Hybrid Margin: Cross Efficiency Without Cross Risk
A margin system that recognizes hedges without pooling solvency.
Every perp DEX picks a side. Isolated margin is safe but wasteful. Cross margin is efficient but dangerous. Hybrid Margin gets the benefits of both by separating two things that most designs conflate: recognizing hedges and pooling solvency.
The Capital Efficiency Problem
A trader running a BTC long and ETH short has a natural hedge. In isolated margin, the protocol doesn't care. Each position needs full collateral independently. The BTC leg needs $10k, the ETH leg needs $10k, even though a broad crypto crash would make one profitable while the other loses. Capital sits idle because the system can't see that the two positions offset.
Cross margin solves this by throwing everything into a shared pool. The BTC profit automatically covers the ETH loss. Less collateral, more leverage, better capital efficiency. But the efficiency comes from pooling solvency across markets, and that has a cost that only shows up in stress.
Hybrid Margin separates these two concerns. It recognizes the BTC-ETH hedge at entry through explicit spread credits, reducing the margin requirement without pooling the collateral. Each market keeps its own silo, its own insurance fund, its own liquidation process. The trader gets roughly 80% of cross margin's capital efficiency while keeping every market's failure domain independent.
Isolated Margin
Silo
Silo
Silo
Cross Margin
(BTC + ETH + SOL)
Hybrid Margin
Silo
Silo
Silo
The Liquidation Problem
When markets crash in cross margin, the shared pool becomes a race. The first market to liquidate drains the pool. Winners in the second and third markets find nothing left. The outcome depends on which market crashes first, not on whether the trader was right. Change the crash sequence and different people get paid. This is path dependence, and it means payouts are a lottery during the exact moments that matter most.
In isolated margin, there's no contagion, but there's also no safety net, unless there's an insurance fund. If a loser's $50k collateral can't cover the $70k owed to the winner, the winner eats a $20k loss through ADL. No insurance fund from other markets can help because each market is completely walled off.
Hybrid Margin resolves this through a deterministic waterfall. When a market has a shortfall, it draws from four sources in order: the loser's collateral, the market's local insurance fund, a global overflow buffer, and only then ADL as a last resort. Each market resolves independently through the same waterfall regardless of what's happening elsewhere. Crash order doesn't change who gets paid. The global overflow buffer provides the cross-market safety net that isolated margin lacks, without the cross-market contagion that makes cross margin dangerous.
Cross Margin Waterfall
Hybrid Margin Waterfall
The Design Principle
"We recognize portfolio offsets" is a choice in the risk model. "We mutualize solvency across markets" is a choice in the ledger. Most designs treat these as the same thing. Hybrid Margin keeps them separate: risk-aware where it counts, isolated where it must be.
The result is a margin system where hedged portfolios require less capital, liquidation outcomes are deterministic, and no market can silently drain another market's resources. Not by choosing a side between isolated and cross, but by taking the useful part of each and leaving the dangerous part behind.
(S) Solvency Domain
Where losses are borne. Per-market silos (fine S) vs shared pool (coarse S). Hybrid keeps fine S: each market has its own ledger, insurance, and liquidation process. No market can silently drain another.
(R) Risk Recognition
Which hedges count. Hybrid grants explicit ICS credits at entry and uses a mobility-masked covariance at maintenance. Only recognizes offsets the protocol can mechanically realize under stress.
(M) Mobility
How equity moves between markets. In cross, it's implicit. In hybrid, it's an explicit sweepUPnL primitive: settle gains, then transfer. Measurable, throttleable, auditable.
(L) Loss Allocation
What happens when close-out fails. Hybrid uses a deterministic waterfall: local Fj, then global F0, then VMGH recovery, then ADL. Payout order is a function of state, not transaction ordering.
| Property | Isolated (A1) | Cross (A2) | Hybrid (A3) |
|---|---|---|---|
| Solvency domain | Per-market | Shared pool | Per-market |
| Hedge recognition | None | Implicit (from pool) | Explicit ICS + masked covariance |
| Capital efficiency | 100% IM | ~45% IM | ~63% IM |
| Equity mobility | None | Implicit / automatic | Explicit sweep primitive |
| Loss allocation | Local only | Path-dependent | Deterministic waterfall |
| Cross-market contagion | Impossible | Built in | Impossible (F0 bounded) |
| Payout determinism | Yes | No (ordering-sensitive) | Yes |
| Insurance fund | Per-market only | Shared (first-come-first-served) | Per-market + global overflow |
| ADL frequency | Higher (no cross-subsidy) | Variable | Lowest (waterfall absorbs most) |
| Failure mode | Knockout risk for spreads | Hidden mutualization | Graceful degradation to isolated |
The sweepUPnL primitive is what makes equity mobility explicit and auditable. Rather than letting gains flow implicitly through a shared pool, it settles unrealized profits from one market into transferable collateral and moves them where they're needed.
UPnL: +$5k
Free equity available
→
settle + transfer
UPnL: -$4k
Approaching MM breach