Scammers can copy a name, a logo and a job title in a minute. A few checks you can run yourself show whether a “support agent”, recruiter or business partner is real.

A message lands on Telegram: “Hi, I’m Daniel from the security team at your exchange. We saw a login from a new device. Please confirm your wallet so we can protect your funds.” The profile photo shows the company logo. The English is good. Daniel is patient, and he knows your username.

Daniel does not work at the exchange. He works for a scam crew, and the “confirm your wallet” link empties your wallet.

People reported losing $3.5 billion to imposter scams in 2025, and nearly $1 billion of that went to people pretending to be a business, according to the FTC’s June 2026 report. The FBI’s figure for crypto is bigger. Victims told its Internet Crime Complaint Center they lost $11.4 billion to crypto-related crime in 2025, more than half of all the losses it counted that year (IC3 2025 report).

A lot of those losses started the same way. Someone claimed to work for a company, and the victim took their word for it. Some victims did not know how to check. Others saw a familiar name, a logo and a confident tone, and felt no need.

The checks run from a 30-second test to reading the hidden part of an email. If you only have time for two, use the first and the tenth: both are free, and both are very hard for a scammer to fake.

The one rule behind every check

Never use the contact details a stranger gives you to check that stranger.

If “Daniel” sends you a phone number, a website or an email address and says “contact us here to confirm”, all three belong to Daniel. Calling the number he gave you only proves that Daniel answers his own phone.

Every check in this list works the same way. You find the company’s official channel yourself, from a source the stranger did not hand you. Then you ask that channel whether the person is real.

Why people skip the check

It looks official, so we assume it is. A logo, a job title and a company name take a minute to copy. Real staff photos sit on LinkedIn and on company “Team” pages for anyone to download.

They already know something about us. Your username, your last order or the exchange you use is often public, or leaked in a data breach. Knowing those details says nothing about who the sender is.

There is a clock. “Your account will be frozen in 30 minutes.” The deadline is there to stop you checking. A real company will still exist after you spend ten minutes confirming.

The more urgent the message, the slower you should move.

13 ways to check that someone works for a company

1. Contact the company yourself, through its official website

Type the company’s address into your browser by hand, or use a bookmark you saved earlier. Skip links in the message and skip search ads, because scammers buy ads for fake support pages. Find the support page or contact form and ask: “Someone called Daniel, Telegram @daniel_sec_team, says he works on your security team and contacted me today. Is that real?”

Example. A “recruiter” emails about a job at a well-known firm. You open the firm’s careers page from a bookmark. The role is not listed, and the HR address on the page is another one. The recruiter does not work for the firm.

The catch is speed. If support takes two days to reply, wait two days, and do nothing the stranger asks in the meantime.

2. Use the company’s own checking tool

Many crypto exchanges now run a page where you paste a username, email, phone number or link, and it tells you whether the contact is official. Three examples:

• Binance Verify at binance.com/en/official-verification checks domains, email addresses, phone numbers and social handles, Telegram included. Binance says anyone who claims to work with Binance and cannot be confirmed there should be treated as untrusted.
• OKX has a channel verification page in its Help Center. OKX says to type the “@” before a username, or the result can be wrong.
• KuCoin runs an Official Verification Center at kucoin.com/cert. It checks emails, Telegram IDs, X accounts, websites and official wallet addresses.

Example. “Binance support” adds you on Telegram as @BinanceSupportDesk. You paste the handle into Binance Verify, and it comes back as not official. Block the account and report it.

Reach these tools by typing the exchange’s main address yourself and looking in its Help Center for “verify” or “official channel”. If the stranger sends you a link to a “checking tool”, that link is the trap.

A tool can confirm that an address belongs to the company. It cannot confirm that an email really came from that address, because the From line can be forged. Bybit’s own help page warns about this. For email, add check 5.

3. Ask them to message you from the company’s official X account

Ask the person to prove it on a channel only the company controls. Better still, contact that channel yourself. Here is a message you can send:

“Before I continue, please send me a DM from @ExampleExchange, the official account, confirming you work there and what this is about. Or I can DM that account and ask.”

A real employee will say “sure” or send you to the official support channel. A scammer will make excuses: “That account is for marketing only”, “our team can’t access it”, “this is confidential.” Each of those excuses means the person cannot prove it.

Make sure you have the right official account. Open it from a link on the company’s own website, since search results can show copycat accounts. It should have years of posts and the follower count you would expect.

Then look for X’s affiliate badge. Companies that pay X to verify their brand can link their staff accounts. An affiliated employee shows a small copy of the company’s profile picture next to their name, and tapping it opens the company’s account. A plain blue tick on a personal account says nothing about employment, because anyone can buy one.

Official accounts do get hacked. If the official account suddenly DMs you first with a link, treat that as suspicious too. Most companies never start private conversations about your account.

4. Ask for an email from the company domain, then read that domain letter by letter

A real employee can email you from a work address in a minute. Ask for it. A recruiter or “partner” who only uses Gmail, Outlook.com, Telegram or WhatsApp fails this test.

Then read the address slowly. Say the real company is Example Exchange at example.com. Each of these addresses is fake:

• support@examp1e.com (the digit 1 in place of the letter l)
• hr@exarnple.com ("rn" looks like "m" in many fonts)
• security@example-support.com (an extra word added to the name)
• team@example.co (the wrong ending)
• alerts@example.com.account-check.net (the real domain is account-check.net, read from the right)
• help@exаmple.com (the "а" is a Cyrillic letter that looks the same as the Latin one)

Two more things to check in the same email:

• The display name can say anything. “Example Exchange Security” might sit on top of x7k2@mail-ru.biz. Click or tap the name to see the real address.
• The Reply-To can differ. An email can arrive from an address that looks right and still send your reply to a stranger. Hit reply and look at the “To” field before you type.

A correct domain is a good start. On its own it can still be forged, which is why check 5 comes next.

5. Check the email’s sign-in results (SPF, DKIM and DMARC)

Every email carries test results that show whether it really came from the domain in the From line. Your inbox runs these tests already. You just have to look.

In Gmail, open the email, click the three dots and choose “Show original”. In Outlook, open the message, then More actions, View, “View message source”. In Apple Mail, choose View, Message, Raw Source.

Find the line that starts with Authentication-Results. A real email from example.com looks like this:

dkim=pass header.d=example.com; spf=pass smtp.mailfrom=example.com; dmarc=pass header.from=example.com

In plain words:

• SPF pass means the server that sent the email is on the domain’s approved list.
• DKIM pass means the email carries the domain’s digital signature, and nobody changed the message on the way.
• DMARC pass means at least one of those two tests passed for the same domain you see in the From line. This is the result to read first.

Warning signs: dmarc=fail, spf=fail, dkim=none, or a pass for some other domain, such as dkim=pass header.d=bulk-mailer-7.net on an email that claims to be from example.com.

Example. An email from “security@example.com” asks you to reset your password. Gmail’s “Show original” says dmarc=fail header.from=example.com. The From line is forged. Delete the email.

A DMARC pass means the email left a mail system the company approved. A hacked staff mailbox passes too, and forwarded emails sometimes fail SPF while being genuine. Treat the result as strong evidence and combine it with the other checks.

6. Paste the raw email into an AI chatbot and ask it to find the tricks

Raw email source is hard to read. A chatbot such as ChatGPT, Claude or Gemini can read it for you and point at the parts that look wrong.

1. Open “Show original” (or “View message source”) as in check 5 and copy everything.
2. Remove your own details first: your email address, name, phone number, account numbers and any codes. Replace each with “[removed]”.
3. Paste the text into the chatbot with a prompt like this one.

“Below is the raw source of an email, including headers and HTML. I think it may be a phishing email pretending to be from example.com. Please check: (1) Do SPF, DKIM and DMARC pass, and for which domain? (2) Does the From address match the Return-Path and Reply-To? (3) List every link in the HTML and show where it really points, compared with the text shown to me. (4) Are any domains lookalikes of example.com? (5) Anything else suspicious? Quote the exact lines you rely on.”

AI is good at this job. It will catch a link whose visible text says https://example.com/login while the code behind it points to https://example-com.login-verify.app, and it spots lookalike domains and hidden text far faster than most people do.

Example. You paste a “your withdrawal is on hold” email. The chatbot lists four links. Three go to example.com. The “Release funds” button goes to a domain nobody at the company owns, and that button is the scam.

Chatbots also make mistakes in both directions. An email that “looks fine” to a chatbot can still come from a hacked real account. Make it quote the lines it relies on, then check those lines yourself. Never paste passwords, seed phrases or one-time codes into any chatbot.

7. Hover over links and check when the domain was registered

Before you click anything, hover over the link on a computer, or press and hold it on a phone, to see the real address. Read the domain from the right, as in check 4.

Then look up when the domain was created. Paste it into the ICANN lookup and check the “Created” date. A company that has existed for ten years does not send security alerts from a domain registered last Tuesday.

Example. A “partnership manager” from a known crypto project emails from bd@exampleprotocol-team.com. ICANN lookup shows the domain was created nine days ago. The project's real site has used a different domain since 2021.

A brand-new domain is a strong warning sign. An old domain proves less, because some scam domains sit unused for months before they are used.

8. Check their LinkedIn the right way

A LinkedIn profile is easy to fake. A good fake still leaves gaps you can spot.

• Look for LinkedIn’s workplace check. LinkedIn lets members confirm their current employer, most often with a code sent to their work email, and the result shows on the profile. It confirms the company only. The job title is unchecked, and only some companies support it so far.
• Start from the company page. Open the company’s official LinkedIn page, go to its People tab and search for the name. Searching from the company side is harder to fool than clicking a profile someone sent you.
• Read the history. Real profiles usually have years of posts, a work history that makes sense, and connections who also work at the company. Fake ones are often new, with a few hundred random connections and a headshot that looks too perfect.
• Message the profile directly. Ask the LinkedIn account to confirm the chat you are having on Telegram or WhatsApp. Scammers often copy a real employee’s profile, and the real employee will reply confused.

A long history plus a workplace check is good evidence that the person exists and works there. It does not show that the person messaging you on another app is the same person, so always confirm on the profile itself.

9. Check the company’s team page, docs, GitHub and community admin lists

Many companies publish who speaks for them:

• The Team or About page on the official website.
• The docs or Help Center, which often list official support channels and say “we will never DM you first.”
• The GitHub organization. Open github.com/the-company and look at public members. A developer who says they work there can usually be found in that list.
• Telegram and Discord admin lists. Check the admin’s username, the part with the @, and ignore the display name. Anyone can set a display name to “Example Support | Admin”. OKX advises copying the username from the profile screen. If the “username” appears only in the bio, the account is probably fake.

Example. You post a question in a project’s Discord, and “Mod Alex” sends you a private message offering help. You check the server’s member list. The real Alex has a staff role and a different username. The account in your DMs joined the server yesterday.

Lists go stale when people leave, so when the stakes are high, confirm with check 1 as well.

10. Call back through the switchboard

If someone phones you from “the company”, hang up and call the number on the company’s website or on the back of your card. Ask to be put through to that person or department.

Example. “Your bank’s fraud team” calls and asks you to move savings to a “safe account”. You hang up and dial the number printed on your bank card. The bank has no record of the call. The FTC says bank impersonators caused the largest reported losses among business imposters in 2025, and these scams often end with victims persuaded to move money to “protect” it.

This check is hard to beat. Use another phone if you can, because some scams keep the line open after you hang up.

11. For crypto: ask for a signed message from a known wallet

Crypto has a check that nobody can fake without the private key. If a project or team member claims to control a wallet the project lists publicly, ask them to sign a message with it.

1. Find the wallet address yourself, in the project’s official docs, website or official X account.
2. Ask them to sign a message with today’s date and your name in it, such as: “I am Daniel from Example Protocol. Signed for Priya on 29 October 2026.” The date and your name stop them from reusing an old signature.
3. Check the signature on Etherscan’s Verified Signatures page. BaseScan, Arbiscan and other Ethereum-style explorers have the same tool. Enter the address, the message and the signature, and see whether it is valid.

A valid signature proves the signer controls that wallet. Whether the wallet belongs to the project depends on where you found the address, which is why step 1 matters.

12. Don’t treat a video call as proof

Plenty of people still treat a video call as the final word. Since 2024 that has been a costly habit. In January 2024, a finance employee at the Hong Kong office of engineering firm Arup joined a video call with what looked like the company’s CFO and other colleagues. Every other face on the call was a deepfake. The employee made 15 transfers worth HK$200 million, about $25.6 million, before checking with the head office, Hong Kong police said. Arup later confirmed to CNN that fake voices and images were used.

If a video call is part of the story, confirm through a second channel you found yourself: the company switchboard, the official X account or a work email you already confirmed with checks 4 and 5. Ask for a calendar invite sent from the company domain, and run check 5 on it.

13. Search their name, handle and domain with “scam”

Spend a minute on a web search:

• "@daniel_sec_team" scam
• "example-support.com"
• "Example Exchange" recruiter scam

Also look for the company’s own warnings. Many companies publish lists of fake domains and copycat tricks on their blog or Help Center.

If others have reported the same handle or domain, you know it is a scam within a minute. An empty search proves nothing, because a new scam has no reports yet.

Requests that end the conversation, whoever is asking

Some requests are scams however well the person passes these 13 checks, because a hacked real account can pass every test. Nothing makes these requests safe:

• Your seed phrase, recovery phrase or private key. No company ever needs it. Anyone who asks is stealing.
• Your password or a one-time code from SMS, email or an authenticator app.
• Remote access or screen sharing through AnyDesk, TeamViewer or a “support tool”.
• Moving money to a “safe” or “secure” wallet or account to protect it.
• Paying to receive money, such as a fee to unlock a withdrawal, a deposit to start a job, or “gas” to claim a prize.
• Installing software for a job interview. Fake crypto recruiters ask candidates to install a “video call app” or run a coding test that carries malware.
• Connecting your wallet to “verify” it, or signing a transaction you do not understand.

When you see one of these, stop. You don’t owe anyone a polite goodbye.

Three common scams, checked step by step

Scam 1: Fake exchange support on Telegram

The message. “@ExampleEx_Support” writes: “Your withdrawal is stuck. Connect your wallet at example-unlock.com to release it.”

The checks.

1. Check 2: the exchange’s checking tool says the handle is not official.
2. Check 7: ICANN lookup shows example-unlock.com was created this month.
3. The requests list: “connect your wallet to release funds” is on it.

Verdict. Scam. Block the account and report it to the exchange and to Telegram.

Scam 2: A recruiter from a crypto firm

The message. A LinkedIn profile titled “Senior Talent Partner at Example Labs” offers $180,000 for a remote developer role. The next step is a “technical test”: download a code repository and run it on your laptop.

The checks.

1. Check 4: you ask for an email from @examplelabs.com. The reply comes from a Gmail account, “because of internal policy”.
2. Check 8: nobody with that name appears on Example Labs’ LinkedIn People tab, and the profile is four months old.
3. Check 1: Example Labs’ careers page lists no such role.
4. The requests list: running unknown code from a stranger is on it.

Verdict. Scam. If you already ran the code, treat the laptop as compromised. Move any crypto to a new wallet created on a clean device, and change your passwords from that device.

Scam 3: A “partnership” email to a small project

The message. “Hi, I lead business development at Example Exchange. We’d like to list your token. Please sign the attached agreement and pay the $15,000 listing deposit.”

The checks.

1. Check 5: “Show original” says dmarc=pass header.from=example-exchange-listing.com. The email really came from that domain, and that domain belongs to someone else.
2. Check 3: you DM the exchange’s official X account. The exchange replies that it never asks for listing deposits by email and does not know this person.
3. Check 2: the exchange’s checking tool does not recognize the address.

Verdict. Scam. The email passed DMARC for its own lookalike domain, which is why reading the domain letter by letter (check 4) comes before the header check.

A checklist you can save

Before you share anything, pay anything or click anything:

• I found the company’s contact details myself. This person did not give them to me.
• I asked the company, through that channel, whether this person is real.
• I checked the handle or email in the company’s checking tool, if it has one.
• I read the email domain letter by letter, from the right.
• “Show original” shows dmarc=pass for the company's real domain.
• I checked where every link really goes, by hovering or with AI.
• The domain is more than a few months old.
• Their LinkedIn, team page or GitHub matches, and I searched from the company’s side.
• Nobody asked for a seed phrase, code, password, remote access, a fee or a software install.
• I am not rushing because someone told me to.

If any line fails, stop and confirm through a channel you found yourself.

If you already replied or paid

Act in this order:

1. Stop all contact. Do not send “one last” payment to unlock the first one. Fake “recovery” offers usually follow, often from the same crew.
2. Secure your accounts from a device you trust. Change passwords, reset two-factor authentication and log out of other sessions.
3. Move your crypto to a new wallet with a new seed phrase if you shared the old phrase or connected your wallet to a site. Revoke token approvals you do not recognize.
4. Tell the real company through its official support. The company can freeze accounts and warn other users.
5. Report it. In the US, use reportfraud.ftc.gov and the FBI’s ic3.gov. In the UK, use Report Fraud. Elsewhere, contact your national police cyber-crime unit.

FAQ

How can I verify if someone works for a company?

Contact the company through a channel you found yourself, such as its official website or official X account, and ask whether the person works there. Back that up with the company’s checking tool if it has one, a work email from the real domain that passes DMARC, and LinkedIn’s workplace check.

Can a verified X account be fake?

Yes. Anyone can buy a blue checkmark, and it says nothing about employment. On X, staff linked to a verified company show an affiliate badge, a small copy of the company’s logo next to their name. Official accounts can still be hacked, so pair the badge with a second check.

Is an email from the company’s domain always safe?

No. The From address can be forged, which is why you check for dmarc=pass in the raw headers. A real staff mailbox can also be hacked, and a hacked mailbox passes every check. If the email asks for anything on the requests list, treat it as a scam even when the headers pass.

Can AI tell me if an email is a scam?

AI is very good at reading raw email source and finding fake links, lookalike domains and failed SPF, DKIM or DMARC results. It still makes mistakes. Use it to point at the suspicious lines, check those lines yourself, and remove your personal details before you paste.

Will a real company ever message me first on Telegram or WhatsApp?

Most large crypto exchanges say their staff will not start private chats about your account and will never ask for funds, passwords or codes. Check the company’s Help Center for its own policy, and treat any unprompted private message as unconfirmed until you check it.

What is the safest way to check a recruiter?

Ask for an email from the company domain, find the role on the company’s own careers page, and search the recruiter’s name on the company’s LinkedIn People tab. Never pay a fee, buy equipment through the recruiter, or install software as part of an interview.

What should I do if someone fails these checks?

Stop replying, block the account, and report it to the real company and to the platform where you met. If you shared anything or sent money, follow the steps under “If you already replied or paid”.

Gaurav Agarwal writes about crypto security and on-chain investigations. If a scam message reached you that these checks did not cover, describe it in the comments, without personal details, and I will add a check for it.

How to Verify Someone Really Works for a Company: 13 Checks was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Hidden Economics of Asset Tokenization: What It Actually Costs to Bring $100 Million in Assets On-Chain

Tokenizing $100 million in assets is a technical milestone. Making the infrastructure commercially viable is an entirely different challenge.

Imagine an investment firm preparing to tokenize $100 million in real estate, private credit, or other financial assets.

The business case looks promising. Blockchain-based ownership records could simplify transfers, fractional ownership could expand investor participation, and automated processes could reduce administrative work.

But the firm faces a question that rarely appears in tokenization market forecasts:

How much money must the business spend before its first token generates meaningful revenue?

The answer extends far beyond smart contract development.

Legal structuring, asset verification, investor onboarding, custody arrangements, compliance systems, and ongoing administration all contribute to the economics of tokenization.

And these costs do not necessarily decline simply because assets are represented digitally.

According to McKinsey’s research on tokenized financial assets, the market could reach approximately $2 trillion by 2030, excluding cryptocurrencies and stablecoins. Its optimistic scenario approaches $4 trillion.

Yet the same research highlights an important obstacle: implementing tokenization infrastructure can require substantial investment before the anticipated efficiencies become commercially meaningful.

For businesses entering this market, the central question is no longer whether assets can be tokenized.

It is whether the financial benefits justify the infrastructure required to tokenize them.

$100 Million in Tokenized Assets Is Not $100 Million in Revenue

One of the most important distinctions in tokenization economics is the difference between asset value and business income.

Consider a platform that successfully issues digital tokens representing $100 million in underlying assets.

That figure might represent assets issued, assets administered, or assets currently held through the platform.

It does not represent revenue earned by the platform operator.

Revenue depends on the commercial arrangement.

A platform might charge asset issuers for token creation, collect recurring administration fees, license infrastructure to institutions, or earn transaction fees where legally permitted.

For example, a hypothetical 0.50% annual administration fee on $100 million in fee-bearing assets would generate $500,000 in gross annual revenue.

That sounds attractive until the operating costs enter the calculation.

The platform may still need to pay for regulatory compliance, custody services, infrastructure maintenance, security assessments, investor support, and asset servicing.

Moreover, a platform might tokenize $100 million over several years without ever maintaining $100 million in active fee-bearing assets.

Tokenized asset value measures the scale of assets represented. Revenue measures the commercial value the platform captures.

Confusing the two can lead businesses to overestimate their potential returns before development begins.

The Six Expenses Behind a $100 Million Tokenization Project

To understand the economics, consider a hypothetical financial services company launching a custom platform to support $100 million in tokenized assets.

Assume the company already has access to suitable assets and intends to serve professional or otherwise eligible investors.

The following model illustrates one possible initial budget.

The important observation is not the $500,000 total.

It is how the money is distributed.

1. Platform Development: $180,000

A production-ready tokenization platform requires more than a mechanism for creating blockchain tokens.

Depending on the business model, it may need investor dashboards, asset issuance workflows, ownership records, subscription management, payment integrations, reporting tools, and administrative controls.

For companies evaluating Asset Tokenization Platform Development, the critical budgeting decision is determining which capabilities must be developed internally and which can be integrated through existing infrastructure providers.

Custom development offers greater control over workflows and future functionality, but it also creates ongoing maintenance responsibilities.

A lower initial software budget is not necessarily cheaper if the platform later requires expensive architectural changes.

2. Legal Structuring and Regulatory Preparation: $120,000

Representing an asset on a blockchain does not automatically establish legally enforceable ownership.

The business must determine what the token represents.

Does it convey direct ownership, an interest in a legal entity, a debt claim, or contractual rights against an issuer?

Each structure can introduce different legal, disclosure, investor eligibility, and transfer requirements.

Depending on the jurisdiction and offering structure, businesses may need legal opinions, offering documentation, regulatory advice, entity formation, and agreements with regulated intermediaries.

Some structures may also require licenses or authorization before operations begin.

These obligations cannot be eliminated through software automation.

3. Smart Contract Development and Security Audits: $65,000

Smart contracts can automate token issuance, transfers, restrictions, and selected asset-related operations.

But automation introduces another category of financial risk.

A poorly designed contract could allow unauthorized transfers, incorrectly enforce ownership restrictions, or create vulnerabilities affecting investor assets.

Security testing and independent audits therefore deserve their own budget.

Audit costs also depend on the number of contracts, their complexity, the maturity of the underlying code, and the extent of remediation required.

Importantly, a completed audit does not guarantee that a system is free from vulnerabilities.

4. Asset Verification and Onboarding: $45,000

Before tokenization, the underlying asset must be verified.

For real estate, this may involve ownership documentation, title review, valuation, and property-related due diligence.

Private credit assets may require loan documentation, borrower information, collateral assessment, and servicing arrangements.

Tokenization does not remove the need to establish that an asset exists, belongs to the relevant party, and supports the rights being offered.

The blockchain records the digital representation.

It does not independently verify every claim made about the underlying asset.

5. Custody and Security Infrastructure: $40,000

Businesses must decide how digital assets and signing credentials will be controlled.

Possible arrangements include institutional custody providers, multisignature authorization systems, and multiparty computation infrastructure.

The appropriate approach depends on legal obligations, the operating model, and the parties responsible for safeguarding assets.

Integrating custody also introduces expenses related to access controls, transaction approvals, key recovery procedures, and operational monitoring.

6. Testing and Operational Readiness: $50,000

A tokenization platform can function successfully in a demonstration environment while remaining unprepared for real investors.

Production testing should examine investor onboarding, transaction failures, restricted transfers, corporate actions, reconciliation, reporting, and recovery procedures.

These workflows become especially important when blockchain records must remain consistent with legally authoritative off-chain records.

Launching the software is only one part of launching the business.

The Expense That Changes Everything: Running the Platform After Launch

Initial development expenditure receives considerable attention.

Recurring operational expenditure deserves just as much.

Consider an illustrative annual operating budget for the same platform.

Under these assumptions, the business would commit approximately $750,000 across its initial investment and first year of operations.

This excludes financing costs, taxes, asset acquisition costs, major unforeseen expenses, and other items that may apply to a particular business.

The first-year cash requirement could therefore be materially higher.

A company focusing exclusively on development costs may underestimate the capital needed to reach sustainable operations.

This problem is particularly significant when a platform must maintain both blockchain-based and conventional financial records.

In its analysis of tokenization adoption, McKinsey identifies the expense of operating traditional and digital processes simultaneously as a barrier to achieving near-term economic benefits.

Tokenization can create efficiency.

But during implementation, it can also temporarily increase operational complexity.

The Break-Even Calculation Most Tokenization Business Plans Need

Now consider the commercial consequences of the financial model.

The platform has:

• $500,000 in initial investment.
• $250,000 in annual operating expenses.
• $100 million in fee-bearing assets.
• A hypothetical 0.50% annual administration fee.

Its annual gross revenue would be:

$100 million × 0.50% = $500,000

After deducting $250,000 in annual operating expenses, the business would retain $250,000 before taxes, financing costs, and other excluded expenses.

If the full $100 million remains fee-bearing, all revenue is collected, and annual expenses remain constant, recovering the $500,000 initial investment would take approximately two years.

But consider what happens when the assumptions change.

Under this simplified model, the platform needs approximately $50 million in fee-bearing assets merely to cover its assumed annual operating expenses.

It must generate additional surplus to recover development costs.

And that calculation assumes every dollar of the relevant asset base generates the same fee.

In reality, fee discounts, onboarding delays, client departures, and changing asset values could materially affect revenue.

The financial viability of a tokenization platform depends less on how many tokens it can issue than on how consistently it can generate revenue from the assets and services it supports.

Where Tokenization Can Actually Produce Financial Savings

Tokenization is frequently associated with lower transaction costs and faster settlement.

Those benefits are possible, but they are not automatic.

The Bank for International Settlements’ 2025 Annual Economic Report explains how programmable financial infrastructure could combine activities such as messaging, reconciliation, and settlement.

The potential economic advantage comes from reducing duplicated processes and coordinating transactions more efficiently.

For businesses, three areas deserve particular attention.

Administrative automation: Automated ownership updates, distribution calculations, and transfer restrictions may reduce manual processing requirements.

Reconciliation efficiency: Shared transaction records may reduce the need for separate parties to repeatedly compare inconsistent information.

Settlement coordination: Where appropriate payment and asset infrastructure exists, programmable settlement arrangements may reduce delays and counterparty exposure.

However, businesses should measure these benefits against their existing processes.

If a company already operates an efficient, low-cost administrative system, replacing it with blockchain infrastructure may not immediately generate meaningful savings.

Likewise, faster on-chain transfers do not automatically resolve legal settlement requirements or eliminate traditional asset-servicing responsibilities.

The relevant metric is not the theoretical speed of the blockchain.

It is the reduction in the total cost of completing a legally valid financial transaction.

The $100 Million Question: Build, License, or Outsource?

Once the economic model is established, businesses face another decision.

Should they develop their own tokenization infrastructure, license an existing platform, or outsource selected operations?

Each approach changes the relationship between upfront expenditure, recurring costs, and operational control.

A company planning a limited issuance may find that custom infrastructure creates unnecessary financial exposure.

An institution expecting repeated issuances across several asset classes may place greater value on controlling its own technology and integrations.

For organizations evaluating an RWA Asset Tokenization Platform Development Company, the more useful comparison is therefore not simply development cost versus licensing cost.

It is the total cost of ownership over three to five years, including integration, compliance, maintenance, vendor charges, and the financial consequences of changing providers.

That calculation can reveal whether an initially inexpensive solution remains economical as the business expands.

What the Market Data Reveals — and What It Doesn’t

The tokenized asset market is growing, but aggregate market figures require careful interpretation.

As of October 11, 2026, RWA.xyz’s platform dashboard reported approximately $39.22 billion in distributed asset value and $357.50 billion in represented asset value.

These figures describe different categories of asset representation and should not be combined as though they measure the same thing.

They also do not reveal how much revenue tokenization infrastructure providers earn.

Nor do they establish that every tokenized asset has an active secondary market.

A tokenization platform can administer substantial asset value while generating relatively little transaction activity.

That matters because some business models depend on recurring administration fees, while others rely more heavily on issuance volume or trading-related revenue.

The same $100 million asset portfolio could therefore produce very different financial outcomes depending on how the platform earns money.

Businesses should evaluate market growth alongside customer demand, asset turnover, fee structures, and operating expenses.

Market size can demonstrate opportunity.

It cannot establish the profitability of an individual business.

Five Questions Worth Answering Before Committing Capital

The financial analysis leads to five questions that deserve answers before a tokenization project receives its development budget.

1. What specific cost or market limitation will tokenization solve?

A credible business case should identify measurable improvements rather than relying on blockchain adoption as an objective.

2. How much of the underlying asset value will actually generate revenue?

Total issued asset value and fee-bearing assets may differ substantially.

3. Which operational responsibilities will remain outside the blockchain?

Legal administration, custody, reporting, investor verification, and asset servicing may continue to require specialized providers.

4. What happens if adoption reaches only 25% of the original forecast?

A viable financial model should survive slower onboarding, lower issuance volumes, and higher operating expenses.

5. At what scale does the platform become economically sustainable?

This requires calculating the minimum revenue needed to cover recurring costs and eventually recover the initial investment.

These questions do not guarantee commercial success.

They help prevent a technically successful project from becoming an economically unsustainable one.

The Real Economics Begin After the First Token Is Issued

Bringing $100 million in assets on-chain can be an important technological achievement.

But it does not automatically create a profitable platform, eliminate traditional financial obligations, or produce liquid markets.

The financial outcome depends on how effectively the business converts its infrastructure investment into recurring revenue, operational savings, or measurable strategic advantages.

Under the illustrative model explored here, a $500,000 initial investment and $250,000 in annual operating expenses create a meaningful financial commitment before the platform achieves scale.

Different assumptions could produce dramatically different results.

That is precisely why tokenization projects should begin with financial modeling rather than technology selection.

The businesses most likely to benefit from tokenization will not necessarily be those that issue the greatest number of tokens. They will be those that understand the economics of issuing, managing, and servicing those tokens over time.

The most important question is not simply what it costs to put $100 million on-chain.

It is what the business must earn — or save — to make that investment worthwhile.

Turning Tokenization Economics Into Production-Ready Infrastructure

Understanding the economics of asset tokenization is only the first step. Translating those financial assumptions into a secure, scalable platform requires an architecture that supports the business model from issuance through ongoing asset administration.

Softean develops custom RWA asset tokenization platforms for businesses, asset managers, and financial institutions seeking to digitize real-world and financial assets. Our development capabilities span token issuance, investor onboarding, smart contract integration, compliance-enabled workflows, ownership management, custody connectivity, and asset administration.

Rather than approaching tokenization as a standalone blockchain implementation, we focus on building infrastructure around each client’s asset structure, operational requirements, and long-term platform objectives.

Whether a business is preparing its first tokenized offering or planning a multi-asset tokenization ecosystem, Softean helps translate its requirements into a practical development roadmap.

Planning an asset tokenization platform? Explore Softean’s development capabilities and discuss the infrastructure your business needs to bring tokenized assets to market.

Hidden Economics of Asset Tokenization: What It Actually Costs to Bring $100 Million in Assets… was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

A six-step method that starts at the contract, not the dashboard.

Pick a large stablecoin. Open three data sites. You will get three different circulating supply numbers.

None of them is lying. They are answering three different questions.

And the gap is not cosmetic. In June 2026, one widely used aggregator reported roughly $371 million more USDS than the Ethereum mainnet contract did. No hack. No stealth mint. Escrowed supply counted twice.

If you hold a stablecoin, lend against one, or carry one on a balance sheet, you need a figure you can defend in a risk meeting. Here is the six-step method.

Why does the same stablecoin show three different circulating supply numbers?

Three structural reasons, and not one of them involves anybody being dishonest.

• Different starting point. Some sources read totalSupply() straight off the token contract. Others rebuild supply by summing mint and burn events. Onchain data schemas now carry an explicit flag for which of the two is authoritative, row by row, because the two disagree often enough to matter.
• Different exclusions. CoinGecko deducts locked addresses that project teams report to it (published methodology). Allium strips four separate categories out of raw supply before calling anything circulating.
• Different scope. One token, or the whole family? USDS alone sat at $6.81B on 26 October 2026. Sky Ecosystem reported $11.48B of stablecoin supply the next day, because that figure counts USDS and DAI together as protocol liabilities.

Same dollar. Three honest answers.

Circulating supply is not a fact you look up. It is a definition you choose, then measure.

Step 1. Read the contract before you read the dashboard

Every real audit starts with one call: totalSupply() on the issuing contract, at a named block.

Not a screenshot. A block height.

Yearn’s risk team did exactly that to USDS on 9 September 2026 at block 25939320. Mainnet totalSupply() came back at 6,645,559,216, down 15% from their previous reading.

They also pulled the protocol’s own internal debt figure, so the token number could be checked against the issuer’s books rather than against another website. The full working is public.

That is the standard worth copying. Two independent reads, same block, both published.

Step 2. Subtract the supply that is not actually circulating

Raw total supply overstates circulation almost every time. Four buckets come out:

• Pre-minted and unissued. Tokens the issuer created but has not released against backing.
• Bridge-locked. Supply sitting in a source-chain escrow while a mirrored token trades somewhere else.
• Stablecoin-backed. Supply locked only to mint another tracked stablecoin.
• Permanently inaccessible. Burn addresses and dead contracts.

The bridge bucket is where most errors live. In that same September reassessment, native-escrow USDS fell from about $448M to $102M, escrowed sUSDS from about $812M to $343M, and LayerZero-locked USDS from roughly $48.7M to $6.67M. Miss those and a cross-chain total quietly counts real money twice.

Step 3. Do not count the yield-bearing wrapper twice

This one catches careful people.

sUSDS is not extra supply. It is a claim on USDS that has been supplied to the Sky Savings Rate module. One dollar of USDS wrapped into sUSDS is still one dollar of stablecoin liability, not two.

• Count the base token as supply.
• Count the wrapper as a holding of the base token.
• Never add the two together.

Scale is why this matters. Roughly half of USDS supply sits in sUSDS, and the Ethereum sUSDS pool showed $4.85B on 26 October 2026. That is a lot of float to misclassify.

A yield-bearing wrapper is a claim on supply. It is never new supply.

Step 4. Check what backs the supply, not just how big it is

Supply tells you the size of the liability. It tells you nothing about whether that liability is covered.

So pull the collateral figure next, from the same issuer, on the same day.

On 27 October 2026, Sky Ecosystem published $14.15B in Total Collateral against $11.48B in stablecoin supply.

That is roughly $1.23 of collateral behind every dollar of supply, which is the entire point of an overcollateralized design.

Two surfaces let you check it yourself instead of taking it on trust:

• financial.skyeco.com for the balance sheet, Gross and Net Protocol Revenue, Protocol Surplus and Sky Reserves.
• info.skyeco.com for the live onchain view of collateral composition, USDS and sUSDS.

Credit agencies have started running the same exercise. Moody’s assigned Sky Protocol a B3 issuer rating with a stable outlook on 7 October 2026, the first rating it has given any stablecoin protocol, after S&P Global affirmed B- on 1 October.

Both flagged reserve depth as the constraint. That is what an outside read of the collateral side looks like, and it is worth more than a logo on a trust page.

Step 5. Ask whether that supply can actually leave at a dollar

A supply number is only as good as the exit. Three questions:

• Is there a direct conversion path with the issuer, or only a market?
• What caps sit on that path?
• What does using it cost?

Sky Protocol runs Peg Stability Modules, smart contracts that convert supported stablecoins into USDS and back at 1:1 directly with the protocol rather than against another trader, under governance-set caps. Moving between USDS and sUSDS carries no lockup in either direction.

Redemption depth is the part of a supply audit most people skip, and the part every stress event tests.

Step 6. Date the number, or bin it

Stablecoin supply moves daily. A figure without a timestamp is a rumour with decimal places.

Write the audit line in four fields: source, metric, value, block or date.

This is about to stop being a matter of taste. On 21 October 2026 the OCC finalised its GENIUS Act rule.

From 18 January 2027, permitted issuers must publish the monthly composition of their reserves on their own websites by noon on the last day of each month, and file weekly confidential reserve reports.

As Forbes noted, an accurate weekly reserve figure demands daily reconciliation between tokens outstanding onchain and reserves held at the custodian.

Monthly PDFs are becoming weekly reconciliation. Protocols that already publish live will barely feel it.

What does a finished circulating supply audit look like on USDS?

Six lines, dated 26 to 27 October 2026, each checkable in under ten minutes:

• Mainnet token supply: $6.81B USDS, third largest dollar stablecoin.
• Protocol family supply: $11.48B, USDS and DAI together.
• Total Collateral: $14.15B, around $1.23 per dollar of supply.
• Wrapper: sUSDS, roughly half the USDS float, excluded from the supply line.
• Exit path: Peg Stability Modules at 1:1, governance-capped.
• Outside read: rated by both Moody’s and S&P Global, so far the only stablecoin protocol with both.

A defensible number, with the working shown.

Why the Sky Savings Rate belongs in a supply audit

Here is the part most supply write-ups leave out.

Supply that pays nothing is a static liability. Supply that pays has to be funded, and that funding has to come from somewhere real.

The Sky Savings Rate is a variable rate set by Sky Governance and accessed by holding sUSDS.

It is funded from revenue Sky Protocol accrues as the Sky Agent Network, independent allocators including Spark, Grove, Osero, Keel and Obex, draws USDS liquidity under governance-set risk parameters and deploys it.

So when you audit the supply, audit the engine behind it:

• Where does the yield come from?
• Who sets the rate, and is the decision public?
• Does the revenue appear on a published income statement?

Galaxy appears to have run some version of that test. On 23 September 2026 it added $100 million of sUSDS to its corporate treasury and approved sUSDS as eligible collateral across its institutional trading business.

Audit the supply. Then audit whatever pays it.

The 60-second circulating supply checklist

Run this before you quote any stablecoin supply figure:

• Read totalSupply() at a named block.
• Subtract pre-minted, bridge-locked, stablecoin-backed and inaccessible balances.
• Exclude the yield-bearing wrapper from the supply line.
• Pull collateral from the same issuer on the same day.
• Confirm the redemption path and its caps.
• Write the date next to the number.

Six steps. One figure you can put in front of a risk committee.

So what should circulating supply actually mean?

The stablecoin market sat near $308B in August 2026, below its May peak of $322.4B. That is a lot of dollars measured by methods most holders have never read.

Which leaves the question I actually want argued in the comments.

Does circulating supply mean tokens that exist, tokens that can move, or tokens someone can redeem at par today?

Pick one. Then run the six steps on whatever stablecoin you hold and post the number with its date underneath. I will check mine against yours.

How to Audit a Stablecoin’s Real Circulating Supply was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

For decades, gold has played an important role in how governments manage their financial reserves. Countries hold gold because it is a valuable asset that can be stored for the long term and may help diversify their reserves.

But what if Bitcoin started playing a similar role?

Bitcoin is different from gold in almost every practical way. It exists digitally, moves across a global network, and has a supply limit built into its design. Yet, some policymakers and investors believe these features could make it worth considering as a strategic asset.

The United States has already brought this idea into the policy discussion. But creating a Bitcoin reserve involves much more than simply buying some Bitcoin and keeping it in a digital wallet.

To understand why, it helps to look at how gold reserves work, what makes Bitcoin different, and what the potential benefits and risks could be.

Why Do Governments Hold Gold?

Gold has been used as money and a store of value for thousands of years. Today, central banks and governments continue to hold it as part of their financial reserves.

These reserves can serve several purposes.

First, gold provides an asset that is not directly dependent on the financial condition of a single company or government. Second, it can help diversify a country’s reserve holdings. Third, gold has an established global market, making it possible to buy or sell it in many parts of the world.

However, gold is not risk-free. Its price can rise and fall, storing and transporting it requires physical security, and selling large quantities can take time.

Governments still hold gold because they consider its potential benefits useful over the long term.

This raises an interesting question: Could Bitcoin serve a similar purpose in the future?

What Makes Bitcoin Different From Gold?

Bitcoin is often called digital gold because both assets have limited supplies and can be held without depending on a traditional bank account.

But the similarities only go so far.

Gold is a physical asset. Bitcoin is a digital asset secured by a decentralized network.

Bitcoin’s protocol sets a maximum supply of 21 million coins. Gold, on the other hand, has no fixed total supply because new deposits can be discovered and mined.

Bitcoin can also be transferred across borders without physically moving anything. However, transactions require network confirmation, and access to the coins depends on properly managing the relevant cryptographic keys.

The biggest difference is price stability.

Gold has a long history as a reserve asset, while Bitcoin is much younger and has experienced significant price swings. Bitcoin’s price can change sharply in a short period, which makes it harder for governments to predict the value of their holdings.

For example, imagine a government holds Bitcoin worth $1 billion. If Bitcoin’s market price falls by 30%, the value of that holding would drop to $700 million, assuming the amount of Bitcoin remains unchanged.

The government would still own the same number of coins, but their market value would be lower.

This is one reason Bitcoin cannot simply be treated as identical to gold.

How Could the US Build a Bitcoin Reserve?

There is more than one way a government could accumulate Bitcoin.

One option is to retain Bitcoin obtained through asset seizures and legal proceedings instead of selling it. Another is to purchase Bitcoin through an authorized government program.

These approaches may sound similar, but they raise different questions.

Retaining seized Bitcoin means managing assets already in government custody. Purchasing Bitcoin requires a separate decision about funding, legal authority, and the use of public resources.

The distinction is important in the United States, where policymakers have been discussing how government-held Bitcoin should be managed and whether a more formal reserve framework should be established.

Coinpedia’s exclusive report examining whether the US could establish a Bitcoin reserve before January 3, 2027 explores the legislative timeline and the remaining hurdles facing the proposal. The central question is not simply whether the government can hold Bitcoin, but what legal framework would allow it to maintain a strategic reserve.

That difference matters because a policy proposal, an approved law, and an operational reserve are three separate stages. A proposal does not automatically mean that new Bitcoin purchases have been authorized or that a reserve is fully established.

What Could Be the Benefits of a US Bitcoin Reserve?

Supporters of a Bitcoin reserve point to several possible benefits.

1. Diversification of government assets

Governments generally try to avoid depending too heavily on one type of asset.

A Bitcoin reserve could provide another form of exposure alongside traditional holdings such as gold and foreign currencies. If Bitcoin becomes more widely accepted over time, supporters believe it could offer long-term diversification benefits.

However, diversification does not guarantee better returns. Bitcoin could fall in value at the same time that other financial markets experience stress.

2. Exposure to a limited-supply asset

Bitcoin’s supply limit is one of its most widely discussed features.

Unlike currencies that can be issued according to monetary policy, Bitcoin’s issuance follows rules built into its protocol. Its supply schedule is designed to approach a maximum of 21 million coins.

Supporters argue that this makes Bitcoin worth considering as a long-term asset.

But limited supply alone does not guarantee rising prices. Demand still matters. An asset can remain scarce while losing value if fewer people want to own it.

3. Participation in a developing financial system

Digital assets and blockchain technology are becoming part of broader discussions about payments, financial infrastructure, and investment.

Holding Bitcoin could give a government direct experience with digital-asset custody and the practical challenges of managing a decentralized asset.

That experience might help policymakers better understand both the opportunities and the risks associated with the technology.

Still, a government does not need to hold Bitcoin to study blockchain technology or develop digital-asset regulations.

What Are the Risks?

A Bitcoin reserve would also create challenges that governments would need to consider carefully.

1. Price volatility

Bitcoin can experience large price changes over short periods.

If a government holds a substantial amount of Bitcoin, a market downturn could reduce the reported value of its holdings. This could create political pressure, especially if taxpayers believe public resources are being exposed to unnecessary risk.

The long-term outcome would remain uncertain, even if Bitcoin had performed well over an earlier period.

2. Security and custody

Gold can be protected in secure physical facilities. Bitcoin requires a different kind of protection.

Access to Bitcoin depends on private keys. If those keys are lost, stolen, or improperly controlled, the assets could become inaccessible or be transferred without authorization.

A government reserve would therefore require strong security procedures, careful access controls, backup arrangements, and clear rules about who can authorize transactions.

The fact that Bitcoin operates on a decentralized network does not automatically make every wallet or storage system secure.

3. Legal and political questions

A national reserve would raise questions about who has the authority to acquire Bitcoin, how the holdings should be managed, and whether the government should ever sell them.

There would also be questions about transparency. Should the public receive regular reports on the amount held, the cost of acquisition, and changes in market value?

These decisions matter because a reserve is not just a collection of digital coins. It is a government policy that may affect public finances and future administrations.

4. The opportunity cost

Money used to purchase Bitcoin cannot be used for another purpose at the same time.

If a government spends public funds on Bitcoin, it must consider what else those funds could have supported. Even if Bitcoin rises in value, the decision should be evaluated against the alternatives available when the money was committed.

This is a basic principle of public finance: every major financial decision involves trade-offs.

Could a US Bitcoin Reserve Affect the Crypto Market?

A formal US Bitcoin reserve could influence how investors think about Bitcoin, but the actual effect would depend on the details.

For example, if the government retains Bitcoin it already owns, the immediate effect on market demand could be different from a policy that authorizes regular purchases.

If a government buys additional Bitcoin, those purchases could create new demand. If it simply holds existing coins rather than selling them, the market may instead focus on the amount of Bitcoin that remains available for trading.

Announcements could also affect expectations before any action takes place. Investors might interpret a reserve policy as a sign that Bitcoin is gaining recognition as a strategic asset.

However, expectations are not the same as actual buying activity.

Bitcoin’s price is influenced by many factors, including investor demand, interest rates, global liquidity, institutional investment, regulation, and market sentiment. A government reserve would be only one part of that picture.

It would also be a mistake to assume that other countries would automatically follow the United States. Governments have different financial priorities, regulatory systems, and levels of comfort with volatile assets.

Does Bitcoin Need Governments to Succeed?

This is perhaps the most interesting question in the entire debate.

Bitcoin was designed to operate without requiring a central authority to approve transactions or manage its supply. Its network can continue operating whether or not governments choose to hold it.

A national reserve would therefore not be necessary for Bitcoin to function.

Government participation could, however, influence how financial institutions, businesses, and investors view the asset. It could also bring more attention to the questions of regulation, custody, and long-term financial use.

At the same time, government involvement could create new political risks. Future administrations might change their approach, revise reserve policies, or decide that holding Bitcoin no longer fits their priorities.

Bitcoin’s future would still depend on whether people and institutions choose to use, hold, and value it.

Final Thoughts

Holding Bitcoin like gold is an interesting idea, but the two assets are not interchangeable.

Gold has a long history as a reserve asset, while Bitcoin offers a digital form of scarcity and can be transferred through a global network. Those features may make Bitcoin attractive to some policymakers, but its volatility, custody requirements, and uncertain long-term value create real challenges.

For the United States, the question goes beyond whether Bitcoin belongs in a government wallet. It involves deciding how the asset would be acquired, who would control it, what rules would govern its use, and how the public would be informed about the risks.

The most useful way to follow the debate is to separate announcements from legislation and legislation from implementation.

A Bitcoin reserve could become an important development in the relationship between governments and digital assets. But whether it proves to be a sound long-term strategy will depend on the policy behind it, the risks governments are willing to accept, and how the reserve is managed over time.

What Happens If the US Starts Holding Bitcoin Like Gold? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

🛢️ Oil eases, all eyes on the Fed
Brent has slipped to about $110 as Saudi, Turkish and Pakistani officials met Iranian leaders to calm tensions. Houthi attacks on Saudi targets continue, though, and Washington hints at more strikes on Iran. Elevated crude keeps inflation worries alive ahead of the Fed decision on Wednesday. A hold is about 90% priced in, and the odds of a December hike are around 73%. ⚠️

🇺🇸 Wall Street (Monday close)
Tech led the rally after Anthropic filed for its Nasdaq IPO. 🤖
📈 S&P 500: 7,676.77 (+0.70%)
📈 Nasdaq: 26,169.38 (+0.82%)
📈 Dow: 52,361.58 (+0.28%)

🌏 Asian markets
🇯🇵 Nikkei 225: 63,316 (+1.8%), led by chip stocks
🇰🇷 Kospi: 5,626 (+2.9%), after Q3 GDP beat forecasts at +1.0% q/q
🇦🇺 ASX 200: 8,850 (+0.5%)
🇭🇰 Hang Seng: 23,058 (–0.7%)
🇨🇳 Shanghai: 3,683 (–0.4%), despite China’s industrial profits rising 14.4% y/y

💱 Markets snapshot
💶 EUR/USD: ~1.117
💴 USD/JPY: ~157.8
🥇 Gold: ~$4,003
🥈 Silver: ~$52.9
🛢️ Brent: ~$110
₿ Bitcoin: ~$79,750

📅 Today: US consumer confidence, durable goods and new home sales, plus earnings from Coca-Cola, Visa and Boeing. The FOMC meeting begins. 🗓️
Coming up: Fed, Alphabet and Microsoft on Wednesday; ECB, US GDP and PCE on Thursday; BoJ on Friday. 👀

Trade the moves with NordFX 🚀

🌅 NordFX Morning Update — October 27, 2026 📊 was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

I’d marked them as the likely hidden code. Of the 46 delegates that keep the hash, fewer than half are verified.

The most delegated contract in my EIP-7702 sample ends in these 12 bytes: a164736f6c6343000822000a. Most Solidity contracts built with default settings end in 53. The longer tail is a small CBOR map the compiler appends to the bytecode: an IPFS hash of the contract’s metadata file, the compiler version, and two bytes giving the map’s length. This one has the version and no hash.

On 8 September I pulled every EIP-7702 authorization from a 200-block window on Ethereum mainnet, 1,178 of them, and read the bytecode of the 59 contracts they delegated to. Nine of those authorizations pointed at the zero address, which is how an account undelegates, so 1,169 went to real code. When I went back over the 59 on 11 October, ten had the short tail. I left a note beside them: no metadata hash, so maybe nobody meant the source to be found.

What the 12 bytes still say

Read as CBOR, a1 opens a map with one entry, 64 says a four-byte string follows (solc), and 43 says a three-byte value follows: 00 08 22, which is version 0.8.34. The last two bytes, 00 0a, give the length of everything before them, ten. So the compiler version survives. What’s gone is the hash that would let anyone fetch the exact metadata file, the one that lists every source file’s own hash and the compiler settings. In solc that’s a single setting, metadata.bytecodeHash set to none, and Foundry exposes it as bytecode_hash.

Checking the note

Today I asked Blockscout’s API whether each of the 59 has verified source, and asked Sourcify the same. Nine of the ten stripped contracts are verified on Blockscout. Of the 46 that kept the full hash, 21 are. The other three have no CBOR tail at all, and one of those is verified.

Counting authorizations instead of contracts widens the gap. In that September window, 369 of the 371 authorizations to stripped delegates went to a contract with published source. For the full-hash contracts it was 324 of 774, about 42%.

The one stripped contract with no source, 0xbaa66503..., drew two authorizations. The second most delegated contract in the whole sample, 0x67b743f3... with 144, carries a full IPFS hash and has no verified source on either service. Neither does 0x912518c2... with 96. Three unverified contracts of 2,140 bytes each carry the same IPFS hash, so they’re one build deployed three times.

Who strips it

The nine verified ones carry six contract names: Uniswap’s CaliburEntry at three addresses, Alchemy’s SemiModularAccount7702 at two, two TokenPocket delegators, UniversalGaslessDelegate, and the most delegated contract of all, with 308 of the window’s authorizations, whose verified source names it Poisoner.

Calibur’s foundry.toml and the one in Alchemy’s modular-account repository both set bytecode_hash = "none" as the project default. Neither file says why. Five of the ten addresses look mined: two start with eight zeros, one with 0x0000fb7702, one with 0x69007702, and one starts 0x77021100 and ends 0000. The metadata hash changes whenever a comment or a file path changes, even when the compiled code doesn’t, and an address found by searching CREATE2 salts depends on the exact bytecode. Dropping the hash ties the bytecode to the code alone. That’s my reading of the reason, not something either project says.

What Sourcify makes of them

Sourcify answered for eight of the stripped contracts, and all eight came back as match, none as exact_match. Of the full-hash contracts it has, 13 of 17 are exact. Sourcify’s docs say an exact match rests on the metadata hash in the deployed code agreeing with the recompiled one, which is how it proves the source files are byte for byte the ones the author compiled. With no hash in the bytecode there’s nothing for that check to hold on to, so I’d expect every stripped contract to stop at match, whoever wrote it.

What this doesn’t show

The authorization counts come from one 200-block window in September, so they say which delegates were busy then. Verified means Blockscout’s flag and Sourcify’s record as I read them on 27 October. I didn’t check Etherscan, which wants an API key, and a contract could be verified there and nowhere else. I also tried two public IPFS gateways for the hashes on the unverified contracts and both refused the requests, so I can’t say whether any of those metadata files exist somewhere.

Ten EIP-7702 delegates strip their metadata hash. Nine of them publish their source was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Stablecoins accounted for 60% of crypto purchase value processed through Mercuryo’s on-ramp in H1 2026, up from 43% six months earlier. Meanwhile, accepted stablecoin off-ramp transactions grew 446% year on year, based on the company’s on-ramp report and off-ramp data.

These figures come from one provider, not the entire market. Still, they highlight something worth discussing: how money moves between bank accounts and crypto platforms.

If I were managing those flows for a business, I’d start with two questions. Which currencies are we moving, and where are our bank accounts? The answers help determine which payment routes make sense.

So, What Does Each Payment Route Actually Do?

A company with European partners, a Swiss bank account and international USD settlements might use several payment routes, even through the same crypto platform.

SEPA — for EUR transfers across Europe. It connects participating banks across the Single Euro Payments Area and supports euro transfers between eligible accounts.

SWIFT — for international bank transfers. A global financial messaging network used for cross-border payments in USD and other currencies. Costs and timing depend on the banks involved.

SIC — for Swiss franc transfers. Switzerland’s interbank clearing system handles CHF payments between participating financial institutions.

ZEN.COM — for local PLN payments. Unlike SIC, ZEN.COM is a payment provider rather than a clearing system. Its local PLN transfers use ELIXIR, with availability depending on the provider’s integration and customer eligibility.

Other routes, including ACH in the US and PIX in Brazil, become relevant when businesses need to serve customers in different markets.

Let’s Look at Three Different Business Scenarios

1. A Polish Fintech Needs Both EUR and PLN

Imagine a fintech in Warsaw receiving euros from European partners while paying local expenses in Polish zloty. It needs both currencies and a way to move funds into and out of crypto.

WhiteBIT On/Off-Ramp could be worth considering. It lists EUR transfers through SEPA and PLN through ZEN.COM within one crypto ecosystem.The fee for EUR deposits and withdrawals is a flat €5, while limits depend on KYB level and agreed conditions.

The service also lists USD via SWIFT and CHF via SIC, alongside TRY, GEL and AUD among its supported currencies. Routes for those additional currencies require separate confirmation.

For this fintech, having several fiat options in one place could simplify treasury operations. I’d first confirm which PLN transactions are available to its legal entity and whether the limits suit its volumes.

2. What If Your Wallet Serves Customers Across Different Markets?

Now imagine a wallet provider that wants customers to buy and sell crypto directly inside its app. Some users pay in EUR, others prefer cards or local payment systems. The company needs an integrated payment experience across its supported markets.

Kraken Ramp, also marketed as Payward Ramp, takes this approach. Its institutional offering lists 24+ payment methods, including SEPA, ACH, PIX, debit cards, Apple Pay and Google Pay. The service offers API and SDK integration, with payment processing, compliance and crypto conversion handled through Kraken’s infrastructure.

The attraction is the combination of local payment methods and embedded crypto access. However, supported methods differ by market, and the company would need to confirm which currencies, countries and transaction directions are available to its customers.

For this type of wallet, the integration experience matters alongside currency coverage. A payment method listed on a product page is useful, but the full customer journey — from funding to completed conversion — needs to work in the intended markets.

3. And What About Thousands of USD Payouts?

Imagine a US fintech where customers convert digital assets into dollars and withdraw funds to their bank accounts. With thousands of payouts, settlement speed and integration become important.

zerohash On & Off Ramp supports fiat-to-crypto and crypto-to-fiat conversions through ACH, RTP, SEPA and payment service providers. It also supports 100+ digital assets, with availability depending on the market and integration.

For this business, I’d check which USD payout methods are available, how returned payments are handled and whether prefunding is required. These details can make a big difference when customer withdrawals are part of everyday operations.

So, What Would I Check Before Choosing?

I wouldn’t rank these payment routes from best to worst. A longer currency list doesn’t necessarily mean a better setup, especially when availability depends on jurisdiction, account type and banking partners.

I’d start by checking three things: which currencies and payment methods are actually available, whether the money belongs to the business or its customers, and how much each completed transfer costs.

Processing times matter too. Domestic real-time payments may suit frequent customer withdrawals, while international transfers can work well for corporate treasury operations. Fees, conversion spreads and reconciliation requirements should all be part of the calculation.

Finance can map currencies and volumes, operations can verify settlement schedules, and compliance can confirm eligibility. Sometimes one provider will cover most needs, while other businesses may benefit from combining several services.

I’d rather check those details upfront than discover halfway through a transfer that the selected route doesn’t work as expected.

Disclaimer: This is not financial or investment advice. Do your own research before making any decisions. Use at your own risk.

Three Companies, Three Fiat Problems, Three Different Ramps was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Danelfin and Tickeron both sell “AI” to people picking stocks, but they are not the same kind of product. Danelfin gives every stock a score from 1 to 10 and leaves the trading to you. Tickeron sells signals and trading bots, some of them running on its own brokerage accounts. I read both sites end to end on Oct 26, 2026, including the parts most reviews skip: Danelfin’s own audit site and the small print under Tickeron’s 191% headline.

I also work on milo, so I’ll say where milo fits and where it doesn’t. It isn’t a third option that beats both. It answers a different question.

The short answer

Pick Danelfin if you want a daily 1 to 10 rating on about 5,600 US and European stocks and you’ll place the trades yourself. Pick Tickeron if you want ready-made signals or bots that trade on 5 to 60 minute timeframes. Both lead with backtests. Danelfin publishes an audit that shows its live record so far is flat. Tickeron’s headline numbers don’t come with dates.

Danelfin in plain English

Danelfin calls itself “AI-Powered Stock Picking.” Every trading day it gives each stock an AI Score from 1 to 10, which it describes as the probability of beating the market over the next three months. A 10 means the model likes it most, a 1 means least. You also get sub-scores for technical, fundamental, sentiment and low risk.

How the AI Score works

Per Danelfin’s how-it-works page, the model looks at more than 600 technical, 150 fundamental and 150 sentiment indicators a day, which it turns into 10,000+ features per stock. It uses hundreds of decision trees and trains on the latest 252 market days for US stocks. Coverage is all US stocks, the main European markets and US-listed ETFs. The audit site puts the count at roughly 5,600 stocks scored daily.

Danelfin pitches this as explainable AI, “no black boxes,” because it shows which features pushed a score up or down. That’s useful. It still won’t tell you why a 9 should beat an 8 in your account.

One thing to get straight early: Danelfin doesn’t trade for you. The audit site says it plainly, “you execute the trades on your own brokerage account.” The paid plans can sync a US broker portfolio so you see scores on what you own, but that’s a read, not an order.

Danelfin pricing

From danelfin.com/pricing on Oct 26, 2026:

• Free: $0. Top 10 lists, 10 stock reports a month, one portfolio of 5 stocks, top alpha signals only.
• Plus: $22 a month billed yearly ($264). Adds portfolio sync with US broker accounts.
• Pro: $59 a month billed yearly ($708). Adds full alpha signals and CSV export.
• Elite: $134 a month billed yearly ($1,608). Adds an API with 10,000 calls a month and historical daily scores back to 2017 on request.

The per-month prices are the yearly plan divided by 12. The page says yearly saves $84, $240 and $540 a year, which works out to about $29, $79 and $179 a month if you pay monthly. There’s a 30-day money-back guarantee.

The performance claims, and Danelfin’s own audit

The homepage says stocks with a Score of 10 beat the market by +21.05% on average after three months (annualized alpha) since 2017, and stocks scored 1 lagged by 33.28%. It also says its Best Stocks strategy returned +456% from Mar 29, 2017 to Sep 3, 2026, against +228% for the S&P 500.

The how-it-works page is honest about what those are: “This Danelfin Best Stocks strategy performance is based on backtested results. Backtested performance is not an indicator of actual future results.” The +21.05% figure covers Jan 3, 2017 to Apr 1, 2025.

Credit where it’s due, Danelfin runs a public audit site and the audit is tougher on Danelfin than the homepage is. Here’s what it says:

• The current model went live on Jul 7, 2025. Every score before that date was recalculated afterward, walk-forward. The audit calls this a “simulated backtest” and notes the model was picked after its performance was known.
• It splits the Score 10 backtest into three periods. Average 3-month alpha was +5.4% in 2017 to 2019, +0.3% in 2020 to 2022, and -0.5% from 2023 to Jul 6, 2025. The audit says only 2017 to 2019 is statistically significant and tells readers to “treat the recent period as unproven.”
• Live, stocks scored 8 to 10 averaged -0.5% 3-month alpha since Jul 7, 2025, against +2.2% for the same bucket in the backtest. That’s about four independent 3-month windows, so it’s early either way.
• It passed 7 of 14 robustness checks, with 6 cautions and 1 fail. The fail is t-stat inflation: naive t-stats overstate significance by about 4.9x.
• Survivorship bias isn’t controlled. Delisted companies like Twitter, SVB and Celgene are missing from the history.
• A Top 20 portfolio backtest returned 22.4% a year vs 15.1% for SPY from Apr 2017 to Jul 2026, before trading costs, with about 70% turnover at each monthly rebalance.

Six-month alpha tells the same story: +4.8%, then -1.4%, then -2.6%. So the big homepage number leans mostly on 2017 to 2019. That doesn’t make the score useless as a screen. It does mean nobody, Danelfin included, can show it beats the market now.

Tickeron in plain English

Tickeron’s homepage reads “AI Trading Agents, Tools and News.” Where Danelfin is one score, Tickeron is a shelf of products: Daily Buy/Sell Signals, AI Robots, Real-Time Patterns, Trend Prediction, Pattern Search and a screener, plus crypto signal agents. Its models, which it calls Financial Learning Models (FLMs), run on 5-minute, 15-minute and 60-minute charts. That’s short-term trading, not “hold for three months.”

Bots, signals and patterns

The bot trading page talks about “1,000+ back-tested algorithms, verified forward testing” and lists 25 bots selected from 351. The homepage the same day said 30 selected out of 298. The bot count moves, which makes sense if bots get added and retired. Some are “Double Agent” bots that hedge with inverse ETFs, for example pairing $NVDA with NVDS or $MSFT with QID.

Brokerage Agents vs virtual agents

This is the part people mix up. Tickeron’s AI agents page says Brokerage Agents are “designed for those who intend to use them for trading on real-money accounts,” and invites you to “review trades and copy from our brokerage accounts.” So Tickeron runs the bot on its own account and you mirror the trades. Virtual agents and signal agents don’t trade real money at all.

Can a bot place orders straight into your own broker account? Tickeron’s FAQ, dated Nov 22, 2023, said robot brokerage integration was “under development” with plans for Binance, Alpaca, Kraken, Ameritrade and IBKR. I couldn’t find a current page confirming it shipped, so ask them before you pay for that.

Tickeron pricing

There’s no public pricing page. Both tickeron.com/pricing and /pricing/ returned 404 when I checked. The only prices I found were in a Sep 21, 2026 sale post: Daily Buy/Sell Signals at $60 a year instead of $240, and AI Robots at 50% off without a dollar figure. Expect to see prices after signing up.

The 191% claim

The bot page headline is “191% Annualized Return During the Reported Period,” with 419 closed trades, a 71% win rate, a 2.92 profit factor, $456 average profit per trade and a 13:1 profit-to-drawdown ratio. It adds “Past performance does not guarantee future results.”

What the block doesn’t say is which bot that is, what dates “the reported period” covers, whether it was live money, paper or a backtest, and what a benchmark did over the same window. 419 trades is a decent count, but annualized returns from a short window can look huge. Until you know the dates, 191% is a hard number to judge.

Danelfin vs Tickeron side by side

Where milo fits, and where it doesn’t

milo doesn’t score stocks and doesn’t run stock bots. On the stock side it reads filings. The andmilo.com/stocks page pulls Form 4 insider buys and sales and 8-K filings from SEC EDGAR for 50 of the most-followed US stocks, refreshed daily. As of Oct 25, 2026, 23:23 UTC, it showed at least 278 insider sales worth at least $3.3B over 90 days, against at least 7 buys worth at least $54M.

Here’s a real one. On Sep 29, 2026, Oracle director Stephen Rusckowski bought 25,000 shares of $ORCL at a weighted average of $139.352, about $3.48M, filed Oct 1. I opened the Form 4 to check: code P, open-market fills between $138.96 and $139.74, held through his living trust, and the 10b5–1 plan box isn’t checked. That’s a clean buy with his own money.

Now a messy one. The same feed lists a $24M $PEP “buy.” The footnotes show it was a swap between Pohlad family trusts, not someone betting on PepsiCo. A score wouldn’t catch that and neither does a raw count. You have to read the filing, which is how to read SEC Form 4 is about.

Where milo is weaker than these two, plainly:

• No AI score or ranking of stocks.
• No ETFs or European stocks. Insider data covers 503 US tickers, against about 5,600 for Danelfin.
• No backtest or stock-picking track record to show you.
• No real-money stock trading. Stock features are paper trading and research only.
• No intraday pattern tools like Tickeron’s.

Where it’s different: every data point links back to a public SEC filing you can open yourself, and on the crypto side milo agents trade from your own wallet with public PnL and a plain-English diary of each move.

If you want the wider field, the best AI stock pickers roundup compares more tools, and can ChatGPT pick stocks covers the public AI paper-trading tests.

How to judge any AI tool’s track record

The same five questions work for Danelfin, Tickeron, milo or whatever comes next:

1. When did the model go live? Anything before that date is a backtest, however it’s labeled. Danelfin gives you the date (Jul 7, 2025). Tickeron’s 191% doesn’t.
2. Is the result split by period? One big number from 2017 can hide a flat last three years. Danelfin’s audit shows exactly that.
3. Are dead companies in the data? Without delisted stocks, backtests look better than reality.
4. Is it before or after costs? 70% monthly turnover or hundreds of short-term trades cost real money.
5. What’s the benchmark over the same dates? A return with no comparison isn’t a result.

If a vendor can’t answer those, treat its performance number as marketing. If you want to test ideas without risking money, paper trade them first. That’s the only way milo handles stocks anyway.

FAQ

Is Danelfin better than Tickeron?
They do different jobs. Danelfin is a 3-month stock rating you act on yourself. Tickeron is short-term signals and bots. Danelfin is more open about its record, since it publishes an audit with live results.

Is Danelfin’s AI Score accurate?
By its own audit, Score 10 stocks beat the market in 2017 to 2019 and were roughly flat after that. Live since Jul 7, 2025, stocks scored 8 to 10 averaged -0.5% 3-month alpha.

How much does Danelfin cost?
There’s a free plan. Paid plans were $22, $59 and $134 a month billed yearly on Oct 26, 2026, with higher monthly-billing prices.

How much does Tickeron cost?
Tickeron doesn’t publish a pricing page. A Sep 2026 sale listed Daily Buy/Sell Signals at $60 a year, down from $240.

Do Tickeron bots trade real money?
Brokerage Agents trade on Tickeron’s own real-money accounts and you can copy the trades. Virtual and signal agents don’t trade real money.

Is Tickeron’s 191% return real?
It’s Tickeron’s claim for “the reported period.” The page doesn’t name the bot or the dates, so you can’t check it from that page.

Does Danelfin place trades for me?
No. You place trades in your own brokerage account. Paid plans can sync a US broker portfolio to show scores.

Is milo an alternative to Danelfin or Tickeron?
Not a direct one. milo tracks SEC filings and insider trades for US stocks with paper trading only, and runs AI trading agents for crypto.

Try milo to see insider buys and 8-Ks for the stocks you follow, and paper trade the ideas before any money is involved.

For education only. Not investment advice. milo stock features are paper trading and research only. Competitor details checked on their own sites on Oct 26, 2026 and may change. Sources: danelfin.com (home, how-it-works, pricing), audit.danelfin.com, tickeron.com (home, bot-trading, ai-agents, FAQ, Sep 21, 2026 sale post), andmilo.com/stocks, SEC EDGAR Form 4 accession 0001341439–26–000099.

Originally published at https://blog.pumpparade.com on October 26, 2026.

I read Danelfin’s audit and Tickeron’s small print. Only one showed a dated live record. was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Preparing Blockchain Authentication for the Post-Quantum Era: Signature Migration and Compatibility Risks

Blockchain security depends on a fundamental assumption: knowing a public key should not make it computationally feasible to derive its private key. Quantum computing could eventually challenge this assumption, forcing blockchain networks to reconsider how transactions are authenticated, how ownership is verified, and how existing accounts migrate to safer cryptography.

For B2B founders and developers, this is not simply an algorithm upgrade. It is a protocol compatibility, asset recovery, infrastructure, and governance challenge. A successful transition must strengthen cryptographic security without breaking wallets, smart contracts, transaction verification, or access to existing assets.

Why Existing Blockchain Signatures Face a Quantum Risk

Many blockchain networks rely on elliptic-curve cryptography. Ethereum uses the Elliptic Curve Digital Signature Algorithm (ECDSA) over the secp256k1 curve for externally owned accounts (EOAs), while other networks use different signature schemes.

These systems remain secure against known classical attacks when implemented correctly. However, a sufficiently capable, fault-tolerant quantum computer could use Shor’s algorithm to solve the mathematical problem underlying elliptic-curve cryptography.

How quantum computing threatens private keys

In conventional cryptography, deriving a private key from its public key is computationally impractical. Shor’s algorithm could change that by efficiently solving the elliptic-curve discrete logarithm problem on a sufficiently powerful quantum computer.

On Ethereum, an EOA’s address is derived from its public key. Although the public key is not directly displayed in the address, a valid transaction signature allows it to be recovered. Consequently, accounts that have transacted may already have exposed their public keys through transaction history.

This does not mean blockchain wallets can be compromised by quantum computers today. No currently demonstrated quantum computer can break these signatures at the required scale. However, blockchain infrastructure takes considerable time to upgrade, making early preparation important.

Another concern is harvest now, decrypt later. This primarily affects encrypted information rather than ordinary public blockchain transactions, which are already transparent. Nevertheless, organizations using blockchain alongside confidential business data should consider whether long-lived encrypted records could become vulnerable to future quantum attacks.

Post-Quantum Cryptography: What Changes Technically?

Post-quantum cryptography (PQC) uses mathematical problems believed to resist attacks from both classical and quantum computers. The National Institute of Standards and Technology (NIST) finalized two digital-signature standards in August 2024:

• ML-DSA (FIPS 204): A lattice-based digital-signature scheme.
• SLH-DSA (FIPS 205): A stateless hash-based digital-signature scheme.

Lattice-based schemes rely on the difficulty of solving particular mathematical problems involving structured lattices. Hash-based signatures derive their security from cryptographic hash functions and carefully constructed signing processes.

These standards provide alternatives to vulnerable elliptic-curve signatures, but adoption requires careful engineering.

Why signature size and verification cost matter

Traditional elliptic-curve signatures are relatively compact. Post-quantum signatures can be substantially larger, depending on the algorithm and parameter set. This creates several blockchain-specific challenges:

• Transaction size: Larger signatures consume more bandwidth and block space.
• Verification cost: Validators must perform different, potentially more expensive cryptographic operations.
• Network throughput: Increased transaction sizes and verification workloads can reduce processing capacity.
• Wallet compatibility: Existing signing libraries, hardware wallets, and recovery procedures may not support new algorithms.
• Smart-contract execution: Contracts designed to verify ECDSA signatures cannot automatically validate ML-DSA or SLH-DSA signatures.

A migration that strengthens cryptography but makes transactions prohibitively expensive is not a successful production migration.

Designing a Safe Signature Migration Architecture

The most practical starting point is cryptographic agility: the ability to change authentication algorithms without redesigning an entire application or network.

1. Separate transaction authorization from signature verification

Applications should avoid embedding assumptions about one signature algorithm throughout their business logic. For example, a transaction authorization layer can define the intended operation, account, chain identifier, nonce, expiry, and execution parameters independently of the cryptographic verification mechanism.

A verifier then checks the signature against the account’s authorized authentication policy. The architecture can be represented as:

Transaction intent → Authentication policy → Signature verification → Execution

On smart-account systems, developers may implement multiple verification methods within the account’s authorization logic. On networks with fixed EOA verification rules, protocol-level changes or new account mechanisms may be necessary.

This separation reduces the number of components that must change during migration. However, it does not make a protocol quantum-resistant by itself: the underlying authorization mechanism must also reject vulnerable authentication paths when required.

2. Introduce versioned authentication policies

A wallet or smart account can use an explicit, versioned policy to identify its supported signature scheme. Such a policy might define:

• The permitted algorithm and parameter set.
• The public-key format and signature encoding.
• The message serialization rules.
• The conditions under which a signature is accepted.
• The migration or recovery mechanism.

The signed message should bind authorization to the intended chain, account, operation, and nonce. This helps prevent cross-chain replay and reuse of a signature for a different operation.

Algorithm identifiers alone are insufficient. The verifier must enforce valid parameters, canonical encoding, and unambiguous message serialization. Otherwise, inconsistent interpretation between implementations can create security vulnerabilities.

3. Evaluate hybrid signatures carefully

One possible transition strategy is hybrid authentication, in which an operation requires both a conventional signature and a post-quantum signature. For example, a smart account might require both signatures during a migration period before eventually switching to post-quantum-only verification.

This approach can provide defense in depth, but its security depends on the exact verification policy. If the account accepts either signature, an attacker who can break the legacy scheme may still have a path to authorization. If both are mandatory, the system must correctly verify both and handle the failure of either verification process.

Hybrid authentication also increases signature size, execution costs, implementation complexity, and wallet integration requirements. It should therefore be introduced through a clearly defined threat model and rigorous testing rather than treated as an automatic upgrade.

Compatibility Risks That Can Break a Migration

Replacing a signature scheme changes more than cryptography. It affects every component that creates, transports, verifies, or stores signatures.

Transaction formats and fee economics

If a transaction format assumes a fixed signature length or a specific elliptic-curve encoding, larger post-quantum signatures may require new transaction types or protocol rules.

Developers should benchmark transaction serialization, signature verification, block propagation, and worst-case execution costs. They should also test denial-of-service scenarios in which malformed transactions attempt to trigger disproportionately expensive verification.

On public blockchains, increased signature size can also raise transaction fees or put pressure on block limits. These costs must be measured under realistic network conditions, not estimated from cryptographic benchmarks alone.

Legacy contracts and external integrations

Smart contracts may contain ECDSA-specific verification logic. Bridges, exchanges, relayers, custodians, and institutional wallets may independently assume a particular signature format. Upgrading a wallet therefore does not automatically make every connected application quantum-resistant.

Engineering teams should inventory these dependencies and determine whether each requires a contract upgrade, a new verification path, or a protocol-level change. They should also verify that external systems agree on the algorithm, signature encoding, and message format.

Dormant accounts and recovery failures

Migration requires control of the account or an explicitly authorized recovery mechanism. Lost keys, abandoned wallets, inaccessible hardware devices, and outdated multisignature policies can leave assets difficult or impossible to migrate.

Protocols must decide how to handle accounts that never migrate. Freezing legacy accounts, forcing transfers, or introducing recovery mechanisms creates security, governance, and ownership implications.

There is no universal solution for dormant accounts. Migration plans must account for users who cannot upgrade immediately without introducing arbitrary asset seizure or weakening account authorization.

A Practical Migration Roadmap for Blockchain Teams

Founders and engineering leads should treat post-quantum readiness as a phased engineering program.

1. Inventory cryptographic dependencies. Identify ECDSA, EdDSA, BLS signatures, elliptic-curve commitments, signature-verification contracts, wallet libraries, bridges, and custody systems. Not every cryptographic primitive has the same quantum risk, so classify each dependency individually.

2. Prioritize high-risk components. Focus on high-value keys, long-lived assets, critical infrastructure, and systems that cannot be upgraded easily. Document the assumptions each component makes about keys and signatures.

3. Build a replaceable authentication layer. Separate business authorization from algorithm-specific verification wherever the protocol permits. Define versioned formats and strict verification rules.

4. Prototype standardized algorithms. Evaluate ML-DSA and SLH-DSA using vetted implementations. Measure signature size, verification latency, memory consumption, throughput, and interoperability across supported platforms.

5. Test migration and recovery. Simulate legacy transactions, mixed-version clients, interrupted upgrades, failed key rotation, and account-recovery scenarios. Include malformed signatures, replay attempts, and resource-exhaustion tests.

6. Deploy through controlled stages. Use test networks, security reviews, and formal verification where appropriate. Establish explicit activation criteria, monitoring, emergency procedures, and a documented migration path before production rollout.

For Ethereum-based projects, monitor the Ethereum Foundation’s post-quantum research and the Ethereum quantum-resistance roadmap. These resources describe ongoing research and evolving plans, not guarantees that every proposed feature will be available by a particular date.

Conclusion: Prepare for Change Without Introducing New Risks

Post-quantum blockchain security is not achieved simply by selecting a quantum-resistant signature algorithm. It requires compatibility across wallets, contracts, validators, transaction formats, custody systems, and recovery processes.

The strongest preparation starts with cryptographic agility, dependency mapping, measurable performance testing, and a migration strategy that protects users who cannot upgrade immediately.

Quantum-resistant cryptography is becoming an important engineering consideration, but rushed implementations can introduce vulnerabilities of their own. Blockchain teams should begin by understanding their cryptographic dependencies, testing standardized alternatives, and designing migration mechanisms that preserve authorization and asset access.

For B2B founders, the strategic question is not only whether a protocol can adopt new signatures. It is whether the entire ecosystem can adopt them without compromising asset ownership, network performance, or trust.

Preparing Blockchain Authentication for the Post-Quantum Era: Signature Migration and Compatibility… was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Tokenization put real-world assets onchain. DeFi is what makes them actually move. Here is where stablecoin yield, sUSDS and the Sky Savings Rate fit in.

Here is the part almost nobody says out loud about tokenization: putting a real-world asset onchain is the easy bit now.

About $39 billion of tokenized real-world assets sit onchain today, excluding stablecoins, per RWA.xyz in mid-October 2026.

The underlying assets those tokens point to run into the hundreds of billions. Issuance is basically a solved problem, and the pipeline keeps filling.

Boston Consulting Group has projected tokenized assets could reach into the trillions of dollars by 2030.

But a token that just sits there is a receipt. Not a working financial instrument.

The hard part is distribution. Making that token useful. Lending it, borrowing against it, composing it into something productive. And more and more, that job belongs to DeFi.

So here is the thesis, plainly: DeFi is becoming the distribution layer for tokenized assets. Not all of them. Mostly the ones built to move freely.

Everything below is dated analysis, not financial advice, so check the live numbers before you act.

“Tokenization issues the asset. DeFi distributes its utility.”

Tokenization issues the asset. DeFi distributes it.

There are two separate jobs in bringing real-world assets onchain.

The first is issuance. Wrapping a Treasury bill, a credit position, or a dollar into a token.

Tokenization has largely cracked this. Onchain RWA value, excluding stablecoins, more than tripled in a year, past $39 billion by October 2026.

Tokenized US Treasuries alone are worth roughly $14.7 billion, with private credit and tokenized gold making up much of the rest.

The second job is distribution. Taking that token and making it productive. This one is harder, and it is where DeFi comes in.

DeFi protocols are composable. Drop a tokenized asset into them and it can be lent, pooled, borrowed against, and stacked into strategies without asking permission. A static record becomes a living building block.

Tokenization mints the asset. DeFi distributes its utility.

How tokenized assets actually get used in DeFi

Once an asset can move freely, “distribution” stops being abstract. In practice it means a handful of concrete uses:

• Collateral. Post a tokenized Treasury or a yield-bearing stablecoin and borrow against it, without selling the underlying exposure.
• Yield vaults. Supply the asset into curated vaults that put it to work across lending markets.
• Yield-trading. Split an asset into principal and future yield and trade them separately, as Pendle does, to lock in a fixed rate.
• Looping. Hold an asset for its base yield, borrow against it, redeploy, repeat. Powerful, and riskier.

Each of these turns a passive holding into something that earns or frees up liquidity. That is what “RWA in DeFi” really describes.

The venues doing the heavy lifting

RWA deposits into DeFi lending and yield protocols climbed sharply through 2026, into the several billions. A handful of names carry most of the flow.

• Morpho has become a leading venue, with hundreds of millions across dozens of RWA assets on several chains. Think of it as an onchain prime brokerage.
• Aave runs broad lending markets, plus a separate permissioned track for institutions.
• Kamino is the largest single-chain RWA venue, on Solana.
• Pendle handles the yield-trading and fixed-rate side.

Across these venues, RWA deposits roughly tripled in the year to mid-2026, climbing from a couple of billion dollars into the several billions.

One detail worth sitting with: credit tokens and tokenized gold currently make up most RWA collateral, more than Treasuries. These rankings shift fast, so treat them as a snapshot.

The catch: most tokenized RWA still sits idle

Now the honest part, because the headline numbers hide it.

For all the momentum, most tokenized real-world assets are doing nothing in DeFi.

By one 2026 analysis, more than half of reported RWA value sits idle. Issued, held, parked. Not circulating.

Why? Design.

A lot of tokenized assets, especially the institutional ones, are permissioned.

They need KYC, allowlisting, or jurisdiction checks, and they carry transfer restrictions. You cannot just drop them into an open protocol.

A token you cannot move without permission cannot be distributed by a permissionless system.

So the thesis needs a sharper edge. DeFi is not distributing all of RWA. It is becoming the distribution layer for the assets that were built to be distributed.

“A token you can’t move without permission can’t be distributed by a permissionless system.”

Why permissionless, composable assets win

The assets that actually move through DeFi share a profile. Freely transferable. Built in standard token formats. Composable by default.

Yield-bearing stablecoins fit that mould almost perfectly. So do some freely transferable Treasury tokens. Heavily gated institutional tokens, however large, mostly do not.

The lesson for anyone issuing a tokenized asset is blunt. Composability is not a feature you bolt on later. If you want distribution, you design for it at issuance.

Where Sky fits: USDS, sUSDS and the Sky Savings Rate

Sky is a clean example of the permissionless side of this story. One example among several, not the whole trend.

Start with USDS, Sky Protocol’s stablecoin and the entry point to everything else.

USDS is over-collateralized, backed by a diversified mix that includes tokenized real-world assets like short-duration US Treasuries.

As of late October 2026, Sky.money’s homepage showed about $16.24 billion of collateral backing roughly $10.02 billion of USDS supply. That is close to $1.62 of collateral for every dollar.

Now the yield part. Supply USDS and you receive sUSDS, the world’s largest yield-bearing stablecoin, with supply near $4.83 billion on Sky.money in late October 2026.

sUSDS accrues the Sky Savings Rate (SSR) automatically, and you can redeem it for USDS plus accrued yield at any time.

The Sky Savings Rate is a variable, governance-set rate funded from aggregate Sky Protocol surplus, shown at 3.80% on Sky.money in late October 2026. It can change, and Sky.money does not set, control, or guarantee it.

Here is why it matters for this story:

• sUSDS is permissionless and composable. It circulates through DeFi, gets held for its yield, supplied to vaults, and accepted as collateral. Galaxy, a large institutional holder, approved sUSDS as collateral for lending, and borrowers keep accruing the Sky Savings Rate while it is posted.
• Sky also runs its own lending layer, Spark. So Sky is both an issuer of a composable, RWA-backed yield token and a venue that distributes such assets.

That dual role, issuer and distributor, is the exact pattern this piece describes.

It runs on infrastructure that has worked on stablecoin systems since 2017. sUSDS still carries smart-contract and peg risk, and the rate is variable.

None of this is a sure thing. If you want the mechanics, here is a plain-English explainer of what sUSDS is and how it works.

The risks distribution brings onchain

Distribution is not free. Plugging real-world assets into DeFi imports new risks:

• Imported risk. A real-world asset brings its own credit, rate, and redemption risk into the protocol, on top of smart-contract risk.
• Composability contagion. The same looping that boosts yield chains positions together, so trouble in one layer can cascade.
• Oracle and pricing risk. RWA collateral needs accurate onchain pricing, which is harder for less liquid assets.
• Concentration. Much RWA collateral sits in a few credit and gold tokens, so stress there can ripple.

None of this kills the thesis. It just means distribution is a trade-off, not a free lunch.

So what does it mean for stablecoin holders?

The direction is clear. As more value gets tokenized, DeFi is becoming the layer that makes it useful. The place a token turns into collateral, yield, and a building block.

But it is early and uneven. Most tokenized assets still are not active onchain.

The winners are the ones designed to compose. And the yield comes with real risk.

The clearest sign it is real: institutions now post composable RWA tokens as collateral and keep earning on them, rather than letting the tokens sit.

If you hold stablecoins, the practical takeaway is simple. You do not have to issue anything to benefit from this shift.

A composable, RWA-backed yield-bearing stablecoin like sUSDS already plugs into it, letting your dollars earn the Sky Savings Rate instead of sitting still.

Put your stablecoins to work, check the live numbers, size your own risk, and treat this as a map, not advice.

Quick answers

Q. What does “DeFi is the distribution layer for RWA” mean?

A. Tokenization creates real-world-asset tokens. DeFi is where they become useful, as collateral, vault inputs, and composable building blocks, instead of sitting idle.

Q. Why is most tokenized RWA not used in DeFi?

A. Many tokenized assets are permissioned and gated, so they cannot compose freely. Only a minority is actively used today.

Q. How does sUSDS relate?

A. sUSDS is a permissionless, composable, RWA-backed yield-bearing stablecoin that accrues the Sky Savings Rate and circulates through DeFi. The rate is variable and governance-set.

DeFi Is Becoming the Distribution Layer for Tokenized Assets was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Stablecoins are now a real buyer of short-term US debt. Here’s what that means for Treasury markets, and for you.

Here’s something most stablecoin holders never think about.

The digital dollar in your wallet is probably helping fund the US government.

Not in a conspiracy-theory way. In a plain, legal, slightly boring way. When you buy a reserve-backed stablecoin, the issuer takes your dollar and parks most of it in short-term US Treasury bills.

Do that across a market worth roughly $300 billion and you’ve got a buyer of US debt that barely existed six years ago.

So what does stablecoin growth mean for US debt markets? Stablecoins have become a steady, rules-driven source of demand for short-term Treasuries. Inflows can nudge T-bill yields lower, outflows can push them higher, and in most cases the holder funding all of it earns nothing.

That last part is the one I want to dig into.

Key takeaways

• Reserve-backed stablecoins keep most of their reserves in cash, repos and Treasury bills, so their growth turns straight into demand for short-term US debt.
• Stablecoin issuers still hold less than 1% of all Treasuries outstanding. They move the front end of the curve, not the whole market.
• BIS research links a $3.5 billion stablecoin inflow to 3-month T-bill yields falling up to about 4 basis points within 10 days.
• Most stablecoin holders earn 0% while the reserve income stays with the issuer.
• USDS and sUSDS take a different path. Protocol revenue flows back to holders through the Sky Savings Rate, a variable rate set by Sky governance.

How Do Stablecoins Buy US Debt? The T-Bill Pipeline Nobody Sees

I can explain the pipeline in about ten seconds.

1. You swap $100 for 100 stablecoins.
2. The issuer owes you $100 and holds $100 in reserves.
3. Rules push those reserves into cash and very short-term government debt.

In the US, those rules come from the GENIUS Act, signed in July 2025. The OCC’s proposed rules list what counts as a reserve: cash, bank deposits, Treasury bills maturing in 93 days or less, certain repos, government money market funds, and tokenized versions of these.

The law kicks in by January 18, 2027 at the latest.

So every stablecoin minted under these rules is a fresh bid for T-bills. Every redemption is a sale.

Stablecoins and US Debt by the Numbers

Quick context. The US national debt crossed $40 trillion in August 2026. In the first nine months of fiscal 2026, net interest alone cost $827 billion. That’s more than the US spent on defense.

Washington needs buyers. Stablecoins have turned into one.

• $24 billion to $270 billion. USD stablecoin supply growth from 2020 to June 2026, per a new paper by Nellie Liang and Brent Neiman.
• Nearly $35 billion. What stablecoins spent on T-bills in 2025, roughly matching the largest government money market funds, per the BIS.
• Less than 1%. The share of Treasuries outstanding held by stablecoin issuers, according to Treasury’s own borrowing advisory committee.
• $800 billion to $1 trillion. Extra T-bill demand Standard Chartered sees if the market hits $2 trillion by end-2028.

Treasury Secretary Scott Bessent has floated similar numbers. I’d treat them as scenarios, though. Growth has cooled this year alongside crypto trading volumes.

Do Stablecoins Actually Move Treasury Yields?

A little. And now we can actually measure it.

The BIS working paper Stablecoins and safe asset prices studied daily data from January 2021 to March 2026.

A $3.5 billion inflow lowered 3-month T-bill yields by 0.71 basis points on impact and up to 4 basis points within 10 days. Longer maturities barely moved.

An IMF working paper found the same direction. When stablecoin market cap jumps 1%, 1-month and 3-month yields fall. Small moves, but they’re real.

The part that gets less airtime is the exit. An earlier version of the BIS study found outflows pushed yields up two to three times as much as inflows pushed them down.

Money that arrives slowly can leave all at once. That asymmetry is the part of stablecoins and US debt that keeps regulators up at night.

There’s a fair counterpoint too. The Kansas City Fed points out that if people fund stablecoins out of bank deposits, banks may buy fewer Treasuries. So net new demand could be smaller than the headlines suggest.

The Catch: Stablecoin Holders Fund the Debt, Issuers Keep the Yield

T-bills pay yield. Somebody collects it.

With most reserve-backed stablecoins, that somebody is the issuer. The GENIUS Act bars payment stablecoin issuers from paying you yield, so the reserve income stays on their side of the table.

Put simply: you supply the dollar. The issuer buys the T-bill. The issuer keeps the yield.

And a lot of those dollars just sit there. By Sky’s estimate, roughly 80% of stablecoins aren’t deployed into any source of yield. That’s money quietly funding Treasuries without earning its holder a cent.

Which is why “who keeps the yield?” matters as much as “who buys the debt?”

USDS, sUSDS and the Sky Savings Rate: Where the Yield Goes Instead

Sky.money gives you non-custodial access to Sky Protocol, which handles the same dollar differently.

USDS is Sky Protocol’s fully backed stablecoin, and it’s overcollateralized. On October 23, 2026, Sky.money showed $16.24 billion in collateral behind 10.02 billion USDS, about $1.62 for every dollar. You can check the mix yourself on the Sky financial dashboard. Here’s what backs a stablecoin if you want the full checklist.

Where does the revenue come from? Sky Agents tap USDS liquidity and put it to work across collateralized loans, US Treasury bills and lending markets. What they earn flows back into Sky Protocol.

For you, it works like this:

1. Supply USDS and receive sUSDS.
2. sUSDS accrues the Sky Savings Rate (SSR) automatically.
3. Exit to USDS anytime. No lockups, and no fees through Sky.money.

The SSR is a variable protocol rate funded from aggregate Sky protocol surplus. SKY holders raise or lower it through public onchain votes.

One honest detail: sUSDS isn’t exposure to any specific Agent, strategy or T-bill. You get the rate, not a slice of one position.

The numbers are public. In Q2 2026, Sky Protocol recorded $107.35 million in Gross Protocol Revenue, and $53.91 million went to sUSDS holders through the SSR.

sUSDS supply closed the quarter at $5.52 billion, up 149% year over year. It’s the world’s largest yield-generating stablecoin.

• Track record: the core protocol has run since 2017 without an exploit, from a team that’s spent close to a decade on stablecoin infrastructure.
• Rated: in 2025, S&P Global gave Sky Protocol the first credit rating ever assigned to a DeFi protocol.
• Risk discipline: Sky Frontier Foundation’s risk frameworks, among the most systematic in the space, tie each Agent’s access to capital to its performance.
• Built for steadiness: the SSR is engineered for strong risk-adjusted yield, not the biggest number on a leaderboard.

Risks still apply. Smart contracts can fail, and the rate can change. Need USDS first? You can convert 1:1 through the Peg Stability Module.

Lifeline or Liability? What Stablecoin Growth Means for US Debt Markets

Honestly? It depends who you ask.

The case for:

• A steady buyer at the short end can make government borrowing a bit cheaper.
• Dollar stablecoins spread dollar use abroad, and much of that demand lands in T-bills.

The case against:

• Money leaving bank deposits for stablecoins could mean less bank lending.
• A fast wave of redemptions could force T-bill sales right when markets are stressed.
• Leaning harder on short-term bills raises refinancing risk when rates jump.

Both sides can be right at once. That’s why what makes a stablecoin reliable matters more as this market grows: backing, liquidity, exits and transparency.

Stablecoins won’t fix a $40 trillion debt. They’re becoming part of how it gets financed, though.

Sky’s also working on ways to make capital movement data speak the same language in real time, whatever the vehicle or currency.

Quick Answers on Stablecoins and US Debt

Q. Do stablecoins hold US debt?

A. Yes. Reserve-backed stablecoins keep most reserves in short-term Treasury bills, repos and cash, making issuers a growing buyer of US debt.

Q. Does sUSDS pay T-bill yield?

A. No. sUSDS accrues the Sky Savings Rate, a variable rate funded from aggregate Sky protocol surplus. Treasury bills are one of several strategies feeding that revenue.

Could stablecoins hurt the Treasury market?

In a big run, possibly. Outflows move T-bill yields more than inflows do. That’s why reserves you can verify matter.

. . .

Over to you. Should stablecoin holders get a share of the yield their dollars generate, or is 0% a fair price for a stable dollar? Tell me in the comments. I read every one.

If you’d rather your stablecoins didn’t sit still, put them to work with sUSDS.

Stablecoins and US Debt: Who Keeps the T-Bill Yield? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

South Africa’s Crypto Rules Are Changing Direction: What Investors and Businesses Should Prepare For

South Africa is taking an important step towards answering a question that has hung over its crypto market for years:

How should crypto assets be treated under the country’s rules on moving money across its borders?

The problem is not new.

South Africa has long run an exchange-control system to manage capital flowing in and out of the country. The National Treasury and the South African Reserve Bank (SARB), through its Financial Surveillance Department (FinSurv), administer it under the Exchange Control Regulations of 1961.

The problem is that crypto does not fit neatly into a system built around banks, foreign currencies and conventional payment channels.

That raises a legal question:

Is crypto “capital” for the purposes of exchange control?

The Courts Disagreed

Two High Court decisions show the uncertainty.

In Standard Bank of South Africa Ltd v South African Reserve Bank, SARB had forfeited funds linked to cryptocurrency transactions involving Leo Cash and Carry (Pty) Ltd.

Standard Bank challenged the forfeiture, arguing that cryptocurrency was not “capital” under Regulation 10(1)(c). The court agreed, finding that cryptocurrencies fell outside the definitions of “money” and “capital” in the Regulations, and set the forfeiture aside.

In Mangundhla & Dangaiso, the court went the other way. The case involved roughly 1,680 Bitcoin, bought in South Africa and valued at under R182 million, which were sent to wallets reachable through exchanges outside the country. SARB forfeited certain Bitcoin and funds held in the applicants’ Standard Bank and Luno accounts.

This time the court held that Bitcoin could constitute capital, based on the ordinary meaning, context and purpose of the legislation.

This result is the real gap.

If crypto is capital, its cross-border movement can fall under exchange control. If it is not, applying the old framework becomes very difficult. The position is also still unsettled, because the Standard Bank decision is subject to appeal. The courts exposed the problem, but they did not solve it.

The Reform

That is the background to the Draft Capital Flow Management Regulations, 2026, published for public comment on 17 April 2026. On 15 May 2026, the National Treasury and SARB followed with a joint statement covering, among other things, how crypto assets are treated, held and traded, and how they move across borders.

The draft regulations are broader than crypto. They are meant to replace the 1961 regulations and modernise how South Africa manages international capital flows, moving towards a risk-based, surveillance-oriented model. Instead of relying mainly on prior approvals, the aim is to let legitimate transactions flow while strengthening reporting, monitoring and intervention for high-risk activity.

For crypto, the key point is that the draft does not build a separate system. It places crypto assets inside the existing framework, alongside foreign currency, securities and gold.

What the Draft Regulations Would Do

Buying and selling

Purchases, sales, borrowing and lending of crypto above a set threshold would generally have to go through an Authorised Crypto Asset Service Provider (CASP), or otherwise meet permission requirements. A CASP could only carry out the activities it is authorised for, and the National Treasury could add conditions or bar it from dealing with particular people, assets or transactions.

Moving crypto abroad

This is arguably the most significant part. Taking or sending crypto out of South Africa, delivering it for removal, and certain payments involving people outside the country would generally need permission from the National Treasury or an authorised body.

Declaring foreign crypto

A person in South Africa who gains control or possession of a foreign asset or crypto asset may have to declare it within a set period. The declaration would cover when and how it was acquired, where it is held and whether it is linked to a foreign liability. Once declared, later sales or transfers could be restricted.

Seizure, blocking and forfeiture

If there are reasonable grounds to believe crypto is connected to a contravention, authorities could seize it or block dealings with it in an account, and it could eventually be forfeited to the State.

The draft even deals with the practicalities of crypto: after forfeiture, the previous holder may be required to hand over the passwords, PINs or codes needed to access the assets.

The proposed draft contains safeguards. Forfeiture decisions must comply with the Promotion of Administrative Justice Act, and affected people can challenge attachment, blocking, and forfeiture through judicial review.

The Crypto Asset Manual and Its “Trigger Point”

The Draft Crypto Asset Manual for Cross-Border Activities supplies the operational detail. Its main job is to say when a crypto transaction becomes a cross-border one for exchange-control purposes.

• Domestic authorised CASP to offshore CASP: an outward cross-border flow.
• Domestic authorised CASP to a non-custodial wallet: also an outward flow.
• Offshore CASP to domestic authorised CASP: an inward cross-border flow.

These flows are intended to be identifiable and reportable to FinSurv.

The treatment of non-custodial wallets stands out.

With a non-custodial wallet, the user holds the private keys and there is no intermediary holding the assets. Even so, the framework treats a transfer from a domestic CASP to such a wallet as an outward movement of value.

It also takes a stricter line on certain inward transfers from non-custodial wallets, treating them as non-permissible. The focus is not on whether an asset sits on a blockchain, but on where the value comes from, where it goes and whether it crosses the border.

For now, the Manual is narrow on who can send crypto offshore. Individuals can do so through authorised CASPs using their existing foreign-exchange allowances, such as the Single Discretionary Allowance (SDA) or Foreign Capital Allowance (FCA), subject to the applicable requirements. That is not a general permission for every person or business to move crypto abroad, and other categories will depend on the final rules.

What Is South Africa Trying to Do?

Taken together, the draft is not trying to prohibit cross-border crypto activity. It is trying to make crypto movements visible to the capital-flow system. Exchange control was designed for a world of identifiable institutions and bank accounts, and crypto can move value across borders without passing through any of them. The trigger-point approach gives regulators a way to see when that movement matters.

It is also activity-based.

At this stage it does not distinguish between types of crypto asset, and it does not treat crypto as official currency or legal tender.

So the framework is less about whether Bitcoin or a stablecoin is “money,” and more about whether an activity amounts to a movement of value that should be subject to capital controls.

This will sit on top of existing oversight.

The Financial Sector Conduct Authority (FSCA), the Financial Intelligence Centre (FIC) and the South African Revenue Service (SARS) already play roles in regulating crypto activity. A crypto business may therefore need to ask two separate things:

Am I authorised to provide this service, and does this particular transaction create an exchange-control or reporting obligation?

My Views

The draft regulations supply the legal architecture for bringing crypto into South Africa’s capital-flow regime, and the Manual supplies the practical test for when a transaction is caught.

What I find most telling is where the rules choose to focus. They do not try to settle what crypto is. They regulate what crypto does when it crosses a border.

That is a pragmatic response to the court split, because it sidesteps the “is it capital?” debate by looking at the movement of value instead.

For businesses and users, three questions will matter most:

• Can the transaction take place at all?
• Does it need prior permission, or must it go through a particular channel?
• Is it reportable to FinSurv?

For regulators, the goals are clear: better visibility over cross-border crypto flows, fewer chances for regulatory arbitrage and stronger detection of illicit finance, without choking off legitimate digital-asset use.

The open question is how well that balance survives the final text. Rules on non-custodial wallets, in particular, will test whether visibility can be achieved without making ordinary self-custody impractical.

The proposals are still subject to consultation and may change. But the direction is clear. Crypto may be borderless, but its movement across South Africa’s borders will increasingly come with rules on permission, reporting and oversight.

If you enjoy analytical commentary on digital asset regulation, crypto markets, and emerging financial technologies, consider subscribing to my newsletter where I share additional research, commentary, and industry insights.

https://samuel-ayodeji.kit.com/profile

Also, if your company, startup, or publication needs clear, well-researched content on blockchain, digital assets, fintech, or emerging technology law, my inbox is always open.

Moving Crypto Out of South Africa? What the Draft Capital Flow Rules Mean for Your Business was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

For decades, wallets, bank cards, and passwords have been the foundation of digital payments. Every transaction depended on something we carried or something we remembered.

Today, that model is beginning to change.

In parts of China, palm recognition technology is already being used for payments, building access, and other everyday services. Instead of reaching for a phone or wallet, users can simply scan their palm to verify their identity and complete a transaction. Similar technologies are also expanding globally, with solutions like Amazon One demonstrating how biometric identity can simplify everyday experiences.

At DureDev, we closely follow innovations like these because they represent the next generation of AI-powered digital transformation, where intelligent identity, security, and automation work together to create smarter enterprise solutions.

This is more than a payment innovation. It represents a significant shift in how Artificial Intelligence, biometric authentication, digital identity, and enterprise security are shaping the future of business.

Why Palm Recognition Is Gaining Global Attention

Digital payments have evolved rapidly over the past decade. Cash gave way to cards, cards gave way to smartphones, and now biometrics are becoming the next step.

Unlike passwords or PINs, biometric authentication uses unique physical characteristics to verify identity. Whether it’s a fingerprint, facial recognition, iris scan, or palm recognition, the goal is the same: making authentication faster, more secure, and more convenient.

Palm recognition is attracting particular attention because it is contactless, difficult to duplicate, and designed to provide a seamless user experience. As organizations continue investing in digital transformation, technologies that reduce friction while strengthening security are becoming increasingly valuable.

The Real Opportunity Goes Beyond Payments

Most people see biometric payments as a faster checkout experience.

Businesses see something much bigger.

A secure digital identity can simplify customer onboarding, strengthen fraud prevention, improve workplace access, enhance healthcare authentication, and support secure financial transactions across multiple industries.

Instead of managing dozens of usernames, passwords, access cards, and verification methods, organizations can build unified identity systems that improve both operational efficiency and user experience.

This is where Enterprise AI begins creating measurable business value.

The Biggest Challenge Is Trust

Every new technology creates new opportunities.

It also creates new responsibilities.

If biometric identity becomes the future of authentication, protecting that identity becomes one of the biggest cybersecurity challenges organizations will face.

Unlike passwords, biometric data cannot simply be changed after a security breach.

That means businesses need stronger encryption, intelligent fraud detection, continuous monitoring, responsible AI governance, and privacy-first system design.

Building secure digital identity isn’t only about recognizing a person.

It’s about protecting that identity throughout its entire lifecycle.

How Enterprise AI Strengthens Digital Identity

Artificial Intelligence plays a much bigger role than simply recognizing someone’s palm.

Modern AI systems continuously evaluate authentication attempts, identify suspicious behavior, detect fraud patterns, improve verification accuracy, and support compliance requirements across regulated industries.

As organizations process millions of digital interactions every day, AI becomes the intelligence layer that helps protect users while keeping digital experiences simple and frictionless.

This combination of AI, automation, cybersecurity, and digital identity will define the next generation of enterprise applications.

Building The Future With AI

At DureDev, we believe Enterprise AI is about solving real business problems rather than simply deploying new technology.

Our teams build AI-powered applications, intelligent automation platforms, blockchain solutions, enterprise software, and secure digital systems that help organizations innovate with confidence while maintaining security, scalability, and compliance.

Whether businesses are exploring AI-powered identity verification, intelligent automation, or next-generation enterprise applications, success depends on building technology that users can trust from day one.

The Future Of Digital Identity

The future of payments isn’t simply becoming cashless.

It’s becoming intelligent, biometric, and AI-driven.

As biometric technologies continue expanding across banking, retail, airports, healthcare, and enterprise environments, organizations that invest in secure AI infrastructure today will be better prepared for tomorrow’s digital economy.

The question is no longer whether digital identity will evolve.

The real question is how securely, responsibly, and intelligently businesses will build it.

If your organization is planning its next AI initiative, now is the time to start building secure, scalable, and future-ready solutions.

Contact Our AI Experts

China’s Palm Payments Are Redefining Digital Identity: Is AI Replacing Wallets? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

The 30-year Treasury just hit its highest yield since 2002. Here’s what that means for tokenized T-bills, stablecoin yield, and sUSDS.

On October 7, the 30-year US Treasury yield touched 5.70%. The highest since 2002.

If you held long bonds, you didn’t need the headline. You saw it in your balance.

A friend messaged me that week. “Glad my Treasuries are onchain,” he wrote. “Different rails, different rules.”

I get the logic. I also think it’s wrong. And it’s an expensive kind of wrong.

So let’s settle it.

The short answer

• Duration risk is how much a bond’s price drops when interest rates rise.
• Yes, it applies onchain. A tokenized Treasury holds real Treasuries, so it inherits their duration risk.
• Tokenization changes the plumbing. Not the math.
• Most tokenized Treasury products hold short-term bills, so their duration risk is low. Low, not zero.

(Not financial advice. Just how the mechanics work.)

What Is Duration Risk? The 60-Second Version

Bond duration is measured in years. Really, though, it’s a sensitivity score, and the heart of interest rate risk.

It tells you roughly how much a bond’s price moves when rates move one percentage point.

FINRA’s rule of thumb is simple: a duration of 10 means about a 10% loss if rates rise 1%.

Why does the price fall at all?

• You buy a bond paying 4%.
• Rates rise. New bonds pay 5%.
• Nobody pays full price for your 4% bond now. Its price drops until the math evens out.

The longer you’re stuck with the old rate, the bigger the drop.

A 3-month bill barely notices a hike. It matures in weeks and rolls into the new rate. A 30-year bond is stuck with its coupon for decades, so it takes the full hit.

Why Duration Risk Is Back in the 2026 Conversation

• On September 16, a Fed rate hike took the target range to 3.75% to 4.00%. The first hike since 2023.
• The median Fed official now sees rates ending 2026 near 4.1%.
• The 10-year briefly hit 5.34% in early October.
• The next Fed decision lands October 28.

From late July to October 7, the 30-year yield rose about half a point. That alone knocked roughly 7% off a new 30-year bond’s price.

We’ve seen this film. Silicon Valley Bank loaded up on long-dated bonds when rates sat near zero. Rates jumped.

By the end of 2022 it carried $17.7 billion in unrealized securities losses. In March 2023, depositors ran.

Larry Summers called it “one of the most elementary errors in banking.”

No hack. No code bug. Just too much duration at the wrong moment.

Duration risk doesn’t care which ledger your bond lives on.

Does Duration Risk Apply to Tokenized Treasuries?

Yes. Every time.

A tokenized Treasury wraps real government debt. If the fund inside holds 10-year notes, your token behaves like a 10-year note.

Tokenize a 30-year bond tomorrow, and the token carries 30-year risk on day one.

What tokenization changes:

• Settlement speed
• Custody (your wallet, not a broker)
• Visibility into holdings

What it doesn’t change:

• The bond’s rate sensitivity
• The issuer’s credit
• The maturity of what’s inside

The market is big enough for this to matter now. Tokenized Treasury products, one of the largest slices of real-world assets onchain, held about $14.9 billion across 117 funds in mid-October 2026, per RWA.xyz.

At the start of 2025, the figure was roughly $4.0 billion, according to CoinGecko.

The good news? Most of that money sits in short-term bills. Short maturity means short duration. That’s why these tokens usually hold a steady price while yield accrues.

Price Risk vs. Rate Risk: The Part Most Explainers Miss

Rates can hit you in two places.

• Price risk (duration): the value of what you hold moves. Big for long bonds. Tiny for short bills.
• Rate risk (yield sensitivity): the income you earn moves. Big for short bills, because they keep rolling into new rates.

So short duration isn’t immunity. You just feel rates as a changing yield instead of a falling price.

Fed hikes? Your T-bill token’s price barely flinches, and its yield climbs. Fed cuts? The price holds steady, and the yield drops. That second dial is the one most people forget to check.

Once you see the two dials, onchain yield gets much easier to compare.

Does sUSDS Have Duration Risk? Where the Sky Savings Rate Fits

This is where I see the most confusion, so let’s be precise.

sUSDS isn’t a tokenized Treasury. It’s a yield-generating stablecoin that gives access to the Sky Savings Rate (SSR). The SSR is a variable rate funded from Sky Protocol’s aggregate surplus.

On the two dials:

• No maturity date, no lockups. You can redeem sUSDS for USDS anytime.
• No markdown when bond prices fall. sUSDS accrues the SSR continuously, so each sUSDS becomes redeemable for more USDS over time.
• The rate is the moving part. SKY holders can raise or lower it through public onchain votes. It isn’t set by borrowing demand, and it isn’t guaranteed.
• No claim on a specific pool. You hold no claim on any collateral pool, borrower or strategy. You’re accessing the rate itself.

It’s built for predictability and risk-adjusted yield, not the biggest number on your screen.

The scale is real:

• About $4.86 billion in sUSDS was outstanding in late October 2026.
• Roughly $900,000 in yield accrues to holders each day, per BA Labs data.
• Cumulative yield paid to sUSDS holders passed $250 million by June 2026.
• USDS, an overcollateralized stablecoin, had about $10.02 billion in supply against $16.24 billion in collateral.
• The infrastructure has run since 2017 with no exploits.

Fixed Yield: Duration Risk You Choose on Purpose

Now flip it. Fixed Yield on Sky.money locks today’s rate until a set maturity date, through a third-party Pendle integration.

Hold to maturity, and you get your entry rate. Leave early, and you sell at market price, which can land above or below your entry. The app shows that exit cost before you decide.

That’s duration risk in plain sight. You trade flexibility for certainty.

Sky’s public rulebook, the Atlas, files these fixed-term tokens under “bond-like instruments” with duration risk, and sets capital rules for holding them. I like that. The system names the risk out loud.

sUSDS keeps you flexible. Fixed Yield makes you patient. Neither pretends rates don’t exist.

How Sky Measures Risk Out Loud

In bond markets, duration is a shared language. A 7-year duration means the same thing in New York or Mumbai. Onchain, common risk yardsticks are still rare.

• On October 7, 2026, Moody’s gave Sky Protocol a B3 rating. It was Moody’s first rating on any stablecoin protocol.
• S&P Global rates it B-. No other stablecoin protocol holds both ratings.
• In Q2 2026, Sky Protocol posted $107.35 million in gross protocol revenue and $33.29 million in net protocol surplus. Its fifth positive quarter in a row.

Neither rating is investment grade yet. Both agencies published what would lift them, and investment grade is Sky’s stated long-term goal. Honestly? I trust a public scorecard more than any “trust us” banner.

A 5-Question Duration Risk Checklist for Onchain Yield

Before you put stablecoins to work anywhere, ask:

1. Is there a maturity date? No date usually means no price-duration risk on the position.
2. What’s inside, and for how long? Short bills and long bonds behave very differently.
3. Can the price move before maturity? If yes, you’re carrying duration risk.
4. Is the rate fixed or variable? Fixed protects income. Variable protects flexibility.
5. What stacks on top? Smart contract, peg and liquidity risk. Tokenization removes none of them.

Two good reads on the backing side: What Backs a Stablecoin? and What Makes a Stablecoin Reliable?

Quick FAQ

Q. Are tokenized Treasuries risk-free?

A. No. Short-duration products carry low duration risk, plus credit, liquidity and smart contract risk.

Q. Does a Fed hike move the Sky Savings Rate automatically?

A. No. The SSR changes only through Sky Governance votes.

Q. Fixed or variable stablecoin yield?

A. Fixed suits money with a date attached. Variable suits money that might need to move.

· · ·

The Bottom Line

Duration risk followed bonds onchain. It was always going to. And rates will keep moving. October 28 is just the next test.

The smart move isn’t avoiding it. It’s knowing where you carry it, and choosing it on purpose.

Want flexible, variable yield? sUSDS is the simplest place to start. Want a locked rate and can wait for the date? Fixed Yield is there too.

You can convert USDC to USDS 1:1 through the Peg Stability Module, then explore both in the Sky.money app.

So, after this October: would you rather lock a rate or keep your flexibility? Tell me in the comments. I read every one.

This article is for education only and isn’t financial advice. Rates are variable and not guaranteed.

Duration Risk in Tokenized Treasuries: Does Onchain Save You? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

AI already runs the monitoring, the simulations, and a lot of the automation behind on-chain risk. Here is what it still can’t do on its own, and why your yield still rests on human judgment.

Here is the short answer. AI already manages real parts of on-chain risk today.

It runs simulations, watches markets every second of every day, and adjusts protocol settings inside limits that people approve.

What it does not do yet is run the whole risk desk on its own. So the honest take on AI risk management in DeFi is this: yes for the hard, repetitive parts, and not yet as a manager you leave alone.

That gap matters more than the hype suggests, so let me walk through what AI does, where it hits a wall, and what measured on-chain risk really looks like.

The quick version

• AI already runs simulation, monitoring, and bounded automation across DeFi.
• Firms like Gauntlet and Chaos Labs provide much of that risk plumbing.
• Automated systems act only within human-set, governance-approved limits.
• The real limits stay: stale data, models that get gamed, and crises no model has seen.
• Over-automation can spread risk, not contain it. AI augments risk management; it does not replace it.

What “managing on-chain risk” actually means

Managing on-chain risk means keeping a protocol solvent and liquid while markets move.

In plain terms, that is four jobs. Set the rules: collateral ratios, borrow caps, interest curves. Watch everything: positions, liquidity, oracle prices, concentration.

Stress-test: model crashes and attacks before they happen. Act fast: change settings the moment conditions change.

It is constant, data-heavy work, and the cost of getting it wrong is bad debt. No wonder teams want to automate it. It is also why a careless version is dangerous.

Where AI already runs the risk desk

AI already handles the simulation, monitoring, and bounded automation behind DeFi risk, and it is now core infrastructure. A few concrete examples, as of late 2026.

Gauntlet builds simulation-driven risk models and has acted as the economic risk brain for major lending markets, tuning parameters like collateral ratios and caps. It now runs some of the largest curated vaults too.

Chaos Labs runs AI-powered economic and security stress tests. Its risk oracles watch indicators in real time and push parameter changes within governance-approved bounds.

Aave’s renewal with the firm described more than 1,100 parameter updates.

AI-curated vaults from firms like Chaos Labs, Gauntlet, and Sentora now sit behind consumer products, rebalancing capital across Aave, Morpho, and Sky inside set risk targets.

The division of labor is simple. The machine does the speed: monitoring, simulation, anomaly detection, bounded adjustments.

The human keeps the judgment: which scenarios to run, which thresholds matter, which bounds to allow. This is real automated risk management in crypto, not a demo.

The part AI still can’t do

AI cannot be trusted to manage on-chain risk unsupervised, and 2026 showed why.

Start with the limits that never go away. It works inside human bounds, so that judgment stays human.

Models depend on data and oracles, and a stale price turns a smart system into a confident fool.

Models can be gamed by adversaries who know which inputs break them. And tail events escape training, because the crisis that matters most is usually the one the model has never seen.

The year drove this home. A string of lending blowups traced back to hardcoded or stale oracles.

In one case a collateral token was marked on-chain near $1.13 while it traded around $0.63 on the open market.

That is not a model being clever. That is automation acting fast on a wrong number.

The uncomfortable twist: automation can add risk. Fast, automated allocation paired with slow or sloppy controls, or a risk curator that itself fails, can spread a problem instead of containing it. Speed cuts both ways.

Governance-safe automation: humans still set the bounds

The norm today is not autonomous AI. It is governance-safe automation: people set the strategy and the limits, and AI acts inside them.

People decide the risk appetite and approve the guardrails. AI monitors, simulates, and makes bounded changes, often with a validation step before anything goes on-chain. And a human brake always exists.

You keep automation’s speed and keep accountability. Handing a model the power to act, with real money and real adversaries on the other side, should not be done blind.

What measured on-chain risk looks like: a Sky case study

The real answer to on-chain risk is not add AI. It is make the risk measurable. Sky is one of the clearer examples of that in stablecoins.

A quick primer, since the names trip people up. USDS is Sky’s fully backed stablecoin and the way into the system. It is the unit of account, not the yield.

sUSDS is what you hold to earn: you supply USDS, receive sUSDS, and it accrues the Sky Savings Rate over time. It is currently the largest rate-bearing stablecoin by supply.

The Sky Savings Rate is the governance-set yield behind sUSDS, funded by revenue from the Sky Agent Network, an independent set of capital allocators who put USDS to work across strategies like onchain loans, Treasury bills, and lending liquidity.

What makes it measured rather than trust me? USDS is over-collateralized and backed by diversified collateral, so the backing is not a single bet.

The yield is risk-adjusted and governance-set, not whatever the market will pay this week.

Sky is the only stablecoin protocol with credit ratings from both S&P Global and Moody’s.

Both are sub-investment grade, S&P at B- and Moody’s at B3, which is the honest part: independent agencies see real credit and concentration risk, and they publish it.

The infrastructure also carries a decade-long track record with no smart-contract exploit, and governance is building a $150 million solvency reserve.

Adoption is following. In September 2026, Galaxy Digital, a Nasdaq-listed firm, put $100 million of sUSDS on its balance sheet and approved it as institutional collateral.

And yes, this ties back to AI. Sky’s own 2026 roadmap names AI-driven automation as a growth theme, alongside Sky Agents and tokenized credit.

The through-line is the same: use quantitative, verifiable risk work, not guesswork.

If you want to go beyond the savings rate, Sky Vaults and stUSDS sit further out on the risk curve, and Sky Ecosystem Rewards layers in token incentives.

One honest caveat for savers: the Sky Savings Rate is variable. It has moved from roughly 8.75% in early 2025 to around 3.6% in late September 2026, and governance can change it. Read the live number before you decide anything.

The agent frontier, and why it’s still risky

The next step is AI agents that do not just advise but act, holding permissions and moving funds on-chain, including around tokenized real-world assets. Promising, and early.

Every limit above gets sharper when the model can pull the trigger. An agent that can act can also be manipulated or prompt-injected. A misbehaving agent causes harm directly, not as a suggestion.

Safety research keeps landing on the same answer: strict, often deterministic guardrails and clear permissions, not unsupervised control.

Full autonomy, with your money, is not here, and it is not obviously what you want.

So, can AI actually manage on-chain risk?

Yes for the parts that need speed and scale. Not yet as a manager you can leave alone.

AI already simulates, monitors, and adjusts risk faster than any human team, and it is now core plumbing for major protocols.

But it works inside human-set bounds, it can be wrong or gamed, it struggles with the crises that matter most, and letting it act unsupervised introduces fresh risk.

The grown-up version of on-chain risk is not a black box making the calls. It is measurable risk, verifiable backing, and humans who own the guardrails, with AI doing the heavy lifting in between.

AI can manage parts of on-chain risk as augmentation inside human guardrails. It is not yet a risk manager you can walk away from.

Frequently asked questions

Q. Can AI manage DeFi risk?

A. It already manages important parts, like simulation, monitoring, and bounded parameter changes, but inside human-set guardrails, not as a fully autonomous manager.

Q. What does AI actually do in DeFi risk management?

A. It stress-tests parameters, watches markets in real time, auto-adjusts limits within approved bounds, rebalances curated vaults, and flags anomalies faster than people can.

Q. What are the limits of AI risk management in DeFi?

A. It only acts within human bounds, depends on data and oracles, can be gamed, struggles with novel tail events, and over-automation can itself spread risk.

Q. How does Sky approach risk?

A. Like other protocols, Sky relies on quantitative, increasingly AI-assisted risk modeling to set the parameters behind USDS and the Sky Savings Rate, and its risk is also measured externally with credit ratings from both S&P and Moody’s. That does not make it risk-free.

• • •

On-chain risk is getting more measurable every year. That is the real story, bigger than any single model. If you want to see what governance-set, verifiable yield looks like up close, you can put your stablecoins to work on sky.money and read the live numbers on the dashboard.

AI Risk Management in DeFi: What It Can and Can’t Do was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

The US finalised its stablecoin yield rule on 21 October. The real border is not where you think, and the UK proves it.

On 21 October 2026, the US Office of the Comptroller of the Currency finalised its rules under the GENIUS Act.

One line did most of the work: a permitted payment stablecoin issuer cannot pay a holder interest or yield simply for holding, using or storing the coin.

Most outlets filed that under American news.

It is not. It quietly redrew the map for everyone else.

Because “non-US investor” is not a category. It is roughly 190 different answers wearing one label.

If you are planning around a US border, you are planning around a line that has already moved.

Can Non-US Investors Access Onchain Yield? The Short Answer First

Yes. In most jurisdictions, and often through fewer gates than a US retail investor now faces.

Onchain yield is produced by smart contracts on public blockchains. Those contracts do not read your passport. That is the design, not a loophole.

But three things sit between “the contract will accept you” and “you should proceed”:

• Your local law. Some countries restrict or ban holding cryptoassets. Some require a licence you do not hold.
• The interface you use. A website is a company. Companies have regulators, lawyers and a registered address.
• Tax. Access is not permission, and it is never a tax ruling.

Two routes exist in practice.

The first is permissionless DeFi yield, reachable with a wallet and nothing else.

The second is tokenized real-world-asset products built specifically for non-US investors under securities exemptions.

Those are aimed at you and still gated, usually with KYC, wallet allowlisting, minimums and lockups.

So the honest picture is split. One route is open. The other was designed for you and still asks for papers.

Permissionless at the protocol layer does not mean permitted at the personal layer.

Hold that, because the rest of this depends on it.

Why the US Border Stopped Being the Real Line for Stablecoin Yield

Here is what the “escape the US” takes keep missing.

The EU got there first. Under MiCA, interest on e-money tokens and asset-referenced tokens is already prohibited.

The US arrived at the same place with the GENIUS Act in July 2025, and this week’s final rule confirmed it.

Two of the world’s largest regulatory blocs now agree: the issuer of a payment stablecoin does not pay you for holding it.

So the interesting question is no longer whether you sit inside or outside America.

It is this: where does the yield actually come from, and who is paying it?

A rate funded by a protocol’s own surplus and set by token holder vote is a structurally different object from an issuer passing along reserve interest. That distinction now does real work.

Some scale for context. The total stablecoin market sat near $301 billion on 21 October 2026.

Most of those dollars are idle. Not because people chose idleness, but because the route to anything else was unclear.

Protocol vs Interface: The Two Layers That Decide Your Access

This part surprises people.

The protocol layer is permissionless. Open-source smart contracts, deployed on Ethereum and other public chains. No gatekeeper. Reachable directly, or through any independent front end.

The interface layer is not. A front end is operated by a legal entity, and that entity geo-restricts.

Take a real example instead of a hypothetical. Sky.money publishes its prohibited jurisdiction list in its Terms of Use, version 2.0, updated 1 September 2026.

Thirty-five countries and regions are named. China, Hong Kong, Russia, Iran, Venezuela.

It also names the United Kingdom.

It does not name the United States.

Read that again. Meanwhile the UK’s Financial Conduct Authority published fresh DeFi consultation papers on 21 October 2026, with its full cryptoasset regime due in force from October 2027.

The border is not America versus the world. It is drawn country by country, by lawyers, and it moves.

So much for “non-US access.”

What Actually Crosses Borders? Measurement, Not Tokens

Tokens move freely. Trust does not.

An allocator in Singapore, a founder in Lagos and a saver in Sao Paulo share no vocabulary for “is this safe.” That gap is the real barrier to global onchain yield. Not geography.

Which is why two announcements this year matter more than they look.

On 7 October 2026, Moody’s assigned Sky Protocol a B3 counterparty risk rating with a stable outlook.

It was the first rating Moody’s has issued on any stablecoin protocol. S&P Global had already assigned a B- in August 2025, the first credit rating ever given to a DeFi protocol, and affirmed it this year.

Sky Protocol is currently the only stablecoin protocol formally rated by both.

Neither rating is investment grade. Nobody is pretending otherwise, and both agencies published what would need to improve. That is the point of a scale. A rating is not a compliment.

A credit rating is the one document that reads the same in Singapore, Sao Paulo and Lagos.

Then the backing, which anyone can check without asking permission:

• USDS supply across USDS and DAI: around $10.02 billion
• Collateral backing the system: around $16.24 billion
• sUSDS supply: around $4.86 billion
• Operating since 2017, across every market cycle, with no exploits

That is roughly $1.62 of collateral value behind every $1 of USDS obligation, visible in real time rather than attested once a quarter.

If you want the mechanics, Sky.money has a plain-English explainer on what actually backs a stablecoin.

The protocol underneath is not running on fumes either. Sky Protocol generated $107.35 million in gross revenue in Q2 2026, its second consecutive quarter above $100 million and its fifth straight quarter of surplus.

Trailing twelve-month net protocol revenue stood at $159.63 million, and protocol collateral climbed 45.5% year over year.

Those are numbers a rating agency can audit. Which is exactly why one did.

In September 2026, Galaxy Digital put $100 million of sUSDS on its corporate balance sheet and approved it as collateral across its institutional trading business. Institutions do not do that on vibes.

How Non-US Investors Reach the Sky Savings Rate Through USDS and sUSDS

The mechanics are deliberately boring.

1. Convert USDC to USDS at 1:1 through the Peg Stability Module. No fees, no slippage.
2. Supply USDS and receive sUSDS, the world’s largest yield-bearing stablecoin.
3. Your sUSDS accrues the Sky Savings Rate continuously. No lockup, no maturity date, no claim button.
4. Redeem back to USDS whenever you want.

What separates the Sky Savings Rate from most stablecoin yield:

• It is governance-set, not demand-set. SKY holders vote it up or down onchain, in public, before it takes effect.
• It is funded from aggregate protocol surplus, not one lending market or one borrower.
• It is not paid from token emissions.
• You hold exposure to the rate itself, not to any single Agent, pool, strategy or asset manager.

The rate is variable and can change. Check it live on the sUSDS page rather than trusting a number in an article.

For anyone who wants something other than the baseline, there is Fixed Yield, where the rate is fixed only if you hold to maturity, Vaults curated on Morpho, stUSDS for advanced risk capital, and Sky Ecosystem Rewards. Different risks, different reasons. sUSDS stays the baseline.

The Jurisdiction Checklist Before You Supply a Single Dollar

Run this first:

• Check your own country’s rules. Not the protocol’s. Yours.
• Read the prohibited jurisdictions clause. Two paragraphs, usually decisive, and it changes without a press release.
• Never use a VPN to pass a geo-block. Sky.money treats misrepresenting your location as a material breach of its terms. Most interfaces do the same.
• Confirm whether you get the full app or a limited version. Feature-level restrictions are common and rarely advertised.
• Understand where the yield comes from. Reserve interest, borrowing demand and protocol surplus are three different risks.
• Assume tax applies. It is your filing, in your country.

So What Is the Honest Answer?

Non-US investors can access onchain yield. Many have more routes open than US retail does right now.

But the useful question was never “am I non-US.”

It is: is my specific jurisdiction served, by this specific interface, for this specific product, today?

The protocol does not care where you live. The front end does. Your tax authority definitely does.

What makes any of this work at global scale is not permissionlessness on its own. It is measurement. Published collateral. Rates voted onchain.

Two independent credit ratings on the same scale a pension fund already uses. A shared language for capital that reads the same whatever the jurisdiction or currency.

That is the part that actually crosses borders.

This is informational only. Not legal, tax or financial advice. Yields are variable and not guaranteed.

Now tell me where you are reading this from. Which jurisdiction are you in, and has an interface ever geo-blocked you out of something you were perfectly entitled to hold? I want to see how wide the gap really is. Comments are open.

Onchain Yield for Non-US Investors: The Map Is Wrong was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Network marketing continues to create opportunities for businesses that want to expand their reach through distributor relationships and team-based selling. However, sustainable growth requires more than finding new distributors. Businesses also need a clear organizational structure, accurate commission calculations, transparent reporting, and efficient communication.

This is where Monoline MLM Software can make a meaningful difference. By bringing essential network management activities into one centralized system, businesses can improve daily operations and build a stronger foundation for long-term development.

Building a Strong Foundation for Network Marketing

Every successful network marketing business starts with a well-defined plan. Distributors need to understand their roles, how their network operates, and how their performance contributes to business objectives.

A Monoline structure organizes distributors within a single-line network arrangement. Depending on the compensation rules, businesses can establish their own commission structures, qualification requirements, and reward policies.

Key takeaway: A clearly defined monoline mlm plan helps businesses establish transparent operating rules and gives distributors a better understanding of how the network functions.

When participants have access to accurate information, they can focus more effectively on customer relationships, product promotion, and responsible business development.

Why Structured Network Management Matters

As a network grows, managing distributor information manually can become increasingly difficult. Tracking registrations, monitoring sales activity, calculating commissions, and preparing reports may consume valuable time.

A centralized management system brings essential business information together, making daily operations easier to organize and monitor.

Instead of maintaining multiple spreadsheets or relying on disconnected records, businesses can manage essential information through one platform. This approach supports consistency, improves visibility, and helps business owners identify operational gaps before they become larger challenges.

How Automation Supports Everyday Operations

Automation is one of the most useful capabilities of modern MLM software. Repetitive administrative tasks can slow down business operations, especially when distributor numbers and transaction volumes increase.

With appropriately configured software, businesses can automate selected processes such as distributor registration, commission calculations, sales tracking, and report generation.

Benefits of automation

• Less manual work: Reduce time spent on repetitive administrative activities.
• Consistent calculations: Apply predefined commission rules across eligible transactions.
• Better visibility: Access relevant records and reports more efficiently.
• Improved productivity: Give administrators more time to focus on business development.

Businesses looking for a solution tailored to their operational needs can explore monoline mlm software to understand how technology can simplify network management and support organized business operations.

Creating a Better Experience for Distributors

Distributor experience plays an important role in network marketing. People are more likely to engage with a business when its processes are understandable and essential information is easy to access.

A well-designed software platform can provide distributors with personalized dashboards, sales information, commission statements, and relevant account details.

A better distributor experience starts with three essentials:

1. Accessibility: Make important account information easy to find.
2. Transparency: Present commission statements and performance records clearly.
3. Independence: Allow distributors to review their own information without repeatedly contacting administrators.

When distributors understand their progress and can access relevant information independently, communication becomes more efficient and the overall business experience can improve.

Using Reports to Make Smarter Business Decisions

Business growth becomes easier to manage when decisions are supported by reliable information. MLM reporting tools can help administrators review distributor activity, sales performance, commission records, and overall network development.

Consider these practical applications:

• Sales performance: Understand sales trends and evaluate business activities.
• Commission records: Review calculations and improve payment transparency.
• Distributor activity: Identify support and training requirements.
• Network growth: Monitor registrations and overall development.

Accurate reporting encourages accountability. When business owners and distributors have access to appropriate, consistent records, it becomes easier to address questions, identify improvement opportunities, and maintain trust throughout the organization.

The real value of reporting lies in using available information to make thoughtful decisions rather than relying entirely on assumptions.

Choosing Software That Supports Future Growth

Selecting MLM software is an important decision because the right platform should support both current requirements and future business plans.

Before choosing a solution, businesses should evaluate its flexibility, security, reporting capabilities, user experience, integration options, and commission calculation features.

Before making a decision, check whether the solution offers:

• Flexible configuration based on the company’s compensation rules.
• Secure handling of distributor and transaction information.
• Reliable commission calculations and reporting.
• A user-friendly administrator and distributor dashboard.
• Scope for future enhancements as business needs evolve.

Working with an experienced development team can help businesses create a solution that fits their operational requirements. Businesses seeking customized functionality can consider monoline MLM software development to align the platform with their specific business processes and long-term objectives.

A thoughtful selection process helps businesses invest in technology that serves a clear purpose and supports their operational strategy.

Moving Forward with a Clear Business Strategy

Technology can simplify network management, but long-term success also depends on product value, customer satisfaction, distributor education, ethical business practices, and consistent leadership.

Building a sustainable network marketing business involves combining the right tools with responsible business decisions. Software provides the operational foundation, while customer-focused strategies and effective communication help businesses develop lasting relationships.

Monoline MLM Software can help businesses organize essential activities, improve operational visibility, and manage distributor information more efficiently. When combined with a clearly communicated compensation structure and a thoughtful growth strategy, it can support more organized and manageable network marketing operations.

Final Thoughts

The right Monoline MLM software can simplify network management, improve operational efficiency, and help businesses maintain better control over their daily activities. Choosing a solution that aligns with specific business requirements is an important step toward building a structured network.

By combining suitable technology with transparent practices, quality products, and consistent distributor support, businesses can create a stronger foundation for sustainable growth and long-term success.

Monoline MLM Software: Strategies for Building a Structured Network Marketing Business was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.