An integrated model for fire sales and default contagion

Fire sales and default contagion are two of the main drivers of systemic risk in financial networks. While default contagion spreads via direct balance sheet exposures between institutions, fire sales describe iterated distressed selling of assets and their associated decline in price which impacts all institutions invested in these assets. That is, institutions are indirectly linked if they have overlapping asset portfolios. In this paper, we develop a model that helps us understand the joint effect of the two contagion channels and investigate structures of financial systems that promote or hinder the spread of an initial local shock. We first consider the contagion process for an explicitly given system and then derive our main results for random ensembles of systems whose macroscopic statistical characteristics of defining parameters are close to each other. In particular, we model direct exposures by means of a random graph. Our approach ensures robustness to local uncertainties and changes in the system. We characterize resilient and non-resilient system structures by criteria that can be used by regulators to assess system stability. Moreover, we provide explicit capital requirements that secure the financial system against the joint impact of fire sales and default contagion.


Introduction
Today's financial networks are characterized by various types of dependencies between financial institutions and a complex network structure. While these connections go along with attractive business opportunities for each single institution, they also bear the risk of spreading and amplifying local shocks through large parts of the system, which is known as systemic risk. A particular challenge is to study the interplay and mutual reinforcement of various types of contagious connections. Two of the main drivers of systemic risk that we focus on in this paper are the contagion channels default contagion and fire sales (see [28] for instance).
Default contagion describes insolvency transmission between direct neighbors in a financial network due to the inability to meet financial obligations. That is, if a certain bank has to declare bankruptcy and hence cannot (fully) repay loans or other pending liabilities, then all exposed institutions in the system have to write off their losses and can get into financial distress themselves. Although default contagion takes place between direct neighbours in the network, it was one of the main insights from the financial crisis that also second order effects play an important role when assessing an institution's stability with respect to certain shock events. This is the main difference of systemic risk as compared to classical counterparty risk: not only an institution's contractual partners are important but also their business connections and so on, which the first institution has no influence on or even knowledge of.
The contagion channel fire sales describes a similar effect: it can happen if for some reason one or more investors sell off a large number of shares of a certain illiquid asset which causes a decrease in the asset's share-price. Hence, by mark-to-market of portfolio values, this leads to losses for all institutions invested in the asset and thus possibly causes further asset sales in order to comply with external regulations or internal strategies. This on the other hand drives down prices even further and the cycle of fire sales goes on and on. In contrast to default contagion, fire sales can transmit distress from one institution to another even without a direct business relationship. Each institution that holds an asset portfolio of some kind is then exposed to all other institutions with a (partially) overlapping portfolio. However, due to second order effects, institutions can even be exposed to other institutions without having any overlapping asset holdings. In contrast to default contagion, fire sales can start while all institutions in the network are still solvent but some of them choose to sell assets either voluntarily or because of regulatory requirements. Clearly, the two described effects can further amplify each other. If, for instance, during a fire sales cascade an institution goes bankrupt, as described above its creditors have to write off their loss and may be driven into selling parts of their asset portfolio thus sparking further fire sales. The underlying motivation for this paper is thus to model the interplay of default contagion and fire sales and particularly to understand which structures of direct exposures and overlapping asset portfolios promote or prevent the spread of local stress in a system.

Related work
One of the first papers to rigorously address contagion effects in financial networks was the seminal work by Eisenberg and Noe [20]. In its original form their model (the ENmodel) describes the channel of default contagion without bankruptcy costs and under a perfect claim enforcement technology. The main insight was the existence (and sometimes uniqueness) of a payment vector that clears liabilities in an explicitly given interbank network. The popularity of the EN-model is partly due to its tractability which allows for a number of extensions including for example default costs, fire sales and crossholdings between banks (see [12,24,32,34]).
Other lines of research addressed the question which network structures promote a cascade of defaults. For example the authors in [1,2] compare stylized network structures, the ring and complete network. They show that complete networks can absorb small shocks better but large shocks are amplified. The authors of [9] present a more general framework that allows to compare a larger set of network structures, including the empirically relevant coreperiphery network. In addition, in contrast to previous studies they account for the presence of bankruptcy cost. Their main insight is that for highly capitalized systems a more diversified network structure is better, while for poorly capitalized systems diversification can be harmful and create potential for larger amplification of bankruptcy cost.
Another line of research, which started in [23] and continued for example in [16,17,19], uses asymptotic random graph techniques. Similarly to [1,2,9], the objective is to gain understanding of which network structures promote systemic risk and which capital requirements are suitable to prevent large cascades. Rather than considering a concrete network configuration, these works derive results for a whole family of random graph configurations whose macroscopic statistical characteristics are calibrated to resemble an originally observed structure. That is, statements about the final state of the system are possible in terms of global statistical quantities only, and independent of the precise structure on a microscopic level; this makes this approach robust to local uncertainties as well as changes over time and thus attractive from a regulatory perspective. Moreover, for large systems a natural notion of resilience emerges that is not based on any arbitrarily chosen parameters, but considers an arbitrarily small initial shock and its effect on the global system.
In terms of fire sales [25] consider an economy consisting of multiple banks and multiple assets with different liquidity levels to study first order effects of fire sales (the asset sales of one bank creates a balance sheet hit to another bank only if it holds the same asset). In [10] the authors introduce a systemicness matrix to quantify the aggregated effects of liquidation when banks hold overlapping portfolios. Their analysis includes the impact of second order effects. Using a large system approach [18] proposes a model for fire sales that also accounts for higher order effects. The authors derive asymptotic results about the fraction of finally defaulted institutions, the number of sold asset shares and the ensuing final price impact. Also see [8] for a similar albeit much simpler framework for investigating fire sales on a random network by a branching process approximation.
While the asymptotic methods line of research accomplishes to characterize favorable and unfavorable system structures, it has so far only been possible to model one contagion channel at a time. It is the aim of this paper to present the first integrated model for default contagion and fire sales that uses the asymptotic approach to provide insight into the effect of certain structural characteristics on system stability. In an Eisenberg-Noe setting this integration has been done in [12] and in [34]. In [5] the authors endogenize possible intervention to stop contagion that propagates through fire sales and default losses.

Contribution
In this paper we study the joint effects of default contagion and fire sales and their impact on system stability as well as systemic risk management. Integrated model for default contagion and fire sales Our main objective in this paper is to specify and study a stochastic network model for default contagion and fire sales. To prepare the ground for such a model, we first state a deterministic model for simultaneous default contagion and fire sales such that in particular the two can amplify each other. At this we assume the following underlying parameters for each institution i ∈ [n] = {1, . . . , n}: Its initial capital c i , which is reduced by some individual exogenous shock i , a list of direct exposures (e j,i ) to other institutions j such that i's capital is reduced by e j,i if j defaults, and a vector x i = (x A i ) of numbers of shares held of each asset A. In addition every institution is assigned sale functions ρ A i that abstractly describe asset sales of each asset A due to regulation or other constraints as institution i incurs losses. The sale functions are allowed to vary across different institutions, as for example hedge funds, investment banks or commercial banks might have a very different asset sales behaviour, and asset classes, for example in order to distinguish between sales of assets with different liquidity levels. Lastly, a function h A is given that specifies the impact of sales on asset A's price-assuming that exogenous price changes are negligible during the contagion process and h A is the sole driver of the asset price. We only require minimal assumptions on ρ A i (non-decreasing) and h A (continuous and non-decreasing) to derive our first result about the set of finally defaulted institutions and the vector of finally sold shares in terms of a fixed point equation. In addition we assign to each institution i ∈ [n] a value s i of systemic importance. This value does not influence the contagion process but allows for a more refined risk analysis based on the set of finally defaulted institutions after a cascade. The stochastic model The previously mentioned results allow us to compute the final damage to any explicitly given financial system. The actual focus of this paper, however, is to go one step further and to model a whole ensemble of systems simultaneously to understand which structural properties in a system expedite or inhibit the spread of distress. More precisely, we aim at performing an asymptotic analysis for a financial system that inherits the model features and flexibility of our deterministic model. Our model for the financial system exhibits a degree of flexibility and heterogeneity to capture observed features that was previously unseen within the literature on asymptotic random graph models for systemic risk. We achieve this by the following means: 1. We randomly rewire direct links in the network according to the following method: We assign to each institution i a type α i out of finitely many types [T ] := {1, . . . , T }. Institutions of the same type share a certain similarity, for example they could be residing in the same geographical region, be of a similar institutional type or in the same layer of a tired network such as core-periphery. Classification of certain institutions as systemically important financial institution (SIFI) is also possible. In addition we assign in-weights w −,α i and out-weights w +,α i , α ∈ [T ] and draw a random link from i to another institution j of type α j with a probability proportional to w That is, w ±,α i describe the tendency of i to send/receive links from institutions with certain types. They can be calibrated to the observed in-/out-degree in a concrete network configuration. We refer to Sect. 6 for details on the estimation of the parameters. This set of parameters ensures that important statistical properties of this random graph are in line with observed real financial networks with a complex tired structure especially on a global level. While in some countries a power law or core/periphery degree sequence was observed (see [14]), one degree sequence is not enough to describe networks consisting of different subnetworks. For a global perspective it is essential to model also connections between different subsystems in a flexible way. The combination of finitely many types and a continuum of possible weights does exactly the job of delivering realistic network skeletons on which default contagion processes can still be described by finite dimensional fixed point equations. This idea was developed in [17] for a pure default contagion analysis.
The empirical distribution of parameters (weights and types) is assumed to be close in distribution to a multidimensional random vector (W − , W + , A). 2. The parameter vector (W − , W + , A) is then complemented by random components describing the empirical distribution of systemic importance, capital, exogenous loss and asset holdings. This leads to (W − , W + , X, S, C, L, A) as the parameter of our financial system. We only pose a first moment restriction on (W − , W + , X, S, C, L, A) and in particular allow for all kind of possible dependencies between the components. We then consider a whole ensemble of financial systems with parameters close in distribution to For the stochastic system we derive similar results as for the explicit system about the fraction of finally defaulted institutions and the vector of finally sold asset shares. The following informal statement summarises the main insights from Theorem 3.3.
Mock theorem Consider a financial system of size n ∈ N that was hit by some exogenous shock. Let M ∈ N denote the number of assets in the system. Then under certain regularity assumptions there exist constants 0 where o p (1) denotes a term that vanishes as n becomes large. The constants k 0 , K 0 , k m , K m can be computed explicitly in terms of the global system statistics, and in many relevant For large systems we thus derive explicit lower and upper bounds for the fraction of finally defaulted institutions and sold shares triggered by some initial shock. Moreover, the upper and lower bounds coincide in most cases and then our results allow to determine the quantities exactly. The bounds are robust to local changes and are thus suitable to understand the effect of certain structural characteristics of the network and in particular the joint impact of default contagion and fire sales on system stability.
An asymptotic analysis is justifiable by the fact that a large number of institutions (funds, investment banks, insurance companies, etc.) are participating in the financial system. Additionally we test the analytic results with a simulation study, which shows that systems of reasonable size are well approximated by our analytic results.
For the proofs we can partly resort to results from [16][17][18]. Still the combination of both channels poses a number of new technical challenges. In the pure contagion model one can use so called finitary systems, i.e. systems where the characterizing parameter vector in Item 2. above only takes finitely many values, to approximate default contagion in more general systems (see [16,17,19]). These finitary systems can be well understood by means of the differential equation method (see [35]). However, once fire sales are included, finitary systems pose some discontinuity issues and thus require new techniques, which we develop here. Risk management As already mentioned before, our asymptotic approach entails the advantage of a natural notion of resilience. More particularly, we consider arbitrarily small initial shocks and use our main result for the stochastic model to determine whether the resulting fraction of finally defaulted institutions vanishes or remains bounded away from 0. We derive explicit criteria for regulators to determine the stability of a financial system and we demon-strate in an example that resilience can heavily depend on the joint impact of default contagion and fire sales. This specifically underlines the importance of an integrated modelling.
Moreover, based on the resilience criteria we show for a class of financial systems how to determine sufficient capital requirements to ensure stability. The regulated institutions themselves can easily calculate these capital requirements after a regulator announces a few global parameters-they are thus very transparent. Further, as the capital requirements only depend on global parameters and the bank's own business decisions (its balance sheet) they are inherently fair and cannot be manipulated.

Outline
In Sect. 2, we state our model for the financial system and the contagion process. We then state and explain our main result for the stochastic model in Sect. 3. In Sect. 4, we derive criteria for financial networks to be (non-)resilient with respect to small initial shocks. We then apply them to obtain sufficient capital requirements in Sect. 5 and carry out a simulation study to show that our results are applicable for large finite networks and to demonstrate the joint impact of default contagion and fire sales. In Sect. 6 we discuss estimation of the model before we conclude with a discussion including the limitations of the model in Sect. 7. In Sect. 8, we provide proofs for all the results. Finally, we provide a glossary listing all important symbols, parameters and functions for our model.

An integrated model for the financial system
In this section, we state our model for a financial system. It includes all the parameters we need to investigate the interplay of the contagion channels fire sales and default contagion. We assume that there are n ∈ N financial institutions. We use the term financial institutions in a wide sense. It may include banks, insurance companies, mutual funds, asset managers but also non-financial institutions, as for example corporations if they hold a large number of the assets and would sell them in case of a decline in value. We denote the set of institutions by [n] := {1, . . . , n}. Further we consider M ∈ N assets. These are the assets institutions invest in and that are considered relevant for potential fire sales. We denote by [M] := {1, . . . , M} the set of these assets.

Model parameters
Each institution i ∈ [n] has a set of parameters assigned: 1. The value of systemic importance s i ∈ R +,0 : It describes the potential damage that a default of institution i will cause for the global financial system or the wider economy. For example, if institution i ∈ [n] is crucial in providing certain payment infrastructure it would have a higher value s i assigned than a bank that is not offering such service. See [19] for more details and possible choices for s i . 2. The initial capital parameter c i ∈ R +,∞ := R + ∪ {∞}: This parameter determines the monetary buffer of institution i against losses. For banks this is usually their equity (assets minus liabilities), which is positive if the bank is solvent. For low leverage institutions, such as mutual and money market funds, it could the total value of assets managed. In the following, we refer to c i as capital for simplicity. In Fig. 1 we summarize the parameters assigned to each institution.

Fire sales
Fire sales are the combination of asset sales and price impact. The exogenous losses i , i ∈ [n], possibly drive some institutions into selling parts of their assets. This can be due to their own risk preference or regulation that forces them to stay within certain risk bounds or leverage constraints. We model these asset sales by vector valued functions ρ i = (ρ 1 i , . . . , ρ M i ) : R +,0 → [0, 1] M , which describe the fraction of holdings of asset 1, . . . , M sold by institution i after it lost a certain fraction of its capital, i.e. i ∈ [n] sells x m i ρ m i ( /c i ) of its shares of asset m after it incurred losses of . The specification of ρ i will crucially depend on the type of institution (i.e. asset manager, investment bank, insurance company,…) and the respective regulatory requirement. Allowing for different sales behavior for different institutions is thus especially important if one goes beyond the banking network. Moreover, by allowing ρ i to be vector valued, we account for the fact that financial institutions might follow a certain strategy when selling assets. For example they might start with liquid assets first or try to keep their overall market exposure. We make the following natural assumptions: the sale functions ρ i for i ∈ [n] are non-decreasing, ρ i (0) = (0, . . . , 0) and ρ i (u) = (1, . . . , 1) for all u ≥ 1. Moreover to simplify notation in the following, we choose ρ i to be right-continuous for every i ∈ [n] and denote by There are two remarks in order: First, we pick y as the argument of h instead of the actual vector of sold shares n y; this choice is purely conventional for any fixed n but will be convenient for our results (also cf. Assumption 3.1). Second, as institutions start selling assets during the contagion process, they actually reduce their exposure to future price drops and x i · h( y) merely functions as an upper bound on i's losses. In this sense our model is conservative, and moreover, this assumption allows for better analytic results in the following. For a financial system without direct exposures, i.e. e i, j = 0 for all i, j ∈ [n], the contagion process is then solely driven by rounds of alternating asset sales and price impact, i.e. fire sales. Denoting by σ (k) = (σ 1 (k) , . . . , σ M (k) ) the vector of sold shares in round k ∈ N 0 with σ (0) = 0 we then derive Here denotes the Hadamard (entry-wise) product of two vectors, while · denotes the scalar product. See [18] for results on the pure fire sales process in a slightly more restricted setting.

Default contagion
If on the other hand, we consider a financial system with x i = 0 for all i ∈ [n], then contagion completely proceeds via the direct exposure network. That is, if i ≥ c i and institution i ∈ [n] is therefore initially defaulted, then each institution j ∈ [n] suffers losses of e i, j . This possibly causes further defaults in the system and so on. Note that we suppose a recovery rate of zero, which is a conservative yet reasonable assumption because the time horizon of the default contagion process is short compared to the time the resolution of an insolvent institution takes, and there is a huge amount of uncertainty about the actual value of an insolvent institution immediately after its default. One could easily implement other fixed recovery rates in our model. Again we can consider the pure default contagion process in rounds. Denoting D (k) ⊆ [n] the set of defaulted institutions in round k ∈ N 0 with D (0) := {i ∈ [n] : 0 ≥ c i − i } we obtain : and the contagion process ends after at most n−1 rounds. In particular, D n := D (n−1) consists of all finally defaulted institutions and S n = i∈D n s i amounts to the total final systemic damage caused by defaults. See [3,16,17] for more results on the pure default contagion process.

The contagion process
The focus of this section is on the understanding of the joint effects of fire sales and default contagion. We therefore combine the two processes from above and again consider contagion in rounds: Let D (0) = ∅ and σ (0) = 0 ∈ R M . Moreover, for k ≥ 1, and and σ (0) ≤ σ (1) ≤ · · · ≤ i∈ [n] x i . We can thus conclude that the process converges as k → ∞. Let then D n := k∈N D (k) be the set of finally defaulted institutions, S n = i∈D n s i their systemic importance and χ n := n −1 lim k→∞ σ (k) the vector of finally sold shares divided by n.
Moreover, D n ⊆ D n and χ n ≤ χ n .
The case that D n D n or χ n < χ n can happen if in the contagion process the sold shares converge to a vector that would be large enough to cause new defaults or trigger further asset sales but is actually never reached in finitely many steps. Then the process converges to a non-equilibrium state. As for real financial systems the least possible number of sold shares in each round is lower bounded by 1, this can actually never happen and for all practical purposes the final set of defaulted institutions is given by D n , their caused systemic damage by S n := i∈D n s i and the vector of finally sold shares is given by χ n .
Furthermore, in the next section the following explicit lower bound on (D n , χ n ) will be necessary to draw an extensive picture of the contagion process.

Lemma 2.2 Let
• ρ i be the left-continuous modification of ρ i for every i ∈ [n]. Then there exists a smallest solution (D n ,χ n ) to Moreover,D n ⊆ D n andχ n ≤ χ n .
Finally, denoteŜ n = i∈D n s i . Then altogether, we derive the following statement.

The stochastic model
In the previous section, we considered the combined contagion process of fire sales and default contagion on any explicitly given financial system. In this section, we go one step further and analyze a whole ensemble of systems simultaneously that share certain statistical characteristics, i.e. we introduce a random model for the financial system that captures the essential characteristics observed for real financial systems. This will ultimately help us to understand which system structures promote global contagion or contain it locally.
In a first step we specify a random model for the inter-institutional exposures e i, j ; we adopt the multi-type financial network model from [17]. We let the connection probability of two institutions in the system depend on their respective types-larger within communities or within cores, smaller between communities and for periphery institutions for instance. Second, we allow for different exposure distributions between different institution typeslarger exposures between core-institutions for example.
From now on we assume that inter-institutional exposures e i, j are bounded and take integer values in {0, . . . , R} for some R ∈ N. We refer to [31] for an extension to exposures modelled by sequences of exchangeable (possibly unbounded) random variables in the multitype financial network model. We define a probability measure P on {0, . . . , R} |E| , where E is the set of possible directed edges E := {(i, j) ∈ [n] 2 : i = j}. To model random exposures has several advantages: 1. The network of exposures can change significantly on a microscopic level but as empirical studies show, the global statistics are reasonably stable (see e.g. [14]). 2. Often only the aggregated exposures j∈[n] e i, j are available to the regulator. Since the individual exposures are unknown it is thus advisable to use the information available and consider probabilistic samples. Ideally one obtains results that hold for all possible realizations. 3. A random network is analytically more tractable and provides more understanding of the impact of the network characteristics on the combined fire sales and contagion process.
Our choice of P has to be such that the generated networks share the characteristics of observed financial networks. We assume that the global financial system is composed of institutions of T ∈ N different types in total. Instead of assuming deterministic exposures {e i, j } j∈[n] ⊂ R +,0 as given Item 5. in Sect. 2.1 we now associate to each institution i ∈ [n]:

. (a) An institution-type α i ∈ [T ]:
This parameter allocates institution i to a certain subsystem such as country or core/periphery.

. (b) A vector of in-weights
: The in-weight w −,r ,α i describes the tendency of institution i to be exposed to an institution of type α with an exposure of size r .

. (c) A vector of out-weights w
: The out-weight w +,r ,α i describes the tendency of institutions of type α to be exposed to i with an exposure of size r .
We assume in the following that institutions of the same type have the same sales function. This still allows to distinguish between different types such as e.g. country, core/periphery, banks/insurance companies/wealth managers, combinations of the aforementioned, or any other reasonable segmentation and as noted before is important to account for different regulatory environments. We denote by ρ α the sales function of institutions of type α. The occurrence of an edge of multiplicity r ∈ [R] (exposure size) going from i to j is then modeled by a Bernoulli random variable X r i, j with success probability . Now consider a collection of financial systems with varying size n. We want to ensure that their statistical characteristics measured by means of the empirical distribution functions stabilize as n → ∞. Moreover, we want to prohibit that exposures or asset holdings condense in one institution.
of exogenous losses and α(n) = (α i (n)) i∈[n] of institution types. Then the following shall hold: (a) Convergence in distribution: For each n ∈ N let the random empirical distribution function of the system parameters be denoted by . Let in the following (W − n , W + n , X n , S n , C n , L n , A n ) denote a random vector distributed according to F n . Then there exists a distribution function F such that (b) Convergence of means: Denote by (W − , W + , X, S, C, L, A) a random vector distributed according to the limiting distribution F. Then as n → ∞, where we abbreviate respectively the vector Let us give an intuitive explanation for the functions g, f r ,α,β and f m first. For this we consider the special case R = T = 1 and start by looking at the fire sales and the default contagion process separately. We start with the default contagion process. Heuristically, for an externally given vector of asset sales χ , the function f 1,1,1 (·, χ ) describes (in the limit n → ∞) the intensity of the default contagion process over time. Here time refers to steps in a sequential analysis of the process, which leads to the same set of defaulted institutions. Let nowz ∈ [0, E[W + ]] denote the total out-weight of finally defaulted banks divided by n. Then by the specification of p i, j for any fixed bank i ∈ [n] the number of incoming edges (exposures) from finally defaulted banks is given by a random variable Poi(w −,1,1 iz ). Institution i is hence finally defaulted itself if and only if Poi Summing over all banks in the system we thus derive the following identity: and therefore f 1,1,1 (z, χ ) = 0. Further, the damage by finally defaulted banks is then given by Hence if fire sales are ignored, meaning the initial capital is simply reduced by a fixed amount accounting for some externally given sales vector χ, then in order to get the final state of the system we only need to determine the (first) rootz of f 1,1,1 (·, χ ) and plug it into g(·, χ ).
Let us now look at the fire sales system with an externally given default contagion result. For the case of one asset with label 1, fixing the sum of the out-weights of defaulted institutions, divided by n to be z, then the loss institution i receives due to the liabilities to defaulted banks is described by the random quantity Poi(w −,1,1 i z) and, for continuous ρ 1 , similarly as in the derivation of Lemma 2.1, the number of finally sold sharesχ solves such thatχ is a root of f 1 (z, ·). Moreover, the final systemic importance of defaulted institutions divided by n is given by So the rootχ of f 1 (z, ·) determines the end of the process and again g yields the damage by defaulted institutions.
These heuristics show that the joint fire sales and default contagion process should come to an end at a joint root of the functions f r ,α,β , (r , α, β) ∈ V , and f m , m ∈ [M]. Under some circumstances, however, if the distribution of (W − , W + , X, S, C, L, A) has atoms and one or more of the functions ρ α , α ∈ [T ], are discontinuous, also the functions f r ,α,β and f m might be discontinuous. Similar as in the previous section, it is then in general not possible to determine the precise end state of the system. Still we will be able to derive lower bounds on the final default fraction and the vector of finally sold shares. To this end, define lower semi-continuous modifications of g, where as before • P 0 and P 0 the largest connected subsets of and thus 0 ∈ • P and 0 ∈ P). We will later make use of the fact that P and P 0 are clearly closed sets. Finally, define z * ∈ R V +,0 and χ * ∈ R M +,0 by (z * ) r ,α,β := sup (z,χ )∈P 0 z r ,α,β and (χ * ) m := sup (z,χ)∈P 0 χ m . Then the following holds: The proof is analogue to the one of [18, Lemma EC. 1]. We can then describe the final default fraction and the number of sold shares asymptotically as n → ∞ in terms of (ẑ,χ ) and (z * , χ * ).

In particular, for the final price impact h m (χ n ) on asset m ∈ [M] it holds
In most cases, (ẑ,χ) and (z * , χ * ) will coincide and • g(ẑ,χ ) = g(z * , χ * ). Theorem 3.3 then describes the limits in probability of χ n and n −1 S n for n → ∞. Note that the final default fraction can be obtained from the theorem by choosing S ≡ 1.

Resilient and non-resilient systems
Our results from the previous section allow us to compute the final state of a system that was initially hit by some exogenous shock starting a cascade of default contagion and fire sales. We shall now go one step further and describe the vulnerability of an initially unshocked system to small shocks. We achieve this goal by considering shocks L of different magnitude on the same initially unshocked system described by (W − , W + , X, S, C, A). In the following, if we use the notations g, • g, z * and χ * from Sect. 3 we mean the unshocked system with L ≡ 0.
Our notion of resilience is related to the one for pure fire sales in [18] and this section uses and extends ideas and methods from [18,Sect. 3].

Resilience
When it comes to regulation of a financial system, one desirable property is the capability to absorb local shocks rather than amplify them through large parts of the system. In our asymptotic model we can consider arbitrarily small shocks L and the following natural notion of resilience emerges: when considering initial shocks L such that E[L/C] → 0, then a system is called resilient if also the induced asymptotic final damage n −1 S n,L tends to 0.
Here and in the following we say that a sequence of events (E n ) n∈N holds with high probability (w.h.p.) if P(E n ) → 1, as n → ∞.
While this definition (and Corollary 4.3) is concerned with the final systemic damage only, the following theorem also investigates the number of sold shares of the assets (and hence the price impacts which also affect the wider economy) in the limit E[L/C] → 0. In particular, we derive the following resilience criterion.
It is thus sufficient for resilience if (z * , χ * ) = (0, 0) or equivalently P 0 = {(0, 0)}. If, however, g(z * , χ * ) = 0 while χ * = 0, then Corollary 4.3 still ensures that the final systemic damage stays small and the system is resilient by Definition 4.1, while a large fraction of shares of assets is sold due to fire sales as a reaction to small local shocks-see Theorem 4.6.

Remark 4.4
Let us compare our results with those obtained in combined default contagion and fire-sales analysis in an Eisenberg-Noe setting as for example performed in [5,12,34]: Although there are differences in the details of the contagion process and the exact specification of fire-sales, our deterministic setup in Sect. 2 and our Proposition 2.3 shares similarity with the setup of extended Eisenberg-Noe models and existence results of a greatest and lowest clearing vector in that literature. However, the results in Sect. 3 depart from this setting by analyzing the stochastic model and n → ∞ limits. Due to the asymptotic analysis one gains (a) a description of the final default set and the number of sold assets as a fixpoint equation of reduced dimension (Theorem 3.3) and (b) a classification of resilience (in particular Theorem 4.2) which is not possible in the deterministic setting. While, our setup ignores possible intervention by regulators, the idea behind our Definition 4.1 of resilience is that the financial system is stable enough such that in case a cascade starts, intervention is not necessary because amplification effects are small. The results serve as a guideline for the design of regulatory requirements that ensure that the financial system has the desirable property that intervention is not necessary in case of a shock. This is in contrast to the analysis in [5] where the authors provide an analytical framework to measure the size of the amplification, and thus the conditions under which the threat of a regulator of not intervening is credible.

Non-resilience
We now aim at characterizing non-resilient systems. For this note that our fire sales model used here is in itself a conservative model as for each institution i ∈ [n] the entire asset holdings x i are exposed to the price impact h(χ n ). It therefore ignores intermediate sales at a more favorable asset price level. We refer to [18] for more discussion on and a treatment of intermediate sales. The following results still give a first indication of non-resilience for general financial systems.
We consider shocks of the form i ∈ {0, 2c i } such that P(L = 2C) > 0 and L/C is independent of (W − , W + , X, S, C, A). It may seem odd at first to choose i = 2c i (or any other multiple strictly larger than 1) instead of i = c i to express the default of institution i. The reason is that in the proof of Theorem 4.6 below we want to use Theorem 3.3 which only considers the limiting random vector (W − , W + , X, S, C, L, A). It would then be possible that L = C in the limit n → ∞ while L n < C n almost surely for all n ∈ N. This situation would not be distinguishable from L n = C n for all n ∈ N and in order to derive meaningful results in Theorem 4.6 we have to choose i > c i . Since , this does not affect the contagion process.
In contrast to Definition 4.1 of resilience, we call a financial system non-resilient if any small shock causes a lower bounded linear damage by bankrupt institutions.  The assumption on h(χ ) is a rather mild one and is satisfied for all standard choices for price impact functions such as linear price or log-linear price impact.
For most practical purposes Corollaries 4.3 and 4.7 hence fully determine whether a financial system is resilient or non-resilient.

Applications and simulations
In this section, we provide two applications of our theory. Example 5.1 has a twofold purpose: it demonstrates the joint impact of default contagion and fire sales. The model parameters are chosen in such a way that the financial system would be resilient with respect to either one of them but non-resilient with respect to their combination. Further, we provide simulations for finite networks in this setting to confirm the applicability of our asymptotic results also for reasonably sized financial systems. In Example 5.2, we derive sufficient capital requirements for very general combined financial systems of default contagion and fire sales. This extends results from [19] for pure default contagion and from [18] for pure fire sales. From a regulator's viewpoint, capital requirements are the main tool to manage the risk of financial institutions. Traditionally, sufficient capital requirements are computed for each institution on a standalone basis by applying some (univariate) monetary risk measure like for example Value-at-Risk or Expected Shortfall. However, this approach fails to capture systemic effects, and a recent line of research aims at rectifying this deficiency by determining system-wide capital requirements based on various types of systemic (multivariate) monetary risk measures.
Historically, the first approach to systemic risk measures was to apply a univariate (monetary) risk measure to some aggregated system-wide risk factor, see [11,26,29] for an axiomatic characterization of this family of systemic risk measures. Capital requirements for individual institutions must then be computed by some rule to allocate the total systemic risk capital. An alternative approach is to determine the total systemic risk by computing sufficient capital requirements on an institutional level before aggregating to a system-wide risk factor, see [4,6,21]. In this context an important but difficult question is whether from an institutional point of view the systemic capital requirements correspond to fair shares of the overall systemic risk, see e.g. [6]. In particular, one of the major problems in the implementation of the methodologies proposed in the literature mentioned above would be the fact that a given individual systemic capital requirement in general depends on the configuration of the complete system. As a consequence, one institution's capital requirement might be manipulated by other institutions' behaviour, or the entrance of a new institution into the system would potentially alter the capital requirements of all other institutions (even without direct business relations), for example.
One important contribution of the asymptotic methodology proposed in this paper is that, besides certain global parameters that need to be determined by a regulating institution, the implied systemic capital requirement for a given institution i ∈ [n] only depends on its asset holdings x i and its in-weights w −,r ,α i , which can be thought of as in-degrees, see [19]. They are thus very transparent and can be computed locally by the institutions themselves as they only depend on the institutions' own business decisions. This prevents institutions from manipulating their own or others' capital requirements and enables a fair allocation of systemic risk in the financial network. For simplicity we assume S ≡ 1 throughout this section and hence consider the final default fraction as the measure of systemic damage. Since c i > 3, the system without fire sales would then be resilient (see [19,Theorem 3.7]). Also the pure fire sales system without loans would be resilient by [18,Corollary 1]  and hence f (0) = −3/7 < 0. However, for the combined contagion system we derive that where Ei(x) := x −∞ t −1 e t dt denotes the exponential integral. In particular, f 1,1,1 (z, z) = f 1 (z, z) and Hence the directional derivatives of f 1,1,1 and f 1 in direction (1, 1) are both positive and thus z * > 0 and χ * > 0. See Fig. 2 for an illustration. More precisely, we numerically determine (z * , χ * ) ≈ (0.992, 0.992) and since g(z, χ) = • g(z, χ) is given by a lower bound on the final default fraction is asymptotically given by g(z * , χ * ) ≈ 29.24%. The combined system is thus non-resilient.

(b)
If we let each bank in the system initially default with probability p = 1%, then we can determine (ẑ p ,χ p ) = (z * p , χ * p ) ≈ (1.028, 1.028) as the unique joint root of the functions yields an asymptotic final fraction of 31.32%.
To verify this result for finite systems, we performed 10 5 simulations on systems of sizes between 10 2 and 10 4 (1000 simulations for every multiple of 100) as well as 10 5 simulations on systems of sizes between 10 3 and 10 5 (1000 simulations for every multiple of 1000), where we drew x i randomly according to the limiting distribution of X . Figure 3 shows the mean over all 1000 simulations as an orange curve. Additionally, 100 simulations for every system size are depicted by blue dots. The theoretical final fraction of 31.32% is drawn as a red line. While for small n only few simulations ended in a final default fraction significantly larger than p = 1% and those which did were considerably higher than the theoretical value of 31.32%, as n becomes larger, the average final fraction converges to 31.32% and the deviation around this value becomes smaller and smaller. Already for n ≈ 4, 000 the simulated and the theoretical results are considerably close.

Example 5.2 (Capital requirements)
In the previous example we considered the case that ρ(u) = 1{u ≥ 1}, i.e. sales at default only. Intermediate sales will make the system less resilient, and we shall consider such an example now. We choose ρ(u) = 1 ∧ u q for some q > 0. We consider one asset only and the parameter q could be understood as a measure for the banks' confidence in the asset. Further, assume that the price impact is h(χ) = (χ ν ) for small χ and ν ≥ q −1 , i.e. there exist constants μ 1 , μ 2 ∈ (0, ∞) such that μ 1 χ ν ≤ h(χ) ≤ μ 2 χ ν for χ ≤ χ 0 small enough. The generalization to multiple assets is straight forward in analogy to [18,Corollary 5].
Adding the capital requirements c dir against direct contagion to the sufficient capital requirements c ind (x) = θ x against fire sales (indirect contagion) found in [18, Corollary 4], we thus get the combined capital requirement In fact, we can show that these capital requirements make the combined system resilient: It holds for χ > 0 small enough since C ≥ θ X . Since f 1 (z, χ) is continuous in z for fixed χ, we can then choose z > 0 small enough such that still f 1 (z, χ) < 0. Furthermore, it holds for χ < h −1 (θ ) and z > 0 small enough that by resilience of the pure default contagion system (see the proof of [19,Theorem 3.11]). By definition of (z * , χ * ) we can then conclude z * < z and χ * < χ. However, z and χ can be chosen arbitrarily small and thus z * = χ * = 0. The combined system is then resilient by Corollary 4.3.

Model estimation procedure
Our model describes how distress propagates through financial systems by default contagion and fire sales. The previous section shows that our analytic results, although derived asymptotically for large systems, approximate cascades in finite systems well. When using our model to analyze the stability of some observed real financial network, however, it is clearly necessary to calibrate the used model parameters to observed quantities. For this reason, we shall discuss how such a calibration can be achieved. We start with the type assignment. One of the core assumptions of our model is the classification of institutions into certain blocks by their type. While this assignment can be obvious with regard to certain institution characteristics such as its business model (retail bank, hedge fund, insurance company, etc.) or its geographical location, other traits can be more challenging to detect and require a more sophisticated calibration. In particular, we need to group institutions into communities and identify core-periphery structures to describe real financial networks in a proper way. The literature on such detection algorithms, however, is well developed. See for example [7,13,15,22,36,37], respectively [27,33].
Having assigned a certain institution type to all members of the financial system, the next challenge is the choice of vertex weight parameters for each of them. In the following, we propose an estimation of weights based on likelihood maximization. For this purpose, we assume that for each institution the distribution of its exposures r = 1 . . . R towards institutions of a given type is known. Note that the (distribution of) exposures might not be directly observable and possibly need to be estimated.
In our model for any two types α, β ∈ [T ] and r ∈ [R] a subsystem of links is induced (all links of exposure size r going from an α-institution to a β-institution) and the calibration of {w : α i =α,α j =β is independent from all other subsystems. To simplify the discussion in the following, we thus consider a one-type (T = 1) system with constant exposure of 1 (R = 1) and abbreviate w ±,1,1 i by w ± i . By the same methods any other subsystem can be calibrated to observed data.
First note that for a network G of size n with edge set E(G) the likelihood of weight sequences w − = (w − 1 , . . . , w − n ) and w + = (w + 1 , . . . , w + n ) is given by One can always derive the maximum-likelihood estimatorsŵ − 1 , . . . ,ŵ − n ,ŵ + 1 , . . . ,ŵ + n by numerically maximizing L. In order to obtain some intuition about them, we further want to derive an approximation of the estimators. For this, we assume that w + i w − j n for all i, j ∈ [n] which is a reasonable assumption at least when W + , W − are square-integrable. We can hence approximate Differentiating with respect to w − l resp. w + l for all l ∈ [n], we are left with solving the equations In particular, d − l /w − l resp. d + l /w + l must be independent of l and we can thus find constants λ − and λ + such that w − , we obtain that λ = 0 and λ − = λ + = n/ i∈ [n] d − i such that the approximated likelihood function is maximized by That is, the approximated weight estimators are proportional to the observed degrees and only normalized in a certain sense. The smaller the observed fraction max i, j∈ [n] k is large, w − and w + have to be estimated numerically. After each institution has been assigned a type α i according to one of the above cited methods and their weights w − i and w + i have been estimated, it remains to fit a multivariate distribution to the empirical [n] in order to completely determine the distribution of (W − , W + , C, A).

Discussion
In this paper we propose an asymptotic model to analyze contagion in financial networks. It combines two important channels of contagion: default contagion and fire sales. It can be specified by the joint distribution of capital, asset holdings, network liabilities and other relevant quantities. There is no restriction on the joint distribution of the parameters except that we require existence of a first moment. This makes the model rather general and, thanks to its asymptotic nature, allows the parameters of the model to be chosen from all kinds of distribution as Pareto, Exponential, Gamma or Fréchet to name just a few. The sales functions ρ α , α ∈ [T ] allow to specify (and test accordingly) different regulatory environments. For example in a crisis, a regulator could use the model as a decision guidance to decide whether to suspend the enforcement of certain leverage requirements in order to stop a contagion spiral driven by asset sales, aimed to fulfil them. See [12] for a discussion of events that triggered such regulatory actions in the past. Moreover, the model serves as a decision tool for the search of the most favourable financial systems and regulatory environments. The results provided in Theorems 3.3, 4.2 and 4.6 allow to test different stress scenarios easily without complicated and computationally heavy simulation of the entire contagion process. Only the functionals g, f m and f r ,α,β have to be calculated, which (if an analytic expression is not available for the chosen parameters) can always be done via simple Monte Carlo simulation. As we have seen in Examples 5.1 and 5.2, in some situations conclusions about resilience can even be derived without any simulation, on a purely analytic level.
Despite the generality of the model, results have to be taken with some caution. While it is a first step towards an integrated model within the asymptotic framework, it is not a fully fledged systemic risk analysis aiming to provide precise numerical predictions about the contagion outcome triggered by certain stress scenarios. Still, we believe that it serves as valuable tool for comparison of different regulatory measures and for identifying preferable structures of financial systems. Some of the most crucial simplifications of our model are: • Conservative: The model is conservative in several regards: The recovery rate of defaulted institutions is assumed to be zero. This can be considered a reasonable assumption in the short term, considering that the resolution of defaulted institutions takes time. For example, the resolution of Lehman Brothers took over 10 years, and in a bond auction for the settlement of credit default swaps written on Lehman Brothers just three weeks after its default the realized recovery rate only amounted to 8.625% [30]. We remark, however, that all results in our model can be derived analogously for any other exogenously given (but possibly institution-dependent) recovery rate. Similarly, the fire-sales process is conservative as x i · h(χ) serves only as an upper bound to the loss experienced by institution i after χ shares have been sold. • Asset purchase The model does not feature buyers who might jump in to profit from buying assets that have devalued due to the fire-sale spiral. These buyers are most likely part of the non-banking sector and serve as crucial liquidity providers as shown in [10]. While our block model allows to include these institutions even if they do not participate in the interbank lending market and are not selling assets, their positive effect as a liquidity provider can only be incorporated via the specification of the function h. Modelling asset purchases in an endogenous way, however, is not possible within our current model. ensures that as n → ∞ the number of vertices with certain parameters stabilizes. This together with the first moment assumption in 3.1 and the specification of link probabilities (3.1) has the consequence that the influence of a finite set of institutions vanishes as n → ∞. This might seem at odds with the idea that a small set of banks is systemically important and might have to be regulated differently. In our framework however, it is more natural to think of a small fraction of banks (of size εn) to be systemically important. Within our block model framework one could then assign to them their own block α SIFI and ensure that (W − , W + ) is specified such that Systemically Important Financial Institutions build significantly more links than other institutions.
Some of the simplifications mentioned give rise to future investigations. Also, this paper focuses on the theoretical foundations, accompanied by a simulation study to show the accuracy of the asymptotic results for finite networks. While we study the implications of our model for few stylized examples, it is beyond the scope of the current paper and left for future research to apply this model to the many different possible settings. In particular the relatively advanced block model setup for the liability network allows to analyze many interesting shock distributions. To name just a few examples, one could analyze shock distributions targeting institutions of certain size only, institutions under certain regulatory requirements, institutions with large asset holdings or only institutions participating in the interbank market.
Acknowledgements Open Access funding provided by Projekt DEAL.
Open Access This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The images or other third party material in this article are included in the article's Creative Commons licence, unless indicated otherwise in a credit line to the material. If material is not included in the article's Creative Commons licence and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder.

Proofs for Sect. 2
Proof of Lemma 2.1 Existence of a smallest solution (D n , χ n ) follows from the Knaster-Tarski theorem. Clearly, ∅ = D (0) ⊆ D n and 0 = σ (0) ≤ χ n . So let us inductively assume that D (k) ⊆ D n and n −1 σ (k) ≤ χ n for some 0 < k ∈ N. Then x i ρ i j∈D n e j,i + i + x i · h χ n c i = χ n .
In particular, this shows that D n = k∈N D (k) ⊆ D n and χ n = n −1 lim k→∞ σ (k) ≤ χ n .

Proof of Lemma 2.2
Existence of a smallest solution (D n ,χ n ) follows from the Knaster-Tarski theorem. Consider now the adjusted contagion : for k ≥ 1. This process converges and clearly it holds We will now show that (D n ,χ n ) is a solution to (2.5) and (2.6) such that in particular D n ⊆D n D n andχ n ≤χ n ≤ χ n . Clearly, On the other hand, if for i ∈ [n] it holds then by continuity of h we find k ∈ N large enough such that Without loss of generality assume that k is large enough such thatD (k) =D n . Then in particular i ∈D (k) =D n and D n = i ∈ [n] : That is,D n andχ n solve (2.5). Moreover, they solve (2.6) as where we used left continuity of h, , and the fact thatD (k) =D n for k large enough.

Proofs for Sect. 3
We first consider the special case, summarized in the following definition, where the weights, asset holdings, systemic importance levels, capitals and exogenous losses take only finitely many different values.  (n), w + (n), x(n), s(n), c(n), (n), α(n)) n∈N is called finitary if there exist J ∈ N and a finite set +,0 × R M +,0 ×R +,0 ×R +,∞ ×R +,0 such that for all n ∈ N and i ∈ [n], there exists j = j(n, i) . Denote in the following p β j (n) := P(W − n =w − j , W + n =w + j , X n =x j , S n =s j , C n =c j , L n =˜ j , A n = β) and We can then prove a version of Theorem 3.3 for the finitary case:

In particular, for the final price impact h m (χ n ) on asset m ∈ [M] it holds
The difficulty for this problem lies in the fact that the functions f r ,α,β are discontinuous in χ . That is, there exist values for χ (sold assets) at which a linear fraction of banks defaults. However, f r ,α,β is discontinuous at (z, χ ) only if (c j −˜ j −x j · h(χ )) ∈ N for some j ∈ J and there are hence only finitely many (possibly degenerated) hyperplanes of discontinuities.
Proof. We start with the proof of the lower bounds. That is, for arbitrary > 0 we will show that n −1 S n ≥ n −1Ŝ n ≥ (1 − ) • g(ẑ,χ) and χ m n ≥χ m n ≥ (1 − )χ m w.h.p. We therefore consider the contagion process given by rounds (i ) and (ii ). That is, we first consider a cascade of default contagion. Once this cascade has ended (after at most n − 1 steps) we start a cascade of fire sales and so on.
In order to quantify the default contagion cascade we use [31, Theorem 3.2.4], which extends the setting in [17] for systemic importance. That is, if we denote byẑ 1 ∈ R V +,0 the smallest vector such that for all (r , α, β) ∈ V , then the systemic importance of finally defaulted banks is bounded by from below w.h.p. for any fixed δ > 0. In fact, by finitariness of the system we can find θ > 0 small enough such that (note that C − L + θ is the weak limit of C n − L n + θ again by finitariness) and we are thus in the setting of [17]. However, while [31, Theorem 3.2.4] focuses on the systemic damage due to defaulted banks only, here it is also important to keep track of all losses due to defaults. In fact, the proof of [31,Theorem 3.2.4] for finitary systems shows that the number q β j,k of institutions of class j and type β with a total edge weight from finally defaulted neighbors of at least k ≤c j is lower bounded by Since in this part of the proof we are interested in lower bounds, we assume in the following that q That is, we increase the losses due to default contagion.
Next, we want to use [18, Theorem EC. 1] to quantify the impact of the round of fire sales. We need to consider losses (and defaults in particular) due to the previous default contagion cascade. That is, we need to add to the exogenous losses i the edge weight from defaulted debtors of each bank i ∈ [n]. This leads to a new loss vector i i∈ [n] . Note that we can set i =˜ j + c j −˜ j if i is of type j and the total edge-weight k from finally defaulted debtors of i is larger or equal to c j −˜ j . Denoting by L n a random vector distributed according to the empirical distribution function of i i∈ [n] , we thus derive that w.h.p.
For simplicity in the notation, we assume that from (x j ,s j ,c j ,˜ j ) = (x k ,s k ,c k ,˜ k ) it follows j = k (i.e. classes j and k are not distinguished by their in-and out-weights only) in the following. Otherwise consider sums over classes with the same asset holdings, systemic importance, capital and exogenous loss. In particular, for the weak limit (X, S, C, L , A) of (X n , S n , C n , L n , Let now the corresponding functions as in [18] adapted to the setting with heterogeneous sales functions andχ δ its smallest fixed point. Then χ ) and by [18,Lemma EC. 2] we derive that lim inf δ→0+χ δ ≥ χ 1 , whereχ 1 denotes the smallest joint root of the functions We can hence choose δ small enough such that the number of finally sold shares of asset m is lower bounded by n(1 − )χ m 1 w.h.p. by [18,Theorem EC. 1]. Further, for and possibly further reducing δ, we derive n −1Ŝ n ≥ ,χ), then this finishes the proof of the lower bounds.
If (ẑ 1 ,χ 1 ) = (ẑ,χ), then by construction of (ẑ,χ),ẑ 1 andχ 1 it must hold thatχ 1 ≤χ andẑ 1 ẑ 2 ≤ẑ, whereẑ 2 ∈ R V +,0 denotes the smallest vector such that for all (r , α, β) ∈ V , The next step in the cascade process would now be the default contagion cascade from (i ) starting from the state of the system after the fire sales cascade. Note, however, that (w.h.p.) we can equivalently restart the whole cascade process if for the default contagion cascade we choose capitals c i − i − x i · h((1 − )χ 1 ). If anything this reduces contagion effects which is alright because we are interested in lower bounds.
By the finitariness of the system, if we choose small enough, thenẑ 2 is also the smallest solution of and we can hence use [31,Theorem 3.2.4] to quantify the default cascade. By exactly the same means as above we can then translate the losses due to default contagion into exogenous losses and investigate the fire sales process by [18,Theorem EC. 1]. We derive that the vector of finally sold shares is lower bounded by n(1 − )χ 2 w.h.p., whereχ 2 denotes the smallest joint root of the functions ,χ ), then this finishes the proof of the lower bounds. Otherwise we can continue on for t ≥ 3. Note, however, thatẑ ẑ t is only possible ifχ t−1 andχ t are separated by a hyperplane of discontinuity of f r ,α,β for some (r , α, β) ∈ V (and hence the fire sales lead to further defaults in the system). However, as remarked earlier, there can only be finitely many such hyperplanes for finitary systems. Hence by the procedure outlined above, we will reachẑ in finitely many steps and hence the end results still hold w.h.p.
We can now turn to the second part of the proof. We consider the contagion process in rounds (i) and (ii) to derive upper bounds on S n and χ n . Let (z(δ),χ (δ)) δ>0 be the constructing sequence of (z * , χ * ) analogue to [18,Remark EC. 1]. Then note that by upper semi-continuity and the discrete nature of f r ,α,β we can find > 0 such that f r ,α,β (z,χ(δ)) = f r ,α,β (z, χ * ) for all 0 ≤ δ < , (r , α, β) ∈ V and z ∈ R V +,0 . Fix now some δ ∈ (0, ) and consider the financial system with reduced capital values c i − i − x i · h(χ(δ)) for each bank i ∈ [n]. We only want to consider the default contagion process in this new financial system and we are hence in the setting of [16] with limiting random variables (W − , W + , S, C − L − X · h(χ(δ)) + , A). Note that by finitariness the regularity transfers. By the choice of δ above, we derive that for z * δ in this new financial system, it holds z * δ = z * and by [31,Theorem 3.2.4] we know that the final systemic damage in the new system is upper bounded by The proof of [31,Theorem 3.2.4] actually shows that the number of banks of type β and class j with at least an edge-weight of k from defaulted neighbors at the end of the default contagion process is upper bounded by w.h.p. for any fixed > 0. Similarly, as in the first part of this proof (for the lower bounds) we can then construct a fire sales system with limiting random vector (X, S, C, L ) such that which dominates the stochastic final state after the default contagion cascade w.h.p.
Let now the corresponding functions for the fire sales system as in [18] adapted to the setting with heterogeneous sales functions and χ * the corresponding value for χ * in [18]. Then for f m (z, χ ) as in Sect. 3, In particular, we can choose > 0 small enough such that where in the last inequality it was used that f m (z * ,χ(δ/2)) ≤ f m (z(δ/2),χ (δ/2)) = −δ/2. We can hence conclude that χ * ≤χ(δ/2) componentwise. By (a slightly tedious but simple generalization to type dependent sales functions of) [18, Theorem EC. 1] we thus derive that the number of finally sold shares of asset m in the fire sales system (X, S, C, L ) is upper bounded by n((χ * ) m + o(1)) ≤ n(χ m (δ/2) + o(1)) ≤ nχ m (δ), where the last inequality holds for n large enough sinceχ m (δ) > 0. The idea for the rest of this proof is now to apply this upper bound on the number of finally sold shares inductively in each step of the following adjusted contagion process: Let χ 0 = 0 ∈ R M and for 1 ≤ k choose D k ⊆ [n] the smallest set such that ⎫ ⎬ ⎭ respectively χ k ∈ R M +,0 the smallest vector such that Clearly, this process stabilizes after at most n steps at (D n , χ n ), the smallest solution to (2.3) and (2.4) and by Lemma 2.1 gives thus an upper bound to the actual contagion process described by (2.1) and (2.2), which is sufficient for our considerations here. In particular, since χ 0 = 0 ≤χ(δ), we derive that is the smallest set such that and hence χ 1 ≤ χ δ , where χ δ denotes the smallest vector such that However, (8.4) is exactly the cascade of default contagion with initial capitals given by , which we considered before and (8.5) the subsequent cascade of fire sales for which we showed that the vector of finally sold shares is upper bounded by nχ(δ) w.h.p. (i.e. χ δ ≤χ(δ)). We can then consider the second iteration and derive that w.h.p. D 2 ⊆ D δ and χ 2 ≤ χ δ . Inductively this shows that w.h.p. D k ⊆ D δ and χ k ≤ χ δ ≤χ(δ) w.h.p. for each fixed k ∈ N (independent of n). Now note that because of the finitariness of the system, the contagion process actually stabilizes already after a bounded number of iterations K ∈ N (independent of n). We have thus shown that also for the final vector of sold shares χ n it holds χ n ≤ χ n = χ K ≤χ (δ) w.h.p. Letting δ → 0 this proves the upper bound on χ n .
For the final systemic damage note that w.h.p. D n ⊆ D δ and hence by (8.3). Using upper semi-continuity of g and letting δ → 0 this finishes the proof.

Proof of Theorem 3.3
In this section, we show how the validity of Theorem 8.2 can be extended to the case of general (non-finitary) regular vertex sequences. The idea is the following: We will approximate the given regular vertex sequence from below and from above by finitary vertex sequences and couple the contagion processes in those systems such that the final default fraction and the number of sold shares is under-or overestimated by the finitary systems.
By the Portmanteau theorem, we then know that for j ≥ j k large enough it holds H and j ≥ j k (possibly increase j k ) that already describe discrete distributions approximating F from below and from above. To qualify as a distribution function of a finitary vertex sequence, however, only finitely many atoms are allowed. For the lower bound, we thus choose thus setting capital to ∞ for banks with in-weight, out-weight, asset holdings, capital or exogenous losses larger than k. We call such banks large in the following. Banks with infinite capital keep their capital. As banks with infinite capital cannot ever default or sell any asset shares anyway we set their weights, asset holdings and losses all to zero. In particular, above choice reduces contagion in the system even further and thus for all k ∈ N the final systemic damage n −1 (S A k ) n is stochastically dominated by n −1 S n . The same holds for the number of finally sold shares of the assets.
We now want to construct the upper bound distribution function F B k . That is, we need to accumulate the contagious potential of all large banks to finitely many point masses. Thus denote the fraction of large β-banks in the system by Similar as for the lower bound before, we now let F B k be given by F The construction above ensures that small banks are more contagious than in the original system as their weights, asset holdings and losses are increased whereas their capitals are

Lemma 8.4 It holds
as well as lim sup k→∞ (χ A k ) m ≥χ m and lim inf k→∞

Proofs for Sect. 4
We keep the notation g, f r ,α,β , f m , z * , χ * , • g, • f r ,α,β , • f m ,ẑ andχ for the quantities from Sect. 3 for the unshocked system and add the index · L to indicate the corresponding quantities and functions in the system shocked by L.