Scammers can copy a name, a logo and a job title in a minute. A few checks you can run yourself show whether a “support agent”, recruiter or business partner is real.

A message lands on Telegram: “Hi, I’m Daniel from the security team at your exchange. We saw a login from a new device. Please confirm your wallet so we can protect your funds.” The profile photo shows the company logo. The English is good. Daniel is patient, and he knows your username.

Daniel does not work at the exchange. He works for a scam crew, and the “confirm your wallet” link empties your wallet.

People reported losing $3.5 billion to imposter scams in 2025, and nearly $1 billion of that went to people pretending to be a business, according to the FTC’s June 2026 report. The FBI’s figure for crypto is bigger. Victims told its Internet Crime Complaint Center they lost $11.4 billion to crypto-related crime in 2025, more than half of all the losses it counted that year (IC3 2025 report).

A lot of those losses started the same way. Someone claimed to work for a company, and the victim took their word for it. Some victims did not know how to check. Others saw a familiar name, a logo and a confident tone, and felt no need.

The checks run from a 30-second test to reading the hidden part of an email. If you only have time for two, use the first and the tenth: both are free, and both are very hard for a scammer to fake.

The one rule behind every check

Never use the contact details a stranger gives you to check that stranger.

If “Daniel” sends you a phone number, a website or an email address and says “contact us here to confirm”, all three belong to Daniel. Calling the number he gave you only proves that Daniel answers his own phone.

Every check in this list works the same way. You find the company’s official channel yourself, from a source the stranger did not hand you. Then you ask that channel whether the person is real.

Why people skip the check

It looks official, so we assume it is. A logo, a job title and a company name take a minute to copy. Real staff photos sit on LinkedIn and on company “Team” pages for anyone to download.

They already know something about us. Your username, your last order or the exchange you use is often public, or leaked in a data breach. Knowing those details says nothing about who the sender is.

There is a clock. “Your account will be frozen in 30 minutes.” The deadline is there to stop you checking. A real company will still exist after you spend ten minutes confirming.

The more urgent the message, the slower you should move.

13 ways to check that someone works for a company

1. Contact the company yourself, through its official website

Type the company’s address into your browser by hand, or use a bookmark you saved earlier. Skip links in the message and skip search ads, because scammers buy ads for fake support pages. Find the support page or contact form and ask: “Someone called Daniel, Telegram @daniel_sec_team, says he works on your security team and contacted me today. Is that real?”

Example. A “recruiter” emails about a job at a well-known firm. You open the firm’s careers page from a bookmark. The role is not listed, and the HR address on the page is another one. The recruiter does not work for the firm.

The catch is speed. If support takes two days to reply, wait two days, and do nothing the stranger asks in the meantime.

2. Use the company’s own checking tool

Many crypto exchanges now run a page where you paste a username, email, phone number or link, and it tells you whether the contact is official. Three examples:

• Binance Verify at binance.com/en/official-verification checks domains, email addresses, phone numbers and social handles, Telegram included. Binance says anyone who claims to work with Binance and cannot be confirmed there should be treated as untrusted.
• OKX has a channel verification page in its Help Center. OKX says to type the “@” before a username, or the result can be wrong.
• KuCoin runs an Official Verification Center at kucoin.com/cert. It checks emails, Telegram IDs, X accounts, websites and official wallet addresses.

Example. “Binance support” adds you on Telegram as @BinanceSupportDesk. You paste the handle into Binance Verify, and it comes back as not official. Block the account and report it.

Reach these tools by typing the exchange’s main address yourself and looking in its Help Center for “verify” or “official channel”. If the stranger sends you a link to a “checking tool”, that link is the trap.

A tool can confirm that an address belongs to the company. It cannot confirm that an email really came from that address, because the From line can be forged. Bybit’s own help page warns about this. For email, add check 5.

3. Ask them to message you from the company’s official X account

Ask the person to prove it on a channel only the company controls. Better still, contact that channel yourself. Here is a message you can send:

“Before I continue, please send me a DM from @ExampleExchange, the official account, confirming you work there and what this is about. Or I can DM that account and ask.”

A real employee will say “sure” or send you to the official support channel. A scammer will make excuses: “That account is for marketing only”, “our team can’t access it”, “this is confidential.” Each of those excuses means the person cannot prove it.

Make sure you have the right official account. Open it from a link on the company’s own website, since search results can show copycat accounts. It should have years of posts and the follower count you would expect.

Then look for X’s affiliate badge. Companies that pay X to verify their brand can link their staff accounts. An affiliated employee shows a small copy of the company’s profile picture next to their name, and tapping it opens the company’s account. A plain blue tick on a personal account says nothing about employment, because anyone can buy one.

Official accounts do get hacked. If the official account suddenly DMs you first with a link, treat that as suspicious too. Most companies never start private conversations about your account.

4. Ask for an email from the company domain, then read that domain letter by letter

A real employee can email you from a work address in a minute. Ask for it. A recruiter or “partner” who only uses Gmail, Outlook.com, Telegram or WhatsApp fails this test.

Then read the address slowly. Say the real company is Example Exchange at example.com. Each of these addresses is fake:

• support@examp1e.com (the digit 1 in place of the letter l)
• hr@exarnple.com ("rn" looks like "m" in many fonts)
• security@example-support.com (an extra word added to the name)
• team@example.co (the wrong ending)
• alerts@example.com.account-check.net (the real domain is account-check.net, read from the right)
• help@exаmple.com (the "а" is a Cyrillic letter that looks the same as the Latin one)

Two more things to check in the same email:

• The display name can say anything. “Example Exchange Security” might sit on top of x7k2@mail-ru.biz. Click or tap the name to see the real address.
• The Reply-To can differ. An email can arrive from an address that looks right and still send your reply to a stranger. Hit reply and look at the “To” field before you type.

A correct domain is a good start. On its own it can still be forged, which is why check 5 comes next.

5. Check the email’s sign-in results (SPF, DKIM and DMARC)

Every email carries test results that show whether it really came from the domain in the From line. Your inbox runs these tests already. You just have to look.

In Gmail, open the email, click the three dots and choose “Show original”. In Outlook, open the message, then More actions, View, “View message source”. In Apple Mail, choose View, Message, Raw Source.

Find the line that starts with Authentication-Results. A real email from example.com looks like this:

dkim=pass header.d=example.com; spf=pass smtp.mailfrom=example.com; dmarc=pass header.from=example.com

In plain words:

• SPF pass means the server that sent the email is on the domain’s approved list.
• DKIM pass means the email carries the domain’s digital signature, and nobody changed the message on the way.
• DMARC pass means at least one of those two tests passed for the same domain you see in the From line. This is the result to read first.

Warning signs: dmarc=fail, spf=fail, dkim=none, or a pass for some other domain, such as dkim=pass header.d=bulk-mailer-7.net on an email that claims to be from example.com.

Example. An email from “security@example.com” asks you to reset your password. Gmail’s “Show original” says dmarc=fail header.from=example.com. The From line is forged. Delete the email.

A DMARC pass means the email left a mail system the company approved. A hacked staff mailbox passes too, and forwarded emails sometimes fail SPF while being genuine. Treat the result as strong evidence and combine it with the other checks.

6. Paste the raw email into an AI chatbot and ask it to find the tricks

Raw email source is hard to read. A chatbot such as ChatGPT, Claude or Gemini can read it for you and point at the parts that look wrong.

1. Open “Show original” (or “View message source”) as in check 5 and copy everything.
2. Remove your own details first: your email address, name, phone number, account numbers and any codes. Replace each with “[removed]”.
3. Paste the text into the chatbot with a prompt like this one.

“Below is the raw source of an email, including headers and HTML. I think it may be a phishing email pretending to be from example.com. Please check: (1) Do SPF, DKIM and DMARC pass, and for which domain? (2) Does the From address match the Return-Path and Reply-To? (3) List every link in the HTML and show where it really points, compared with the text shown to me. (4) Are any domains lookalikes of example.com? (5) Anything else suspicious? Quote the exact lines you rely on.”

AI is good at this job. It will catch a link whose visible text says https://example.com/login while the code behind it points to https://example-com.login-verify.app, and it spots lookalike domains and hidden text far faster than most people do.

Example. You paste a “your withdrawal is on hold” email. The chatbot lists four links. Three go to example.com. The “Release funds” button goes to a domain nobody at the company owns, and that button is the scam.

Chatbots also make mistakes in both directions. An email that “looks fine” to a chatbot can still come from a hacked real account. Make it quote the lines it relies on, then check those lines yourself. Never paste passwords, seed phrases or one-time codes into any chatbot.

7. Hover over links and check when the domain was registered

Before you click anything, hover over the link on a computer, or press and hold it on a phone, to see the real address. Read the domain from the right, as in check 4.

Then look up when the domain was created. Paste it into the ICANN lookup and check the “Created” date. A company that has existed for ten years does not send security alerts from a domain registered last Tuesday.

Example. A “partnership manager” from a known crypto project emails from bd@exampleprotocol-team.com. ICANN lookup shows the domain was created nine days ago. The project's real site has used a different domain since 2021.

A brand-new domain is a strong warning sign. An old domain proves less, because some scam domains sit unused for months before they are used.

8. Check their LinkedIn the right way

A LinkedIn profile is easy to fake. A good fake still leaves gaps you can spot.

• Look for LinkedIn’s workplace check. LinkedIn lets members confirm their current employer, most often with a code sent to their work email, and the result shows on the profile. It confirms the company only. The job title is unchecked, and only some companies support it so far.
• Start from the company page. Open the company’s official LinkedIn page, go to its People tab and search for the name. Searching from the company side is harder to fool than clicking a profile someone sent you.
• Read the history. Real profiles usually have years of posts, a work history that makes sense, and connections who also work at the company. Fake ones are often new, with a few hundred random connections and a headshot that looks too perfect.
• Message the profile directly. Ask the LinkedIn account to confirm the chat you are having on Telegram or WhatsApp. Scammers often copy a real employee’s profile, and the real employee will reply confused.

A long history plus a workplace check is good evidence that the person exists and works there. It does not show that the person messaging you on another app is the same person, so always confirm on the profile itself.

9. Check the company’s team page, docs, GitHub and community admin lists

Many companies publish who speaks for them:

• The Team or About page on the official website.
• The docs or Help Center, which often list official support channels and say “we will never DM you first.”
• The GitHub organization. Open github.com/the-company and look at public members. A developer who says they work there can usually be found in that list.
• Telegram and Discord admin lists. Check the admin’s username, the part with the @, and ignore the display name. Anyone can set a display name to “Example Support | Admin”. OKX advises copying the username from the profile screen. If the “username” appears only in the bio, the account is probably fake.

Example. You post a question in a project’s Discord, and “Mod Alex” sends you a private message offering help. You check the server’s member list. The real Alex has a staff role and a different username. The account in your DMs joined the server yesterday.

Lists go stale when people leave, so when the stakes are high, confirm with check 1 as well.

10. Call back through the switchboard

If someone phones you from “the company”, hang up and call the number on the company’s website or on the back of your card. Ask to be put through to that person or department.

Example. “Your bank’s fraud team” calls and asks you to move savings to a “safe account”. You hang up and dial the number printed on your bank card. The bank has no record of the call. The FTC says bank impersonators caused the largest reported losses among business imposters in 2025, and these scams often end with victims persuaded to move money to “protect” it.

This check is hard to beat. Use another phone if you can, because some scams keep the line open after you hang up.

11. For crypto: ask for a signed message from a known wallet

Crypto has a check that nobody can fake without the private key. If a project or team member claims to control a wallet the project lists publicly, ask them to sign a message with it.

1. Find the wallet address yourself, in the project’s official docs, website or official X account.
2. Ask them to sign a message with today’s date and your name in it, such as: “I am Daniel from Example Protocol. Signed for Priya on 29 October 2026.” The date and your name stop them from reusing an old signature.
3. Check the signature on Etherscan’s Verified Signatures page. BaseScan, Arbiscan and other Ethereum-style explorers have the same tool. Enter the address, the message and the signature, and see whether it is valid.

A valid signature proves the signer controls that wallet. Whether the wallet belongs to the project depends on where you found the address, which is why step 1 matters.

12. Don’t treat a video call as proof

Plenty of people still treat a video call as the final word. Since 2024 that has been a costly habit. In January 2024, a finance employee at the Hong Kong office of engineering firm Arup joined a video call with what looked like the company’s CFO and other colleagues. Every other face on the call was a deepfake. The employee made 15 transfers worth HK$200 million, about $25.6 million, before checking with the head office, Hong Kong police said. Arup later confirmed to CNN that fake voices and images were used.

If a video call is part of the story, confirm through a second channel you found yourself: the company switchboard, the official X account or a work email you already confirmed with checks 4 and 5. Ask for a calendar invite sent from the company domain, and run check 5 on it.

13. Search their name, handle and domain with “scam”

Spend a minute on a web search:

• "@daniel_sec_team" scam
• "example-support.com"
• "Example Exchange" recruiter scam

Also look for the company’s own warnings. Many companies publish lists of fake domains and copycat tricks on their blog or Help Center.

If others have reported the same handle or domain, you know it is a scam within a minute. An empty search proves nothing, because a new scam has no reports yet.

Requests that end the conversation, whoever is asking

Some requests are scams however well the person passes these 13 checks, because a hacked real account can pass every test. Nothing makes these requests safe:

• Your seed phrase, recovery phrase or private key. No company ever needs it. Anyone who asks is stealing.
• Your password or a one-time code from SMS, email or an authenticator app.
• Remote access or screen sharing through AnyDesk, TeamViewer or a “support tool”.
• Moving money to a “safe” or “secure” wallet or account to protect it.
• Paying to receive money, such as a fee to unlock a withdrawal, a deposit to start a job, or “gas” to claim a prize.
• Installing software for a job interview. Fake crypto recruiters ask candidates to install a “video call app” or run a coding test that carries malware.
• Connecting your wallet to “verify” it, or signing a transaction you do not understand.

When you see one of these, stop. You don’t owe anyone a polite goodbye.

Three common scams, checked step by step

Scam 1: Fake exchange support on Telegram

The message. “@ExampleEx_Support” writes: “Your withdrawal is stuck. Connect your wallet at example-unlock.com to release it.”

The checks.

1. Check 2: the exchange’s checking tool says the handle is not official.
2. Check 7: ICANN lookup shows example-unlock.com was created this month.
3. The requests list: “connect your wallet to release funds” is on it.

Verdict. Scam. Block the account and report it to the exchange and to Telegram.

Scam 2: A recruiter from a crypto firm

The message. A LinkedIn profile titled “Senior Talent Partner at Example Labs” offers $180,000 for a remote developer role. The next step is a “technical test”: download a code repository and run it on your laptop.

The checks.

1. Check 4: you ask for an email from @examplelabs.com. The reply comes from a Gmail account, “because of internal policy”.
2. Check 8: nobody with that name appears on Example Labs’ LinkedIn People tab, and the profile is four months old.
3. Check 1: Example Labs’ careers page lists no such role.
4. The requests list: running unknown code from a stranger is on it.

Verdict. Scam. If you already ran the code, treat the laptop as compromised. Move any crypto to a new wallet created on a clean device, and change your passwords from that device.

Scam 3: A “partnership” email to a small project

The message. “Hi, I lead business development at Example Exchange. We’d like to list your token. Please sign the attached agreement and pay the $15,000 listing deposit.”

The checks.

1. Check 5: “Show original” says dmarc=pass header.from=example-exchange-listing.com. The email really came from that domain, and that domain belongs to someone else.
2. Check 3: you DM the exchange’s official X account. The exchange replies that it never asks for listing deposits by email and does not know this person.
3. Check 2: the exchange’s checking tool does not recognize the address.

Verdict. Scam. The email passed DMARC for its own lookalike domain, which is why reading the domain letter by letter (check 4) comes before the header check.

A checklist you can save

Before you share anything, pay anything or click anything:

• I found the company’s contact details myself. This person did not give them to me.
• I asked the company, through that channel, whether this person is real.
• I checked the handle or email in the company’s checking tool, if it has one.
• I read the email domain letter by letter, from the right.
• “Show original” shows dmarc=pass for the company's real domain.
• I checked where every link really goes, by hovering or with AI.
• The domain is more than a few months old.
• Their LinkedIn, team page or GitHub matches, and I searched from the company’s side.
• Nobody asked for a seed phrase, code, password, remote access, a fee or a software install.
• I am not rushing because someone told me to.

If any line fails, stop and confirm through a channel you found yourself.

If you already replied or paid

Act in this order:

1. Stop all contact. Do not send “one last” payment to unlock the first one. Fake “recovery” offers usually follow, often from the same crew.
2. Secure your accounts from a device you trust. Change passwords, reset two-factor authentication and log out of other sessions.
3. Move your crypto to a new wallet with a new seed phrase if you shared the old phrase or connected your wallet to a site. Revoke token approvals you do not recognize.
4. Tell the real company through its official support. The company can freeze accounts and warn other users.
5. Report it. In the US, use reportfraud.ftc.gov and the FBI’s ic3.gov. In the UK, use Report Fraud. Elsewhere, contact your national police cyber-crime unit.

FAQ

How can I verify if someone works for a company?

Contact the company through a channel you found yourself, such as its official website or official X account, and ask whether the person works there. Back that up with the company’s checking tool if it has one, a work email from the real domain that passes DMARC, and LinkedIn’s workplace check.

Can a verified X account be fake?

Yes. Anyone can buy a blue checkmark, and it says nothing about employment. On X, staff linked to a verified company show an affiliate badge, a small copy of the company’s logo next to their name. Official accounts can still be hacked, so pair the badge with a second check.

Is an email from the company’s domain always safe?

No. The From address can be forged, which is why you check for dmarc=pass in the raw headers. A real staff mailbox can also be hacked, and a hacked mailbox passes every check. If the email asks for anything on the requests list, treat it as a scam even when the headers pass.

Can AI tell me if an email is a scam?

AI is very good at reading raw email source and finding fake links, lookalike domains and failed SPF, DKIM or DMARC results. It still makes mistakes. Use it to point at the suspicious lines, check those lines yourself, and remove your personal details before you paste.

Will a real company ever message me first on Telegram or WhatsApp?

Most large crypto exchanges say their staff will not start private chats about your account and will never ask for funds, passwords or codes. Check the company’s Help Center for its own policy, and treat any unprompted private message as unconfirmed until you check it.

What is the safest way to check a recruiter?

Ask for an email from the company domain, find the role on the company’s own careers page, and search the recruiter’s name on the company’s LinkedIn People tab. Never pay a fee, buy equipment through the recruiter, or install software as part of an interview.

What should I do if someone fails these checks?

Stop replying, block the account, and report it to the real company and to the platform where you met. If you shared anything or sent money, follow the steps under “If you already replied or paid”.

Gaurav Agarwal writes about crypto security and on-chain investigations. If a scam message reached you that these checks did not cover, describe it in the comments, without personal details, and I will add a check for it.

How to Verify Someone Really Works for a Company: 13 Checks was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

A six-step method that starts at the contract, not the dashboard.

Pick a large stablecoin. Open three data sites. You will get three different circulating supply numbers.

None of them is lying. They are answering three different questions.

And the gap is not cosmetic. In June 2026, one widely used aggregator reported roughly $371 million more USDS than the Ethereum mainnet contract did. No hack. No stealth mint. Escrowed supply counted twice.

If you hold a stablecoin, lend against one, or carry one on a balance sheet, you need a figure you can defend in a risk meeting. Here is the six-step method.

Why does the same stablecoin show three different circulating supply numbers?

Three structural reasons, and not one of them involves anybody being dishonest.

• Different starting point. Some sources read totalSupply() straight off the token contract. Others rebuild supply by summing mint and burn events. Onchain data schemas now carry an explicit flag for which of the two is authoritative, row by row, because the two disagree often enough to matter.
• Different exclusions. CoinGecko deducts locked addresses that project teams report to it (published methodology). Allium strips four separate categories out of raw supply before calling anything circulating.
• Different scope. One token, or the whole family? USDS alone sat at $6.81B on 26 October 2026. Sky Ecosystem reported $11.48B of stablecoin supply the next day, because that figure counts USDS and DAI together as protocol liabilities.

Same dollar. Three honest answers.

Circulating supply is not a fact you look up. It is a definition you choose, then measure.

Step 1. Read the contract before you read the dashboard

Every real audit starts with one call: totalSupply() on the issuing contract, at a named block.

Not a screenshot. A block height.

Yearn’s risk team did exactly that to USDS on 9 September 2026 at block 25939320. Mainnet totalSupply() came back at 6,645,559,216, down 15% from their previous reading.

They also pulled the protocol’s own internal debt figure, so the token number could be checked against the issuer’s books rather than against another website. The full working is public.

That is the standard worth copying. Two independent reads, same block, both published.

Step 2. Subtract the supply that is not actually circulating

Raw total supply overstates circulation almost every time. Four buckets come out:

• Pre-minted and unissued. Tokens the issuer created but has not released against backing.
• Bridge-locked. Supply sitting in a source-chain escrow while a mirrored token trades somewhere else.
• Stablecoin-backed. Supply locked only to mint another tracked stablecoin.
• Permanently inaccessible. Burn addresses and dead contracts.

The bridge bucket is where most errors live. In that same September reassessment, native-escrow USDS fell from about $448M to $102M, escrowed sUSDS from about $812M to $343M, and LayerZero-locked USDS from roughly $48.7M to $6.67M. Miss those and a cross-chain total quietly counts real money twice.

Step 3. Do not count the yield-bearing wrapper twice

This one catches careful people.

sUSDS is not extra supply. It is a claim on USDS that has been supplied to the Sky Savings Rate module. One dollar of USDS wrapped into sUSDS is still one dollar of stablecoin liability, not two.

• Count the base token as supply.
• Count the wrapper as a holding of the base token.
• Never add the two together.

Scale is why this matters. Roughly half of USDS supply sits in sUSDS, and the Ethereum sUSDS pool showed $4.85B on 26 October 2026. That is a lot of float to misclassify.

A yield-bearing wrapper is a claim on supply. It is never new supply.

Step 4. Check what backs the supply, not just how big it is

Supply tells you the size of the liability. It tells you nothing about whether that liability is covered.

So pull the collateral figure next, from the same issuer, on the same day.

On 27 October 2026, Sky Ecosystem published $14.15B in Total Collateral against $11.48B in stablecoin supply.

That is roughly $1.23 of collateral behind every dollar of supply, which is the entire point of an overcollateralized design.

Two surfaces let you check it yourself instead of taking it on trust:

• financial.skyeco.com for the balance sheet, Gross and Net Protocol Revenue, Protocol Surplus and Sky Reserves.
• info.skyeco.com for the live onchain view of collateral composition, USDS and sUSDS.

Credit agencies have started running the same exercise. Moody’s assigned Sky Protocol a B3 issuer rating with a stable outlook on 7 October 2026, the first rating it has given any stablecoin protocol, after S&P Global affirmed B- on 1 October.

Both flagged reserve depth as the constraint. That is what an outside read of the collateral side looks like, and it is worth more than a logo on a trust page.

Step 5. Ask whether that supply can actually leave at a dollar

A supply number is only as good as the exit. Three questions:

• Is there a direct conversion path with the issuer, or only a market?
• What caps sit on that path?
• What does using it cost?

Sky Protocol runs Peg Stability Modules, smart contracts that convert supported stablecoins into USDS and back at 1:1 directly with the protocol rather than against another trader, under governance-set caps. Moving between USDS and sUSDS carries no lockup in either direction.

Redemption depth is the part of a supply audit most people skip, and the part every stress event tests.

Step 6. Date the number, or bin it

Stablecoin supply moves daily. A figure without a timestamp is a rumour with decimal places.

Write the audit line in four fields: source, metric, value, block or date.

This is about to stop being a matter of taste. On 21 October 2026 the OCC finalised its GENIUS Act rule.

From 18 January 2027, permitted issuers must publish the monthly composition of their reserves on their own websites by noon on the last day of each month, and file weekly confidential reserve reports.

As Forbes noted, an accurate weekly reserve figure demands daily reconciliation between tokens outstanding onchain and reserves held at the custodian.

Monthly PDFs are becoming weekly reconciliation. Protocols that already publish live will barely feel it.

What does a finished circulating supply audit look like on USDS?

Six lines, dated 26 to 27 October 2026, each checkable in under ten minutes:

• Mainnet token supply: $6.81B USDS, third largest dollar stablecoin.
• Protocol family supply: $11.48B, USDS and DAI together.
• Total Collateral: $14.15B, around $1.23 per dollar of supply.
• Wrapper: sUSDS, roughly half the USDS float, excluded from the supply line.
• Exit path: Peg Stability Modules at 1:1, governance-capped.
• Outside read: rated by both Moody’s and S&P Global, so far the only stablecoin protocol with both.

A defensible number, with the working shown.

Why the Sky Savings Rate belongs in a supply audit

Here is the part most supply write-ups leave out.

Supply that pays nothing is a static liability. Supply that pays has to be funded, and that funding has to come from somewhere real.

The Sky Savings Rate is a variable rate set by Sky Governance and accessed by holding sUSDS.

It is funded from revenue Sky Protocol accrues as the Sky Agent Network, independent allocators including Spark, Grove, Osero, Keel and Obex, draws USDS liquidity under governance-set risk parameters and deploys it.

So when you audit the supply, audit the engine behind it:

• Where does the yield come from?
• Who sets the rate, and is the decision public?
• Does the revenue appear on a published income statement?

Galaxy appears to have run some version of that test. On 23 September 2026 it added $100 million of sUSDS to its corporate treasury and approved sUSDS as eligible collateral across its institutional trading business.

Audit the supply. Then audit whatever pays it.

The 60-second circulating supply checklist

Run this before you quote any stablecoin supply figure:

• Read totalSupply() at a named block.
• Subtract pre-minted, bridge-locked, stablecoin-backed and inaccessible balances.
• Exclude the yield-bearing wrapper from the supply line.
• Pull collateral from the same issuer on the same day.
• Confirm the redemption path and its caps.
• Write the date next to the number.

Six steps. One figure you can put in front of a risk committee.

So what should circulating supply actually mean?

The stablecoin market sat near $308B in August 2026, below its May peak of $322.4B. That is a lot of dollars measured by methods most holders have never read.

Which leaves the question I actually want argued in the comments.

Does circulating supply mean tokens that exist, tokens that can move, or tokens someone can redeem at par today?

Pick one. Then run the six steps on whatever stablecoin you hold and post the number with its date underneath. I will check mine against yours.

How to Audit a Stablecoin’s Real Circulating Supply was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

For decades, gold has played an important role in how governments manage their financial reserves. Countries hold gold because it is a valuable asset that can be stored for the long term and may help diversify their reserves.

But what if Bitcoin started playing a similar role?

Bitcoin is different from gold in almost every practical way. It exists digitally, moves across a global network, and has a supply limit built into its design. Yet, some policymakers and investors believe these features could make it worth considering as a strategic asset.

The United States has already brought this idea into the policy discussion. But creating a Bitcoin reserve involves much more than simply buying some Bitcoin and keeping it in a digital wallet.

To understand why, it helps to look at how gold reserves work, what makes Bitcoin different, and what the potential benefits and risks could be.

Why Do Governments Hold Gold?

Gold has been used as money and a store of value for thousands of years. Today, central banks and governments continue to hold it as part of their financial reserves.

These reserves can serve several purposes.

First, gold provides an asset that is not directly dependent on the financial condition of a single company or government. Second, it can help diversify a country’s reserve holdings. Third, gold has an established global market, making it possible to buy or sell it in many parts of the world.

However, gold is not risk-free. Its price can rise and fall, storing and transporting it requires physical security, and selling large quantities can take time.

Governments still hold gold because they consider its potential benefits useful over the long term.

This raises an interesting question: Could Bitcoin serve a similar purpose in the future?

What Makes Bitcoin Different From Gold?

Bitcoin is often called digital gold because both assets have limited supplies and can be held without depending on a traditional bank account.

But the similarities only go so far.

Gold is a physical asset. Bitcoin is a digital asset secured by a decentralized network.

Bitcoin’s protocol sets a maximum supply of 21 million coins. Gold, on the other hand, has no fixed total supply because new deposits can be discovered and mined.

Bitcoin can also be transferred across borders without physically moving anything. However, transactions require network confirmation, and access to the coins depends on properly managing the relevant cryptographic keys.

The biggest difference is price stability.

Gold has a long history as a reserve asset, while Bitcoin is much younger and has experienced significant price swings. Bitcoin’s price can change sharply in a short period, which makes it harder for governments to predict the value of their holdings.

For example, imagine a government holds Bitcoin worth $1 billion. If Bitcoin’s market price falls by 30%, the value of that holding would drop to $700 million, assuming the amount of Bitcoin remains unchanged.

The government would still own the same number of coins, but their market value would be lower.

This is one reason Bitcoin cannot simply be treated as identical to gold.

How Could the US Build a Bitcoin Reserve?

There is more than one way a government could accumulate Bitcoin.

One option is to retain Bitcoin obtained through asset seizures and legal proceedings instead of selling it. Another is to purchase Bitcoin through an authorized government program.

These approaches may sound similar, but they raise different questions.

Retaining seized Bitcoin means managing assets already in government custody. Purchasing Bitcoin requires a separate decision about funding, legal authority, and the use of public resources.

The distinction is important in the United States, where policymakers have been discussing how government-held Bitcoin should be managed and whether a more formal reserve framework should be established.

Coinpedia’s exclusive report examining whether the US could establish a Bitcoin reserve before January 3, 2027 explores the legislative timeline and the remaining hurdles facing the proposal. The central question is not simply whether the government can hold Bitcoin, but what legal framework would allow it to maintain a strategic reserve.

That difference matters because a policy proposal, an approved law, and an operational reserve are three separate stages. A proposal does not automatically mean that new Bitcoin purchases have been authorized or that a reserve is fully established.

What Could Be the Benefits of a US Bitcoin Reserve?

Supporters of a Bitcoin reserve point to several possible benefits.

1. Diversification of government assets

Governments generally try to avoid depending too heavily on one type of asset.

A Bitcoin reserve could provide another form of exposure alongside traditional holdings such as gold and foreign currencies. If Bitcoin becomes more widely accepted over time, supporters believe it could offer long-term diversification benefits.

However, diversification does not guarantee better returns. Bitcoin could fall in value at the same time that other financial markets experience stress.

2. Exposure to a limited-supply asset

Bitcoin’s supply limit is one of its most widely discussed features.

Unlike currencies that can be issued according to monetary policy, Bitcoin’s issuance follows rules built into its protocol. Its supply schedule is designed to approach a maximum of 21 million coins.

Supporters argue that this makes Bitcoin worth considering as a long-term asset.

But limited supply alone does not guarantee rising prices. Demand still matters. An asset can remain scarce while losing value if fewer people want to own it.

3. Participation in a developing financial system

Digital assets and blockchain technology are becoming part of broader discussions about payments, financial infrastructure, and investment.

Holding Bitcoin could give a government direct experience with digital-asset custody and the practical challenges of managing a decentralized asset.

That experience might help policymakers better understand both the opportunities and the risks associated with the technology.

Still, a government does not need to hold Bitcoin to study blockchain technology or develop digital-asset regulations.

What Are the Risks?

A Bitcoin reserve would also create challenges that governments would need to consider carefully.

1. Price volatility

Bitcoin can experience large price changes over short periods.

If a government holds a substantial amount of Bitcoin, a market downturn could reduce the reported value of its holdings. This could create political pressure, especially if taxpayers believe public resources are being exposed to unnecessary risk.

The long-term outcome would remain uncertain, even if Bitcoin had performed well over an earlier period.

2. Security and custody

Gold can be protected in secure physical facilities. Bitcoin requires a different kind of protection.

Access to Bitcoin depends on private keys. If those keys are lost, stolen, or improperly controlled, the assets could become inaccessible or be transferred without authorization.

A government reserve would therefore require strong security procedures, careful access controls, backup arrangements, and clear rules about who can authorize transactions.

The fact that Bitcoin operates on a decentralized network does not automatically make every wallet or storage system secure.

3. Legal and political questions

A national reserve would raise questions about who has the authority to acquire Bitcoin, how the holdings should be managed, and whether the government should ever sell them.

There would also be questions about transparency. Should the public receive regular reports on the amount held, the cost of acquisition, and changes in market value?

These decisions matter because a reserve is not just a collection of digital coins. It is a government policy that may affect public finances and future administrations.

4. The opportunity cost

Money used to purchase Bitcoin cannot be used for another purpose at the same time.

If a government spends public funds on Bitcoin, it must consider what else those funds could have supported. Even if Bitcoin rises in value, the decision should be evaluated against the alternatives available when the money was committed.

This is a basic principle of public finance: every major financial decision involves trade-offs.

Could a US Bitcoin Reserve Affect the Crypto Market?

A formal US Bitcoin reserve could influence how investors think about Bitcoin, but the actual effect would depend on the details.

For example, if the government retains Bitcoin it already owns, the immediate effect on market demand could be different from a policy that authorizes regular purchases.

If a government buys additional Bitcoin, those purchases could create new demand. If it simply holds existing coins rather than selling them, the market may instead focus on the amount of Bitcoin that remains available for trading.

Announcements could also affect expectations before any action takes place. Investors might interpret a reserve policy as a sign that Bitcoin is gaining recognition as a strategic asset.

However, expectations are not the same as actual buying activity.

Bitcoin’s price is influenced by many factors, including investor demand, interest rates, global liquidity, institutional investment, regulation, and market sentiment. A government reserve would be only one part of that picture.

It would also be a mistake to assume that other countries would automatically follow the United States. Governments have different financial priorities, regulatory systems, and levels of comfort with volatile assets.

Does Bitcoin Need Governments to Succeed?

This is perhaps the most interesting question in the entire debate.

Bitcoin was designed to operate without requiring a central authority to approve transactions or manage its supply. Its network can continue operating whether or not governments choose to hold it.

A national reserve would therefore not be necessary for Bitcoin to function.

Government participation could, however, influence how financial institutions, businesses, and investors view the asset. It could also bring more attention to the questions of regulation, custody, and long-term financial use.

At the same time, government involvement could create new political risks. Future administrations might change their approach, revise reserve policies, or decide that holding Bitcoin no longer fits their priorities.

Bitcoin’s future would still depend on whether people and institutions choose to use, hold, and value it.

Final Thoughts

Holding Bitcoin like gold is an interesting idea, but the two assets are not interchangeable.

Gold has a long history as a reserve asset, while Bitcoin offers a digital form of scarcity and can be transferred through a global network. Those features may make Bitcoin attractive to some policymakers, but its volatility, custody requirements, and uncertain long-term value create real challenges.

For the United States, the question goes beyond whether Bitcoin belongs in a government wallet. It involves deciding how the asset would be acquired, who would control it, what rules would govern its use, and how the public would be informed about the risks.

The most useful way to follow the debate is to separate announcements from legislation and legislation from implementation.

A Bitcoin reserve could become an important development in the relationship between governments and digital assets. But whether it proves to be a sound long-term strategy will depend on the policy behind it, the risks governments are willing to accept, and how the reserve is managed over time.

What Happens If the US Starts Holding Bitcoin Like Gold? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Tokenization put real-world assets onchain. DeFi is what makes them actually move. Here is where stablecoin yield, sUSDS and the Sky Savings Rate fit in.

Here is the part almost nobody says out loud about tokenization: putting a real-world asset onchain is the easy bit now.

About $39 billion of tokenized real-world assets sit onchain today, excluding stablecoins, per RWA.xyz in mid-October 2026.

The underlying assets those tokens point to run into the hundreds of billions. Issuance is basically a solved problem, and the pipeline keeps filling.

Boston Consulting Group has projected tokenized assets could reach into the trillions of dollars by 2030.

But a token that just sits there is a receipt. Not a working financial instrument.

The hard part is distribution. Making that token useful. Lending it, borrowing against it, composing it into something productive. And more and more, that job belongs to DeFi.

So here is the thesis, plainly: DeFi is becoming the distribution layer for tokenized assets. Not all of them. Mostly the ones built to move freely.

Everything below is dated analysis, not financial advice, so check the live numbers before you act.

“Tokenization issues the asset. DeFi distributes its utility.”

Tokenization issues the asset. DeFi distributes it.

There are two separate jobs in bringing real-world assets onchain.

The first is issuance. Wrapping a Treasury bill, a credit position, or a dollar into a token.

Tokenization has largely cracked this. Onchain RWA value, excluding stablecoins, more than tripled in a year, past $39 billion by October 2026.

Tokenized US Treasuries alone are worth roughly $14.7 billion, with private credit and tokenized gold making up much of the rest.

The second job is distribution. Taking that token and making it productive. This one is harder, and it is where DeFi comes in.

DeFi protocols are composable. Drop a tokenized asset into them and it can be lent, pooled, borrowed against, and stacked into strategies without asking permission. A static record becomes a living building block.

Tokenization mints the asset. DeFi distributes its utility.

How tokenized assets actually get used in DeFi

Once an asset can move freely, “distribution” stops being abstract. In practice it means a handful of concrete uses:

• Collateral. Post a tokenized Treasury or a yield-bearing stablecoin and borrow against it, without selling the underlying exposure.
• Yield vaults. Supply the asset into curated vaults that put it to work across lending markets.
• Yield-trading. Split an asset into principal and future yield and trade them separately, as Pendle does, to lock in a fixed rate.
• Looping. Hold an asset for its base yield, borrow against it, redeploy, repeat. Powerful, and riskier.

Each of these turns a passive holding into something that earns or frees up liquidity. That is what “RWA in DeFi” really describes.

The venues doing the heavy lifting

RWA deposits into DeFi lending and yield protocols climbed sharply through 2026, into the several billions. A handful of names carry most of the flow.

• Morpho has become a leading venue, with hundreds of millions across dozens of RWA assets on several chains. Think of it as an onchain prime brokerage.
• Aave runs broad lending markets, plus a separate permissioned track for institutions.
• Kamino is the largest single-chain RWA venue, on Solana.
• Pendle handles the yield-trading and fixed-rate side.

Across these venues, RWA deposits roughly tripled in the year to mid-2026, climbing from a couple of billion dollars into the several billions.

One detail worth sitting with: credit tokens and tokenized gold currently make up most RWA collateral, more than Treasuries. These rankings shift fast, so treat them as a snapshot.

The catch: most tokenized RWA still sits idle

Now the honest part, because the headline numbers hide it.

For all the momentum, most tokenized real-world assets are doing nothing in DeFi.

By one 2026 analysis, more than half of reported RWA value sits idle. Issued, held, parked. Not circulating.

Why? Design.

A lot of tokenized assets, especially the institutional ones, are permissioned.

They need KYC, allowlisting, or jurisdiction checks, and they carry transfer restrictions. You cannot just drop them into an open protocol.

A token you cannot move without permission cannot be distributed by a permissionless system.

So the thesis needs a sharper edge. DeFi is not distributing all of RWA. It is becoming the distribution layer for the assets that were built to be distributed.

“A token you can’t move without permission can’t be distributed by a permissionless system.”

Why permissionless, composable assets win

The assets that actually move through DeFi share a profile. Freely transferable. Built in standard token formats. Composable by default.

Yield-bearing stablecoins fit that mould almost perfectly. So do some freely transferable Treasury tokens. Heavily gated institutional tokens, however large, mostly do not.

The lesson for anyone issuing a tokenized asset is blunt. Composability is not a feature you bolt on later. If you want distribution, you design for it at issuance.

Where Sky fits: USDS, sUSDS and the Sky Savings Rate

Sky is a clean example of the permissionless side of this story. One example among several, not the whole trend.

Start with USDS, Sky Protocol’s stablecoin and the entry point to everything else.

USDS is over-collateralized, backed by a diversified mix that includes tokenized real-world assets like short-duration US Treasuries.

As of late October 2026, Sky.money’s homepage showed about $16.24 billion of collateral backing roughly $10.02 billion of USDS supply. That is close to $1.62 of collateral for every dollar.

Now the yield part. Supply USDS and you receive sUSDS, the world’s largest yield-bearing stablecoin, with supply near $4.83 billion on Sky.money in late October 2026.

sUSDS accrues the Sky Savings Rate (SSR) automatically, and you can redeem it for USDS plus accrued yield at any time.

The Sky Savings Rate is a variable, governance-set rate funded from aggregate Sky Protocol surplus, shown at 3.80% on Sky.money in late October 2026. It can change, and Sky.money does not set, control, or guarantee it.

Here is why it matters for this story:

• sUSDS is permissionless and composable. It circulates through DeFi, gets held for its yield, supplied to vaults, and accepted as collateral. Galaxy, a large institutional holder, approved sUSDS as collateral for lending, and borrowers keep accruing the Sky Savings Rate while it is posted.
• Sky also runs its own lending layer, Spark. So Sky is both an issuer of a composable, RWA-backed yield token and a venue that distributes such assets.

That dual role, issuer and distributor, is the exact pattern this piece describes.

It runs on infrastructure that has worked on stablecoin systems since 2017. sUSDS still carries smart-contract and peg risk, and the rate is variable.

None of this is a sure thing. If you want the mechanics, here is a plain-English explainer of what sUSDS is and how it works.

The risks distribution brings onchain

Distribution is not free. Plugging real-world assets into DeFi imports new risks:

• Imported risk. A real-world asset brings its own credit, rate, and redemption risk into the protocol, on top of smart-contract risk.
• Composability contagion. The same looping that boosts yield chains positions together, so trouble in one layer can cascade.
• Oracle and pricing risk. RWA collateral needs accurate onchain pricing, which is harder for less liquid assets.
• Concentration. Much RWA collateral sits in a few credit and gold tokens, so stress there can ripple.

None of this kills the thesis. It just means distribution is a trade-off, not a free lunch.

So what does it mean for stablecoin holders?

The direction is clear. As more value gets tokenized, DeFi is becoming the layer that makes it useful. The place a token turns into collateral, yield, and a building block.

But it is early and uneven. Most tokenized assets still are not active onchain.

The winners are the ones designed to compose. And the yield comes with real risk.

The clearest sign it is real: institutions now post composable RWA tokens as collateral and keep earning on them, rather than letting the tokens sit.

If you hold stablecoins, the practical takeaway is simple. You do not have to issue anything to benefit from this shift.

A composable, RWA-backed yield-bearing stablecoin like sUSDS already plugs into it, letting your dollars earn the Sky Savings Rate instead of sitting still.

Put your stablecoins to work, check the live numbers, size your own risk, and treat this as a map, not advice.

Quick answers

Q. What does “DeFi is the distribution layer for RWA” mean?

A. Tokenization creates real-world-asset tokens. DeFi is where they become useful, as collateral, vault inputs, and composable building blocks, instead of sitting idle.

Q. Why is most tokenized RWA not used in DeFi?

A. Many tokenized assets are permissioned and gated, so they cannot compose freely. Only a minority is actively used today.

Q. How does sUSDS relate?

A. sUSDS is a permissionless, composable, RWA-backed yield-bearing stablecoin that accrues the Sky Savings Rate and circulates through DeFi. The rate is variable and governance-set.

DeFi Is Becoming the Distribution Layer for Tokenized Assets was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Stablecoins are now a real buyer of short-term US debt. Here’s what that means for Treasury markets, and for you.

Here’s something most stablecoin holders never think about.

The digital dollar in your wallet is probably helping fund the US government.

Not in a conspiracy-theory way. In a plain, legal, slightly boring way. When you buy a reserve-backed stablecoin, the issuer takes your dollar and parks most of it in short-term US Treasury bills.

Do that across a market worth roughly $300 billion and you’ve got a buyer of US debt that barely existed six years ago.

So what does stablecoin growth mean for US debt markets? Stablecoins have become a steady, rules-driven source of demand for short-term Treasuries. Inflows can nudge T-bill yields lower, outflows can push them higher, and in most cases the holder funding all of it earns nothing.

That last part is the one I want to dig into.

Key takeaways

• Reserve-backed stablecoins keep most of their reserves in cash, repos and Treasury bills, so their growth turns straight into demand for short-term US debt.
• Stablecoin issuers still hold less than 1% of all Treasuries outstanding. They move the front end of the curve, not the whole market.
• BIS research links a $3.5 billion stablecoin inflow to 3-month T-bill yields falling up to about 4 basis points within 10 days.
• Most stablecoin holders earn 0% while the reserve income stays with the issuer.
• USDS and sUSDS take a different path. Protocol revenue flows back to holders through the Sky Savings Rate, a variable rate set by Sky governance.

How Do Stablecoins Buy US Debt? The T-Bill Pipeline Nobody Sees

I can explain the pipeline in about ten seconds.

1. You swap $100 for 100 stablecoins.
2. The issuer owes you $100 and holds $100 in reserves.
3. Rules push those reserves into cash and very short-term government debt.

In the US, those rules come from the GENIUS Act, signed in July 2025. The OCC’s proposed rules list what counts as a reserve: cash, bank deposits, Treasury bills maturing in 93 days or less, certain repos, government money market funds, and tokenized versions of these.

The law kicks in by January 18, 2027 at the latest.

So every stablecoin minted under these rules is a fresh bid for T-bills. Every redemption is a sale.

Stablecoins and US Debt by the Numbers

Quick context. The US national debt crossed $40 trillion in August 2026. In the first nine months of fiscal 2026, net interest alone cost $827 billion. That’s more than the US spent on defense.

Washington needs buyers. Stablecoins have turned into one.

• $24 billion to $270 billion. USD stablecoin supply growth from 2020 to June 2026, per a new paper by Nellie Liang and Brent Neiman.
• Nearly $35 billion. What stablecoins spent on T-bills in 2025, roughly matching the largest government money market funds, per the BIS.
• Less than 1%. The share of Treasuries outstanding held by stablecoin issuers, according to Treasury’s own borrowing advisory committee.
• $800 billion to $1 trillion. Extra T-bill demand Standard Chartered sees if the market hits $2 trillion by end-2028.

Treasury Secretary Scott Bessent has floated similar numbers. I’d treat them as scenarios, though. Growth has cooled this year alongside crypto trading volumes.

Do Stablecoins Actually Move Treasury Yields?

A little. And now we can actually measure it.

The BIS working paper Stablecoins and safe asset prices studied daily data from January 2021 to March 2026.

A $3.5 billion inflow lowered 3-month T-bill yields by 0.71 basis points on impact and up to 4 basis points within 10 days. Longer maturities barely moved.

An IMF working paper found the same direction. When stablecoin market cap jumps 1%, 1-month and 3-month yields fall. Small moves, but they’re real.

The part that gets less airtime is the exit. An earlier version of the BIS study found outflows pushed yields up two to three times as much as inflows pushed them down.

Money that arrives slowly can leave all at once. That asymmetry is the part of stablecoins and US debt that keeps regulators up at night.

There’s a fair counterpoint too. The Kansas City Fed points out that if people fund stablecoins out of bank deposits, banks may buy fewer Treasuries. So net new demand could be smaller than the headlines suggest.

The Catch: Stablecoin Holders Fund the Debt, Issuers Keep the Yield

T-bills pay yield. Somebody collects it.

With most reserve-backed stablecoins, that somebody is the issuer. The GENIUS Act bars payment stablecoin issuers from paying you yield, so the reserve income stays on their side of the table.

Put simply: you supply the dollar. The issuer buys the T-bill. The issuer keeps the yield.

And a lot of those dollars just sit there. By Sky’s estimate, roughly 80% of stablecoins aren’t deployed into any source of yield. That’s money quietly funding Treasuries without earning its holder a cent.

Which is why “who keeps the yield?” matters as much as “who buys the debt?”

USDS, sUSDS and the Sky Savings Rate: Where the Yield Goes Instead

Sky.money gives you non-custodial access to Sky Protocol, which handles the same dollar differently.

USDS is Sky Protocol’s fully backed stablecoin, and it’s overcollateralized. On October 23, 2026, Sky.money showed $16.24 billion in collateral behind 10.02 billion USDS, about $1.62 for every dollar. You can check the mix yourself on the Sky financial dashboard. Here’s what backs a stablecoin if you want the full checklist.

Where does the revenue come from? Sky Agents tap USDS liquidity and put it to work across collateralized loans, US Treasury bills and lending markets. What they earn flows back into Sky Protocol.

For you, it works like this:

1. Supply USDS and receive sUSDS.
2. sUSDS accrues the Sky Savings Rate (SSR) automatically.
3. Exit to USDS anytime. No lockups, and no fees through Sky.money.

The SSR is a variable protocol rate funded from aggregate Sky protocol surplus. SKY holders raise or lower it through public onchain votes.

One honest detail: sUSDS isn’t exposure to any specific Agent, strategy or T-bill. You get the rate, not a slice of one position.

The numbers are public. In Q2 2026, Sky Protocol recorded $107.35 million in Gross Protocol Revenue, and $53.91 million went to sUSDS holders through the SSR.

sUSDS supply closed the quarter at $5.52 billion, up 149% year over year. It’s the world’s largest yield-generating stablecoin.

• Track record: the core protocol has run since 2017 without an exploit, from a team that’s spent close to a decade on stablecoin infrastructure.
• Rated: in 2025, S&P Global gave Sky Protocol the first credit rating ever assigned to a DeFi protocol.
• Risk discipline: Sky Frontier Foundation’s risk frameworks, among the most systematic in the space, tie each Agent’s access to capital to its performance.
• Built for steadiness: the SSR is engineered for strong risk-adjusted yield, not the biggest number on a leaderboard.

Risks still apply. Smart contracts can fail, and the rate can change. Need USDS first? You can convert 1:1 through the Peg Stability Module.

Lifeline or Liability? What Stablecoin Growth Means for US Debt Markets

Honestly? It depends who you ask.

The case for:

• A steady buyer at the short end can make government borrowing a bit cheaper.
• Dollar stablecoins spread dollar use abroad, and much of that demand lands in T-bills.

The case against:

• Money leaving bank deposits for stablecoins could mean less bank lending.
• A fast wave of redemptions could force T-bill sales right when markets are stressed.
• Leaning harder on short-term bills raises refinancing risk when rates jump.

Both sides can be right at once. That’s why what makes a stablecoin reliable matters more as this market grows: backing, liquidity, exits and transparency.

Stablecoins won’t fix a $40 trillion debt. They’re becoming part of how it gets financed, though.

Sky’s also working on ways to make capital movement data speak the same language in real time, whatever the vehicle or currency.

Quick Answers on Stablecoins and US Debt

Q. Do stablecoins hold US debt?

A. Yes. Reserve-backed stablecoins keep most reserves in short-term Treasury bills, repos and cash, making issuers a growing buyer of US debt.

Q. Does sUSDS pay T-bill yield?

A. No. sUSDS accrues the Sky Savings Rate, a variable rate funded from aggregate Sky protocol surplus. Treasury bills are one of several strategies feeding that revenue.

Could stablecoins hurt the Treasury market?

In a big run, possibly. Outflows move T-bill yields more than inflows do. That’s why reserves you can verify matter.

. . .

Over to you. Should stablecoin holders get a share of the yield their dollars generate, or is 0% a fair price for a stable dollar? Tell me in the comments. I read every one.

If you’d rather your stablecoins didn’t sit still, put them to work with sUSDS.

Stablecoins and US Debt: Who Keeps the T-Bill Yield? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

South Africa’s Crypto Rules Are Changing Direction: What Investors and Businesses Should Prepare For

South Africa is taking an important step towards answering a question that has hung over its crypto market for years:

How should crypto assets be treated under the country’s rules on moving money across its borders?

The problem is not new.

South Africa has long run an exchange-control system to manage capital flowing in and out of the country. The National Treasury and the South African Reserve Bank (SARB), through its Financial Surveillance Department (FinSurv), administer it under the Exchange Control Regulations of 1961.

The problem is that crypto does not fit neatly into a system built around banks, foreign currencies and conventional payment channels.

That raises a legal question:

Is crypto “capital” for the purposes of exchange control?

The Courts Disagreed

Two High Court decisions show the uncertainty.

In Standard Bank of South Africa Ltd v South African Reserve Bank, SARB had forfeited funds linked to cryptocurrency transactions involving Leo Cash and Carry (Pty) Ltd.

Standard Bank challenged the forfeiture, arguing that cryptocurrency was not “capital” under Regulation 10(1)(c). The court agreed, finding that cryptocurrencies fell outside the definitions of “money” and “capital” in the Regulations, and set the forfeiture aside.

In Mangundhla & Dangaiso, the court went the other way. The case involved roughly 1,680 Bitcoin, bought in South Africa and valued at under R182 million, which were sent to wallets reachable through exchanges outside the country. SARB forfeited certain Bitcoin and funds held in the applicants’ Standard Bank and Luno accounts.

This time the court held that Bitcoin could constitute capital, based on the ordinary meaning, context and purpose of the legislation.

This result is the real gap.

If crypto is capital, its cross-border movement can fall under exchange control. If it is not, applying the old framework becomes very difficult. The position is also still unsettled, because the Standard Bank decision is subject to appeal. The courts exposed the problem, but they did not solve it.

The Reform

That is the background to the Draft Capital Flow Management Regulations, 2026, published for public comment on 17 April 2026. On 15 May 2026, the National Treasury and SARB followed with a joint statement covering, among other things, how crypto assets are treated, held and traded, and how they move across borders.

The draft regulations are broader than crypto. They are meant to replace the 1961 regulations and modernise how South Africa manages international capital flows, moving towards a risk-based, surveillance-oriented model. Instead of relying mainly on prior approvals, the aim is to let legitimate transactions flow while strengthening reporting, monitoring and intervention for high-risk activity.

For crypto, the key point is that the draft does not build a separate system. It places crypto assets inside the existing framework, alongside foreign currency, securities and gold.

What the Draft Regulations Would Do

Buying and selling

Purchases, sales, borrowing and lending of crypto above a set threshold would generally have to go through an Authorised Crypto Asset Service Provider (CASP), or otherwise meet permission requirements. A CASP could only carry out the activities it is authorised for, and the National Treasury could add conditions or bar it from dealing with particular people, assets or transactions.

Moving crypto abroad

This is arguably the most significant part. Taking or sending crypto out of South Africa, delivering it for removal, and certain payments involving people outside the country would generally need permission from the National Treasury or an authorised body.

Declaring foreign crypto

A person in South Africa who gains control or possession of a foreign asset or crypto asset may have to declare it within a set period. The declaration would cover when and how it was acquired, where it is held and whether it is linked to a foreign liability. Once declared, later sales or transfers could be restricted.

Seizure, blocking and forfeiture

If there are reasonable grounds to believe crypto is connected to a contravention, authorities could seize it or block dealings with it in an account, and it could eventually be forfeited to the State.

The draft even deals with the practicalities of crypto: after forfeiture, the previous holder may be required to hand over the passwords, PINs or codes needed to access the assets.

The proposed draft contains safeguards. Forfeiture decisions must comply with the Promotion of Administrative Justice Act, and affected people can challenge attachment, blocking, and forfeiture through judicial review.

The Crypto Asset Manual and Its “Trigger Point”

The Draft Crypto Asset Manual for Cross-Border Activities supplies the operational detail. Its main job is to say when a crypto transaction becomes a cross-border one for exchange-control purposes.

• Domestic authorised CASP to offshore CASP: an outward cross-border flow.
• Domestic authorised CASP to a non-custodial wallet: also an outward flow.
• Offshore CASP to domestic authorised CASP: an inward cross-border flow.

These flows are intended to be identifiable and reportable to FinSurv.

The treatment of non-custodial wallets stands out.

With a non-custodial wallet, the user holds the private keys and there is no intermediary holding the assets. Even so, the framework treats a transfer from a domestic CASP to such a wallet as an outward movement of value.

It also takes a stricter line on certain inward transfers from non-custodial wallets, treating them as non-permissible. The focus is not on whether an asset sits on a blockchain, but on where the value comes from, where it goes and whether it crosses the border.

For now, the Manual is narrow on who can send crypto offshore. Individuals can do so through authorised CASPs using their existing foreign-exchange allowances, such as the Single Discretionary Allowance (SDA) or Foreign Capital Allowance (FCA), subject to the applicable requirements. That is not a general permission for every person or business to move crypto abroad, and other categories will depend on the final rules.

What Is South Africa Trying to Do?

Taken together, the draft is not trying to prohibit cross-border crypto activity. It is trying to make crypto movements visible to the capital-flow system. Exchange control was designed for a world of identifiable institutions and bank accounts, and crypto can move value across borders without passing through any of them. The trigger-point approach gives regulators a way to see when that movement matters.

It is also activity-based.

At this stage it does not distinguish between types of crypto asset, and it does not treat crypto as official currency or legal tender.

So the framework is less about whether Bitcoin or a stablecoin is “money,” and more about whether an activity amounts to a movement of value that should be subject to capital controls.

This will sit on top of existing oversight.

The Financial Sector Conduct Authority (FSCA), the Financial Intelligence Centre (FIC) and the South African Revenue Service (SARS) already play roles in regulating crypto activity. A crypto business may therefore need to ask two separate things:

Am I authorised to provide this service, and does this particular transaction create an exchange-control or reporting obligation?

My Views

The draft regulations supply the legal architecture for bringing crypto into South Africa’s capital-flow regime, and the Manual supplies the practical test for when a transaction is caught.

What I find most telling is where the rules choose to focus. They do not try to settle what crypto is. They regulate what crypto does when it crosses a border.

That is a pragmatic response to the court split, because it sidesteps the “is it capital?” debate by looking at the movement of value instead.

For businesses and users, three questions will matter most:

• Can the transaction take place at all?
• Does it need prior permission, or must it go through a particular channel?
• Is it reportable to FinSurv?

For regulators, the goals are clear: better visibility over cross-border crypto flows, fewer chances for regulatory arbitrage and stronger detection of illicit finance, without choking off legitimate digital-asset use.

The open question is how well that balance survives the final text. Rules on non-custodial wallets, in particular, will test whether visibility can be achieved without making ordinary self-custody impractical.

The proposals are still subject to consultation and may change. But the direction is clear. Crypto may be borderless, but its movement across South Africa’s borders will increasingly come with rules on permission, reporting and oversight.

If you enjoy analytical commentary on digital asset regulation, crypto markets, and emerging financial technologies, consider subscribing to my newsletter where I share additional research, commentary, and industry insights.

https://samuel-ayodeji.kit.com/profile

Also, if your company, startup, or publication needs clear, well-researched content on blockchain, digital assets, fintech, or emerging technology law, my inbox is always open.

Moving Crypto Out of South Africa? What the Draft Capital Flow Rules Mean for Your Business was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

The 30-year Treasury just hit its highest yield since 2002. Here’s what that means for tokenized T-bills, stablecoin yield, and sUSDS.

On October 7, the 30-year US Treasury yield touched 5.70%. The highest since 2002.

If you held long bonds, you didn’t need the headline. You saw it in your balance.

A friend messaged me that week. “Glad my Treasuries are onchain,” he wrote. “Different rails, different rules.”

I get the logic. I also think it’s wrong. And it’s an expensive kind of wrong.

So let’s settle it.

The short answer

• Duration risk is how much a bond’s price drops when interest rates rise.
• Yes, it applies onchain. A tokenized Treasury holds real Treasuries, so it inherits their duration risk.
• Tokenization changes the plumbing. Not the math.
• Most tokenized Treasury products hold short-term bills, so their duration risk is low. Low, not zero.

(Not financial advice. Just how the mechanics work.)

What Is Duration Risk? The 60-Second Version

Bond duration is measured in years. Really, though, it’s a sensitivity score, and the heart of interest rate risk.

It tells you roughly how much a bond’s price moves when rates move one percentage point.

FINRA’s rule of thumb is simple: a duration of 10 means about a 10% loss if rates rise 1%.

Why does the price fall at all?

• You buy a bond paying 4%.
• Rates rise. New bonds pay 5%.
• Nobody pays full price for your 4% bond now. Its price drops until the math evens out.

The longer you’re stuck with the old rate, the bigger the drop.

A 3-month bill barely notices a hike. It matures in weeks and rolls into the new rate. A 30-year bond is stuck with its coupon for decades, so it takes the full hit.

Why Duration Risk Is Back in the 2026 Conversation

• On September 16, a Fed rate hike took the target range to 3.75% to 4.00%. The first hike since 2023.
• The median Fed official now sees rates ending 2026 near 4.1%.
• The 10-year briefly hit 5.34% in early October.
• The next Fed decision lands October 28.

From late July to October 7, the 30-year yield rose about half a point. That alone knocked roughly 7% off a new 30-year bond’s price.

We’ve seen this film. Silicon Valley Bank loaded up on long-dated bonds when rates sat near zero. Rates jumped.

By the end of 2022 it carried $17.7 billion in unrealized securities losses. In March 2023, depositors ran.

Larry Summers called it “one of the most elementary errors in banking.”

No hack. No code bug. Just too much duration at the wrong moment.

Duration risk doesn’t care which ledger your bond lives on.

Does Duration Risk Apply to Tokenized Treasuries?

Yes. Every time.

A tokenized Treasury wraps real government debt. If the fund inside holds 10-year notes, your token behaves like a 10-year note.

Tokenize a 30-year bond tomorrow, and the token carries 30-year risk on day one.

What tokenization changes:

• Settlement speed
• Custody (your wallet, not a broker)
• Visibility into holdings

What it doesn’t change:

• The bond’s rate sensitivity
• The issuer’s credit
• The maturity of what’s inside

The market is big enough for this to matter now. Tokenized Treasury products, one of the largest slices of real-world assets onchain, held about $14.9 billion across 117 funds in mid-October 2026, per RWA.xyz.

At the start of 2025, the figure was roughly $4.0 billion, according to CoinGecko.

The good news? Most of that money sits in short-term bills. Short maturity means short duration. That’s why these tokens usually hold a steady price while yield accrues.

Price Risk vs. Rate Risk: The Part Most Explainers Miss

Rates can hit you in two places.

• Price risk (duration): the value of what you hold moves. Big for long bonds. Tiny for short bills.
• Rate risk (yield sensitivity): the income you earn moves. Big for short bills, because they keep rolling into new rates.

So short duration isn’t immunity. You just feel rates as a changing yield instead of a falling price.

Fed hikes? Your T-bill token’s price barely flinches, and its yield climbs. Fed cuts? The price holds steady, and the yield drops. That second dial is the one most people forget to check.

Once you see the two dials, onchain yield gets much easier to compare.

Does sUSDS Have Duration Risk? Where the Sky Savings Rate Fits

This is where I see the most confusion, so let’s be precise.

sUSDS isn’t a tokenized Treasury. It’s a yield-generating stablecoin that gives access to the Sky Savings Rate (SSR). The SSR is a variable rate funded from Sky Protocol’s aggregate surplus.

On the two dials:

• No maturity date, no lockups. You can redeem sUSDS for USDS anytime.
• No markdown when bond prices fall. sUSDS accrues the SSR continuously, so each sUSDS becomes redeemable for more USDS over time.
• The rate is the moving part. SKY holders can raise or lower it through public onchain votes. It isn’t set by borrowing demand, and it isn’t guaranteed.
• No claim on a specific pool. You hold no claim on any collateral pool, borrower or strategy. You’re accessing the rate itself.

It’s built for predictability and risk-adjusted yield, not the biggest number on your screen.

The scale is real:

• About $4.86 billion in sUSDS was outstanding in late October 2026.
• Roughly $900,000 in yield accrues to holders each day, per BA Labs data.
• Cumulative yield paid to sUSDS holders passed $250 million by June 2026.
• USDS, an overcollateralized stablecoin, had about $10.02 billion in supply against $16.24 billion in collateral.
• The infrastructure has run since 2017 with no exploits.

Fixed Yield: Duration Risk You Choose on Purpose

Now flip it. Fixed Yield on Sky.money locks today’s rate until a set maturity date, through a third-party Pendle integration.

Hold to maturity, and you get your entry rate. Leave early, and you sell at market price, which can land above or below your entry. The app shows that exit cost before you decide.

That’s duration risk in plain sight. You trade flexibility for certainty.

Sky’s public rulebook, the Atlas, files these fixed-term tokens under “bond-like instruments” with duration risk, and sets capital rules for holding them. I like that. The system names the risk out loud.

sUSDS keeps you flexible. Fixed Yield makes you patient. Neither pretends rates don’t exist.

How Sky Measures Risk Out Loud

In bond markets, duration is a shared language. A 7-year duration means the same thing in New York or Mumbai. Onchain, common risk yardsticks are still rare.

• On October 7, 2026, Moody’s gave Sky Protocol a B3 rating. It was Moody’s first rating on any stablecoin protocol.
• S&P Global rates it B-. No other stablecoin protocol holds both ratings.
• In Q2 2026, Sky Protocol posted $107.35 million in gross protocol revenue and $33.29 million in net protocol surplus. Its fifth positive quarter in a row.

Neither rating is investment grade yet. Both agencies published what would lift them, and investment grade is Sky’s stated long-term goal. Honestly? I trust a public scorecard more than any “trust us” banner.

A 5-Question Duration Risk Checklist for Onchain Yield

Before you put stablecoins to work anywhere, ask:

1. Is there a maturity date? No date usually means no price-duration risk on the position.
2. What’s inside, and for how long? Short bills and long bonds behave very differently.
3. Can the price move before maturity? If yes, you’re carrying duration risk.
4. Is the rate fixed or variable? Fixed protects income. Variable protects flexibility.
5. What stacks on top? Smart contract, peg and liquidity risk. Tokenization removes none of them.

Two good reads on the backing side: What Backs a Stablecoin? and What Makes a Stablecoin Reliable?

Quick FAQ

Q. Are tokenized Treasuries risk-free?

A. No. Short-duration products carry low duration risk, plus credit, liquidity and smart contract risk.

Q. Does a Fed hike move the Sky Savings Rate automatically?

A. No. The SSR changes only through Sky Governance votes.

Q. Fixed or variable stablecoin yield?

A. Fixed suits money with a date attached. Variable suits money that might need to move.

· · ·

The Bottom Line

Duration risk followed bonds onchain. It was always going to. And rates will keep moving. October 28 is just the next test.

The smart move isn’t avoiding it. It’s knowing where you carry it, and choosing it on purpose.

Want flexible, variable yield? sUSDS is the simplest place to start. Want a locked rate and can wait for the date? Fixed Yield is there too.

You can convert USDC to USDS 1:1 through the Peg Stability Module, then explore both in the Sky.money app.

So, after this October: would you rather lock a rate or keep your flexibility? Tell me in the comments. I read every one.

This article is for education only and isn’t financial advice. Rates are variable and not guaranteed.

Duration Risk in Tokenized Treasuries: Does Onchain Save You? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

AI already runs the monitoring, the simulations, and a lot of the automation behind on-chain risk. Here is what it still can’t do on its own, and why your yield still rests on human judgment.

Here is the short answer. AI already manages real parts of on-chain risk today.

It runs simulations, watches markets every second of every day, and adjusts protocol settings inside limits that people approve.

What it does not do yet is run the whole risk desk on its own. So the honest take on AI risk management in DeFi is this: yes for the hard, repetitive parts, and not yet as a manager you leave alone.

That gap matters more than the hype suggests, so let me walk through what AI does, where it hits a wall, and what measured on-chain risk really looks like.

The quick version

• AI already runs simulation, monitoring, and bounded automation across DeFi.
• Firms like Gauntlet and Chaos Labs provide much of that risk plumbing.
• Automated systems act only within human-set, governance-approved limits.
• The real limits stay: stale data, models that get gamed, and crises no model has seen.
• Over-automation can spread risk, not contain it. AI augments risk management; it does not replace it.

What “managing on-chain risk” actually means

Managing on-chain risk means keeping a protocol solvent and liquid while markets move.

In plain terms, that is four jobs. Set the rules: collateral ratios, borrow caps, interest curves. Watch everything: positions, liquidity, oracle prices, concentration.

Stress-test: model crashes and attacks before they happen. Act fast: change settings the moment conditions change.

It is constant, data-heavy work, and the cost of getting it wrong is bad debt. No wonder teams want to automate it. It is also why a careless version is dangerous.

Where AI already runs the risk desk

AI already handles the simulation, monitoring, and bounded automation behind DeFi risk, and it is now core infrastructure. A few concrete examples, as of late 2026.

Gauntlet builds simulation-driven risk models and has acted as the economic risk brain for major lending markets, tuning parameters like collateral ratios and caps. It now runs some of the largest curated vaults too.

Chaos Labs runs AI-powered economic and security stress tests. Its risk oracles watch indicators in real time and push parameter changes within governance-approved bounds.

Aave’s renewal with the firm described more than 1,100 parameter updates.

AI-curated vaults from firms like Chaos Labs, Gauntlet, and Sentora now sit behind consumer products, rebalancing capital across Aave, Morpho, and Sky inside set risk targets.

The division of labor is simple. The machine does the speed: monitoring, simulation, anomaly detection, bounded adjustments.

The human keeps the judgment: which scenarios to run, which thresholds matter, which bounds to allow. This is real automated risk management in crypto, not a demo.

The part AI still can’t do

AI cannot be trusted to manage on-chain risk unsupervised, and 2026 showed why.

Start with the limits that never go away. It works inside human bounds, so that judgment stays human.

Models depend on data and oracles, and a stale price turns a smart system into a confident fool.

Models can be gamed by adversaries who know which inputs break them. And tail events escape training, because the crisis that matters most is usually the one the model has never seen.

The year drove this home. A string of lending blowups traced back to hardcoded or stale oracles.

In one case a collateral token was marked on-chain near $1.13 while it traded around $0.63 on the open market.

That is not a model being clever. That is automation acting fast on a wrong number.

The uncomfortable twist: automation can add risk. Fast, automated allocation paired with slow or sloppy controls, or a risk curator that itself fails, can spread a problem instead of containing it. Speed cuts both ways.

Governance-safe automation: humans still set the bounds

The norm today is not autonomous AI. It is governance-safe automation: people set the strategy and the limits, and AI acts inside them.

People decide the risk appetite and approve the guardrails. AI monitors, simulates, and makes bounded changes, often with a validation step before anything goes on-chain. And a human brake always exists.

You keep automation’s speed and keep accountability. Handing a model the power to act, with real money and real adversaries on the other side, should not be done blind.

What measured on-chain risk looks like: a Sky case study

The real answer to on-chain risk is not add AI. It is make the risk measurable. Sky is one of the clearer examples of that in stablecoins.

A quick primer, since the names trip people up. USDS is Sky’s fully backed stablecoin and the way into the system. It is the unit of account, not the yield.

sUSDS is what you hold to earn: you supply USDS, receive sUSDS, and it accrues the Sky Savings Rate over time. It is currently the largest rate-bearing stablecoin by supply.

The Sky Savings Rate is the governance-set yield behind sUSDS, funded by revenue from the Sky Agent Network, an independent set of capital allocators who put USDS to work across strategies like onchain loans, Treasury bills, and lending liquidity.

What makes it measured rather than trust me? USDS is over-collateralized and backed by diversified collateral, so the backing is not a single bet.

The yield is risk-adjusted and governance-set, not whatever the market will pay this week.

Sky is the only stablecoin protocol with credit ratings from both S&P Global and Moody’s.

Both are sub-investment grade, S&P at B- and Moody’s at B3, which is the honest part: independent agencies see real credit and concentration risk, and they publish it.

The infrastructure also carries a decade-long track record with no smart-contract exploit, and governance is building a $150 million solvency reserve.

Adoption is following. In September 2026, Galaxy Digital, a Nasdaq-listed firm, put $100 million of sUSDS on its balance sheet and approved it as institutional collateral.

And yes, this ties back to AI. Sky’s own 2026 roadmap names AI-driven automation as a growth theme, alongside Sky Agents and tokenized credit.

The through-line is the same: use quantitative, verifiable risk work, not guesswork.

If you want to go beyond the savings rate, Sky Vaults and stUSDS sit further out on the risk curve, and Sky Ecosystem Rewards layers in token incentives.

One honest caveat for savers: the Sky Savings Rate is variable. It has moved from roughly 8.75% in early 2025 to around 3.6% in late September 2026, and governance can change it. Read the live number before you decide anything.

The agent frontier, and why it’s still risky

The next step is AI agents that do not just advise but act, holding permissions and moving funds on-chain, including around tokenized real-world assets. Promising, and early.

Every limit above gets sharper when the model can pull the trigger. An agent that can act can also be manipulated or prompt-injected. A misbehaving agent causes harm directly, not as a suggestion.

Safety research keeps landing on the same answer: strict, often deterministic guardrails and clear permissions, not unsupervised control.

Full autonomy, with your money, is not here, and it is not obviously what you want.

So, can AI actually manage on-chain risk?

Yes for the parts that need speed and scale. Not yet as a manager you can leave alone.

AI already simulates, monitors, and adjusts risk faster than any human team, and it is now core plumbing for major protocols.

But it works inside human-set bounds, it can be wrong or gamed, it struggles with the crises that matter most, and letting it act unsupervised introduces fresh risk.

The grown-up version of on-chain risk is not a black box making the calls. It is measurable risk, verifiable backing, and humans who own the guardrails, with AI doing the heavy lifting in between.

AI can manage parts of on-chain risk as augmentation inside human guardrails. It is not yet a risk manager you can walk away from.

Frequently asked questions

Q. Can AI manage DeFi risk?

A. It already manages important parts, like simulation, monitoring, and bounded parameter changes, but inside human-set guardrails, not as a fully autonomous manager.

Q. What does AI actually do in DeFi risk management?

A. It stress-tests parameters, watches markets in real time, auto-adjusts limits within approved bounds, rebalances curated vaults, and flags anomalies faster than people can.

Q. What are the limits of AI risk management in DeFi?

A. It only acts within human bounds, depends on data and oracles, can be gamed, struggles with novel tail events, and over-automation can itself spread risk.

Q. How does Sky approach risk?

A. Like other protocols, Sky relies on quantitative, increasingly AI-assisted risk modeling to set the parameters behind USDS and the Sky Savings Rate, and its risk is also measured externally with credit ratings from both S&P and Moody’s. That does not make it risk-free.

• • •

On-chain risk is getting more measurable every year. That is the real story, bigger than any single model. If you want to see what governance-set, verifiable yield looks like up close, you can put your stablecoins to work on sky.money and read the live numbers on the dashboard.

AI Risk Management in DeFi: What It Can and Can’t Do was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

The US finalised its stablecoin yield rule on 21 October. The real border is not where you think, and the UK proves it.

On 21 October 2026, the US Office of the Comptroller of the Currency finalised its rules under the GENIUS Act.

One line did most of the work: a permitted payment stablecoin issuer cannot pay a holder interest or yield simply for holding, using or storing the coin.

Most outlets filed that under American news.

It is not. It quietly redrew the map for everyone else.

Because “non-US investor” is not a category. It is roughly 190 different answers wearing one label.

If you are planning around a US border, you are planning around a line that has already moved.

Can Non-US Investors Access Onchain Yield? The Short Answer First

Yes. In most jurisdictions, and often through fewer gates than a US retail investor now faces.

Onchain yield is produced by smart contracts on public blockchains. Those contracts do not read your passport. That is the design, not a loophole.

But three things sit between “the contract will accept you” and “you should proceed”:

• Your local law. Some countries restrict or ban holding cryptoassets. Some require a licence you do not hold.
• The interface you use. A website is a company. Companies have regulators, lawyers and a registered address.
• Tax. Access is not permission, and it is never a tax ruling.

Two routes exist in practice.

The first is permissionless DeFi yield, reachable with a wallet and nothing else.

The second is tokenized real-world-asset products built specifically for non-US investors under securities exemptions.

Those are aimed at you and still gated, usually with KYC, wallet allowlisting, minimums and lockups.

So the honest picture is split. One route is open. The other was designed for you and still asks for papers.

Permissionless at the protocol layer does not mean permitted at the personal layer.

Hold that, because the rest of this depends on it.

Why the US Border Stopped Being the Real Line for Stablecoin Yield

Here is what the “escape the US” takes keep missing.

The EU got there first. Under MiCA, interest on e-money tokens and asset-referenced tokens is already prohibited.

The US arrived at the same place with the GENIUS Act in July 2025, and this week’s final rule confirmed it.

Two of the world’s largest regulatory blocs now agree: the issuer of a payment stablecoin does not pay you for holding it.

So the interesting question is no longer whether you sit inside or outside America.

It is this: where does the yield actually come from, and who is paying it?

A rate funded by a protocol’s own surplus and set by token holder vote is a structurally different object from an issuer passing along reserve interest. That distinction now does real work.

Some scale for context. The total stablecoin market sat near $301 billion on 21 October 2026.

Most of those dollars are idle. Not because people chose idleness, but because the route to anything else was unclear.

Protocol vs Interface: The Two Layers That Decide Your Access

This part surprises people.

The protocol layer is permissionless. Open-source smart contracts, deployed on Ethereum and other public chains. No gatekeeper. Reachable directly, or through any independent front end.

The interface layer is not. A front end is operated by a legal entity, and that entity geo-restricts.

Take a real example instead of a hypothetical. Sky.money publishes its prohibited jurisdiction list in its Terms of Use, version 2.0, updated 1 September 2026.

Thirty-five countries and regions are named. China, Hong Kong, Russia, Iran, Venezuela.

It also names the United Kingdom.

It does not name the United States.

Read that again. Meanwhile the UK’s Financial Conduct Authority published fresh DeFi consultation papers on 21 October 2026, with its full cryptoasset regime due in force from October 2027.

The border is not America versus the world. It is drawn country by country, by lawyers, and it moves.

So much for “non-US access.”

What Actually Crosses Borders? Measurement, Not Tokens

Tokens move freely. Trust does not.

An allocator in Singapore, a founder in Lagos and a saver in Sao Paulo share no vocabulary for “is this safe.” That gap is the real barrier to global onchain yield. Not geography.

Which is why two announcements this year matter more than they look.

On 7 October 2026, Moody’s assigned Sky Protocol a B3 counterparty risk rating with a stable outlook.

It was the first rating Moody’s has issued on any stablecoin protocol. S&P Global had already assigned a B- in August 2025, the first credit rating ever given to a DeFi protocol, and affirmed it this year.

Sky Protocol is currently the only stablecoin protocol formally rated by both.

Neither rating is investment grade. Nobody is pretending otherwise, and both agencies published what would need to improve. That is the point of a scale. A rating is not a compliment.

A credit rating is the one document that reads the same in Singapore, Sao Paulo and Lagos.

Then the backing, which anyone can check without asking permission:

• USDS supply across USDS and DAI: around $10.02 billion
• Collateral backing the system: around $16.24 billion
• sUSDS supply: around $4.86 billion
• Operating since 2017, across every market cycle, with no exploits

That is roughly $1.62 of collateral value behind every $1 of USDS obligation, visible in real time rather than attested once a quarter.

If you want the mechanics, Sky.money has a plain-English explainer on what actually backs a stablecoin.

The protocol underneath is not running on fumes either. Sky Protocol generated $107.35 million in gross revenue in Q2 2026, its second consecutive quarter above $100 million and its fifth straight quarter of surplus.

Trailing twelve-month net protocol revenue stood at $159.63 million, and protocol collateral climbed 45.5% year over year.

Those are numbers a rating agency can audit. Which is exactly why one did.

In September 2026, Galaxy Digital put $100 million of sUSDS on its corporate balance sheet and approved it as collateral across its institutional trading business. Institutions do not do that on vibes.

How Non-US Investors Reach the Sky Savings Rate Through USDS and sUSDS

The mechanics are deliberately boring.

1. Convert USDC to USDS at 1:1 through the Peg Stability Module. No fees, no slippage.
2. Supply USDS and receive sUSDS, the world’s largest yield-bearing stablecoin.
3. Your sUSDS accrues the Sky Savings Rate continuously. No lockup, no maturity date, no claim button.
4. Redeem back to USDS whenever you want.

What separates the Sky Savings Rate from most stablecoin yield:

• It is governance-set, not demand-set. SKY holders vote it up or down onchain, in public, before it takes effect.
• It is funded from aggregate protocol surplus, not one lending market or one borrower.
• It is not paid from token emissions.
• You hold exposure to the rate itself, not to any single Agent, pool, strategy or asset manager.

The rate is variable and can change. Check it live on the sUSDS page rather than trusting a number in an article.

For anyone who wants something other than the baseline, there is Fixed Yield, where the rate is fixed only if you hold to maturity, Vaults curated on Morpho, stUSDS for advanced risk capital, and Sky Ecosystem Rewards. Different risks, different reasons. sUSDS stays the baseline.

The Jurisdiction Checklist Before You Supply a Single Dollar

Run this first:

• Check your own country’s rules. Not the protocol’s. Yours.
• Read the prohibited jurisdictions clause. Two paragraphs, usually decisive, and it changes without a press release.
• Never use a VPN to pass a geo-block. Sky.money treats misrepresenting your location as a material breach of its terms. Most interfaces do the same.
• Confirm whether you get the full app or a limited version. Feature-level restrictions are common and rarely advertised.
• Understand where the yield comes from. Reserve interest, borrowing demand and protocol surplus are three different risks.
• Assume tax applies. It is your filing, in your country.

So What Is the Honest Answer?

Non-US investors can access onchain yield. Many have more routes open than US retail does right now.

But the useful question was never “am I non-US.”

It is: is my specific jurisdiction served, by this specific interface, for this specific product, today?

The protocol does not care where you live. The front end does. Your tax authority definitely does.

What makes any of this work at global scale is not permissionlessness on its own. It is measurement. Published collateral. Rates voted onchain.

Two independent credit ratings on the same scale a pension fund already uses. A shared language for capital that reads the same whatever the jurisdiction or currency.

That is the part that actually crosses borders.

This is informational only. Not legal, tax or financial advice. Yields are variable and not guaranteed.

Now tell me where you are reading this from. Which jurisdiction are you in, and has an interface ever geo-blocked you out of something you were perfectly entitled to hold? I want to see how wide the gap really is. Comments are open.

Onchain Yield for Non-US Investors: The Map Is Wrong was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

In the competitive Web3 industry, having a better product does not always guarantee better results. A blockchain startup may have advanced technology, secure smart contracts, and useful features, yet struggle to attract users. Meanwhile, a competitor with similar capabilities may gain attention through stronger communication, consistent content, and a well-planned crypto marketing strategy.

This is where crypto marketing becomes essential. It helps blockchain businesses communicate their value, reach relevant audiences, and build trust in a crowded market. Without a clear strategy, even innovative projects can remain unnoticed while competitors establish stronger brand recognition.

A successful Crypto Marketing Agency does more than promote a project on social media. It identifies the target audience, studies competitors, develops meaningful content, and selects channels that support measurable business objectives. Effective Crypto Marketing Services also help businesses explain complex blockchain products in ways that potential users can understand.

Consider two decentralized finance projects offering similar features. One publishes occasional technical updates, while the other shares educational articles, product demonstrations, and community insights. The second project may attract more attention because its audience has a clearer understanding of what it offers.

This does not automatically mean that the competitor has a better product. It means the competitor may be communicating its value more effectively.

Before increasing promotional spending, Web3 founders should consider these priorities:

• Identify what competitors communicate better.
• Explain the product’s actual benefits clearly.
• Choose marketing channels based on audience behavior.
• Build trust through consistent and verifiable information.
• Measure user adoption instead of focusing only on impressions and followers.

The goal is not to copy another project’s promotional activities. It is to understand how better positioning, relevant Crypto Marketing Solutions, and consistent execution can help a strong product receive the attention it deserves.

1. Why Better Products Can Lose to Better-Marketed Competitors

Product quality is important, but people cannot evaluate a product they have never discovered. In Web3, projects compete across social media, search engines, developer communities, industry publications, and online forums.

A competitor may have a simpler product but communicate its benefits more clearly. Another may publish useful tutorials, respond quickly to questions, and explain its development progress regularly. These activities give potential users more opportunities to understand the product.

A Crypto Marketing Company can help identify these communication gaps and build a strategy around the project’s actual strengths.

Visibility and positioning matter

Imagine a blockchain analytics platform that provides reliable on-chain data but uses highly technical language throughout its website. Potential customers may struggle to understand how the platform helps them.

Its competitor, however, explains how its tools help research teams monitor wallet activity and investigate token movements. Even if the underlying capabilities are comparable, the clearer explanation can make the competitor more appealing.

Effective crypto marketing connects technical features with practical benefits. It helps audiences understand why a product matters instead of expecting them to interpret complex technical information independently.

Consistency creates recognition

Marketing is rarely effective when it happens only during a product launch. Regular educational content, product updates, and community discussions help projects remain visible while giving audiences multiple opportunities to learn.

The objective is not to publish content every day without a purpose. It is to establish a consistent communication process that supports awareness, understanding, and adoption.

2. Identify What Your Competitor Is Doing Better

Before investing in additional campaigns, founders should examine how competing projects attract and retain attention. The objective is to discover opportunities rather than copy another brand’s approach.

A competitive review should cover messaging, content quality, audience engagement, distribution channels, and transparency.

Study competitor messaging

Review how competing projects describe their products. Do they explain their target audience and primary benefits clearly? Are their claims supported by evidence? Do they address the questions potential users are likely to ask?

For example, a decentralized application might describe itself as a platform powered by smart contracts. A stronger explanation could describe the specific process it automates, the problem it solves, and the limitations users should understand.

This type of analysis can guide the development of more relevant Crypto Marketing Solutions.

Examine content and community activity

Look at the educational articles, technical demonstrations, newsletters, and community discussions competitors publish. Determine which subjects generate meaningful questions and which formats help users understand the product.

Also examine how competitors respond to feedback. A project that answers questions transparently may build more credibility than one that publishes frequent promotional announcements but avoids difficult discussions.

Identify gaps you can address

The most useful competitive insights often come from identifying information that competitors overlook.

Your project may be able to provide clearer documentation, more detailed product demonstrations, practical tutorials, or better explanations of token utility. These improvements can create a distinctive position without requiring the business to imitate another project’s identity.

3. Build a Crypto Marketing Strategy Around Your Strengths

Once the competitive gaps are clear, the next step is to develop a crypto marketing strategy that connects the project’s capabilities with the needs of its audience.

Start by defining three things: who the product serves, what problem it solves, and what evidence demonstrates its value.

Explain technical features in simple language

Blockchain products often involve smart contracts, decentralized governance, token standards, and complex infrastructure. However, different audiences need different explanations.

Developers may want integration documentation, while business customers may prioritize operational benefits. Everyday users may care more about usability, transaction fees, and security.

A cryptocurrency marketing agency should understand these differences when planning content and campaigns.

For example, rather than simply stating that a platform uses smart contract automation, explain which tasks it automates, how the process works, and what users need to know before relying on it.

Establish a consistent brand message

Your website, social media accounts, articles, and community channels should communicate a consistent value proposition.

Consistency does not mean repeating identical sentences. It means ensuring that each communication reinforces the project’s actual purpose.

A clear message also helps a crypto token marketing agency or internal marketing team develop campaigns that remain aligned with the product rather than following every emerging market trend.

Support claims with evidence

Avoid relying on unsupported claims about guaranteed returns, explosive growth, or future token prices. Instead, use product demonstrations, technical documentation, verified milestones, and authentic customer feedback.

This approach makes the project’s communication more credible and gives potential users better information for evaluating its value.

4. Choose the Right Channels for Better Reach

Being present on every platform is not always an effective marketing strategy. Projects should prioritize channels that reach their intended audiences and support their specific objectives.

Search engine optimization and educational content

SEO can help blockchain businesses reach people who are actively researching solutions. Educational articles, technical guides, and product comparisons can answer relevant questions while introducing the project’s capabilities.

For example, a smart contract security provider might publish practical content about common vulnerabilities, audit preparation, and testing methods. Such resources can attract developers who need these services.

Social media and community engagement

Social platforms help projects communicate updates, explain features, and participate in industry conversations. Community channels also provide opportunities to answer questions and gather feedback.

The emphasis should remain on relevant interactions rather than follower counts alone.

Influencer partnerships and public relations

Creators, industry publications, and strategic partnerships can introduce projects to new audiences. However, campaign selection should be based on audience relevance, credibility, and transparent communication.

A smaller creator with an engaged developer audience may be more useful to an infrastructure project than a larger creator whose audience has little interest in the product.

5. How Crypto Marketing Services Help Improve Competitiveness

Managing content, community engagement, competitor research, and campaign measurement requires time and specialized knowledge. Crypto Marketing Services can help businesses coordinate these activities under a unified strategy.

The value of external support depends on the provider’s expertise, the agreed deliverables, and the project’s objectives.

A suitable Crypto Marketing Company may support several areas.

• Competitive research: Identify messaging gaps, audience needs, and relevant distribution opportunities.
• Content development: Create educational articles, technical explainers, product demonstrations, and social media content.
• Community management: Answer questions, gather feedback, and maintain consistent communication.
• Campaign execution: Coordinate relevant partnerships, announcements, and audience outreach.
• Performance analysis: Measure qualified traffic, onboarding, engagement, and other meaningful outcomes.

When evaluating crypto marketing agencies, founders should ask how each activity supports business goals. They should also distinguish measurable deliverables from outcomes that no provider can guarantee.

6. Make Token Marketing About Utility, Not Just Hype

Token projects face an additional challenge: explaining the token’s purpose while attracting attention in a crowded market.

Token marketing should clarify how the token fits into the ecosystem, how its supply is structured, and what users can realistically expect from its functionality.

Develop a clear token launch marketing strategy

A practical token launch marketing strategy should cover three stages.

• Before launch: Explain the project, publish tokenomics information, educate potential participants, and address common questions.
• During launch: Communicate verified participation details, eligibility requirements, relevant restrictions, and risks.
• After launch: Share development progress, product updates, and meaningful ecosystem developments.

Token launch marketing services should be evaluated according to the quality of these activities, the audiences reached, and the accuracy of the information provided.

Keep token sales marketing transparent

Token sales marketing may involve explaining distribution terms, vesting schedules, token allocation, and participation requirements. These details should be consistent across public communications.

A token marketing campaign should not rely on guaranteed-return claims or artificial urgency. Legal and promotional requirements must also be assessed for the relevant jurisdictions.

A qualified crypto token marketing agency can help coordinate campaign messaging and audience education, but founders remain responsible for ensuring that token offerings and public claims comply with applicable requirements.

7. Measure Whether Your Marketing Is Working

Strong visibility does not automatically translate into product adoption. Founders should measure whether marketing activities attract relevant users and help them progress toward meaningful actions.

Useful indicators may include:

• Qualified website traffic.
• Documentation engagement and developer registrations.
• Completed user onboarding.
• Repeat product usage.
• Community participation and feedback quality.
• Cost per qualified lead or acquired customer.

For example, a campaign that attracts thousands of visitors but produces very few active users may be less valuable than a smaller campaign that reaches people with a genuine need for the product.

A good marketing team combines analytics with direct feedback to identify where users lose interest and which improvements could increase adoption.

Conclusion: Make Your Project Easier to Discover and Trust

A competitor with stronger marketing may gain attention even when its technology is not significantly better. However, Web3 businesses can close that gap by communicating their strengths clearly, choosing relevant channels, and building credibility through consistent execution.

The priorities are straightforward:

• Study competitors to identify gaps in positioning and communication.
• Strengthen your message so audiences understand the product’s real benefits.
• Use crypto marketing strategically instead of spreading resources across every platform.
• Choose appropriate Crypto Marketing Services that support measurable business objectives.
• Approach token launch marketing responsibly by explaining utility, distribution, and risks.
• Measure meaningful results through qualified engagement and actual product adoption.
• Build long-term trust by supporting claims with evidence and delivering on commitments.

Ultimately, effective crypto marketing is not about making a weaker product appear superior. It is about ensuring that the right audience understands your project’s genuine value and has a compelling reason to explore it.

What If Your Biggest Web3 Competitor Isn’t Better, Just Better Marketed? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.