Team reviewing protocol launch plans at a modern WeWork hot desk, rolled blueprints, laptops, and coffee cups scattered around, casual startup planning moment.
Protocols

Liquidation Engine Performance and Metrics

Operational effectiveness analysis of the MakerDAO/Sky liquidation system, covering time-to-liquidation, auction completion rates, and bite call frequency. Risk teams use this to gauge the system's ability to clear bad debt during market crashes.
introduction
SYSTEMIC SOLVENCY AND MARKET STABILITY

Why Liquidation Engine Performance Matters

The operational effectiveness of the liquidation engine directly determines MakerDAO and Sky's ability to maintain a fully collateralized stablecoin during market crashes.

The liquidation engine is the primary defense mechanism for the MakerDAO and Sky protocol against systemic insolvency. When the value of collateral backing DAI or USDS falls below the mandated liquidation ratio, the engine must seize the collateral and sell it for the stablecoin to extinguish the associated debt. The speed and efficiency of this process—measured by time-to-liquidation, auction completion rates, and the frequency of bite calls—determine whether the protocol accumulates bad debt that must be socialized through mechanisms like debt auctions or surplus buffer depletion.

Operationally, liquidation engine performance is a function of keeper network health, gas market conditions, and auction parameter tuning. During the March 2020 'Black Thursday' event, network congestion prevented keepers from executing timely bite calls, resulting in zero-bid auctions that left the system with a multi-million-dollar deficit. This failure mode revealed that liquidation engine performance cannot be assessed in isolation; it depends on Ethereum mempool dynamics, keeper capital availability, and the dust and chop parameters that govern auction economics. Modern modules like Liquidation 2.0 attempt to mitigate these risks through fixed-discount mechanisms that reduce reliance on competitive bidding, but they introduce new assumptions about keeper capital requirements and oracle latency.

For risk teams, exchanges, and lending protocols that integrate DAI or USDS, the liquidation engine's performance envelope is a critical input to collateral risk models. A protocol that cannot clear underwater positions within a predictable timeframe exposes all stablecoin holders to devaluation risk. Monitoring signals such as the ratio of bite calls to total underwater debt, the time between price feed updates and liquidation execution, and the completion rate of auctions under volatile conditions provides early warning of systemic stress. Teams should verify that their own risk parameters account for the observed—not theoretical—performance of the liquidation engine under historical stress scenarios. Chainscore Labs can conduct post-mortem analysis of liquidation events, model the impact of parameter adjustments on engine throughput, and review keeper bot implementations to ensure they remain competitive under evolving network conditions.

LIQUIDATION ENGINE HEALTH

Key Performance Indicators at a Glance

Operational metrics for assessing the liquidation engine's ability to clear bad debt during market volatility. Risk teams use these indicators to gauge systemic resilience and identify parameter drift.

MetricWhat it measuresFailure signalAction for operators

Time-to-liquidation

Latency from vault becoming unsafe to bite call execution

Sustained increase during low volatility suggests keeper under-provisioning

Audit keeper bot uptime and gas price thresholds

Auction completion rate

Percentage of collateral auctions that reach full settlement without restart

Declining rate indicates insufficient bidder participation or capital depth

Review auction parameters (tau, beg, buf) and bidder onboarding

Bite call frequency

Number of bite calls per monitoring period across all collateral types

Sudden spike signals cascading liquidations or oracle feed anomalies

Correlate with oracle deviation alerts and circuit breaker status

Keeper participation diversity

Distribution of bite calls and auction bids across unique keeper addresses

Concentration above 80% from single keeper introduces censorship risk

Evaluate keeper incentive economics and barriers to entry

Dust accumulation

Volume of vaults below liquidation dust threshold that remain unprocessed

Growing dust backlog ties up keeper capital and masks true bad debt

Monitor dust parameter adequacy relative to gas costs

Collateral auction discount

Average spread between auction settlement price and oracle price

Widening discount during normal markets suggests keeper capital constraints

Assess Liquidation 2.0 migration readiness for affected collateral types

Circuit breaker activation lag

Time from oracle freeze or price deviation to liquidation circuit breaker trigger

Delayed activation exposes protocol to stale-price liquidations

Verify circuit breaker monitoring and alerting pipeline

Bad debt realization rate

Rate at which undercollateralized positions result in protocol shortfall

Sustained non-zero rate indicates systemic under-collateralization

Escalate to risk teams for collateral ratio and stability fee review

technical-context
FROM AUCTION TRIGGER TO BAD DEBT RESOLUTION

The Liquidation Lifecycle and Its Bottlenecks

A technical walkthrough of the MakerDAO and Sky liquidation pipeline, identifying the operational stages where latency, gas competition, and keeper capital constraints introduce systemic risk.

The MakerDAO and Sky liquidation engine is a multi-stage pipeline designed to protect the protocol from insolvency by covering under-collateralized debt. The lifecycle begins when an oracle price update pushes a vault below its Liquidation Ratio, triggering a bite call that initiates a collateral auction. The process is not instantaneous; it depends on a permissionless keeper network to trigger the bite, bid in the subsequent auction, and ultimately clear the debt. Each stage—price feed propagation, keeper reaction time, auction duration, and the final deal settlement—introduces latency and potential bottlenecks that can directly impact the protocol's surplus buffer and bad debt accumulation.

Operationally, the most critical bottleneck is the bite delay, the time between a vault becoming under-collateralized and a keeper submitting the liquidation transaction. During periods of high network congestion and volatile gas prices, such as on 'Black Thursday', keepers face a profitability calculation where the gas cost of a bite can exceed the expected auction incentive. This leads to a systemic failure where no keeper acts, allowing underwater vaults to accumulate unrealized losses. A secondary bottleneck occurs during the auction phase itself, particularly in the older cat box auction model, where the dent/tend phases require continuous keeper participation to lower the bid and eventually settle the auction. A lack of competitive bidding can stall auctions, leaving collateral unsold as its market price continues to decline.

The introduction of Liquidation 2.0 modules represents a direct architectural response to these bottlenecks. By replacing the interactive auction model with a fixed-discount, direct-sale mechanism, the system eliminates the latency and capital inefficiency of the auction phase. This shifts the operational burden from continuous auction monitoring to a simpler, atomic arbitrage. However, it introduces a new dependency on keeper capital readiness and the accuracy of the discount rate relative to market volatility. For risk teams and keeper operators, understanding this lifecycle is essential for modeling protocol solvency under stress, optimizing bot strategies, and verifying that the chosen liquidation mechanism—whether auction-based or fixed-price—can clear bad debt faster than it accumulates during a market crash.

AFFECTED ACTORS AND OPERATIONAL DEPENDENCIES

Who Depends on Liquidation Engine Performance

Keeper Operators

Keeper operators are the most direct dependency. Liquidation engine performance dictates their profitability, capital requirements, and bot uptime. Slow auction completion or high gas environments can turn profitable liquidations into losses.

Operational impact:

  • Bidding strategies must adapt to tau (auction duration) and beg (minimum bid increase) parameters.
  • Gas costs during network congestion can exceed the liquidation penalty, requiring dynamic gas strategies.
  • Capital is locked during the auction lifecycle; longer auctions increase inventory risk.

Action items:

  • Backtest bot performance against historical liquidation events, especially during volatility spikes.
  • Model profitability under various gas scenarios and parameter changes.
  • Monitor bite call frequency and auction completion rates as leading indicators of keeper competition.

Chainscore can review keeper bot implementations and model profitability under stress conditions.

implementation-impact
LIQUIDATION ENGINE HEALTH

Operational Impact and Monitoring Signals

Key operational signals, risk controls, and monitoring strategies for assessing the performance and resilience of the MakerDAO/Sky liquidation engine.

01

Time-to-Liquidation and Auction Completion Rates

Monitor the latency between a vault becoming unsafe and the execution of a successful bite call. High latency during network congestion or volatile gas markets can lead to unbacked DAI. Track the percentage of auctions that clear without requiring a system debt reset. A declining completion rate signals keeper unprofitability or insufficient capital. Teams should benchmark these metrics against historical Black Thursday data to gauge current system resilience.

02

Keeper Participation and Capital Concentration

Analyze the number of unique keeper addresses actively participating in auctions and the distribution of won bids. A high concentration of wins among a few keepers indicates a centralization risk and a potential single point of failure. Monitor keeper profitability margins by tracking gas costs against collateral discounts. A sustained drop in participation may require governance to adjust auction parameters, such as buf or beg, to restore incentives.

03

Circuit Breaker and Pause Proxy Status

Verify the operational status of the Liquidations Circuit Breaker and the Pause Proxy. An active circuit breaker halts new liquidations, potentially allowing unsafe positions to accumulate. Integrators and risk teams must set up real-time alerts for any pause events on the Cat, Dog, or Clipper contracts. A pause during high volatility can exacerbate protocol losses, making immediate awareness critical for risk assessment.

04

Oracle Feed Liveness During Liquidation Events

Liquidation calculations depend entirely on live, accurate oracle price feeds. Monitor for oracle feed staleness or deviation at the moment of a bite. A frozen or manipulated feed can trigger false liquidations or prevent legitimate ones. Cross-reference oracle update timestamps with liquidation events to ensure price data was valid. This is a critical dependency for the Clipper contract's chop and buf calculations.

05

Gas Cost Modeling for Auction Bidding

Keeper operators must model the gas costs for tend, dent, and deal functions against expected returns. During network congestion, the cost of a failed tend call can eliminate profit margins. Monitor the Ethereum base fee and priority fee trends against the liquidation engine's minimum bid increments (beg). Teams should implement dynamic gas strategies to avoid being priced out of auctions during critical liquidation cascades.

06

Liquidation 2.0 Module Transition Monitoring

For vaults migrated to the Liquidation 2.0 system, monitor the fixed-discount mechanism's effectiveness. Track the speed at which liquidated collateral is sold versus the old auction model. Verify that keeper capital requirements for instant liquidation are being met and that the system is not accumulating bad debt due to a lack of takers. This comparison is vital for governance to decide on further migration of collateral types.

LIQUIDATION ENGINE FAILURE MODES

Performance Degradation Risk Matrix

Systematic breakdown of operational risks that degrade liquidation engine performance, their failure modes, severity, and recommended mitigations for keepers, risk teams, and protocol integrators.

RiskFailure modeSeverityMitigation

Keeper participation collapse

Insufficient keeper count or capital to process auctions during high-volume liquidation events, leading to unprocessed underwater vaults and accruing bad debt

Critical

Monitor keeper count and capital concentration; model profitability under gas spikes; maintain fallback keeper infrastructure

Auction completion delay

Collateral auctions fail to complete within expected timeframes due to low bidder interest or gas congestion, extending protocol exposure to price declines

High

Set auction parameter alerts for stalled auctions; review tail and cusp parameters against volatility profiles; prepare manual intervention procedures

Oracle feed staleness

Price feeds fail to update within heartbeat thresholds during volatility, causing liquidation calculations to use stale prices and misprice collateral

Critical

Implement oracle freshness monitoring with alerting; verify heartbeat compliance across all collateral types; test circuit breaker behavior on feed timeout

Gas price spike interference

Ethereum gas prices exceed keeper profitability thresholds, causing keepers to pause operations precisely when liquidation demand is highest

High

Model gas-to-profit breakeven curves per collateral type; implement dynamic gas strategies; consider L2 or alternative relay networks for execution

Circuit breaker misconfiguration

Liquidation Circuit Breaker triggers prematurely or fails to trigger when needed, either blocking legitimate liquidations or allowing unsafe throughput

High

Audit circuit breaker thresholds against historical liquidation volumes; simulate breach scenarios; verify manual override governance paths

Collateral-specific illiquidity

Low-liquidity collateral types fail to attract bidders during auctions, resulting in no-sale outcomes and protocol absorbing illiquid assets

Medium

Review debt ceiling and liquidation ratio adequacy for low-liquidity collateral; monitor on-chain liquidity depth; prepare contingency parameters for emergency adjustments

Bite call frontrunning

Malicious actors frontrun keeper bite calls to extract MEV, disincentivizing keeper participation and delaying liquidation initiation

Medium

Analyze mempool behavior around bite transactions; consider private relay submission; evaluate Liquidation 2.0 fixed-discount model as alternative to auction-based liquidations

LIQUIDATION ENGINE READINESS

Keeper Operator Performance Checklist

A practical checklist for keeper operators to verify their infrastructure is correctly configured, sufficiently capitalized, and optimally tuned to participate in MakerDAO/Sky collateral auctions. Use this to confirm readiness before volatile market conditions or after protocol parameter changes.

What to check: Confirm your keeper bot is pointed at the correct auction contract addresses for each collateral type you intend to cover. The dog contract (Liquidation 2.0) uses Clipper contracts, while legacy cat auctions use Flipper contracts. Verify your event indexing is capturing Bark events for new auctions and Take events for partial purchases.

Why it matters: Bidding on the wrong contract version or missing the initial Bark event means you will not participate in auctions, leaving value on the table and failing to support protocol solvency.

Readiness signal: Your bot successfully detects and logs a test auction on a mainnet fork or testnet deployment within one block of the Bark event being emitted.

Chains We Build On

Looking to build on a specific blockchain?

We build smart contracts, DeFi applications, wallets, tokenization platforms, and blockchain infrastructure across the major ecosystems teams choose today. That includes Ethereum, Arbitrum, Optimism, Polygon, Avalanche, Solana, Sui, Aptos, Hedera, Stellar, and NEAR, with support for additional EVM and non-EVM networks based on your product requirements.

EVM ecosystems

  • Ethereum logo
    Ethereum
  • Arbitrum logo
    Arbitrum
  • Optimism logo
    Optimism
  • Polygon logo
    Polygon
  • Avalanche logo
    Avalanche
  • Cronos logo
    Cronos

Non-EVM ecosystems

  • Solana logo
    Solana
  • Sui logo
    Sui
  • Aptos logo
    Aptos
  • Hedera logo
    Hedera
  • Stellar logo
    Stellar
  • NEAR logo
    NEAR

Additional ecosystems

  • Polkadot logo
    Polkadot
  • Cosmos logo
    Cosmos
  • TON logo
    TON
  • Cardano logo
    Cardano
  • Algorand logo
    Algorand
  • Tempo logo
    Tempo

Also available for Base, appchains, custom EVM networks, and cross-chain product architecture.

LIQUIDATION ENGINE FAQ

Frequently Asked Questions

Common questions about MakerDAO/Sky liquidation engine performance, metrics, and operational behavior. Covers what teams should monitor, how to interpret key signals, and when to investigate potential issues.

Monitor these core signals to assess whether the liquidation engine is functioning as designed:

  • Time-to-liquidation: The interval between a vault becoming unsafe (collateralization ratio drops below the liquidation ratio) and the bite call being executed. Extended delays may indicate keeper underparticipation or gas congestion.
  • Auction completion rate: The percentage of collateral auctions that reach settlement without requiring system restart or manual intervention. A declining rate suggests keeper profitability issues or parameter misalignment.
  • Bite call frequency: The number of bite transactions per block during volatile periods. Spikes that exceed historical norms may signal cascading liquidations or oracle lag.
  • Auction participation diversity: The number of unique keeper addresses participating in auctions. Concentration in a small number of keepers increases the risk of auction failure if a major keeper goes offline.
  • Dent phase duration: How long auctions spend in the price-decrease phase. Extended dent phases may indicate that the starting price (buf) is set too high relative to market conditions.

Teams should correlate these metrics with market volatility events to distinguish between normal behavior and degradation requiring parameter adjustment.

Trusted by Industry Leaders

Delivering blockchain solutions for 5+ years.

We have partnered with 50+ leading DeFi protocols, NFT ecosystems, and fintech innovators to build secure, scalable, and capital-efficient blockchain products.

Selected Partners & Clients

ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
“I've been working with Chainscore Labs for last 3+ years, they've consistently delivered with strong ownership across multiple projects. The team is reliable and detail-oriented.”
L
Lee Erswell
CEO, Telos Foundation
how to get started

How to get started?

If you're looking for blockchain integration, ChainScore Labs has 5+ years of experience helping teams build and integrate exchanges, wallets, smart contracts, tokenization solutions, and protocol-connected products, we can help you choose the right path, integrate securely, and get to production faster. Our team consists of experienced blockchain developers and architects who can help you with your blockchain integration needs.

01

Exploration & Strategy

Define your product goals and choose the right blockchain architecture for your use case.

02

Architecture & Design

Design the smart contracts, tokenomics, and security parameters of your system.

03

Development & Integration

Build and integrate with wallets, oracles, and front-end dApps for a seamless experience.

04

Security & Launch

Comprehensive audits followed by a risk-managed mainnet deployment to protect your users.

Start a build

Need a blockchain engineering team?

Send the project context and we will respond with next steps, scope questions, and a practical path to delivery.