Risk and Exposure
Staking FXRP into the Firelight protocol means backing coverage. This page describes what that involves: what can cause losses, how the loss waterfall protects stakers from smaller incidents, how slashing is applied, and how staked capital converts into coverage capacity through diversified leverage.
What a staker is backing
The vault backs every active Firelight coverage position. If a validated claim is paid and the First-Loss Buffer is exhausted, the remaining loss is met by slashing vault positions.
A staker is not backing a single market. The exposure is to the aggregate claim experience of the protocol across all covered markets during the periods their collateral is active. Diversification is managed at the portfolio level through the risk framework and the limits described below.
The loss waterfall
Losses from a validated claim are absorbed in two layers, in order:
First-Loss Buffer. A protocol-owned stablecoin reserve. This layer absorbs the smallest incidents entirely, without touching staker collateral.
Vault slashing. Any remaining loss is allocated pro-rata across staker positions in the vault.
A staker's position is only reduced if a claim is large enough to exhaust the First-Loss Buffer and reach the vault. Smaller incidents never affect staker balances.
How slashing is applied
When a slash instruction reaches the vault:
The contract reads the current vault balance at execution time.
The slashed amount is deducted pro-rata across all positions.
The slashed collateral is routed to the liquidation service for conversion into payout stablecoins.
Pro-rata allocation means every staker takes the same percentage reduction. A position twice the size of another absorbs twice the dollar loss. No position is exempt and no position is singled out. The slash amount is fixed at the moment the instruction is generated, subsequent liquidation slippage does not expose the staker to additional loss (the First-Loss Buffer absorbs any shortfall first).
Sequential slashing across multiple incidents
If multiple incidents occur in the same period and require slashes, they are processed sequentially: a later incident's slash is calculated against the post-prior-slash vault balance, and a concurrency guard prevents overlapping slashes on the same vault.
What is not a slashing event
stXRP price drifts on a DEX
Market price deviation, not a protocol slash
Redemption value declines slightly after a large withdrawal
Normal accounting adjustment, not a slash
Protocol emission value fluctuates
Market pricing of a separate asset
Only an on-chain slash instruction from a validated claim reduces a staker's underlying balance.
What happens after a slash
The staker's vault share balance remains the same.
The vault's redemption value decreases to reflect the reduced backing.
Future emission streams continue, rebuilding the redemption value over time.
How capital becomes coverage capacity
A dollar of staked capital backs more than a dollar of coverage, because losses are rare and partial rather than continuous and total. The amount of coverage per dollar of capital is effective leverage, bounded by a floor and ceiling, with the protocol operating conservatively at launch while diversification builds.
Effective leverage is the product of a nominal ratio and a Diversification Factor that rises with portfolio diversification and falls with concentration. A well-diversified portfolio earns a higher Diversification Factor and can be operated at higher effective leverage safely. A concentrated portfolio tightens leverage and reduces capacity.
At each period boundary the matching engine computes available capacity from available capital, First-Loss Buffer plus the market value of staked collateral, effective leverage, and the coverage already active. A Capital Adequacy Ratio (CAR) floor caps how much the protocol will back relative to capital. The engine will not allocate capacity that would push CAR below its floor. The full methodology is in Capital Adequacy.
Two-view exposure
A staker's exposure aggregates two independent views of the book. The economic view combines a near-term bad-debt expectation for every covered market with a structural graph overlay that captures collateral → loan-token relationships. The technical view captures the protocol and infrastructure-level risk of the same markets. Both views feed the portfolio expected loss that drives capital adequacy, so a staker is implicitly exposed to whichever side moves first, a market that looks technically clean can still raise the staker's underlying risk if its economic view deteriorates, and vice versa.
What this means for a staker
Base rate emissions. More coverage written per dollar of capital means more rewards flowing to stakers.
Safety margin. The CAR floor and the First-Loss Buffer bound how much loss can reach the vault, keeping staker exposure to tail events.
A staker is taking on slashing risk from validated claims that exhaust the First-Loss Buffer, normal smart-contract risk from the Firelight contracts, and the underlying stXRP risk (yield, volatility, peg mechanics). In exchange they receive the underlying base rate emissions from premiums plus coverage-related rewards.
Where to read next
Capital Adequacy for the full capacity, leverage, and CAR methodology.
Claims Process for the payout side of the waterfall.
Last updated