A deep dive into how bitcoin lending pools work — mechanics, utilization curves, isolated vs shared-risk designs, major protocols, and key safety considerations.
Arkadii Kaminskyi
Arkadii Kaminskyi
Head of Operations at Sats Terminal
Head of Operations at Sats Terminal with 5 years of experience in crypto. Specializes in DeFi, yield farming, and borrowing — has reviewed 50+ crypto products.
Bitcoin lending pools are the engine behind most DeFi borrowing activity today. When you deposit wrapped BTC into Aave, or lock cbBTC into a Morpho Blue market, you are interacting with a lending pool — a smart-contract-managed reserve of assets where depositors earn yield and borrowers draw liquidity. Understanding how these pools work, who sets the interest rates, and what can go wrong is essential before you put a single satoshi on the line. This guide breaks down the full mechanics of bitcoin lending pools, compares the major protocols operating in 2025, explains isolated versus shared-risk designs, and covers the safety questions that every BTC holder should be asking. You will also learn how Borrow by Sats Terminal routes users to the most competitive pool for their specific situation, removing the need to manually research and compare protocols yourself.
A lending pool is a shared liquidity reserve held inside a smart contract. Anyone meeting the protocol's conditions can deposit assets into the pool or borrow from it, subject to collateral requirements and interest rates set algorithmically. Unlike a peer-to-peer loan, where a specific lender is matched with a specific borrower, a lending pool aggregates capital from many depositors and makes it available to many borrowers simultaneously. The smart contract acts as both custodian and clearing house.
Bitcoin lending pools specifically are markets where the underlying asset is a form of BTC — most commonly wrapped Bitcoin such as wBTC, cbBTC, or tBTC. Because Bitcoin itself does not run smart contracts natively, it must be bridged and wrapped into an EVM-compatible token before it can participate in DeFi pools. This is one of the most important distinctions between bitcoin lending pools and, say, ETH or USDC lending markets: BTC exposure in DeFi always comes with an additional layer of custody and bridge risk that ETH does not carry.
In 2025, bitcoin lending pools sit at the intersection of significant capital and significant risk. Billions of dollars in wrapped BTC circulate across Ethereum mainnet, Arbitrum, Base, and other chains, much of it deployed into pools seeking yield or as collateral for stablecoin loans. Understanding the architecture of these pools is the starting point for using them responsibly.
Every major bitcoin lending pool follows a similar fundamental structure. Grasping this structure makes the differences between protocols much easier to evaluate.
When you deposit an asset into a lending pool, the protocol mints a receipt token representing your share of the pool. In Aave v3, these are called aTokens (for example, awBTC or acbBTC). In Compound, they are cTokens. In Morpho Blue, the position is tracked via shares in an isolated vault. This receipt token accrues value over time as interest paid by borrowers accumulates inside the pool. When you withdraw, you redeem the receipt token for your original deposit plus earned interest.
Borrowers post collateral — often a different asset than what they want to borrow — and receive a loan up to a specified loan-to-value ratio (LTV). In bitcoin lending pools, the most common borrower pattern is: deposit wBTC or cbBTC as collateral, borrow USDC or USDT. This is exactly how Borrow by Sats Terminal works for its users. The BTC stays in the pool as collateral; the stablecoins flow to the borrower.
The pool must always remain solvent. If the value of a borrower's collateral drops too close to the value of their loan, a liquidation is triggered. Third-party liquidators repay part of the debt and claim the collateral at a discount, restoring the pool's health. You can learn more about this dynamic in our guide to managing liquidation risk.
The utilization rate is the percentage of a pool's total deposited capital that is currently out on loan. If a pool holds 1,000 wBTC in deposits and 650 wBTC is currently borrowed, the utilization rate is 65%. This single number drives the interest rate model for the entire pool.
High utilization means borrowers are consuming most of the available capital. The protocol responds by raising interest rates — making borrowing more expensive to slow demand and making depositing more attractive to bring in new supply. Low utilization means most capital is sitting idle; rates fall to attract borrowers. This self-correcting mechanism is the core of algorithmic interest rate models in DeFi.
Most lending pools implement a "jump-rate" or "kinked" interest rate model. The rate climbs gradually as utilization rises through a normal range, then jumps sharply once utilization crosses an "optimal" threshold — typically around 80–90%. This jump is intentional: if nearly all liquidity is borrowed, depositors face withdrawal delays (illiquidity) and the pool enters a risky state. The steep rate increase deters new borrowing and incentivizes borrowers to repay, restoring liquidity.
We cover this model in detail in the how crypto lending rates are determined guide. For bitcoin lending pools specifically, typical supply (deposit) APYs in stable market conditions range from 0.5% to 4%, while borrow rates for stablecoins using BTC collateral have ranged from 3% to 12% in comparable periods, though they spike when demand is high.
BTC lending pools are not just "Ethereum lending pools but with Bitcoin." The differences are structural and material to risk assessment.
Every EVM-based BTC lending pool holds a wrapped token, not native Bitcoin. wBTC, the oldest and most liquid form, is custodied by BitGo with a multi-party governance structure. cbBTC (Coinbase) is custodied by Coinbase. tBTC uses a decentralized threshold ECDSA network. In each case, the token in the pool is only as good as the custody arrangement behind it. If the custodian is compromised or the bridge is exploited, the token in the pool can lose its peg. This is a risk class that ETH or USDC lending pools do not carry in the same form.
Bitcoin is significantly more volatile than stablecoins and somewhat more volatile than ETH over short time windows. Protocols respond by setting lower maximum LTVs for BTC collateral — Aave v3 typically allows 70–75% LTV on wBTC, compared to higher figures on ETH or staked-ETH variants with more liquid liquidation paths. This conservatism protects the pool from rapid liquidation cascades during sharp BTC drawdowns.
You can read about the mechanics of liquidation cascades in our dedicated guide.
Lending pools rely on oracle price feeds to value collateral and trigger liquidations. For BTC, a price oracle must reliably report BTC/USD in near real time. If the oracle reports a stale or manipulated price, the pool can be deceived into allowing undercollateralized loans or blocking legitimate liquidations. Bitcoin lending pools depend on oracles for both the BTC collateral price and the stablecoin debt price. Our guide to understanding oracle price feeds explains what to look for when evaluating oracle quality.
Several protocols dominate BTC lending in 2025. Each has a different risk profile, governance model, and supported BTC variant. The table below summarizes the key attributes.
| Protocol | BTC Asset(s) Supported | Pool Structure | Max LTV (approx.) | Chains |
|---|---|---|---|---|
| Aave v3 | wBTC, cbBTC | Shared cross-collateral | 70–75% | Ethereum, Arbitrum, Base, Polygon, Optimism |
| Morpho Blue | wBTC, cbBTC, tBTC | Isolated per-market | 65–86% (market-dependent) | Ethereum, Base |
| Compound v3 | wBTC, cbBTC | Shared (comet model) | 70% | Ethereum, Arbitrum, Base, Polygon |
| Spark (MakerDAO) | wBTC, cbBTC | Shared (Maker-governed) | 65–70% | Ethereum |
Aave v3 is the largest DeFi lending protocol by total value locked as of early 2025. Its BTC markets — primarily wBTC on Ethereum mainnet and cbBTC on Base — allow users to deposit BTC variants and borrow stablecoins or other assets. Aave's shared-pool model means all assets in a given deployment share a common liquidity reserve, which creates capital efficiency but also cross-asset contagion risk if one asset behaves unexpectedly.
Aave v3 introduced "e-mode" (efficiency mode) for correlated asset pairs, and "isolation mode" for riskier assets. wBTC on Aave v3 Ethereum mainnet operates in standard mode with a maximum LTV around 70–73% and a liquidation threshold around 78%. cbBTC on Base operates under similar parameters.
Morpho Blue takes a fundamentally different approach. Rather than a single shared pool per asset, it allows anyone to create a dedicated lending market for a specific collateral/borrow/oracle/LTV configuration. Each market is isolated: liquidity, risk, and interest rates are all contained within that market. A cbBTC/USDC market with a 86% LLTV (Liquidation LTV) is entirely separate from a wBTC/USDC market with a 77% LLTV. This design limits contagion but also means that liquidity can be fragmented.
Morpho's MetaMorpho vaults sit above these isolated markets, allowing curators to allocate deposited capital across multiple Morpho Blue markets according to their risk preferences. This gives depositors a more diversified experience while preserving the isolation at the underlying pool level. See our Morpho integration announcement for how Borrow connects users to these markets.
Compound v3, called Comet, restructured its lending model around single-borrow-asset deployments. In its main USDC markets, users can supply BTC variants as collateral and borrow USDC — but cannot borrow other assets in the same position. This simplifies risk modeling. Compound v3 does not pay yield on BTC collateral itself (the collateral earns no supply APY); yield is only earned on assets deposited as the base asset (USDC).
Spark is the lending front end for the MakerDAO / Sky ecosystem and operates similarly to Aave v3 in terms of a shared-pool architecture, governed by the Maker governance process. It supports wBTC and cbBTC as collateral for borrowing DAI/USDS and USDC. Spark's rates are influenced by the Dai Savings Rate (DSR) and Maker governance parameters, adding a governance variable that pure smart-contract models don't have in the same way.
The distinction between isolated and shared-risk pool architecture is one of the most consequential decisions a protocol makes, and it directly affects the risk you take as a depositor or borrower.
In a shared-risk model, all assets in a pool share a common reserve. If one listed asset suffers a price oracle failure, a governance exploit, or a sudden devaluation, all depositors in the pool are potentially exposed to bad debt socialized across the pool. The upside is high liquidity efficiency: a single deep pool can offer better rates and faster withdrawals because capital isn't fragmented across dozens of isolated compartments.
Aave v3 mitigates this via isolation mode for newly added or riskier assets. Assets placed in isolation mode can only be used as collateral to borrow stablecoins, and their debt exposure is capped. This is a middle ground between a fully shared and fully isolated architecture.
Morpho Blue's per-market isolation means that a problem in one market — say, a bad oracle for a specific BTC variant — cannot drain depositors in a different market. If the cbBTC/USDC market on Morpho Blue accumulates bad debt, the wBTC/DAI market is unaffected. Depositors select individual markets (or MetaMorpho vaults that allocate across markets) and bear only the risks specific to those markets.
The trade-off is that less popular markets may have shallow liquidity, leading to higher borrow rates or limited withdrawal capacity during stress. A new or niche BTC variant listed on Morpho Blue might have a technically sound market structure but minimal depositor capital, making it unreliable for large loans.
Neither is categorically superior. Shared pools offer depth and efficiency for well-established assets. Isolated markets offer surgical risk containment and allow new assets to access liquidity without contaminating larger pools. For BTC specifically — where wrapped token custody is an idiosyncratic risk not shared by other assets — isolated markets may offer a cleaner risk profile for depositors who want exposure to BTC yield without accepting the tail risk of other assets in a shared pool. For borrowers seeking the deepest liquidity and tightest rates, shared pools like Aave v3 have historically offered advantages.
This is one of the comparisons covered in our comparing Aave, Morpho, and CeFi guide.
Interest rates in lending pools are not set by a committee or a central authority. They emerge from the interaction of supply, demand, and the protocol's algorithmic interest rate model. Understanding this model helps you predict when rates will be high and when they will be low.
The most widely used model is the jump-rate (or two-slope) model. It works as follows:
The supply rate (what depositors earn) is a fraction of the borrow rate, scaled by utilization. If 70% of the pool is borrowed and the borrow rate is 8%, then the total interest income is 8% × 70% = 5.6% of total deposits. The protocol takes a "reserve factor" — a percentage of interest income kept as a protocol reserve for bad debt protection or governance use. After the reserve factor, the remainder flows to depositors. With a 10% reserve factor, depositors in this example would earn roughly 5.04% APY.
The supply rate and borrow rate move together but are never the same number. The spread between them is how the protocol earns revenue.
The kink point, slope parameters, reserve factor, and oracle address are all governance-controlled in most shared-pool protocols (Aave, Compound, Spark). A governance vote can change the interest rate curve, affecting every depositor and borrower in the pool. Morpho Blue takes a different position: its core market parameters (LLTV, oracle, collateral, and loan asset) are set at market creation and are immutable. Governance cannot change the risk parameters of an existing Morpho Blue market, which is a meaningful safety guarantee for depositors.
Safety in DeFi lending pools is multi-dimensional. No lending pool is risk-free, and bitcoin lending pools carry several categories of risk that deserve individual analysis. Our article on whether crypto lending is safe provides a broader framework; here we focus on what is specific to bitcoin lending pools.
Every lending pool is a set of smart contracts. If those contracts contain bugs, they can be exploited. The history of DeFi is littered with protocol exploits stemming from reentrancy bugs, logic errors, or flash-loan attack vectors. The major protocols — Aave, Morpho, Compound — have undergone extensive audits by multiple independent firms. Aave v3 has been audited by Trail of Bits, OpenZeppelin, SigmaPrime, and others. Morpho Blue was audited by Spearbit, Cantina, and other leading firms before launch. Compound v3 similarly has a robust audit history.
Audits reduce but do not eliminate risk. Invariants that auditors did not anticipate can still be broken in production. Protocols also have bug bounty programs (Aave's bounty is among the largest in DeFi) that incentivize ongoing security research. Our guide to smart contract security and audits explains how to evaluate audit quality when assessing a protocol.
Price oracle failure is one of the most common root causes of DeFi lending losses. If a BTC oracle is manipulated to report a lower-than-actual price, liquidations are triggered prematurely. If it reports a higher-than-actual price, undercollateralized loans are allowed. Most major protocols use Chainlink price feeds for BTC/USD, which aggregates from multiple sources and requires a threshold of node agreement. Morpho Blue markets can use any oracle, which means curator quality matters significantly — a poorly curated market might use a less reliable oracle. You can learn more in our oracle price feeds guide.
Governance attacks — where a party accumulates enough voting tokens to pass a malicious proposal — represent a systemic risk for shared-pool protocols. A successful governance attack on Aave or Compound could change risk parameters, drain the reserve, or whitelist a malicious asset. Both protocols have implemented timelocks (typically 48–72 hours) between proposal approval and execution, providing a window for the community to identify and react to malicious proposals. This risk is minimal but not zero.
The DeFi ecosystem has experienced several significant lending exploits that are instructive for bitcoin lending pool users:
For a broader look at lending protocol incidents and how to assess risk before depositing, read our guide on crypto lending risks every borrower should know.
If a pool reaches very high utilization, depositors may not be able to withdraw immediately. The capital is out on loan. While the interest rate spike mechanism is designed to restore liquidity over time, there is no guarantee of instant withdrawal in stressed conditions. For large BTC holders considering depositing into a lending pool, this risk is worth modeling: if you need your BTC back within 24 hours during a market crisis, a pool at 90%+ utilization may not accommodate you.
Every major EVM-based bitcoin lending pool holds wrapped BTC, not native Bitcoin. This is not a minor technical footnote — it is a fundamental layer of risk that sits beneath all the smart contract and oracle risks discussed above.
wBTC (Wrapped Bitcoin) is by far the most liquid BTC wrapper on Ethereum mainnet. It is minted by BitGo and backed 1:1 by BTC held in custodial wallets. BitGo's custody is audited and proof of reserves is published, but the fundamental trust assumption is that BitGo and its merchant network are honest and secure. In 2024, BitGo announced a joint custody arrangement changes that sparked significant governance debate on Aave, with proposals to reduce wBTC exposure limits. This debate illustrated that custodial wrapper governance is an active and evolving risk, not a static one. Our bridging and wrapping Bitcoin guide covers this in full.
cbBTC (Coinbase Wrapped Bitcoin) is Coinbase's native wrapped BTC offering. It is custodied by Coinbase, a publicly traded US company subject to regulatory oversight. cbBTC has grown rapidly on Base and Ethereum, and as of early 2025 it accounts for a meaningful share of BTC collateral in Aave v3's Base deployment. The custody risk is different from wBTC — Coinbase is a single, well-regulated entity — but the concentration risk is arguably higher: all cbBTC depends on one company's solvency and willingness to redeem.
tBTC uses a threshold ECDSA scheme operated by a decentralized network of nodes to custody BTC without relying on a single custodian. The security model is cryptographic and decentralized rather than institutional. The trade-off is lower liquidity and greater technical complexity. tBTC is supported in some Morpho Blue markets and is the most trust-minimized BTC wrapper available in 2025, though it carries its own set of smart contract and threshold network risks.
| Wrapper | Custody Model | Liquidity (Ethereum) | Trust Assumption | Main Risk |
|---|---|---|---|---|
| wBTC | BitGo (custodial) | Highest | BitGo + merchant network | Custodial failure, governance change |
| cbBTC | Coinbase (custodial) | High (esp. on Base) | Coinbase solvency | Regulatory seizure, Coinbase insolvency |
| tBTC | Threshold network (decentralized) | Lower | Threshold ECDSA nodes | Node collusion, smart contract bugs |
The wrapper you use determines the foundational risk layer of your bitcoin lending pool experience. No smart contract audit can protect you if the underlying BTC wrapper loses its peg. For more, see our wrapped Bitcoin glossary entry.
Navigating the landscape of bitcoin lending pools manually is genuinely difficult. You would need to: identify which pools support your BTC variant, compare current borrow rates and utilization across protocols and chains, understand each protocol's audit history and oracle setup, assess the governance and custody risks of each wrapped BTC token, and then execute a multi-step cross-chain transaction to enter your chosen position. Most people don't do this well — they default to the largest protocol by reputation and hope for the best.
Borrow by Sats Terminal is an aggregator that handles this comparison and routing automatically. When a user wants to borrow stablecoins against their BTC, Borrow queries rates and availability across Aave v3 markets and Morpho Blue markets (with more protocols being added), presents the offers side by side, and then executes the optimal route — including cross-chain bridging and wrapping — with user approval at each step.
For users who want to understand the protocols they're being routed to, Borrow's learn section provides the context needed. The guide to understanding protocol risks and the DeFi vs CeFi lending comparison are good starting points.
The difference between a 6% borrow rate on one pool and a 4.5% borrow rate on another — on a $100,000 loan — is $1,500 per year. Rate differences between pools open and close as utilization shifts. An aggregator that continuously compares these rates means users are not locked into a suboptimal pool simply because they chose it six months ago. Borrow's comparison is passive: you see the best available option at the time you want to borrow, without needing to monitor protocol dashboards yourself.
You can read more about how aggregators find the best rates in the lending aggregators guide.
Whether you are depositing BTC into a pool to earn yield or using a pool as a borrower, the following risk factors deserve explicit attention before committing capital.
Monitor the pool's utilization rate over time, not just at the moment you deposit. A pool at 60% utilization today might reach 85% within weeks during a bull market, spiking withdrawal queues and your effective exit options. High-utilization periods have historically correlated with bull market peaks — precisely when you may want to access your capital.
Verify that the pool uses a reputable, manipulation-resistant price oracle for both the BTC collateral and the borrowed stablecoin. Chainlink BTC/USD with appropriate heartbeat and deviation thresholds is a baseline standard. Markets using less liquid or on-chain-only price sources carry higher oracle manipulation risk. This is especially relevant when evaluating Morpho Blue markets, where oracle selection is per-market and highly variable.
For shared-pool protocols, stay alert to governance proposals that affect BTC market parameters. Changes to maximum LTV, liquidation threshold, or reserve factor can significantly alter the risk-return profile of your position without requiring any action on your part. Aave and Compound both have active governance forums where proposals are discussed openly before going to vote. Following these forums for the pools you use is a minimum due diligence practice.
Track the peg of the specific wrapped BTC variant you hold. wBTC and cbBTC typically trade very close to BTC spot price, but custody events, regulatory actions, or liquidity crises can cause short-term depegs. A depeg during a period of high utilization in your pool could simultaneously reduce your collateral value and prevent withdrawal — a compounding adverse scenario.
Some lending pools have a small number of large depositors providing most of the liquidity. If a whale depositor withdraws, utilization can spike rapidly, affecting rates for all remaining participants. Protocols with broad, diversified depositor bases are more resilient to this dynamic. This information is typically visible on protocol analytics dashboards.
Even well-audited protocols upgrade their contracts. Upgrades introduce new code and new potential bugs. The Euler hack happened to an audited, respected protocol. When you see a protocol governance proposal for a smart contract upgrade, treat it as a moment to reassess your position — particularly if the upgrade touches core accounting logic or oracle handling.
Our comprehensive guide on understanding protocol risks goes deeper on all of these dimensions.
Common Questions
A bitcoin lending pool is a smart-contract-managed reserve of BTC (in wrapped form) or stablecoins that allows depositors to earn interest and borrowers to access liquidity against collateral. Unlike a savings account, there is no bank guarantee, no deposit insurance, and no counterparty that can be held liable. The rules are encoded in code, rates are set algorithmically, and the risk of loss — from exploits, oracle failures, or collateral devaluations — falls entirely on the participants. The upside is often higher yield and access to borrowing without credit checks.
