completely externalizing market creation and risk management to maximize speed and optionality, with the quality of the curator layer being a critical variable to validate.
• Aave: Pursuing a hybrid approach by combining controlled governance delegation with V4's Hub-and-Spoke architecture, aiming to retain capital efficiency without compromising stability.
• Euler: Using EVK and EVC to ensure both asset independence and cross-collateral flexibility, seeking optimal risk balance within a multi-strategy structure.

They differ in their approaches but converge toward the same structural direction: separating the underlying execution infrastructure from the risk judgment layer and designing asset-specific risk parameters for each type of collateral.

Conclusion

In traditional capital markets, prime brokers took decades to establish themselves as the core infrastructure supporting hedge fund trading, custody, settlement, leverage, and risk management. The collapses of Lehman Brothers and the Reserve Primary Fund exposed various classes of systemic risks, increasing market focus on custody, collateral, liquidity management, and role separation.

The DeFi ecosystem has drawn structurally similar conclusions in a shorter time. The reason it can move so quickly is that code is faster than regulation.

After encountering governance bottlenecks and experiencing unexpected exposures and bad debt contagion, @Morpho, @aave, and @eulerfinance each implemented risk isolation and operational separation on-chain in far less time than traditional finance has taken. The DeFi market, through repeated actual capital losses and structural rebuild cycles, has compressed a process that took traditional finance decades into a few years.

The history of traditional finance indicates that the maturation of infrastructure such as prime brokers is one of the conditions that allowed the hedge fund industry to grow. Post-2008, as infrastructure stabilized and institutional capital began to flow in, total hedge fund AUM approached $2 trillion. From just 2015 to 2025, the industry grew from $1.4 trillion to $4.5 trillion. As infrastructure matured, genuine competition among strategies and risk management began in the operational layer above, attracting market capital towards managers demonstrating exceptional capabilities.

The on-chain lending market is entering a similar turning point. With Morpho, Aave V4, and Euler V2 converging on risk isolation and operational separation, the core question now is the competition that will unfold in the operational layer above that infrastructure.

Currently, the total AUM of on-chain curated vaults is approximately $7.4 billion. Given how much the hedge fund industry grew after its infrastructure was built, today's on-chain credit market resembles the early stages of much larger expansion.

In traditional finance, @GoldmanSachs and @MorganStanley hold near duopolistic control over prime broker infrastructure, and hedge funds must accept their terms for access. The operation of on-chain infrastructure is different. Opening a market on Morpho or Euler requires no permission from any institution.

As the monopoly over infrastructure is broken, competition in the on-chain operational layer is likely to unfold more openly and swiftly than in traditional finance. In traditional markets, platforms like Bridgewater, Millennium, and Citadel, as well as alternative asset management firms like Blackstone and Apollo, attracted significant capital through a combination of operational capabilities and access to infrastructure.

On-chain, any participant capable of assessing collateral, designing risk parameters, navigating institutional regulatory requirements, and establishing a track record now has the opportunity to secure a place in the emerging credit market on a more accessible infrastructure than traditional finance ever provided.