Financial Crises, Systemic Risk and Resolution

Introduction and context

Financial institutions perform maturity transformation: they fund relatively illiquid, long-term assets with liabilities that may be withdrawn or redeemed quickly. This function supports investment and payments, but it creates fragility. A bank can be economically solvent—its assets exceed its liabilities—yet fail if it cannot meet withdrawals when due. The central analytical problem is therefore not simply whether an institution is profitable, but whether confidence, liquidity, capital and payment capacity can be maintained under stress.

A financial crisis is a period in which substantial uncertainty about the value or liquidity of financial claims disrupts intermediation, asset markets, payments or the real economy. A systemic crisis is more serious: distress at one or more institutions threatens the functioning of the financial system as a whole. The distinction matters because private risk management may be adequate for an individual firm while remaining inadequate for correlated or network-wide shocks.

This chapter analyses bank runs, contagion, interconnectedness and procyclicality; examines major crisis episodes; evaluates early-warning systems; and explains recovery and resolution frameworks, including bail-in mechanisms. The discussion is particularly relevant to chief risk officers, regulators, resolution authorities, treasury managers, auditors and CFM professionals.

Learning objectives

By the end of this chapter, the reader should be able to:

1. Explain why banks are vulnerable to runs and distinguish liquidity failure from insolvency.
2. Analyse direct, indirect and behavioural channels of contagion.
3. Evaluate interconnectedness, common exposures and procyclical behaviour.
4. Interpret early-warning indicators and stress-testing evidence.
5. Compare recovery, resolution, bail-out and bail-in strategies.
6. Assess governance, ethical and regulatory issues in crisis management.
7. Apply a structured framework to a systemic-risk case.

1. The anatomy of a financial crisis

1.1 From vulnerability to crisis

Crises commonly develop through a sequence rather than a single event:

1. Accumulation of vulnerability: leverage, maturity mismatch, concentration, weak underwriting or excessive reliance on short-term funding increases.
2. Trigger: an interest-rate shock, asset-price decline, cyber incident, sovereign default, fraud, pandemic or loss of confidence occurs.
3. Information revision: investors reassess asset quality and the reliability of management disclosures.
4. Liquidity pressure: depositors, wholesale lenders and counterparties demand cash or collateral.
5. Fire sales and feedback: asset sales depress market prices, causing further losses and margin calls.
6. Contagion: distress spreads through contractual exposures, common assets, payment systems and expectations.
7. Policy response: authorities provide liquidity, guarantee liabilities, recapitalise, restructure or close institutions.

A useful distinction is between a shock and a vulnerability. A small shock can cause substantial damage when leverage and confidence are already fragile. Conversely, a large shock may be absorbed by institutions with strong capital, liquid assets, diversified funding and credible governance.

1.2 Liquidity and solvency

Liquidity is the ability to meet obligations when due. Solvency is the excess of the economic value of assets over liabilities. Let:

where E is equity or net worth, A is the economic value of assets, and L is the value of liabilities. The identity is measured in currency units and assumes assets and liabilities are valued on a consistent basis. If E < 0, the institution is economically insolvent; however, accounting values, expected recoveries and valuation timing may make insolvency difficult to observe immediately.

A solvent bank can suffer a liquidity crisis if withdrawals exceed immediately available cash and funding capacity. A useful simplified liquidity gap is:

where G_t is the liquidity surplus at time t, C_t is cash and unencumbered liquid assets, F_t is reliable inflows or committed funding available within the horizon, and O_t is contractual and stress-related outflows. A negative G_t indicates a funding shortfall under the specified scenario. The measure is scenario-dependent and does not prove insolvency.

Banks are vulnerable because depositors have short-term claims while loans and securities may be difficult to sell quickly without discounts. Deposit insurance and central-bank lender-of-last-resort facilities can reduce self-fulfilling runs, but they also create moral hazard if banks or depositors expect unconditional support.

1.3 Bank runs and coordination failure

In a traditional run, each depositor has an incentive to withdraw early because late claimants may receive less. Even if the underlying asset pool is sound, individually rational withdrawals can produce collective failure. Modern runs may occur through mobile banking, online platforms, uninsured corporate deposits, money-market funds and rapid wholesale funding withdrawals. Digital speed compresses the time available for supervisory intervention.

A run is not always irrational. Depositors may respond to credible information about losses, weak governance or concentration. The policy challenge is to distinguish useful market discipline from destabilising panic without suppressing transparency.

2. Contagion and systemic risk

2.1 Channels of contagion

Contagion is the transmission of distress from one institution, market or country to others. Important channels include:

• Direct contractual exposure: counterparty default causes a loss to another institution.
• Funding contagion: lenders reduce credit lines or refuse to roll over short-term debt.
• Asset-price contagion: institutions sell similar assets, lowering market prices for everyone.
• Collateral contagion: falling collateral values generate margin calls and reduce borrowing capacity.
• Payment-system contagion: failure to settle one obligation disrupts subsequent payments.
• Information contagion: investors infer that similar firms share hidden weaknesses.
• Behavioural contagion: depositors imitate withdrawals or investors imitate sales.
• Sovereign–financial feedback: bank rescues weaken public finances, while sovereign stress reduces the value of banks’ government securities.

The first four are often described as balance-sheet channels; the latter channels emphasise information, expectations and institutional credibility.

2.2 Interconnectedness and network risk

Interconnectedness includes ownership links, derivatives, secured funding, payment relationships, common service providers and correlated portfolios. It is not necessarily destabilising: diversified connections can spread liquidity and risk-sharing. The danger arises when links are opaque, highly concentrated or coupled with similar exposures.

A simple bilateral loss illustration is:

where L_i is the direct loss to institution i, x_ij is institution i’s exposure to counterparty j, r_j is the recovery rate on that counterparty’s claim, and n is the number of counterparties. The formula assumes exposures are measured consistently, losses are additive and recovery rates are known. It excludes second-round effects such as fire sales, funding withdrawal and changes in collateral values; therefore it is a first-round stress measure, not a complete systemic-risk model.

Network analysis often uses nodes for institutions and edges for exposures. A highly connected institution may be systemically important because its failure affects many counterparties. However, degree alone is insufficient. A less connected institution can be dangerous if it is a critical payment utility, a common collateral provider or a concentrated holder of a particular asset.

2.3 Procyclicality

Procyclicality means that financial behaviour amplifies the economic cycle. During expansions, rising collateral values, low defaults and abundant liquidity encourage lending and leverage. During downturns, banks tighten credit, raise margins, sell assets and build provisions, thereby worsening the downturn.

Examples include:

• risk models calibrated on recent benign data;
• collateral requirements that rise when prices fall;
• capital constraints binding after losses;
• investor redemptions from open-ended funds;
• credit ratings and covenants that trigger deleveraging;
• remuneration systems that reward short-term volume rather than resilience.

Countercyclical tools include capital buffers, dynamic provisioning, loan-to-value limits, debt-service limits, stress testing, liquidity requirements and restrictions on dividend distributions. These measures must be calibrated carefully: excessive restraint can suppress productive credit, while weak restraint permits dangerous leverage.

3. Major crisis episodes and comparative lessons

3.1 The global financial crisis, 2007–2009

The global financial crisis involved rapid growth in US housing credit, securitisation, leverage, complex derivatives and dependence on short-term wholesale funding. When housing prices declined and mortgage defaults increased, uncertainty about structured products spread through the financial system. Institutions reduced lending to one another, liquidity markets froze and several major firms failed or required extraordinary support.

Key lessons included the danger of relying on credit ratings, the opacity of off-balance-sheet exposures, the systemic importance of non-bank financial institutions and the need for credible resolution plans. Post-crisis reforms strengthened capital and liquidity standards, introduced recovery and resolution planning, established additional requirements for systemically important institutions and expanded supervisory stress testing.

3.2 The euro-area sovereign debt crisis

The euro-area crisis illustrated the sovereign–bank nexus. Banks held substantial quantities of domestic sovereign debt, while governments were sometimes expected to support banks. Sovereign deterioration weakened bank balance sheets; bank rescues, in turn, increased public debt concerns. Market fragmentation and uncertainty about collective European support intensified funding pressure.

The episode demonstrated that a currency union can retain nationally organised banking systems and fiscal responsibilities. It also highlighted the importance of credible common supervision, deposit protection, resolution funding and mechanisms for breaking the sovereign–bank loop.

3.3 The United Kingdom gilt-market stress, 2022

In 2022, leveraged liability-driven investment strategies used by pension funds faced sharp gilt-yield increases. Collateral calls required rapid sales of long-dated government bonds, reinforcing price declines. The Bank of England intervened temporarily to restore market functioning.

The episode showed that systemic risk is not confined to commercial banks. Leverage, liquidity mismatch and margin dynamics can create instability in pension funds, hedge funds and other non-bank financial intermediaries. Regulation must therefore consider the whole financial ecosystem.

3.4 Recent bank failures and rapid confidence loss

The failures of several banks in 2023 demonstrated how concentrated deposit bases, unrealised securities losses, weak interest-rate risk management and rapid digital withdrawals can interact. A bank may appear adequately capitalised under accounting conventions while market participants focus on economic losses and future funding capacity. The cases reinforced the need for interest-rate risk governance, diversified funding, realistic liquidity stress tests and clear communications.

4. Early-warning indicators and crisis surveillance

No single indicator reliably predicts a crisis. Effective surveillance combines quantitative indicators, qualitative intelligence and scenario analysis.

The credit-to-GDP gap is often used as a macroprudential signal:

Here Credit_t is aggregate private-sector credit, GDP_t is nominal gross domestic product and the trend is an estimated long-run reference. The ratio is dimensionless. A large positive gap may indicate excessive credit expansion, but trend estimates are revised, country structures differ and the indicator can generate false signals.

Stress testing evaluates whether institutions remain viable under specified adverse scenarios. A simplified capital-ratio projection is:

where each term is measured in currency units of common equity tier 1 capital. If expressed as a ratio, the resulting capital amount must be divided by the applicable risk-weighted assets, with the denominator also projected under the scenario. The equation is an accounting-style bridge, not a complete regulatory model; taxes, deferred tax assets, risk-weight migration and supervisory adjustments may be material.

Good early-warning systems have four features: multiple horizons, institution-specific and system-wide views, clear escalation thresholds, and governance that prevents management from dismissing inconvenient signals. Models should be supplemented by expert judgement, reverse stress testing and qualitative intelligence.

5. Recovery, resolution and public support

5.1 Recovery versus resolution

Recovery is action by the institution, while it remains viable or potentially viable, to restore financial strength. Measures include raising capital, selling assets, reducing risk, changing funding, suspending dividends, hedging exposures and restructuring operations.

Resolution is an authority-led process for a failing or likely-to-fail institution when ordinary insolvency would threaten financial stability. Its objectives generally include continuity of critical functions, protection of insured depositors, minimisation of public losses, preservation of value and avoidance of disorderly contagion.

A bail-out uses public funds or taxpayer-backed support to protect an institution or its creditors. A bail-in imposes losses on shareholders and eligible creditors by writing down claims or converting them into equity, thereby recapitalising the institution without relying primarily on taxpayer funds.

5.2 Resolution tools

Common tools include:

• Sale of business: transfer all or part of the institution to a purchaser.
• Bridge institution: temporarily transfer critical operations to a controlled entity.
• Asset separation: place impaired or difficult-to-value assets in an asset-management vehicle.
• Bail-in: write down or convert eligible liabilities.
• Insured-deposit transfer or payout: protect depositors according to the deposit-insurance mandate.
• Temporary liquidity assistance: provide funding when the institution is viable or resolution requires orderly execution.

The preferred tool depends on valuation, time, market capacity, legal powers, operational separability and the availability of loss-absorbing resources.

5.3 Bail-in hierarchy and safeguards

A credible bail-in normally follows the loss-absorption hierarchy: shareholders first, then subordinated instruments, followed by other eligible unsecured creditors, subject to legal exemptions and the principle that no creditor should be worse off than in ordinary insolvency. Insured deposits, client assets, payment obligations and certain operational liabilities may receive protection, depending on the jurisdiction.

Resolution planning requires sufficient total loss-absorbing and recapitalisation capacity, often held through instruments designed to be converted or written down. The framework must address valuation disputes, creditor communication, cross-border recognition, continuity of contracts and operational access to payment systems.

Bail-in is not costless. Anticipation of conversion can increase funding costs, create legal challenges and spread fear among creditors. If the perimeter of protected liabilities is unclear, a bail-in can trigger a run. Credibility therefore depends on transparent rules, adequate buffers, tested execution capability and effective deposit insurance.

5.4 The resolution decision

Authorities must balance four objectives:

1. Preserve critical economic functions.
2. Allocate losses according to law and risk-taking responsibility.
3. Prevent unnecessary contagion and disruption.
4. Avoid moral hazard and minimise public expenditure.

The least-cost option is not always the option with the lowest immediate fiscal expense. A disorderly liquidation may produce larger economic losses than a carefully managed transfer, particularly where payments, custody, trade finance or household deposits are involved.

6. Institutional recovery strategy

A credible recovery plan is more than a list of possible actions. It should identify quantitative triggers, decision rights, execution constraints and communication responsibilities. A robust plan contains:

• a clear inventory of critical legal entities, services and dependencies;
• recovery indicators covering capital, liquidity, market confidence and operational resilience;
• options ranked by speed, feasibility, cost and systemic effect;
• pre-positioned collateral and reliable funding sources;
• tested data, valuation and cash-flow reporting;
• restrictions on dividends, bonuses and intra-group transfers;
• scenarios involving cyberattack, market closure, deposit run and counterparty failure;
• escalation procedures for the board, supervisor and resolution authority;
• communication plans for employees, customers, investors and counterparties.

Recovery capacity is constrained by execution risk. An asset sale may be theoretically attractive but impossible during a market-wide fire sale. Capital raising may be unavailable when investor confidence has collapsed. Liquidity from a central bank may require eligible collateral. Consequently, plans should distinguish nominal options from options that can be executed within hours, days or weeks.

7. Applied case: illustrative regional bank stress

Background

Consider Riverland Bank, a fictional regional bank. It has a concentrated deposit base of technology companies, a large portfolio of long-duration fixed-rate securities and limited hedging. During a period of rapid interest-rate increases, the market value of its securities declines. The bank remains profitable on an accounting basis, but several large depositors request withdrawals.

Problem

Riverland faces three interacting risks: an economic capital loss on securities, a liquidity gap caused by concentrated withdrawals and reputational contagion through social media. Selling securities quickly would crystallise losses and could signal weakness. Borrowing against them may be limited by collateral haircuts.

Analysis

Management should first establish a reliable intraday cash position, identify unencumbered collateral and segment deposits by insurance status and behavioural stability. It should calculate survival horizons under base, severe and reverse-stress scenarios. Suppose available cash and reliable funding equal 900 million currency units, while stressed outflows over the next five days equal 1,150 million. The simplified liquidity gap is:

The bank therefore faces a 250 million currency-unit shortfall under the scenario. This does not by itself establish insolvency; it establishes an urgent liquidity problem.

The board should activate recovery options: retain earnings and suspend distributions, obtain secured central-bank or market funding if eligible, seek a capital injection, arrange a merger, and communicate accurately with depositors. It should not conceal losses or make unsupported assurances.

Approach and resolution alternative

If credible private recovery cannot restore viability, the authority should value assets and liabilities, protect insured deposits and determine whether a transfer or bridge bank can preserve critical functions. Eligible shareholders and creditors should absorb losses under the statutory hierarchy. A temporary liquidity facility may support continuity, but it should not indefinitely finance an insolvent institution.

Outcome

In the illustrative scenario, a stronger bank purchases Riverland’s deposits and viable loans, while a separate vehicle manages impaired securities. Shareholders are wiped out and subordinated creditors absorb losses. Insured depositors retain access to funds; critical payment services continue. The outcome is less disruptive than an unmanaged run, while avoiding a blanket guarantee of all creditors.

Learning points

The case demonstrates that liquidity and solvency must be analysed together; concentration can make apparently stable deposits volatile; interest-rate risk can become liquidity risk; recovery plans require executable options; and resolution credibility depends on valuation, legal authority, operational continuity and clear communication.

8. Governance, ethics and regulatory challenges

Crisis management raises distributional and ethical questions. Protecting depositors may be socially justified, but protecting sophisticated uninsured creditors can transfer losses to taxpayers or future customers. Managers may have incentives to delay recognition of losses, regulators may hesitate to close institutions, and political authorities may prefer visible short-term stability over long-term discipline.

Effective governance requires independent risk oversight, challenge by the board, accurate valuation, escalation of limit breaches and documented decisions. Internal audit should test recovery data and operational dependencies, while supervisors should challenge optimistic assumptions. Compensation should reflect risk-adjusted and long-term performance.

Regulation must also address proportionality. Small institutions may not require the same complexity as global banks, but simplified requirements must not ignore concentration, digital run risk or shared technology providers. Cross-border groups require cooperation among home and host authorities, consistent information exchange and recognition of resolution actions.

Technology creates both resilience and vulnerability. Real-time dashboards can improve liquidity monitoring, while artificial intelligence may detect unusual withdrawals or market signals. However, models can amplify false alarms, embed biased assumptions or fail during regime changes. AI should support—not replace—expert governance, explainability, data controls and human accountability. Cybersecurity, cloud concentration and third-party outages belong within systemic-risk analysis because operational failure can rapidly become a liquidity and confidence crisis.

9. Limitations and contemporary developments

Systemic-risk models face several limitations. Historical data contain few true crises; correlations change during stress; off-balance-sheet exposures may be incomplete; and behavioural reactions are difficult to estimate. Stress tests are conditional scenarios, not forecasts. A passing result does not guarantee survival against an unmodelled shock.

Contemporary policy therefore increasingly emphasises:

• macroprudential buffers that can be released during stress;
• resolution funding and loss-absorbing capacity;
• non-bank financial intermediation and margin dynamics;
• climate-related credit, market and insurance risks;
• cyber and third-party operational resilience;
• intraday liquidity and high-frequency deposit behaviour;
• credible deposit-insurance and emergency-lending arrangements;
• cross-border cooperation and resolvability assessments.

The central lesson is that resilience is a system property. Strong individual institutions reduce risk, but common exposures, correlated models, shared infrastructure and collective expectations can still produce instability. Effective policy combines sound institutional governance, market discipline, macroprudential supervision, credible resolution and carefully targeted public backstops.

Chapter Summary

Financial crises arise when vulnerabilities such as leverage, maturity mismatch, concentration and weak governance interact with a trigger and a loss of confidence. Banks can fail through liquidity pressure even before economic insolvency is certain. Contagion operates through direct exposures, funding, asset prices, collateral, payments, information and behaviour. Interconnectedness can improve risk-sharing but can also transmit losses rapidly, especially when institutions hold common assets or depend on shared infrastructure.

Procyclicality causes financial institutions to expand risk in good times and deleverage in bad times. Early-warning analysis should combine capital, liquidity, credit, market, network and governance indicators with stress tests and expert judgement. Recovery is institution-led; resolution is authority-led and seeks to preserve critical functions while allocating losses. Bail-in can reduce taxpayer exposure, but it requires legal clarity, adequate loss-absorbing capacity, valuation discipline, operational continuity and credible communication.

For CFM professionals, the practical priority is to connect balance-sheet analysis with behavioural, market and network effects. A robust recovery and resolution framework recognises that financial stability depends not only on solvency ratios, but also on confidence, speed, data quality, governance and the ability to execute decisions under severe uncertainty.

Key Terms

Bank run: Rapid withdrawal of deposits or funding because of actual or expected loss of confidence.

Bail-in: Write-down or conversion of eligible creditor claims to recapitalise a failing institution.

Bail-out: External financial support, often public, that protects an institution or its creditors.

Contagion: Transmission of financial distress from one entity or market to others.

Critical function: A service whose disruption could threaten financial stability or the real economy.

Early-warning indicator: A measure used to identify rising financial vulnerability before crisis.

Fire sale: Forced disposal of assets at prices below fundamental or orderly-market value.

Interconnectedness: Network of contractual, financial, operational and behavioural relationships.

Liquidity: Ability to meet obligations when they fall due.

Liquidity gap: Difference between available liquidity and stressed cash outflows.

Macroprudential policy: Policy aimed at limiting system-wide financial risk.

Maturity transformation: Funding long-term assets with shorter-term liabilities.

Moral hazard: Incentive to take greater risk because losses may be borne by others.

Procyclicality: Behaviour that amplifies economic and financial cycles.

Recovery plan: Institution-led set of actions to restore viability under stress.

Resolution: Authority-led restructuring or orderly failure of a failing institution.

Solvency: Condition in which the economic value of assets exceeds liabilities.

Stress test: Evaluation of financial resilience under specified adverse scenarios.

Systemic risk: Risk that impairment of the financial system harms financial services or the wider economy.

Total loss-absorbing capacity: Resources available to absorb losses and recapitalise an institution in resolution.

Review Questions

5 Short Answer Questions

1. Distinguish liquidity failure from economic insolvency.
2. Identify four channels through which contagion can spread.
3. Explain why procyclicality can worsen a downturn.
4. What is the purpose of an early-warning indicator?
5. Distinguish recovery from resolution.

5 Long Answer Questions

1. Explain the sequence from financial vulnerability to systemic crisis.
2. Evaluate the advantages and limitations of bail-in compared with bail-out.
3. Discuss how interconnectedness and common asset holdings can amplify losses.
4. Assess the role of stress testing in early-warning and supervisory decision-making.
5. Explain the governance requirements of an effective institutional recovery plan.

3 Analytical / Application Questions

1. A bank has 600 million currency units of available liquidity and projected stressed outflows of 780 million over its survival horizon. Calculate the liquidity gap and explain why the result does not alone prove insolvency.
2. Design an early-warning dashboard for a bank with concentrated uninsured deposits and a large fixed-rate securities portfolio. Justify at least six indicators.
3. Using the Riverland Bank case, recommend whether authorities should pursue private recovery, a merger, a bridge bank or liquidation. State the assumptions that would determine your recommendation.

Multiple Choice Questions with Answers

Question 1

Which condition best describes a liquidity crisis without immediate proof of insolvency?

A. Assets have no economic value

B. The institution cannot meet obligations when due despite potentially valuable assets

C. Liabilities are permanently zero

D. Regulatory capital is always negative

Correct Answer: B. The institution cannot meet obligations when due despite potentially valuable assets

Question 2

Which is an example of asset-price contagion?

A. A borrower repays a loan early

B. A bank diversifies its deposit base

C. Several institutions sell similar assets and depress their market prices

D. A central bank lowers its policy rate

Correct Answer: C. Several institutions sell similar assets and depress their market prices

Question 3

In the formula E = A − L, what does E represent?

A. Equity or net worth

B. Expected loss rate

C. External liquidity

D. Economic growth

Correct Answer: A. Equity or net worth

Question 4

Why can procyclicality intensify a downturn?

A. Banks expand lending after every loss

B. Falling prices can trigger tighter credit, margin calls and asset sales

C. Capital requirements always disappear in recessions

D. Deposit insurance eliminates all withdrawals

Correct Answer: B. Falling prices can trigger tighter credit, margin calls and asset sales

Question 5

Which indicator most directly measures short-term funding pressure?

A. Deposit outflows and funding concentration

B. Long-run population growth

C. Historical dividend yield alone

D. The number of branch employees

Correct Answer: A. Deposit outflows and funding concentration

Question 6

What is the principal purpose of a bail-in?

A. To protect all creditors from losses

B. To recapitalise a failing institution by allocating losses to eligible investors and creditors

C. To eliminate the need for valuation

D. To guarantee shareholder returns

Correct Answer: B. To recapitalise a failing institution by allocating losses to eligible investors and creditors

Question 7

Which statement correctly distinguishes recovery from resolution?

A. Recovery is authority-led and resolution is always voluntary

B. Recovery concerns restoring an institution’s viability; resolution is an authority-led process for failure

C. Recovery applies only to governments

D. Resolution occurs only after every creditor has been repaid

Correct Answer: B. Recovery concerns restoring an institution’s viability; resolution is an authority-led process for failure

Question 8

A bank has available liquidity of 900 million and stressed outflows of 1,150 million. What is its liquidity gap?

A. 250 million surplus

B. −250 million shortfall

C. 2,050 million shortfall

D. −1,150 million surplus

Correct Answer: B. −250 million shortfall

Question 9

Why is the credit-to-GDP gap an imperfect early-warning indicator?

A. It has no units and can never be calculated

B. Trend estimates can be revised and a high gap can produce false signals

C. It measures only cyber risk

D. It directly predicts the exact date of a crisis

Correct Answer: B. Trend estimates can be revised and a high gap can produce false signals

Question 10

Which principle is generally associated with a credible resolution hierarchy?

A. Shareholders absorb losses only after insured depositors are wiped out

B. Losses are allocated first to shareholders and then to eligible creditors, subject to legal safeguards

C. All creditors receive identical recovery regardless of seniority

D. Taxpayers must always absorb the first loss

Correct Answer: B. Losses are allocated first to shareholders and then to eligible creditors, subject to legal safeguards