NAVI Lending
NAVI is an overcollateralized lending market on Sui covering SUI, USDC, USDT, wETH and wrapped assets and many long-tail tokens. DefiLlama records about $121.9M supplied and $67.4M borrowed, all on Sui. Health-factor liquidation and audited Move contracts do not override the Sui chain verdict, whose control precedent is independently decisive. This is not an allegation of a NAVI exploit.
- The Sui chain verdict changes
- Deploys meaningful liquidity on a chain the registry approves
Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-15.
The research file
Reachability, not protocol quality
The rejection sits at the settlement layer, not the application: every state transition, oracle update, liquidation and withdrawal here ultimately depends on validator or sequencer operation, finality, bridge security and emergency controls the protocol team cannot neutralize by shipping audited contracts. Quoted protocol TVL and DEX depth can remain visible on-chain while operational exit is unavailable if the chain cannot finalize or the bridge route is impaired. The same protocol on an approved deployment would receive its own individual review.
Mechanism
Suppliers fund shared pools and receive interest from borrowers; supplied assets can become collateral. Loan-to-value, liquidation threshold and oracle prices determine health. Below a health factor of one, liquidators repay debt and seize discounted collateral.
Control and evidence
NAVI publishes Move contracts, risk parameters and external audits, while governance and administrators manage listed assets and parameters. Those controls remain subordinate to Sui settlement, where validator deny-list capability and the Cetus response demonstrated coordinated state intervention.
Exit consequences
A lender withdraws by burning the receipt token only while pool liquidity is available. High utilization, bad debt, oracle failure or frozen underlying assets can impair exit. Every withdrawal and liquidation instruction requires Sui execution.
Why the class rule decides
Because all material liquidity is on Sui, the rejected-chain dossier decides before market-level underwriting. Review reopens only if NAVI deploys material liquidity on an approved chain or the Sui verdict changes.
Class rule
The rejected chain class is outside the approved structures, so every protocol in it is not approved until the rule changes. The rule is about the structure, not an adverse finding about this protocol, and it is not a client instruction. The events that would reopen it are listed with the memo.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- NAVI Docs — lending lifecycle · primary · accessed 2026-08-15
Supports: lending lifecycle - NAVI Docs — liquidation mechanics and walkthrough · primary · accessed 2026-09-15
Supports: liquidation mechanics - NAVI Docs — core pool and withdrawal interface · primary · accessed 2026-08-15
Supports: core pool, withdrawal interface - DefiLlama — NAVI Lending survey record, read 2026-08-14 · secondary · accessed 2026-08-15
Supports: NAVI Lending survey record, read 2026-08-14
Inherited controls
The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.
| Chain | Verdict | Control | Control constraint |
|---|---|---|---|
| Sui | Rejected | Issuer can freeze | freeze and seizure are demonstrated: standing validator deny lists began freezing the Cetus exploiter’s ~$162M within about 80 minutes, and a Foundation-organized vote later moved the frozen funds without the owner’s keys. |