Umbrella
How first-loss capital and staked assets support deficit coverage in Avana's Aave v4 markets.
Overview
Avana uses the Umbrella model for deficit protection in its Aave v4 lending architecture. It follows the principle of Aave Umbrella: a defined first-loss layer sits ahead of staked capital that can be slashed to cover protocol bad debt. In Avana, that model is applied to LP-backed borrowing across a Hub and its Spokes. Coverage depends on the configured debt reserve, Spoke, available capital, and settlement rules; it is not a guarantee for every position connected to the Hub.
Where Umbrella enters the flow
Collateral valuation, exposure limits, and liquidation remain the first controls against loss. Liquidation attempts to recover debt from an LP position's fees and principal. If that process leaves a finalized reserve deficit, Umbrella provides the coverage mechanism for the eligible shortfall. The trigger is the debt left unrecovered after settlement, rather than a temporary fall in health factor or an estimated loss while the LP position is still being unwound.
Coverage by reserve and Spoke
Avana's v4 coverage design attributes risk and first-loss capacity to the debt asset and the Spoke that generates the exposure. A USDC reserve serving one collateral market can have different liquidation behavior from USDC borrowing against a more complex LP market. Keeping that attribution explicit prevents the same asset symbol from being treated as one interchangeable coverage balance. Liquidation-linked earnings, realized losses, and available coverage are therefore evaluated against the relevant reserve-and-Spoke combination.
First-loss capital and deficit offsets
The deficit offset defines the first-loss amount ahead of Umbrella stakers. Losses assigned to that layer are covered by the associated capital commitment before the remaining eligible deficit reaches slashable stake. The offset is an accounting and coverage threshold; recording it does not by itself transfer assets into a reserve or prove that the funds are immediately available.
A governance-declared treasury commitment can provide an initial first-loss layer without prefunding every covered reserve. That commitment becomes usable coverage through an authorized process that moves the required asset when a deficit is realized. Prefunded capital makes the available balance explicit. For externally controlled Spokes, the proposed entry model pairs credit-line approval with an upfront deductible, rather than relying entirely on future revenue that has not yet been earned or verified.
Revenue-linked offset accounting
The proposed revenue-linked extension grows first-loss capacity from recognized liquidation-related earnings attributable to the covered reserve and Spoke. These can include liquidation fees and recovered liquidation value such as Smart Value Recapture (SVR). It does not apply one percentage to all protocol revenue: earnings are attributed to the debt asset and market whose losses the offset is intended to absorb.
deficitOffset(t + 1) = deficitOffset(t)
+ alpha * recognizedLiquidationEarnings
- realizedLosses
- decayThis is the proposed accounting rule, not a fixed parameter schedule. Governance defines the reserve-specific allocation rate, alpha, and a cap tied to an explicit measure such as stressed expected loss or outstanding reserve debt. Recognized losses consume the offset, while decay keeps historical earnings from defining coverage indefinitely. Amounts above the cap need a specified destination under the approved policy. Actual settlement still requires the capital represented by the offset to be available in the required asset.
From deficit to settlement
The v4 flow connects a finalized Spoke loss to coverage of the affected Hub reserve. It identifies the debt asset, the originating Spoke, the final amount unrecovered, and the first-loss capital assigned to it. An authorized settlement path then delivers coverage to the reserve. If a covered deficit exceeds the first-loss layer, the remaining eligible amount can reach Umbrella stake under the configured slashing rules and available capacity.
A declared commitment, a slash, and a completed reserve coverage operation are distinct states. Monitoring needs to distinguish capital promised, capital collected, and debt actually covered. This matters in a Hub–Spoke architecture because a loss can be finalized before the corresponding capital reaches the reserve. The settlement design therefore includes who can move funds, which asset is delivered, and how completion is recorded under stressed conditions.
Staking and slashing
Umbrella participants stake supported assets into a coverage market and receive rewards for making that capital available. In return, the stake can lose value when an eligible deficit reaches its slashing layer. The coverage market defines the protected asset and exposure, reward terms, slashing limits, and withdrawal process, including any cooldown. These are market parameters: Aave v3 token addresses, cooldown durations, and offset amounts are not defaults for Avana's v4 integration.
Coverage readiness
Enabling coverage depends on the covered markets' operating history rather than a single Hub-size threshold. The relevant evidence includes recurring attributable earnings, stable liquidity, concentration of deposits and collateral, observed liquidation behavior, and a settlement path that can deliver capital promptly. A new market without enough earnings history may require seeded first-loss capital or remain outside coverage until those conditions are met. A brief rise in deposits does not establish the same readiness as sustained liquidity and reliable liquidations.
Coverage limits
Umbrella addresses eligible protocol deficits after liquidation. It does not reimburse ordinary trading losses, impermanent loss, or every failure of an external protocol. Coverage is bounded by the approved market scope and capital actually available; it does not increase borrowing capacity or remove liquidation risk. The Risk Framework and Liquidation Framework describe the controls and recovery process that operate before deficit coverage.