Risks

Risk Management

Understanding and managing risk is crucial when using DeFi protocols. This page outlines the risks involved with Zentra and the measures in place to mitigate them.

Risk Categories

Risk Type
Description

Smart Contract Risk

Code bugs, exploits

Market Risk

Price drops, volatility

Liquidation Risk

Position closed at loss

Oracle Risk

Price feed manipulation

Liquidity Risk

Unable to withdraw

Governance Risk

Malicious proposals

Smart Contract Risk

What Is It?

Smart contracts may contain bugs or vulnerabilities that could result in loss of funds.

Mitigation Measures

Measure
Description

Audits

Professional security firms review code

Battle-tested

Based on Aave's proven architecture

Bug bounty

Rewards for responsible disclosure

Formal verification

Mathematical proofs of correctness

Timelocks

Delays on contract upgrades

User Protection

Action
Benefit

Start small

Test with amounts you can afford to lose

Monitor audits

Check audit reports before depositing

Diversify

Don't put all funds in one protocol

Market Risk

What Is It?

Asset prices can decline, affecting collateral values and potentially causing liquidations.

Volatility Impact

Example: BTC drops 20% overnight

Metric
Before
After

Collateral

1 wcBTC = $50,000

1 wcBTC = $40,000

Borrowed

$30,000 USDC

$30,000 USDC

Health Factor

1.33 ✓

1.07 ⚠️

Mitigation Measures

Measure
Description

Conservative LTV

Collateral factors leave safety buffer

Over-collateralization

Always borrow less than deposit

Multiple collateral types

Diversification reduces single-asset risk

User Protection

Action
Benefit

Don't max out

Keep Health Factor above 2.0

Set alerts

Monitor position, act before liquidation

Hedge

Consider hedging strategies

Liquidation Risk

What Is It?

If your Health Factor drops below 1.0, your position can be liquidated at a loss.

Liquidation Impact Example

Before Liquidation:

  • Collateral: 1 wcBTC ($40,000)

  • Debt: $35,000 USDC

  • Health Factor: 0.91 (liquidatable)

Liquidation (50% of debt):

  • Debt repaid: $17,500

  • Collateral taken: $19,250 (includes 10% penalty)

After Liquidation:

  • Collateral: $20,750 worth of wcBTC

  • Debt: $17,500 USDC

  • Loss: $1,750 (liquidation penalty)

Mitigation Measures

Measure
Description

Partial liquidations

Only 50% closed per transaction

Gradual penalties

Lower penalty for less volatile assets

Warning zone

Dashboard alerts as HF approaches 1.0

User Protection

Action
Benefit

Monitor daily

Track Health Factor regularly

Maintain buffer

Keep HF > 1.5 at minimum

Prepare capital

Have funds ready to add collateral

Set stop-loss

Define when you'll add collateral

Oracle Risk

What Is It?

Oracles provide price data. If manipulated or incorrect, it could enable exploits or wrongful liquidations.

Potential Issues

Issue
Impact

Price manipulation

Artificial liquidations or borrowing

Stale prices

Incorrect valuations

Oracle downtime

Protocol pause

Mitigation Measures

Measure
Description

Multi-source

Aggregate multiple price feeds

TWAP

Time-weighted prices resist flash attacks

Circuit breakers

Pause on extreme price moves

Fallback oracles

Backup price sources

Liquidity Risk

What Is It?

If utilization is very high, you may not be able to withdraw your supplied assets immediately.

How It Happens

Example:

  • Total Supplied: $10,000,000 USDC

  • Total Borrowed: $9,500,000 USDC

  • Available: $500,000 USDC

  • Utilization: 95%

If you want to withdraw $1,000,000:

  • Only $500,000 available

  • Must wait for repayments or utilization to drop

Mitigation Measures

Measure
Description

Interest rate model

High utilization = higher borrow rates

Rate incentives

Discourages excessive borrowing

Reserve buffer

Protocol maintains some liquidity

User Protection

Action
Benefit

Check utilization

Before large deposits

Monitor liquidity

Especially before planned withdrawals

Partial withdrawals

Withdraw in smaller amounts

Governance Risk

What Is It?

Governance controls protocol parameters. Malicious or poorly-considered proposals could harm users.

Potential Issues

Issue
Impact

Malicious proposal

Parameter changes that benefit attackers

Poor decisions

Suboptimal changes affecting users

Voter apathy

Low participation enables bad proposals

Mitigation Measures

Measure
Description

Timelocks

Delay between vote and execution

Quorum requirements

Minimum participation to pass

Guardian multisig

Emergency pause capability

Transparent process

Public discussion before votes

Systemic Risk

What Is It?

Risks affecting the entire DeFi ecosystem or underlying blockchain.

Examples

Risk
Description

Chain halt

Citrea network stops producing blocks

Bridge exploit

wcBTC bridge compromised

Contagion

Failure of other protocols impacts Zentra

Regulatory

Legal changes affecting DeFi

Mitigation Measures

Measure
Description

Native focus

Built specifically for Citrea

Conservative assets

Launch with proven assets only

Isolation

Minimal dependencies on other protocols

Risk Parameters by Asset

Parameter
USDC
wcBTC
ctUSD

Collateral Factor

85%

70%

80%

Reserve Factor

130%

20%

13%

Why Different Parameters?

Asset
Risk Level
Rationale

USDC,ctUSD

Lower

Stable price, low volatility

wcBTC

Higher

Volatile

Risk Checklist

Before using Zentra:

  • ✅ Understand smart contract risk (audit status, battle-testing)

  • ✅ Accept market risk (potential for asset price decline)

  • ✅ Know liquidation rules (HF threshold, penalty)

  • ✅ Check current utilization (liquidity availability)

  • ✅ Review risk parameters (collateral factors, thresholds)

  • ✅ Only deposit what you can afford to lose

Emergency Procedures

Protocol Emergency

Situation
Response

Smart contract exploit

Guardian pause, assess damage

Oracle failure

Fallback oracles, potential pause

Extreme market volatility

Circuit breakers activate

User Emergency

Situation
Response

Health Factor dropping

Add collateral or repay debt

Can't withdraw

Wait for utilization to drop

Suspected exploit

Stop interacting, follow announcements

Resources

Resource
Purpose

Discord

Community updates, emergency announcements

Twitter

Real-time protocol status

Audit reports

Security assessment details

Documentation

Full protocol mechanics

Last updated