SparkLend
SparkLend is Spark's permissionless money market. It has always been operated conservatively relative to peers, with a narrow collateral set, multi-oracle pricing, strict rate limits, and first-loss capital. The rsETH episode is a reminder that none of those pillars exist in isolation. They are designed to stack, so that a failure in any single component (oracle, issuer, liquidator, market liquidity) does not cascade into bad debt.
Risk Architecture
Restricted Collateral Set
SparkLend lists a deliberately short set of assets. ETH e-mode is limited to wstETH and rETH. BTC e-mode is being fully removed: the deprecation has been publicly noticed on the Sky forum and is tentatively targeted for the June 4 spell, with forced liquidation of remaining positions on June 8. Exposure in the affected buckets is already small (one material borrower at ~$1.6M plus a handful of smaller positions), and the removal is being done through a publicly telegraphed timeline rather than an immediate parameter flip.
Minimal Rehypothecation
Collateral supplied to SparkLend reserves stays in the reserve. It is not redeployed into external strategies.
Rate Limits
Every cross-module flow into and out of SparkLend is rate-limited at the smart-contract level: deposits, withdrawals, cross-chain bridging, and PSM swaps each have configured rate limits. On top of that, Spark's allocation system enforces per-market debt ceilings and inventory min/max bands. A single depositor or a single adverse event cannot drain the protocol in a single block, and rate limits cap the maximum capital at risk on any single route per unit of time.
Three-Oracle Median
Pricing is aggregated using a three-oracle median that pulls data from RedStone, Chainlink, and Chronicle. When all three return valid, non-stale values, the median is used. When two are valid, their average is used. A single-feed fallback also exists. The outcome is that a compromised or faulty single oracle does not drive SparkLend prices.
Killswitch Oracle for Pegged Assets
For collateral that trades against a hardcoded or exchange-rate price (wstETH, rETH, weETH, cbBTC, WBTC, LBTC), a peg-ratio oracle continuously compares the asset's market price to its underlying. When the deviation breaches a per-asset threshold, the killswitch halts new borrowing on SparkLend, preventing users from posting distressed collateral at a stale "face value" price and walking out with healthy debt.
Programmatic Liquidity Injection
SparkLend's liquidity buffer is not static. The Spark Liquidity Layer automatically moves USDS, USDC, and USDT into and out of SparkLend based on target borrow rates, utilization, and available inventory at other venues. If SparkLend utilization runs high, the SLL tops up idle liquidity to allow withdrawals and liquidations to clear. If a venue elsewhere offers better risk-adjusted yield, idle capital rotates there. This is what it means for Spark to be the largest depositor in its own market: liquidity responds to demand rather than being rationed by utilization alone.