Crisis Response and Recovery

CRISIS TYPE TAXONOMY

Type 1: Market Crisis
├── Cause: Broad market decline
├── Scope: Affects all/most positions
├── Examples: March 2020, May 2021
├── Duration: Days to weeks
├── Your action: Manage exposure, don't panic
└── Recovery: Markets eventually recover

Type 2: Protocol Crisis
├── Cause: Specific protocol failure
├── Scope: Single protocol, some contagion
├── Examples: Exploit, governance attack
├── Duration: Hours to days
├── Your action: Exit if affected
└── Recovery: Protocol may or may not recover

Type 3: Counterparty Crisis
├── Cause: Stablecoin, bridge, custodian failure
├── Scope: All exposure to counterparty
├── Examples: UST collapse, bridge hacks
├── Duration: Days to permanent
├── Your action: Exit affected assets
└── Recovery: Often limited or none

Type 4: Systemic Crisis
├── Cause: Multiple failures cascading
├── Scope: Broad ecosystem impact
├── Examples: FTX contagion, Terra ripples
├── Duration: Weeks to months
├── Your action: Preserve capital, reduce exposure
└── Recovery: Extended, with lasting changes

Type 5: Personal Crisis
├── Cause: Individual circumstances
├── Scope: Your situation specifically
├── Examples: Need liquidity, key compromise
├── Duration: Varies
├── Your action: Address specific issue
└── Recovery: Depends on cause
```

CRISIS IDENTIFICATION FRAMEWORK

Market Crisis Indicators:
├── Price drop > 25% in 24 hours
├── Multiple assets correlated decline
├── Volume spike (3x+ normal)
├── Funding rates extremely negative
├── Fear & Greed Index: Extreme Fear
├── Social sentiment: Panic
└── Threshold: 3+ indicators = crisis

Protocol Crisis Indicators:
├── TVL drop > 40% in 24 hours
├── "Exploit" mentioned in official channels
├── Protocol paused/frozen
├── Team radio silent or conflicting messages
├── Token price collapsed (> 50%)
├── Withdrawal queues or failures
└── Threshold: 1 critical indicator = crisis

Counterparty Crisis Indicators:
├── Stablecoin > 5% off peg
├── Bridge incident reported
├── Issuer negative news (regulatory, insolvency)
├── Redemption failures
├── Unusual on-chain activity
└── Threshold: Peg deviation or confirmed incident = crisis

Systemic Crisis Indicators:
├── Multiple protocols affected
├── Major entity failure
├── Cross-contagion spreading
├── Regulatory action affecting ecosystem
├── Infrastructure failures
├── Credit/lending cascade
└── Threshold: Spreading impact across ecosystem = systemic

CRISIS VS. VOLATILITY:
├── Normal volatility: Temporary price movement
├── Crisis: Fundamental threat to capital
├── Volatility: Often no action needed
├── Crisis: Action required
├── Key question: Is my capital at existential risk?
└── If yes → Crisis; if no → Volatility
```

CRISIS INFORMATION MANAGEMENT

Information sources in crisis:
├── Primary: On-chain data (most reliable)
├── Secondary: Official protocol communications
├── Tertiary: Trusted analysts/researchers
├── Quaternary: Social media (verify carefully)
├── Avoid: Rumor, unverified claims, FUD/FOMO
└── Prioritize verifiable over fast

Information quality assessment:
├── Verifiable: Can you confirm on-chain?
├── Source: Official or trusted?
├── Consistent: Multiple sources agree?
├── Actionable: Clear enough to act on?
└── If not verifiable, treat as uncertain

CRISIS INFORMATION CHECKLIST:
□ What happened? (specific event)
□ Is it confirmed? (on-chain or official)
□ What's affected? (which protocols/assets)
□ What's the scope? (contained or spreading)
□ What's the status? (ongoing or resolved)
□ What actions are being taken? (by protocol/others)
□ What should I do? (based on above)

Avoiding misinformation:
├── Don't act on Twitter rumors alone
├── Verify with on-chain data
├── Check multiple sources
├── Official channels > random accounts
├── When uncertain, don't act
└── Better slow and right than fast and wrong
```

---

EMERGENCY RESPONSE FRAMEWORK

STEP 1: ASSESS (2-5 minutes)
├── What type of crisis?
├── Am I directly affected?
├── What's my exposure?
├── Is action needed immediately?
├── What are my options?
└── Decision: Act now or monitor?

STEP 2: DECIDE (1-2 minutes)
├── Based on pre-planned thresholds
├── Not emotional reaction
├── Clear decision: Exit / Hold / Increase
├── Specific actions identified
└── Commit to decision

STEP 3: EXECUTE (as needed)
├── Follow pre-planned procedures
├── Don't improvise
├── Accept planned costs (slippage, etc.)
├── Complete actions fully
└── Confirm execution

STEP 4: CONFIRM (2-5 minutes)
├── Verify actions completed
├── Check resulting positions
├── Update tracking/dashboard
├── Breathe
└── Document what happened

STEP 5: MONITOR (ongoing)
├── Watch for changes
├── Be ready for next action
├── Stay informed
├── Don't second-guess
└── Focus on present, not past

TOTAL TIME: 10-30 minutes for initial response
Then ongoing monitoring
```

EMERGENCY PROCEDURE LIBRARY

PROCEDURE: MARKET CRASH (>30% decline)

Trigger: Portfolio down >30% in <7 days
Assessment: Is this market-wide or specific?

If market-wide:
├── Review positions for liquidation risk
├── Add collateral if leveraged and at risk
├── Generally: Do NOT panic sell
├── Review thesis: Has anything fundamental changed?
├── If thesis intact: Hold or accumulate
├── If thesis broken: Exit systematically
└── Do not make emotional decisions

If specific to your positions:
├── Investigate cause
├── May warrant different response
├── See protocol-specific procedures
└── Don't assume market when it's specific

---

PROCEDURE: PROTOCOL EXPLOIT

Trigger: Confirmed exploit affecting protocol you use
Assessment: Is my position affected?

If directly affected:
├── Can you exit? → Exit immediately, accept slippage
├── Cannot exit (frozen)? → Wait for resolution
├── Document everything for potential claim
├── Monitor official communications
└── Do not send funds trying to "save" stuck funds

If indirectly affected (contagion risk):
├── Assess contagion exposure
├── Consider reducing position
├── Increase monitoring
└── Be prepared to exit if spreads

---

PROCEDURE: STABLECOIN DE-PEG

Trigger: Stablecoin >3% off peg

If you hold the stablecoin:
├── Assess cause (temporary vs. fundamental)
├── Temporary (e.g., liquidity crunch): May hold
├── Fundamental (issuer problem): Exit immediately
├── Accept slippage, capital preservation priority
└── Don't wait to "see if it recovers"

If in LP with de-pegging stablecoin:
├── Exit LP immediately
├── Better to take IL than total loss
├── Swap de-pegging stable for safer asset
└── Act fast, these accelerate

---

PROCEDURE: BRIDGE INCIDENT

Trigger: Bridge exploit or incident reported

If you have funds in transit:
├── Check transaction status
├── Contact bridge support if stuck
├── Document everything
├── Do NOT send more funds
└── Wait for official resolution

If you hold bridge-wrapped assets:
├── Exit to native assets if possible
├── Bridge wrapped assets may become worthless
├── Accept slippage to exit
├── Alternative: Wait if bridge may recover
└── Risk assessment: Is bridge still operating?

---

PROCEDURE: WALLET COMPROMISE

Trigger: Unauthorized transactions from your wallet

Immediate actions:
├── Revoke all token approvals (if you still can)
├── Transfer remaining funds to new wallet
├── Do NOT use same seed phrase
├── Document stolen assets
├── Report to relevant parties
└── Create new wallet with new seed

Post-incident:
├── Investigate how compromise occurred
├── Improve security practices
├── Consider what's recoverable (likely nothing)
└── Learn and improve
```

PRESSURE DECISION FRAMEWORK

Why good decisions are hard in crisis:
├── Time pressure: Must decide quickly
├── Incomplete information: Don't know everything
├── Emotional state: Fear, anxiety, adrenaline
├── Stakes: Decisions matter more
├── Fatigue: May be sleep-deprived
└── All work against good decisions

Pre-commitment principle:
├── Decide BEFORE crisis what you'll do
├── Write it down
├── In crisis, follow the plan
├── Don't re-decide under pressure
├── Trust your pre-crisis self
└── Plans made calmly beat decisions made panicked

CRISIS DECISION CHECKLIST:
□ Do I need to decide RIGHT NOW?
├── If yes: Use pre-planned response
├── If no: Take time to assess
└── Most crises allow 30-60 minutes

□ What would I have planned to do?
├── Refer to written procedures
├── Use pre-set thresholds
└── Don't improvise

□ Am I being emotional?
├── Fear: Wanting to sell everything
├── Greed: Wanting to buy the dip
├── Both are often wrong
└── Stick to plan

□ What's the worst case if I wait?
├── If waiting could cause ruin: Act now
├── If waiting just means volatility: Can wait
└── Urgency should be real, not felt

DECISION DEFAULT:
When uncertain, default to:
├── Reduce risk (partial exit)
├── Not increasing risk
├── Waiting for information
├── Pre-planned responses
└── Conservative action
```

---

POST-LOSS ASSESSMENT FRAMEWORK

Immediate (0-24 hours):
├── Confirm final loss amount
├── Verify all affected positions
├── Document everything
├── Breathe and decompress
├── Don't make new decisions
└── Process the event

Short-term (1-7 days):
├── Complete loss documentation
├── File insurance claims if applicable
├── Assess remaining portfolio
├── Identify what went wrong
├── Begin learning process
└── No new risk-taking

Medium-term (1-4 weeks):
├── Complete post-incident analysis
├── Update risk frameworks
├── Revise procedures
├── Gradual re-engagement
├── Implement improvements
└── Return to normal operations

LOSS DOCUMENTATION:
├── What was lost (assets, amounts)
├── What caused the loss
├── What could have prevented it
├── What actions were taken
├── What the outcomes were
├── Lessons learned
└── Keep for taxes and learning
```

PSYCHOLOGICAL RECOVERY

Common emotional responses:
├── Anger: At self, protocol, market
├── Fear: Of more losses
├── Regret: Should have done X
├── Denial: Maybe it'll come back
├── Depression: What's the point
└── All normal, all pass

What NOT to do:
├── Revenge trading (trying to make it back fast)
├── Over-correction (never investing again)
├── Blame without learning
├── Hiding from reality
├── Making big decisions while emotional
└── These make things worse

What TO do:
├── Accept the loss as real
├── Recognize emotions are temporary
├── Focus on what's controllable
├── Take time before new decisions
├── Talk to trusted people
├── Extract learnable lessons
└── Move forward with improvements

RECOVERY TIMELINE:
├── Hours: Process shock
├── Days: Assess damage, document
├── Weeks: Analyze and learn
├── Months: Implement improvements
├── Longer: Rebuilt with wisdom
└── Give yourself time
```

RECOVERY STRATEGY FRAMEWORK

Assessing position after loss:
├── Current portfolio value: $_____
├── Loss amount: $_____ (%)
├── Remaining risk capacity: $__
├── Recovery target: $_____
├── Required return: ____%
└── Realistic timeline: _____

Recovery math reality:
├── 20% loss: Need 25% gain to recover
├── 30% loss: Need 43% gain
├── 40% loss: Need 67% gain
├── 50% loss: Need 100% gain
├── 60% loss: Need 150% gain
└── Bigger losses = harder recovery

RECOVERY APPROACHES:

Approach 1: Patient Recovery
├── Maintain current allocation
├── Let positions recover naturally
├── Add new capital regularly
├── Time horizon: Months to years
├── Risk: Low, but slow
└── Best for: Market losses, thesis intact

Approach 2: Concentrated Recovery
├── Focus on highest-conviction positions
├── Increase concentration for faster recovery
├── Higher risk, higher potential return
├── Time horizon: Months
├── Risk: Higher
└── Best for: Confident, risk-tolerant

Approach 3: Conservative Rebuild
├── Reduce risk, preserve capital
├── Smaller positions, more diversification
├── Accept slower recovery
├── Time horizon: Years
├── Risk: Lower
└── Best for: After significant losses

Approach 4: Fresh Start
├── Exit remaining positions
├── Rebuild portfolio from scratch
├── Apply all lessons learned
├── Time horizon: Restart clock
├── Risk: Depends on new allocation
└── Best for: After fundamental errors

WHICH APPROACH:
├── Thesis intact + temporary loss: Patient
├── High confidence + moderate loss: Concentrated
├── Risk tolerance reduced: Conservative
├── Fundamental errors made: Fresh start
└── Match approach to situation

---

POST-INCIDENT REVIEW PROCESS

PHASE 1: Gather Facts
├── What exactly happened?
├── When did it start?
├── What was the sequence of events?
├── What actions did you take?
├── What were the outcomes?
└── Document objectively, no blame

PHASE 2: Identify Causes
├── Root cause: What fundamentally caused this?
├── Contributing factors: What made it worse?
├── Warning signs: What did you miss?
├── Gaps: What was missing in your process?
└── Chain of causation

PHASE 3: Evaluate Response
├── What did you do well?
├── What could have been better?
├── Were procedures followed?
├── Were procedures adequate?
├── What would you do differently?
└── Both successes and failures

PHASE 4: Extract Lessons
├── What did you learn about risk?
├── What did you learn about yourself?
├── What process improvements needed?
├── What knowledge gaps exist?
├── What capabilities needed?
└── Specific, actionable lessons

PHASE 5: Implement Improvements
├── Update risk framework
├── Revise procedures
├── Add monitoring
├── Change behaviors
├── Fill knowledge gaps
└── Actually implement, don't just note
```

INCIDENT REPORT TEMPLATE

INCIDENT SUMMARY
├── Date/time: _____
├── Type: Market / Protocol / Counterparty / Personal
├── Affected positions: _____
├── Total loss: $_____ (___%)
└── Brief description: _____

TIMELINE
├── [Time]: First indicator
├── [Time]: Confirmation
├── [Time]: Actions taken
├── [Time]: Resolution
└── [Time]: Final state

ROOT CAUSE ANALYSIS
├── Primary cause: _____
├── Contributing factors: _____
├── Warning signs missed: _____
└── Preventability assessment: _____

RESPONSE EVALUATION
├── Response time: _____
├── Procedure followed: Y/N
├── Procedure adequate: Y/N
├── What worked: _____
├── What didn't: _____
└── Improvement opportunities: _____

LESSONS LEARNED
├── Lesson 1: _____
├── Lesson 2: _____
├── Lesson 3: _____
└── Key insight: _____

ACTION ITEMS
├── [ ] Action 1 (owner, deadline)
├── [ ] Action 2 (owner, deadline)
├── [ ] Action 3 (owner, deadline)
└── Follow-up date: _____
```

LEARNING LOOP

After every significant incident:
├── Complete incident report
├── Identify improvements
├── Implement changes
├── Test new procedures
├── Monitor effectiveness
└── Repeat

Quarterly incident review:
├── Review all incidents
├── Identify patterns
├── Systemic improvements
├── Framework updates
├── Capability development
└── Strategic adjustments

Annual retrospective:
├── Full year incident analysis
├── Major lessons synthesized
├── Risk framework evolution
├── Long-term improvements
├── Strategy refinement
└── Growth assessment

THE LEARNING MINDSET:
├── Every loss teaches something
├── Tuition for market education
├── Failures are feedback
├── Improvement is continuous
├── Wisdom comes from experience
└── Get better, not bitter
```

---

✅ Preparation improves outcomes. Those with plans do better than those without.

✅ Emotional decisions underperform. Panic selling consistently loses value.

✅ Post-incident analysis improves resilience. Learning from mistakes reduces future mistakes.

⚠️ Optimal response speed. How fast to act varies by situation.

⚠️ Recovery timeline. How long recovery takes is unpredictable.

⚠️ Future crisis patterns. Next crisis may be different.

📌 Plans that aren't followed. Plans only work if executed.

📌 Over-reaction and under-reaction. Both can be costly.

📌 Not learning from losses. Repeating the same mistakes.

---

Assignment: Create comprehensive crisis response plan for your DeFi portfolio.

Requirements:

1. Crisis identification criteria

2. Emergency procedures (minimum 4)

3. Decision framework

4. Recovery plan

5. Incident report template

Time investment: 3 hours

---

1. During a market crash, what's generally the correct response?
A) Sell everything immediately B) Buy as much as possible C) Follow pre-planned procedures based on your thesis D) Wait for recovery

Correct Answer: C

2. What's the first step in crisis response?
A) Execute trades B) Call someone C) Assess the situation and verify information D) Post on social media

Correct Answer: C

3. After a 40% loss, what return is needed to fully recover?
A) 40% B) 50% C) 67% D) 100%

Correct Answer: C (1/(1-0.40) - 1 = 0.67 = 67%)

---

End of Lesson 13