Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
LABS
Glossary

Recovery Mode

Recovery Mode is a protective state in DeFi lending protocols activated when the system's overall collateralization ratio falls below a critical threshold, enabling more aggressive liquidation mechanisms to restore financial health.
Chainscore © 2026
definition
DEFI MECHANISM

What is Recovery Mode?

A protective state in lending protocols that triggers when collateral values fall below a critical safety threshold, designed to protect the system from insolvency.

Recovery Mode is a protocol-enforced state in decentralized finance (DeFi) lending platforms, such as MakerDAO, that activates when the total collateralization ratio of the system or an individual position falls below a predefined Global Recovery Ratio (GRR). Its primary function is to prevent systemic insolvency by incentivizing users to restore the health of their undercollateralized vaults, often referred to as Troves. This mechanism acts as a circuit breaker, shifting the protocol's priority from normal operation to safeguarding the backing of its stablecoin, like DAI, by its collateral assets.

When Recovery Mode is triggered, the protocol imposes stricter economic penalties and restrictions. Typically, users with Troves below the GRR cannot withdraw collateral and may face higher liquidation penalties. Furthermore, the system often increases the liquidation reward paid to liquidators, accelerating the process of closing risky positions. The goal is to create urgent economic pressure for vault owners to either add more collateral or repay debt, thereby pushing the system's overall collateral ratio back above the GRR threshold to exit Recovery Mode.

The activation criteria are usually based on the value of the protocol's Total Collateral Ratio (TCR). For example, if the TCR drops below 150%, Recovery Mode may engage. This is distinct from individual liquidations, which occur at a lower Liquidation Ratio. Recovery Mode is therefore a last line of defense for the entire system, ensuring that even in extreme market volatility, the stablecoin remains sufficiently backed and the protocol avoids a scenario where bad debt exceeds the value of the liquidation penalties.

Exiting Recovery Mode requires collective action from vault owners. The protocol remains in this protective state until the TCR is restored above the GRR. This design emphasizes the decentralized and user-responsible nature of DeFi protocols; the system's stability relies on participants actively managing their positions. Recovery Mode is a critical risk-management feature that highlights the trade-off between capital efficiency and security in algorithmic finance.

key-features
MECHANISM OVERVIEW

Key Features of Recovery Mode

Recovery Mode is a protective state in lending protocols that triggers when a vault's collateralization ratio falls below a critical threshold, initiating automated liquidation procedures to protect the system's solvency.

01

Automatic Collateral Health Check

Recovery Mode is triggered by a global collateral ratio (GCR) check. When the total system-wide collateral value falls below a protocol-defined minimum (e.g., 150%), all undercollateralized vaults enter this state. This is a circuit breaker that prevents systemic undercollateralization from spreading.

02

Priority for Stability Pool & Liquidators

In Recovery Mode, the protocol prioritizes repaying debt from the Stability Pool (a pool of protocol-native tokens) first. If insufficient, it opens batch liquidations to external liquidators at a discounted collateral price. This creates a powerful incentive to restore solvency quickly.

03

Increased Liquidation Penalties

To incentivize rapid recapitalization, Recovery Mode imposes a higher liquidation penalty (e.g., 10% vs. 0.5% in normal mode) on vaults being liquidated. This penalty is paid to the Stability Pool depositors and the protocol, rewarding those who provide liquidity during crises.

04

Restricted Vault Operations

Vault owners in Recovery Mode face restrictions to prevent further risk:

  • Withdrawals of collateral are blocked.
  • New debt cannot be issued (borrowing is disabled).
  • The primary action available is to add collateral or repay debt to exit Recovery Mode.
05

Exit Condition & System Reset

Recovery Mode ends when the global collateral ratio rises back above the critical threshold (e.g., 150%) and every individual vault has a collateral ratio above the minimum requirement (e.g., 110%). This ensures the entire system is healthy before normal operations resume.

how-it-works
MECHANISM

How Recovery Mode Works

A detailed explanation of Recovery Mode, a critical safety mechanism in DeFi lending protocols designed to protect the system from undercollateralized positions.

Recovery Mode is an emergency state in a decentralized lending protocol, such as MakerDAO, that is automatically triggered when the total collateralization ratio of the system falls below a predefined threshold, typically 150%. Its primary function is to protect the protocol's solvency by prioritizing the repayment of the system's stablecoin debt (DAI) over the preservation of individual user positions. When active, it alters liquidation mechanics and borrowing rules to incentivize the rapid recapitalization of the system.

The core mechanism involves modifying the liquidation process. In Recovery Mode, the protocol allows for the full liquidation of a vault (also called a Collateralized Debt Position or CDP) even if its individual collateral ratio is above the normal liquidation threshold, provided it is the most undercollateralized vault in the system. This "best-first" liquidation strategy targets the riskiest positions first to most efficiently improve the global health of the protocol. Furthermore, borrowing new debt is typically disabled to prevent further systemic risk.

For users, entering Recovery Mode introduces significant risks. A vault owner cannot withdraw collateral or generate new debt. More critically, their position becomes eligible for liquidation at a 0% liquidation penalty, meaning liquidators can purchase the vault's collateral solely for the amount of debt it covers, with no bonus. This creates a powerful economic incentive for liquidators to act swiftly, as they acquire collateral at a discount equal to the full stability fee accrued on the debt.

Exiting Recovery Mode occurs when the system's overall collateral ratio is restored above the trigger threshold, usually through a combination of liquidations, users voluntarily repaying debt, and increases in collateral value. This mechanism acts as a circuit breaker, ensuring that during periods of extreme market volatility or collateral price crashes, the protocol can aggressively defend its peg and solvency, even at the expense of individual positions that would otherwise be considered safe.

examples
RECOVERY MODE

Protocol Examples

Recovery Mode is a protective mechanism in lending protocols that automatically triggers to prevent insolvency when the total collateral ratio of the system falls below a critical threshold. These examples illustrate its implementation across different DeFi ecosystems.

05

Euler Finance (Pre-Hack)

Euler's design featured a sophisticated risk-based tiering system and a reactive interest rate model. Its intended recovery logic involved dynamically adjusting borrowing rates and disabling risky assets when their borrow factor indicated elevated risk, aiming to preemptively protect solvency. This highlighted a design philosophy focused on risk segmentation and automatic parameter adjustment as a defensive measure.

06

Common Triggers & Design Philosophy

Recovery modes share common design goals but differ in triggers and execution.

  • Primary Trigger: Systemic collateral ratio (e.g., Liquity's TCR) or governance vote (Maker).
  • Core Purpose: Halt new risky debt, incentivize recapitalization, ensure orderly settlement.
  • Key Trade-off: Balancing user access during stress with ultimate protocol survival.
  • Evolution: Moving from single global events (Maker) to automated, granular risk tiers.
security-considerations
RECOVERY MODE

Security & Risk Considerations

Recovery Mode is a protective mechanism in lending protocols that triggers when a vault's collateralization ratio falls below a critical threshold, enabling the forced liquidation of collateral to restore solvency and protect lenders.

01

Trigger Mechanism

Recovery Mode activates when the Total Collateral Ratio (TCR) of the entire system or a specific vault falls below a predefined Recovery Mode Threshold (e.g., 150%). This is distinct from an individual position's Liquidation Threshold. It's a system-wide safety net indicating severe market stress.

02

Forced Liquidation Process

In Recovery Mode, the protocol can bypass the normal liquidation penalty and liquidation reserve rules. The primary goal shifts from penalizing risky positions to maximizing debt repayment. Collateral is sold at a Recovery Mode Price, which is typically the current market price, potentially resulting in larger, more aggressive liquidations to restore the TCR above 100%.

03

Impact on Vault Owners

For users, Recovery Mode poses a significant risk of complete collateral loss. Key impacts include:

  • No grace period: Liquidations can occur immediately.
  • Reduced incentives: Liquidators may receive a smaller fee, reducing their incentive to participate.
  • Price impact: Large, forced sales can exacerbate market downturns, leading to a death spiral if not carefully managed.
04

Protocol-Level Risk Management

Recovery Mode is a last-resort mechanism to prevent protocol insolvency. It protects the system's lenders (stablecoin holders) by ensuring the total value of collateral never falls below the total debt. Parameters like the Recovery Mode Threshold and Recovery Mode Price are critical governance decisions that balance user protection with system stability.

05

Comparison to Normal Mode

AspectNormal ModeRecovery Mode
Primary GoalPenalize undercollateralizationRestore system solvency
Liquidation PriceIncludes a penalty/bonusAt or near market price
TCR ConditionAbove Recovery ThresholdBelow Recovery Threshold
Risk to BorrowerPartial collateral lossNear-total collateral loss
PROTOCOL STATE COMPARISON

Normal Mode vs. Recovery Mode

A comparison of the two primary operational states of a lending protocol's collateralized debt positions (CDPs), based on the health of the collateral.

State / MetricNormal ModeRecovery Mode

Protocol State Trigger

Total Collateral Ratio (TCR) >= 150%

Total Collateral Ratio (TCR) < 150%

Individual Position Health

Collateral Ratio (CR) >= 110% (safe)

Collateral Ratio (CR) >= 150% (safe)

Liquidation Threshold

CR < 110%

CR < 150%

Liquidation Penalty

Standard fee (e.g., 10%)

Increased penalty (e.g., 20%)

New Debt Issuance

Allowed

Blocked

Collateral Withdrawal

Allowed if CR remains safe

Blocked if it lowers TCR

Primary Goal

Normal operation and growth

Restore system solvency (TCR >= 150%)

visual-explainer
MECHANISM

Visualizing the Recovery Mode Process

A step-by-step breakdown of the automated collateral protection mechanism triggered when a vault's health factor falls below a critical threshold.

Recovery Mode is an automated, protocol-enforced state designed to protect a lending system's solvency by incentivizing the recapitalization of undercollateralized positions. When a borrower's vault enters this state—typically because its Health Factor falls below a protocol-defined threshold like 1.0—the system activates special rules. The primary goal shifts from normal operation to safeguarding the protocol's total collateral backing, often by offering liquidation bonuses and restricting certain user actions to encourage rapid resolution.

The process begins with a liquidation trigger, where any user (a liquidator) can repay part or all of the vault's outstanding debt in exchange for its collateral at a discounted rate. This discount, known as a liquidation bonus, makes the action profitable for the liquidator while reducing the system's bad debt. In some protocols like Liquity, Recovery Mode also temporarily increases the Liquidation Reserve and may adjust the Redemption mechanics, allowing stablecoin holders to directly claim collateral from the riskiest vaults at face value, further pressuring the system back to health.

Visualizing the flow: 1) Oracle reports a price drop, reducing collateral value. 2) The vault's Health Factor crosses below the Recovery Mode threshold. 3) The protocol state changes, broadcasting the new rules. 4) Liquidators and redeemers are incentivized to act. 5) Their actions repay debt and remove the weakest collateral, increasing the Total Collateral Ratio (TCR) for the entire system. The process continues until the system-wide TCR is restored above the safety threshold, at which point Recovery Mode deactivates and normal operations resume.

RECOVERY MODE

Common Misconceptions

Recovery Mode is a critical safety mechanism in DeFi lending protocols, yet its triggers and implications are often misunderstood. This section clarifies its precise function, common pitfalls, and what it means for users.

Recovery Mode is an emergency state in a lending protocol, such as MakerDAO, that is automatically triggered when the system's total collateralization ratio falls below a critical threshold (e.g., 150%). Its primary function is to protect the protocol's solvency by prioritizing the repayment of its stablecoin debt (e.g., DAI) through the forced liquidation of the riskiest collateralized debt positions (CDPs) at a penalty rate, without relying on external market prices. This mechanism ensures the system can recapitalize itself even during extreme market crashes when normal liquidation auctions might fail.

How it works:

  1. A global collateral shortage triggers the mode.
  2. The protocol identifies the most undercollateralized vaults.
  3. These vaults are liquidated, with their collateral sold for the protocol's stablecoin at a fixed, punitive discount.
  4. The generated stablecoin is used to burn the vault's debt, removing bad debt from the system.
RECOVERY MODE

Frequently Asked Questions

Recovery Mode is a critical safety mechanism in decentralized finance (DeFi) lending protocols, designed to protect the system from insolvency. This section answers common questions about its triggers, consequences, and user actions.

Recovery Mode is an emergency state in a lending protocol, such as Liquity or similar systems, that is automatically triggered when the total collateral ratio of the entire system falls below a predefined threshold (e.g., 150%). Its primary function is to incentivize the recapitalization of undercollateralized positions to restore the protocol's overall health and solvency, preventing a systemic failure. During this mode, normal operations are restricted, and specific recovery mechanisms are activated to protect the system's lenders and its stablecoin peg.

ENQUIRY

Get In Touch
today.

Our experts will offer a free quote and a 30min call to discuss your project.

NDA Protected
24h Response
Directly to Engineering Team
10+
Protocols Shipped
$20M+
TVL Overall
NDA Protected Directly to Engineering Team
Recovery Mode: DeFi Protocol Safety State Explained | ChainScore Glossary