All methodology pages

How an asset's impairment risk is estimated

How the eleven permanent-loss mechanisms, their evidence basis, buffers and recovery combine into one asset impairment probability, and how that loss reaches a vault.

Each collateral asset carries one headline figure: the chance that it suffers a permanent-impairment event within one year. This page explains where that figure comes from, what evidence sets it, and how a loss on the asset becomes a loss for a vault.

The eleven mechanisms

An asset can lose value permanently through one of eleven mechanisms. Each is modelled as its own loss channel with an annual probability and a severity if it happens.

  • Backing. The reserves or assets behind the token lose value or go missing.
  • Strategy. A strategy the token depends on loses money.
  • Slashing. A staked position is penalised by the network it secures.
  • Custody. A custodian fails, is compromised, or withholds assets.
  • Bridge. A bridge that carries the asset between chains is exploited or halts.
  • Counterparty. A named counterparty defaults on an obligation the asset relies on.
  • Waterfall. A loss is allocated to this tranche before others by the issuer's own rules.
  • Contract. The token's own contract code fails or is exploited.
  • Governance. A privileged party changes the terms under the holders.
  • Redemption. The route to convert the token into its reference asset stops working.
  • Settlement. A dated claim fails to settle into the asset it promised at maturity.

Not every mechanism applies to every asset. The asset page lists only the mechanisms the assessment admitted for that asset, with the basis each one rests on.

The contract and governance mechanisms rest on evidence about the exact deployed contract, never on the asset's name, its size, or how many audits it lists. Cork reads the contract's code identity and its standard proxy slots at the assessment block, and binds each statement about who can upgrade, pause or administer the contract, and about which code a review covered, to a published source. A question no source answers stays open, and an open question keeps the mechanism on Cork's declared assumption. When the sources and the chain agree that no privileged party exists, the governance mechanism is marked as not applicable rather than priced.

Measured rates, policy priors and class priors

Each mechanism's probability rests on one of four kinds of evidence, and the asset page names which.

Measured. Cork counted qualifying incidents over the exposure years of the asset's own bound record, and the annual rate is the posterior rate from that count. This is the strongest basis.

Class prior. A reviewed release placed the asset in one of Cork's documented collateral risk classes, and the channel uses the stated prior for that class. It is not a measurement of this asset. A bound incident history or a measured reserve attestation for the asset replaces it.

Policy prior. No class and no bound record applies, so the channel uses a named assumption Cork declared for that kind of risk. The assumption is stated, not measured.

Mapped underlying. The asset passes part of its risk to a backing asset nobody has reviewed, and the channel uses Cork's stated prior for an unreviewed backing identity.

Severity rests on the same bases. A prior severity means the mean loss given the event under that prior, not a measurement of this asset.

Beside each mechanism the page shows the annual probability and mean severity it was composed on, the evidence keys that set them, and, where the calibration record states one, the reviewer's own note on what evidence would replace the prior. Where the record states none, the page says so.

The page also opens with a short reviewed description of the asset's class: what the class is, how it can be permanently impaired, and how a liquidator gets out. It describes the class, not the asset, and it sets no figure.

Buffers and recovery netting

A mechanism's raw severity is reduced by the buffers that stand in front of holders and by what a holder recovers after the event. Over-collateralisation, an insurance fund, and a junior tranche are buffers. The recovery rate is the share of value a holder gets back through redemption, settlement or sale after the loss. The severity used in the estimate is the loss after these are netted.

The one percent threshold

An asset counts as impaired when its value against its economic reference falls by more than one percent and stays there at the one-year horizon. This is the same permanent-impairment event the vault rating uses, at the asset level. A price move that recovers before the horizon is not an impairment. The definition is in the glossary.

The headline probability is the posterior mean of the combined chance that any admitted mechanism causes such an event within the year. The expected-loss effect of each mechanism is the change in the asset's expected loss when that mechanism is removed and everything else is held. These effects do not add to a total, and the interaction residual is recorded beside them.

Adverse sensitivity

The adverse sensitivity is the same estimate read at the ninety-fifth percentile of the posterior instead of its mean. It uses the same admitted mechanisms and the same evidence. It shows how much the headline could move if the evidence supports a higher rate than the mean suggests. It is not a separate scenario and it adds no new assumption.

From asset loss to vault loss

A vault does not lose money because an asset is impaired. It loses money when the impairment leaves bad debt. The model applies the asset loss as a terminal gap on the collateral path at the end of the year. That gap flows through the market's liquidation rules and the recovery routes described in Asset risk and recovery. If liquidation and recovery repay the loan, the vault's loss is zero. If they do not, the shortfall is bad debt and the vault carries its share of it.

The vault page states this chain for each position: the chance the asset itself is impaired, the chance that bad debt remains if it is, and the average vault loss when it does.

Allocation and loss contribution differ

A position's allocation is its share of the vault today. Its loss contribution is the change in the vault's modelled expected loss when the position is removed. A large allocation in a well-covered market can contribute little. A small allocation with thin recovery can contribute much. The two are shown side by side on the vault page and are never combined into one figure.