Insurance Fund

What Is an Insurance Fund?

An insurance fund is a financial reserve maintained by a cryptocurrency derivatives exchange or DeFi protocol to cover losses that occur during liquidation events. When a trader's margin position is forcibly closed, the exchange attempts to sell (or buy) the position on the open market. If the position closes at a price worse than the trader's bankruptcy price (the point where all collateral is consumed), the resulting deficit must be covered by someone. The insurance fund absorbs that deficit.

Without an insurance fund, losses from failed liquidations would be passed directly to other traders on the platform: either spread across all profitable positions (socialized loss) or targeted at the most profitable traders through auto-deleveraging. Insurance funds act as a buffer that shields the broader user base from these losses during normal market conditions, only triggering fallback mechanisms during extreme events.

Every major derivatives exchange maintains an insurance fund. Binance operates the Secure Asset Fund for Users (SAFU), which held approximately 6,230 BTC as of early 2026. Bybit, OKX, and others publish per-contract insurance fund balances that fluctuate with market activity. In DeFi, protocols like Aave and dYdX use on-chain equivalents such as staking modules and protocol-controlled reserves.

How It Works

Three prices define the economics of every liquidation in perpetual futures and other leveraged markets:

• Liquidation price: the price at which the trader's maintenance margin requirement is breached, triggering forced closure
• Bankruptcy price: the price at which the trader's entire collateral is consumed, leaving zero remaining margin
• Fill price: the actual price at which the liquidation engine closes the position on the order book

The relationship between fill price and bankruptcy price determines whether the insurance fund grows or shrinks:

Surplus Liquidations (Fund Grows)

When a position is liquidated and the fill price is better than the bankruptcy price, there is leftover margin. This surplus flows into the insurance fund. In calm markets, most liquidations produce surpluses because the liquidation engine triggers well before the bankruptcy price is reached.

Example: Long BTC position, 10x leverage

Entry price:       $60,000
Liquidation price: $54,600  (maintenance margin breached)
Bankruptcy price:  $54,000  (all collateral consumed)
Fill price:        $54,400  (actual market close)

Surplus = Fill price - Bankruptcy price
        = $54,400 - $54,000 = $400

Result: $400 per contract flows into the insurance fund

Deficit Liquidations (Fund Shrinks)

During sharp price moves, the liquidation engine may not close the position before the price passes the bankruptcy level. The fill price ends up worse than the bankruptcy price, creating a deficit that the insurance fund must cover.

Example: Long BTC position, 10x leverage (flash crash)

Entry price:       $60,000
Liquidation price: $54,600
Bankruptcy price:  $54,000
Fill price:        $53,200  (slippage during crash)

Deficit = Bankruptcy price - Fill price
        = $54,000 - $53,200 = $800

Result: $800 per contract is drawn from the insurance fund

Additional Funding Sources

Beyond liquidation surpluses, exchanges use several methods to build and maintain their insurance funds:

• Liquidation penalties: a fee (typically 0.5% to 1.5% of position value) charged to liquidated traders, with a portion directed to the fund
• Trading fee allocation: some exchanges route a percentage of all trading fees to the reserve (Binance allocates 10% of trading fees to SAFU)
• Direct capital injection: exchanges may contribute their own capital to ensure the fund remains above minimum thresholds

What Happens When the Fund Is Depleted

During extreme market events, deficit liquidations can exceed the insurance fund's balance. When this happens, exchanges activate fallback mechanisms to distribute losses:

Auto-Deleveraging (ADL)

ADL is the current industry standard for handling insurance fund depletion. The exchange ranks all opposing traders by a combination of profitability and leverage, then forcibly closes positions starting with the highest-ranked traders until the deficit is covered.

ADL is targeted: it affects specific traders rather than the entire platform. However, the affected traders have their profitable positions involuntarily closed at the bankruptcy price of the liquidated position, which may be far from the current market price. Exchanges like Binance, Bybit, and OKX all use ADL as their primary fallback. Most platforms display an ADL indicator so traders can estimate their position in the queue.

Socialized Loss

An older mechanism where unrecoverable losses are spread proportionally across all profitable traders during a settlement period. This approach dilutes each trader's profits by a small amount rather than fully closing specific positions.

Socialized loss was used by early exchanges like BitMEX but has largely been replaced by ADL. The problem with socialized loss is that it penalizes all profitable traders equally, regardless of their leverage or risk profile, making it less precise than ADL.

DeFi Insurance Mechanisms

Decentralized protocols handle insurance differently from centralized exchanges. Rather than discretionary reserves controlled by a company, DeFi protocols use transparent, on-chain mechanisms governed by token holders:

• dYdX (v4): operates as a standalone Cosmos chain where 100% of liquidation fees flow into an on-chain insurance fund. The protocol suffered a $9 million fund breach in November 2023 due to YFI market manipulation, demonstrating that even well-designed on-chain funds can be stressed by oracle manipulation
• Aave (Umbrella system): replaced its original Safety Module in June 2025 with a new system holding over $250 million in staked assets (WETH, USDC, USDT, GHO) as initial loss coverage. Integrated Chainlink SVR to recapture liquidation-related MEV, reclaiming approximately $16 million in its first nine months
• GMX: uses a liquidity pool model where liquidity providers collectively act as the counterparty to traders. There is no separate insurance fund: 70% of platform revenue goes to LPs, who absorb both trader losses and trader profits. The pool itself serves as the de facto backstop

The key advantage of DeFi insurance mechanisms is transparency: fund balances are on-chain and auditable in real time. The key disadvantage is that they are typically smaller and more vulnerable to governance attacks or coordinated market manipulation than centralized equivalents.

Notable Stress Events

Several market events have tested the resilience of exchange insurance funds:

Why It Matters

Insurance funds are a critical but often misunderstood piece of exchange infrastructure. For traders using perpetual futures or margin trading, the size and management of an exchange's insurance fund directly affects their risk exposure. A well-funded reserve means ADL is less likely to forcibly close a profitable position during a crash. An underfunded or opaque reserve (as FTX demonstrated) can leave traders bearing losses they never expected.

The concept extends beyond derivatives exchanges. Any system where leveraged positions or collateralized debt can go underwater faces this same challenge: who absorbs the shortfall? In stablecoin protocols that use collateralized debt positions, insurance-like mechanisms protect against bad debt when collateral values drop too fast. In crypto custody, insurance funds cover operational risks like hacks or key loss.

For platforms building on Bitcoin Layer 2 networks, understanding insurance fund mechanics is important for designing counterparty risk protections in trading applications. As DeFi derivatives volume grows, the design of transparent, adequately capitalized insurance mechanisms remains one of the most important unsolved challenges in crypto market structure.

Risks and Considerations

Opacity and Trust

Centralized exchange insurance funds are discretionary reserves, not regulated insurance products. Exchanges self-report balances and can change fund rules without user consent. The FTX collapse showed that stated insurance fund balances may not reflect reality. Traders should verify fund balances independently where possible and understand that these reserves carry custodial risk.

Insufficient Capitalization

Even large insurance funds can be overwhelmed by tail-risk events. A sudden 50% price drop in a highly leveraged market could generate deficit liquidations that exceed the fund's entire balance within minutes. No insurance fund is designed to absorb worst-case scenarios without triggering fallback mechanisms.

ADL Impact on Traders

When insurance funds are depleted and ADL activates, profitable traders are forcibly deleveraged at unfavorable prices. This introduces a hidden risk for high-leverage, high-profit positions: the more profitable and leveraged a position, the higher it ranks in the ADL queue, and the more likely it is to be closed first during a crisis.

Moral Hazard

Large insurance funds can create moral hazard by encouraging riskier trading behavior. Traders may take on excessive leverage believing the insurance fund will prevent socialized losses, even though the fund primarily protects the platform (not individual traders) from cascading defaults.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.