Bitcoin Magazine

Centralized Exchange and DeFi Losses Dominate 2026 Crypto Hacks Despite Hardware Wallet Failures

Crypto hacks have produced roughly $2.35 billion in net losses so far in 2026 after freezes and returns, according to a report by Lightning.news shared with Bitcoin Magazine. A security researcher by the name of Stacy Muur posted on X compiled “a list of protocols that were hacked for more than $50,000 in 2026.” 230 protocols year-to-date. “Crypto security is absolutely cooked.” September alone accounted for about $768 million in Muur’s tally, driven mainly by centralized exchanges and DeFi rather than pure Bitcoin self-custody hardware wallets, which got significant news coverage at the time.

The largest single loss was Bitget’s September 24 drain of roughly $387.5 million from hot and warm wallets. The exchange and firms including Chainalysis, Elliptic, and TRM Labs have linked the incident to North Korea, citing IP patterns consistent with prior DPRK-linked VPN use, on-chain overlaps with wallets tied to earlier Lazarus Group and TraderTraitor activity, including the 2025 Bybit theft. Attackers used third-party security products to inject fraudulent withdrawal commands without taking private keys.

Liquid Network, Blockstream’s Bitcoin sidechain, took the next-largest hit when attackers exploited an Elements software bug in early September to mint about 4,000 unbacked L-BTC and peg them out for roughly 4,000 real bitcoins, valued near $320 million at the time. The self-described white-hat actors returned 3,400 BTC after negotiations conducted on-chain via OP_RETURN messages and kept about 600 BTC. No federation keys were compromised. The loss came from a type of inflation bug on the Liquid network protocol. 

Samson Mow later called the episode part of an “avalanche of AI-assisted attacks” that had already reached other Bitcoin-adjacent software before hitting Liquid. The network is back and running now, having covered the losses, presumably from investors. 

DeFi platforms showed the same pattern of concentrated, high-value losses. Drift Protocol lost approximately $285–296 million in an April governance and multisig compromise that involved months of social engineering. An investigation commissioned by the project attributed the operation to North Korean actors. 

KelpDAO’s LayerZero-powered rsETH bridge was drained of roughly $292 million in unbacked tokens after a single-verifier design was subverted. LayerZero stated that preliminary indicators pointed to DPRK’s Lazarus Group, specifically TraderTraitor. 

Tectonic on Cronos saw about $120.4 million borrowed against manipulated collateral in late August. Validators later rewound the chain and recovered the majority, though several million dollars that had already been bridged off-network were not restored.

Incidents involving Bitcoin hardware wallets were smaller in aggregate despite the wide news coverage. Galaxy Research placed the Coinkite RNG hack values in the range of roughly 1,596–1,789 BTC, on the order of $100–130 million, with higher upper-bound estimates near 2,055 BTC. 

Ledger losses of roughly $86–102 million traced to devices sold through the authorized Southeast Asian reseller CryptoBilis, where an unauthorized hardware implant captured recovery phrases during setup, a supply chain attack. The company stated that confirmed cases were limited to that reseller’s supply chain and that its own systems and direct sales were unaffected, though there are unconfirmed reports of such bugged devices making it to German markets. Combined, however, these hardware-adjacent events remain well below the single largest CEX and DeFi incidents. 

The year has also coincided with the practical deployment of AI coding agents capable of scanning codebases for vulnerabilities and automating exploit development. Muur has stated that “AI is definitely making it much easier to find and exploit bugs. I think we’re entering a pretty serious cybersecurity arms race.” 

Reports note that code-flaw exploits accelerated after the February release of models such as GPT-5.3-Codex and Claude Opus 4.6, which showed high success rates on smart-contract bug benchmarks at low cost. 

OpenAI has disclosed internal testing cases in which agents accessed unauthorized test-network funds or bypassed controls to complete tasks. Most of the year’s largest heists still relied on traditional vectors such as key compromise, social engineering, and infrastructure flaws, but the lowered barrier for discovering and weaponizing bugs adds a new layer of risk, particularly for complex smart-contract systems and sidechains.

Bitcoin’s base layer itself has not been the source of these losses. The bulk of the 2026 damage has concentrated in CEX hot-wallet infrastructure, DeFi governance, oracle designs, and Bitcoin sidechain code, while pure self-custody hardware wallets, even when imperfect, have accounted for a distinctly smaller share. Nevertheless, calls for an update to self custody recommendations have emerged from industry leaders, pushing forward multivendor multisig wallets as the future of niche industry.

This post Centralized Exchange and DeFi Losses Dominate 2026 Crypto Hacks Despite Hardware Wallet Failures first appeared on Bitcoin Magazine and is written by Juan Galt.

Major banks' participation in DTCC's tokenization service could accelerate the integration of digital assets into mainstream finance.

The post Citi, JPMorgan among major banks joining DTCC’s tokenization service launch appeared first on Crypto Briefing.

A six-step method that starts at the contract, not the dashboard.

Pick a large stablecoin. Open three data sites. You will get three different circulating supply numbers.

None of them is lying. They are answering three different questions.

And the gap is not cosmetic. In June 2026, one widely used aggregator reported roughly $371 million more USDS than the Ethereum mainnet contract did. No hack. No stealth mint. Escrowed supply counted twice.

If you hold a stablecoin, lend against one, or carry one on a balance sheet, you need a figure you can defend in a risk meeting. Here is the six-step method.

Why does the same stablecoin show three different circulating supply numbers?

Three structural reasons, and not one of them involves anybody being dishonest.

• Different starting point. Some sources read totalSupply() straight off the token contract. Others rebuild supply by summing mint and burn events. Onchain data schemas now carry an explicit flag for which of the two is authoritative, row by row, because the two disagree often enough to matter.
• Different exclusions. CoinGecko deducts locked addresses that project teams report to it (published methodology). Allium strips four separate categories out of raw supply before calling anything circulating.
• Different scope. One token, or the whole family? USDS alone sat at $6.81B on 26 October 2026. Sky Ecosystem reported $11.48B of stablecoin supply the next day, because that figure counts USDS and DAI together as protocol liabilities.

Same dollar. Three honest answers.

Circulating supply is not a fact you look up. It is a definition you choose, then measure.

Step 1. Read the contract before you read the dashboard

Every real audit starts with one call: totalSupply() on the issuing contract, at a named block.

Not a screenshot. A block height.

Yearn’s risk team did exactly that to USDS on 9 September 2026 at block 25939320. Mainnet totalSupply() came back at 6,645,559,216, down 15% from their previous reading.

They also pulled the protocol’s own internal debt figure, so the token number could be checked against the issuer’s books rather than against another website. The full working is public.

That is the standard worth copying. Two independent reads, same block, both published.

Step 2. Subtract the supply that is not actually circulating

Raw total supply overstates circulation almost every time. Four buckets come out:

• Pre-minted and unissued. Tokens the issuer created but has not released against backing.
• Bridge-locked. Supply sitting in a source-chain escrow while a mirrored token trades somewhere else.
• Stablecoin-backed. Supply locked only to mint another tracked stablecoin.
• Permanently inaccessible. Burn addresses and dead contracts.

The bridge bucket is where most errors live. In that same September reassessment, native-escrow USDS fell from about $448M to $102M, escrowed sUSDS from about $812M to $343M, and LayerZero-locked USDS from roughly $48.7M to $6.67M. Miss those and a cross-chain total quietly counts real money twice.

Step 3. Do not count the yield-bearing wrapper twice

This one catches careful people.

sUSDS is not extra supply. It is a claim on USDS that has been supplied to the Sky Savings Rate module. One dollar of USDS wrapped into sUSDS is still one dollar of stablecoin liability, not two.

• Count the base token as supply.
• Count the wrapper as a holding of the base token.
• Never add the two together.

Scale is why this matters. Roughly half of USDS supply sits in sUSDS, and the Ethereum sUSDS pool showed $4.85B on 26 October 2026. That is a lot of float to misclassify.

A yield-bearing wrapper is a claim on supply. It is never new supply.

Step 4. Check what backs the supply, not just how big it is

Supply tells you the size of the liability. It tells you nothing about whether that liability is covered.

So pull the collateral figure next, from the same issuer, on the same day.

On 27 October 2026, Sky Ecosystem published $14.15B in Total Collateral against $11.48B in stablecoin supply.

That is roughly $1.23 of collateral behind every dollar of supply, which is the entire point of an overcollateralized design.

Two surfaces let you check it yourself instead of taking it on trust:

• financial.skyeco.com for the balance sheet, Gross and Net Protocol Revenue, Protocol Surplus and Sky Reserves.
• info.skyeco.com for the live onchain view of collateral composition, USDS and sUSDS.

Credit agencies have started running the same exercise. Moody’s assigned Sky Protocol a B3 issuer rating with a stable outlook on 7 October 2026, the first rating it has given any stablecoin protocol, after S&P Global affirmed B- on 1 October.

Both flagged reserve depth as the constraint. That is what an outside read of the collateral side looks like, and it is worth more than a logo on a trust page.

Step 5. Ask whether that supply can actually leave at a dollar

A supply number is only as good as the exit. Three questions:

• Is there a direct conversion path with the issuer, or only a market?
• What caps sit on that path?
• What does using it cost?

Sky Protocol runs Peg Stability Modules, smart contracts that convert supported stablecoins into USDS and back at 1:1 directly with the protocol rather than against another trader, under governance-set caps. Moving between USDS and sUSDS carries no lockup in either direction.

Redemption depth is the part of a supply audit most people skip, and the part every stress event tests.

Step 6. Date the number, or bin it

Stablecoin supply moves daily. A figure without a timestamp is a rumour with decimal places.

Write the audit line in four fields: source, metric, value, block or date.

This is about to stop being a matter of taste. On 21 October 2026 the OCC finalised its GENIUS Act rule.

From 18 January 2027, permitted issuers must publish the monthly composition of their reserves on their own websites by noon on the last day of each month, and file weekly confidential reserve reports.

As Forbes noted, an accurate weekly reserve figure demands daily reconciliation between tokens outstanding onchain and reserves held at the custodian.

Monthly PDFs are becoming weekly reconciliation. Protocols that already publish live will barely feel it.

What does a finished circulating supply audit look like on USDS?

Six lines, dated 26 to 27 October 2026, each checkable in under ten minutes:

• Mainnet token supply: $6.81B USDS, third largest dollar stablecoin.
• Protocol family supply: $11.48B, USDS and DAI together.
• Total Collateral: $14.15B, around $1.23 per dollar of supply.
• Wrapper: sUSDS, roughly half the USDS float, excluded from the supply line.
• Exit path: Peg Stability Modules at 1:1, governance-capped.
• Outside read: rated by both Moody’s and S&P Global, so far the only stablecoin protocol with both.

A defensible number, with the working shown.

Why the Sky Savings Rate belongs in a supply audit

Here is the part most supply write-ups leave out.

Supply that pays nothing is a static liability. Supply that pays has to be funded, and that funding has to come from somewhere real.

The Sky Savings Rate is a variable rate set by Sky Governance and accessed by holding sUSDS.

It is funded from revenue Sky Protocol accrues as the Sky Agent Network, independent allocators including Spark, Grove, Osero, Keel and Obex, draws USDS liquidity under governance-set risk parameters and deploys it.

So when you audit the supply, audit the engine behind it:

• Where does the yield come from?
• Who sets the rate, and is the decision public?
• Does the revenue appear on a published income statement?

Galaxy appears to have run some version of that test. On 23 September 2026 it added $100 million of sUSDS to its corporate treasury and approved sUSDS as eligible collateral across its institutional trading business.

Audit the supply. Then audit whatever pays it.

The 60-second circulating supply checklist

Run this before you quote any stablecoin supply figure:

• Read totalSupply() at a named block.
• Subtract pre-minted, bridge-locked, stablecoin-backed and inaccessible balances.
• Exclude the yield-bearing wrapper from the supply line.
• Pull collateral from the same issuer on the same day.
• Confirm the redemption path and its caps.
• Write the date next to the number.

Six steps. One figure you can put in front of a risk committee.

So what should circulating supply actually mean?

The stablecoin market sat near $308B in August 2026, below its May peak of $322.4B. That is a lot of dollars measured by methods most holders have never read.

Which leaves the question I actually want argued in the comments.

Does circulating supply mean tokens that exist, tokens that can move, or tokens someone can redeem at par today?

Pick one. Then run the six steps on whatever stablecoin you hold and post the number with its date underneath. I will check mine against yours.

---

How to Audit a Stablecoin’s Real Circulating Supply was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

A new Ipsos survey has found that only 19% of Americans strongly endorse the security of the US financial system, while just 5% express high trust in decentralized platforms. DeFi Education Foundation’s national study, conducted through Ipsos KnowledgePanel, surveyed 1,545…

Tokenization put real-world assets onchain. DeFi is what makes them actually move. Here is where stablecoin yield, sUSDS and the Sky Savings Rate fit in.

Here is the part almost nobody says out loud about tokenization: putting a real-world asset onchain is the easy bit now.

About $39 billion of tokenized real-world assets sit onchain today, excluding stablecoins, per RWA.xyz in mid-October 2026.

The underlying assets those tokens point to run into the hundreds of billions. Issuance is basically a solved problem, and the pipeline keeps filling.

Boston Consulting Group has projected tokenized assets could reach into the trillions of dollars by 2030.

But a token that just sits there is a receipt. Not a working financial instrument.

The hard part is distribution. Making that token useful. Lending it, borrowing against it, composing it into something productive. And more and more, that job belongs to DeFi.

So here is the thesis, plainly: DeFi is becoming the distribution layer for tokenized assets. Not all of them. Mostly the ones built to move freely.

Everything below is dated analysis, not financial advice, so check the live numbers before you act.

“Tokenization issues the asset. DeFi distributes its utility.”

Tokenization issues the asset. DeFi distributes it.

There are two separate jobs in bringing real-world assets onchain.

The first is issuance. Wrapping a Treasury bill, a credit position, or a dollar into a token.

Tokenization has largely cracked this. Onchain RWA value, excluding stablecoins, more than tripled in a year, past $39 billion by October 2026.

Tokenized US Treasuries alone are worth roughly $14.7 billion, with private credit and tokenized gold making up much of the rest.

The second job is distribution. Taking that token and making it productive. This one is harder, and it is where DeFi comes in.

DeFi protocols are composable. Drop a tokenized asset into them and it can be lent, pooled, borrowed against, and stacked into strategies without asking permission. A static record becomes a living building block.

Tokenization mints the asset. DeFi distributes its utility.

How tokenized assets actually get used in DeFi

Once an asset can move freely, “distribution” stops being abstract. In practice it means a handful of concrete uses:

• Collateral. Post a tokenized Treasury or a yield-bearing stablecoin and borrow against it, without selling the underlying exposure.
• Yield vaults. Supply the asset into curated vaults that put it to work across lending markets.
• Yield-trading. Split an asset into principal and future yield and trade them separately, as Pendle does, to lock in a fixed rate.
• Looping. Hold an asset for its base yield, borrow against it, redeploy, repeat. Powerful, and riskier.

Each of these turns a passive holding into something that earns or frees up liquidity. That is what “RWA in DeFi” really describes.

The venues doing the heavy lifting

RWA deposits into DeFi lending and yield protocols climbed sharply through 2026, into the several billions. A handful of names carry most of the flow.

• Morpho has become a leading venue, with hundreds of millions across dozens of RWA assets on several chains. Think of it as an onchain prime brokerage.
• Aave runs broad lending markets, plus a separate permissioned track for institutions.
• Kamino is the largest single-chain RWA venue, on Solana.
• Pendle handles the yield-trading and fixed-rate side.

Across these venues, RWA deposits roughly tripled in the year to mid-2026, climbing from a couple of billion dollars into the several billions.

One detail worth sitting with: credit tokens and tokenized gold currently make up most RWA collateral, more than Treasuries. These rankings shift fast, so treat them as a snapshot.

The catch: most tokenized RWA still sits idle

Now the honest part, because the headline numbers hide it.

For all the momentum, most tokenized real-world assets are doing nothing in DeFi.

By one 2026 analysis, more than half of reported RWA value sits idle. Issued, held, parked. Not circulating.

Why? Design.

A lot of tokenized assets, especially the institutional ones, are permissioned.

They need KYC, allowlisting, or jurisdiction checks, and they carry transfer restrictions. You cannot just drop them into an open protocol.

A token you cannot move without permission cannot be distributed by a permissionless system.

So the thesis needs a sharper edge. DeFi is not distributing all of RWA. It is becoming the distribution layer for the assets that were built to be distributed.

“A token you can’t move without permission can’t be distributed by a permissionless system.”

Why permissionless, composable assets win

The assets that actually move through DeFi share a profile. Freely transferable. Built in standard token formats. Composable by default.

Yield-bearing stablecoins fit that mould almost perfectly. So do some freely transferable Treasury tokens. Heavily gated institutional tokens, however large, mostly do not.

The lesson for anyone issuing a tokenized asset is blunt. Composability is not a feature you bolt on later. If you want distribution, you design for it at issuance.

Where Sky fits: USDS, sUSDS and the Sky Savings Rate

Sky is a clean example of the permissionless side of this story. One example among several, not the whole trend.

Start with USDS, Sky Protocol’s stablecoin and the entry point to everything else.

USDS is over-collateralized, backed by a diversified mix that includes tokenized real-world assets like short-duration US Treasuries.

As of late October 2026, Sky.money’s homepage showed about $16.24 billion of collateral backing roughly $10.02 billion of USDS supply. That is close to $1.62 of collateral for every dollar.

Now the yield part. Supply USDS and you receive sUSDS, the world’s largest yield-bearing stablecoin, with supply near $4.83 billion on Sky.money in late October 2026.

sUSDS accrues the Sky Savings Rate (SSR) automatically, and you can redeem it for USDS plus accrued yield at any time.

The Sky Savings Rate is a variable, governance-set rate funded from aggregate Sky Protocol surplus, shown at 3.80% on Sky.money in late October 2026. It can change, and Sky.money does not set, control, or guarantee it.

Here is why it matters for this story:

• sUSDS is permissionless and composable. It circulates through DeFi, gets held for its yield, supplied to vaults, and accepted as collateral. Galaxy, a large institutional holder, approved sUSDS as collateral for lending, and borrowers keep accruing the Sky Savings Rate while it is posted.
• Sky also runs its own lending layer, Spark. So Sky is both an issuer of a composable, RWA-backed yield token and a venue that distributes such assets.

That dual role, issuer and distributor, is the exact pattern this piece describes.

It runs on infrastructure that has worked on stablecoin systems since 2017. sUSDS still carries smart-contract and peg risk, and the rate is variable.

None of this is a sure thing. If you want the mechanics, here is a plain-English explainer of what sUSDS is and how it works.

The risks distribution brings onchain

Distribution is not free. Plugging real-world assets into DeFi imports new risks:

• Imported risk. A real-world asset brings its own credit, rate, and redemption risk into the protocol, on top of smart-contract risk.
• Composability contagion. The same looping that boosts yield chains positions together, so trouble in one layer can cascade.
• Oracle and pricing risk. RWA collateral needs accurate onchain pricing, which is harder for less liquid assets.
• Concentration. Much RWA collateral sits in a few credit and gold tokens, so stress there can ripple.

None of this kills the thesis. It just means distribution is a trade-off, not a free lunch.

So what does it mean for stablecoin holders?

The direction is clear. As more value gets tokenized, DeFi is becoming the layer that makes it useful. The place a token turns into collateral, yield, and a building block.

But it is early and uneven. Most tokenized assets still are not active onchain.

The winners are the ones designed to compose. And the yield comes with real risk.

The clearest sign it is real: institutions now post composable RWA tokens as collateral and keep earning on them, rather than letting the tokens sit.

If you hold stablecoins, the practical takeaway is simple. You do not have to issue anything to benefit from this shift.

A composable, RWA-backed yield-bearing stablecoin like sUSDS already plugs into it, letting your dollars earn the Sky Savings Rate instead of sitting still.

Put your stablecoins to work, check the live numbers, size your own risk, and treat this as a map, not advice.

Quick answers

Q. What does “DeFi is the distribution layer for RWA” mean?

A. Tokenization creates real-world-asset tokens. DeFi is where they become useful, as collateral, vault inputs, and composable building blocks, instead of sitting idle.

Q. Why is most tokenized RWA not used in DeFi?

A. Many tokenized assets are permissioned and gated, so they cannot compose freely. Only a minority is actively used today.

Q. How does sUSDS relate?

A. sUSDS is a permissionless, composable, RWA-backed yield-bearing stablecoin that accrues the Sky Savings Rate and circulates through DeFi. The rate is variable and governance-set.

---

DeFi Is Becoming the Distribution Layer for Tokenized Assets was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Stablecoins are now a real buyer of short-term US debt. Here’s what that means for Treasury markets, and for you.

Here’s something most stablecoin holders never think about.

The digital dollar in your wallet is probably helping fund the US government.

Not in a conspiracy-theory way. In a plain, legal, slightly boring way. When you buy a reserve-backed stablecoin, the issuer takes your dollar and parks most of it in short-term US Treasury bills.

Do that across a market worth roughly $300 billion and you’ve got a buyer of US debt that barely existed six years ago.

So what does stablecoin growth mean for US debt markets? Stablecoins have become a steady, rules-driven source of demand for short-term Treasuries. Inflows can nudge T-bill yields lower, outflows can push them higher, and in most cases the holder funding all of it earns nothing.

That last part is the one I want to dig into.

Key takeaways

• Reserve-backed stablecoins keep most of their reserves in cash, repos and Treasury bills, so their growth turns straight into demand for short-term US debt.
• Stablecoin issuers still hold less than 1% of all Treasuries outstanding. They move the front end of the curve, not the whole market.
• BIS research links a $3.5 billion stablecoin inflow to 3-month T-bill yields falling up to about 4 basis points within 10 days.
• Most stablecoin holders earn 0% while the reserve income stays with the issuer.
• USDS and sUSDS take a different path. Protocol revenue flows back to holders through the Sky Savings Rate, a variable rate set by Sky governance.

How Do Stablecoins Buy US Debt? The T-Bill Pipeline Nobody Sees

I can explain the pipeline in about ten seconds.

1. You swap $100 for 100 stablecoins.
2. The issuer owes you $100 and holds $100 in reserves.
3. Rules push those reserves into cash and very short-term government debt.

In the US, those rules come from the GENIUS Act, signed in July 2025. The OCC’s proposed rules list what counts as a reserve: cash, bank deposits, Treasury bills maturing in 93 days or less, certain repos, government money market funds, and tokenized versions of these.

The law kicks in by January 18, 2027 at the latest.

So every stablecoin minted under these rules is a fresh bid for T-bills. Every redemption is a sale.

Stablecoins and US Debt by the Numbers

Quick context. The US national debt crossed $40 trillion in August 2026. In the first nine months of fiscal 2026, net interest alone cost $827 billion. That’s more than the US spent on defense.

Washington needs buyers. Stablecoins have turned into one.

• $24 billion to $270 billion. USD stablecoin supply growth from 2020 to June 2026, per a new paper by Nellie Liang and Brent Neiman.
• Nearly $35 billion. What stablecoins spent on T-bills in 2025, roughly matching the largest government money market funds, per the BIS.
• Less than 1%. The share of Treasuries outstanding held by stablecoin issuers, according to Treasury’s own borrowing advisory committee.
• $800 billion to $1 trillion. Extra T-bill demand Standard Chartered sees if the market hits $2 trillion by end-2028.

Treasury Secretary Scott Bessent has floated similar numbers. I’d treat them as scenarios, though. Growth has cooled this year alongside crypto trading volumes.

Do Stablecoins Actually Move Treasury Yields?

A little. And now we can actually measure it.

The BIS working paper Stablecoins and safe asset prices studied daily data from January 2021 to March 2026.

A $3.5 billion inflow lowered 3-month T-bill yields by 0.71 basis points on impact and up to 4 basis points within 10 days. Longer maturities barely moved.

An IMF working paper found the same direction. When stablecoin market cap jumps 1%, 1-month and 3-month yields fall. Small moves, but they’re real.

The part that gets less airtime is the exit. An earlier version of the BIS study found outflows pushed yields up two to three times as much as inflows pushed them down.

Money that arrives slowly can leave all at once. That asymmetry is the part of stablecoins and US debt that keeps regulators up at night.

There’s a fair counterpoint too. The Kansas City Fed points out that if people fund stablecoins out of bank deposits, banks may buy fewer Treasuries. So net new demand could be smaller than the headlines suggest.

The Catch: Stablecoin Holders Fund the Debt, Issuers Keep the Yield

T-bills pay yield. Somebody collects it.

With most reserve-backed stablecoins, that somebody is the issuer. The GENIUS Act bars payment stablecoin issuers from paying you yield, so the reserve income stays on their side of the table.

Put simply: you supply the dollar. The issuer buys the T-bill. The issuer keeps the yield.

And a lot of those dollars just sit there. By Sky’s estimate, roughly 80% of stablecoins aren’t deployed into any source of yield. That’s money quietly funding Treasuries without earning its holder a cent.

Which is why “who keeps the yield?” matters as much as “who buys the debt?”

USDS, sUSDS and the Sky Savings Rate: Where the Yield Goes Instead

Sky.money gives you non-custodial access to Sky Protocol, which handles the same dollar differently.

USDS is Sky Protocol’s fully backed stablecoin, and it’s overcollateralized. On October 23, 2026, Sky.money showed $16.24 billion in collateral behind 10.02 billion USDS, about $1.62 for every dollar. You can check the mix yourself on the Sky financial dashboard. Here’s what backs a stablecoin if you want the full checklist.

Where does the revenue come from? Sky Agents tap USDS liquidity and put it to work across collateralized loans, US Treasury bills and lending markets. What they earn flows back into Sky Protocol.

For you, it works like this:

1. Supply USDS and receive sUSDS.
2. sUSDS accrues the Sky Savings Rate (SSR) automatically.
3. Exit to USDS anytime. No lockups, and no fees through Sky.money.

The SSR is a variable protocol rate funded from aggregate Sky protocol surplus. SKY holders raise or lower it through public onchain votes.

One honest detail: sUSDS isn’t exposure to any specific Agent, strategy or T-bill. You get the rate, not a slice of one position.

The numbers are public. In Q2 2026, Sky Protocol recorded $107.35 million in Gross Protocol Revenue, and $53.91 million went to sUSDS holders through the SSR.

sUSDS supply closed the quarter at $5.52 billion, up 149% year over year. It’s the world’s largest yield-generating stablecoin.

• Track record: the core protocol has run since 2017 without an exploit, from a team that’s spent close to a decade on stablecoin infrastructure.
• Rated: in 2025, S&P Global gave Sky Protocol the first credit rating ever assigned to a DeFi protocol.
• Risk discipline: Sky Frontier Foundation’s risk frameworks, among the most systematic in the space, tie each Agent’s access to capital to its performance.
• Built for steadiness: the SSR is engineered for strong risk-adjusted yield, not the biggest number on a leaderboard.

Risks still apply. Smart contracts can fail, and the rate can change. Need USDS first? You can convert 1:1 through the Peg Stability Module.

Lifeline or Liability? What Stablecoin Growth Means for US Debt Markets

Honestly? It depends who you ask.

The case for:

• A steady buyer at the short end can make government borrowing a bit cheaper.
• Dollar stablecoins spread dollar use abroad, and much of that demand lands in T-bills.

The case against:

• Money leaving bank deposits for stablecoins could mean less bank lending.
• A fast wave of redemptions could force T-bill sales right when markets are stressed.
• Leaning harder on short-term bills raises refinancing risk when rates jump.

Both sides can be right at once. That’s why what makes a stablecoin reliable matters more as this market grows: backing, liquidity, exits and transparency.

Stablecoins won’t fix a $40 trillion debt. They’re becoming part of how it gets financed, though.

Sky’s also working on ways to make capital movement data speak the same language in real time, whatever the vehicle or currency.

Quick Answers on Stablecoins and US Debt

Q. Do stablecoins hold US debt?

A. Yes. Reserve-backed stablecoins keep most reserves in short-term Treasury bills, repos and cash, making issuers a growing buyer of US debt.

Q. Does sUSDS pay T-bill yield?

A. No. sUSDS accrues the Sky Savings Rate, a variable rate funded from aggregate Sky protocol surplus. Treasury bills are one of several strategies feeding that revenue.

Could stablecoins hurt the Treasury market?

In a big run, possibly. Outflows move T-bill yields more than inflows do. That’s why reserves you can verify matter.

. . .

Over to you. Should stablecoin holders get a share of the yield their dollars generate, or is 0% a fair price for a stable dollar? Tell me in the comments. I read every one.

If you’d rather your stablecoins didn’t sit still, put them to work with sUSDS.

---

Stablecoins and US Debt: Who Keeps the T-Bill Yield? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

The 30-year Treasury just hit its highest yield since 2002. Here’s what that means for tokenized T-bills, stablecoin yield, and sUSDS.

On October 7, the 30-year US Treasury yield touched 5.70%. The highest since 2002.

If you held long bonds, you didn’t need the headline. You saw it in your balance.

A friend messaged me that week. “Glad my Treasuries are onchain,” he wrote. “Different rails, different rules.”

I get the logic. I also think it’s wrong. And it’s an expensive kind of wrong.

So let’s settle it.

The short answer

• Duration risk is how much a bond’s price drops when interest rates rise.
• Yes, it applies onchain. A tokenized Treasury holds real Treasuries, so it inherits their duration risk.
• Tokenization changes the plumbing. Not the math.
• Most tokenized Treasury products hold short-term bills, so their duration risk is low. Low, not zero.

(Not financial advice. Just how the mechanics work.)

What Is Duration Risk? The 60-Second Version

Bond duration is measured in years. Really, though, it’s a sensitivity score, and the heart of interest rate risk.

It tells you roughly how much a bond’s price moves when rates move one percentage point.

FINRA’s rule of thumb is simple: a duration of 10 means about a 10% loss if rates rise 1%.

Why does the price fall at all?

• You buy a bond paying 4%.
• Rates rise. New bonds pay 5%.
• Nobody pays full price for your 4% bond now. Its price drops until the math evens out.

The longer you’re stuck with the old rate, the bigger the drop.

A 3-month bill barely notices a hike. It matures in weeks and rolls into the new rate. A 30-year bond is stuck with its coupon for decades, so it takes the full hit.

Why Duration Risk Is Back in the 2026 Conversation

• On September 16, a Fed rate hike took the target range to 3.75% to 4.00%. The first hike since 2023.
• The median Fed official now sees rates ending 2026 near 4.1%.
• The 10-year briefly hit 5.34% in early October.
• The next Fed decision lands October 28.

From late July to October 7, the 30-year yield rose about half a point. That alone knocked roughly 7% off a new 30-year bond’s price.

We’ve seen this film. Silicon Valley Bank loaded up on long-dated bonds when rates sat near zero. Rates jumped.

By the end of 2022 it carried $17.7 billion in unrealized securities losses. In March 2023, depositors ran.

Larry Summers called it “one of the most elementary errors in banking.”

No hack. No code bug. Just too much duration at the wrong moment.

Duration risk doesn’t care which ledger your bond lives on.

Does Duration Risk Apply to Tokenized Treasuries?

Yes. Every time.

A tokenized Treasury wraps real government debt. If the fund inside holds 10-year notes, your token behaves like a 10-year note.

Tokenize a 30-year bond tomorrow, and the token carries 30-year risk on day one.

What tokenization changes:

• Settlement speed
• Custody (your wallet, not a broker)
• Visibility into holdings

What it doesn’t change:

• The bond’s rate sensitivity
• The issuer’s credit
• The maturity of what’s inside

The market is big enough for this to matter now. Tokenized Treasury products, one of the largest slices of real-world assets onchain, held about $14.9 billion across 117 funds in mid-October 2026, per RWA.xyz.

At the start of 2025, the figure was roughly $4.0 billion, according to CoinGecko.

The good news? Most of that money sits in short-term bills. Short maturity means short duration. That’s why these tokens usually hold a steady price while yield accrues.

Price Risk vs. Rate Risk: The Part Most Explainers Miss

Rates can hit you in two places.

• Price risk (duration): the value of what you hold moves. Big for long bonds. Tiny for short bills.
• Rate risk (yield sensitivity): the income you earn moves. Big for short bills, because they keep rolling into new rates.

So short duration isn’t immunity. You just feel rates as a changing yield instead of a falling price.

Fed hikes? Your T-bill token’s price barely flinches, and its yield climbs. Fed cuts? The price holds steady, and the yield drops. That second dial is the one most people forget to check.

Once you see the two dials, onchain yield gets much easier to compare.

Does sUSDS Have Duration Risk? Where the Sky Savings Rate Fits

This is where I see the most confusion, so let’s be precise.

sUSDS isn’t a tokenized Treasury. It’s a yield-generating stablecoin that gives access to the Sky Savings Rate (SSR). The SSR is a variable rate funded from Sky Protocol’s aggregate surplus.

On the two dials:

• No maturity date, no lockups. You can redeem sUSDS for USDS anytime.
• No markdown when bond prices fall. sUSDS accrues the SSR continuously, so each sUSDS becomes redeemable for more USDS over time.
• The rate is the moving part. SKY holders can raise or lower it through public onchain votes. It isn’t set by borrowing demand, and it isn’t guaranteed.
• No claim on a specific pool. You hold no claim on any collateral pool, borrower or strategy. You’re accessing the rate itself.

It’s built for predictability and risk-adjusted yield, not the biggest number on your screen.

The scale is real:

• About $4.86 billion in sUSDS was outstanding in late October 2026.
• Roughly $900,000 in yield accrues to holders each day, per BA Labs data.
• Cumulative yield paid to sUSDS holders passed $250 million by June 2026.
• USDS, an overcollateralized stablecoin, had about $10.02 billion in supply against $16.24 billion in collateral.
• The infrastructure has run since 2017 with no exploits.

Fixed Yield: Duration Risk You Choose on Purpose

Now flip it. Fixed Yield on Sky.money locks today’s rate until a set maturity date, through a third-party Pendle integration.

Hold to maturity, and you get your entry rate. Leave early, and you sell at market price, which can land above or below your entry. The app shows that exit cost before you decide.

That’s duration risk in plain sight. You trade flexibility for certainty.

Sky’s public rulebook, the Atlas, files these fixed-term tokens under “bond-like instruments” with duration risk, and sets capital rules for holding them. I like that. The system names the risk out loud.

sUSDS keeps you flexible. Fixed Yield makes you patient. Neither pretends rates don’t exist.

How Sky Measures Risk Out Loud

In bond markets, duration is a shared language. A 7-year duration means the same thing in New York or Mumbai. Onchain, common risk yardsticks are still rare.

• On October 7, 2026, Moody’s gave Sky Protocol a B3 rating. It was Moody’s first rating on any stablecoin protocol.
• S&P Global rates it B-. No other stablecoin protocol holds both ratings.
• In Q2 2026, Sky Protocol posted $107.35 million in gross protocol revenue and $33.29 million in net protocol surplus. Its fifth positive quarter in a row.

Neither rating is investment grade yet. Both agencies published what would lift them, and investment grade is Sky’s stated long-term goal. Honestly? I trust a public scorecard more than any “trust us” banner.

A 5-Question Duration Risk Checklist for Onchain Yield

Before you put stablecoins to work anywhere, ask:

1. Is there a maturity date? No date usually means no price-duration risk on the position.
2. What’s inside, and for how long? Short bills and long bonds behave very differently.
3. Can the price move before maturity? If yes, you’re carrying duration risk.
4. Is the rate fixed or variable? Fixed protects income. Variable protects flexibility.
5. What stacks on top? Smart contract, peg and liquidity risk. Tokenization removes none of them.

Two good reads on the backing side: What Backs a Stablecoin? and What Makes a Stablecoin Reliable?

Quick FAQ

Q. Are tokenized Treasuries risk-free?

A. No. Short-duration products carry low duration risk, plus credit, liquidity and smart contract risk.

Q. Does a Fed hike move the Sky Savings Rate automatically?

A. No. The SSR changes only through Sky Governance votes.

Q. Fixed or variable stablecoin yield?

A. Fixed suits money with a date attached. Variable suits money that might need to move.

· · ·

The Bottom Line

Duration risk followed bonds onchain. It was always going to. And rates will keep moving. October 28 is just the next test.

The smart move isn’t avoiding it. It’s knowing where you carry it, and choosing it on purpose.

Want flexible, variable yield? sUSDS is the simplest place to start. Want a locked rate and can wait for the date? Fixed Yield is there too.

You can convert USDC to USDS 1:1 through the Peg Stability Module, then explore both in the Sky.money app.

So, after this October: would you rather lock a rate or keep your flexibility? Tell me in the comments. I read every one.

This article is for education only and isn’t financial advice. Rates are variable and not guaranteed.

---

Duration Risk in Tokenized Treasuries: Does Onchain Save You? was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

AI already runs the monitoring, the simulations, and a lot of the automation behind on-chain risk. Here is what it still can’t do on its own, and why your yield still rests on human judgment.

Here is the short answer. AI already manages real parts of on-chain risk today.

It runs simulations, watches markets every second of every day, and adjusts protocol settings inside limits that people approve.

What it does not do yet is run the whole risk desk on its own. So the honest take on AI risk management in DeFi is this: yes for the hard, repetitive parts, and not yet as a manager you leave alone.

That gap matters more than the hype suggests, so let me walk through what AI does, where it hits a wall, and what measured on-chain risk really looks like.

The quick version

• AI already runs simulation, monitoring, and bounded automation across DeFi.
• Firms like Gauntlet and Chaos Labs provide much of that risk plumbing.
• Automated systems act only within human-set, governance-approved limits.
• The real limits stay: stale data, models that get gamed, and crises no model has seen.
• Over-automation can spread risk, not contain it. AI augments risk management; it does not replace it.

What “managing on-chain risk” actually means

Managing on-chain risk means keeping a protocol solvent and liquid while markets move.

In plain terms, that is four jobs. Set the rules: collateral ratios, borrow caps, interest curves. Watch everything: positions, liquidity, oracle prices, concentration.

Stress-test: model crashes and attacks before they happen. Act fast: change settings the moment conditions change.

It is constant, data-heavy work, and the cost of getting it wrong is bad debt. No wonder teams want to automate it. It is also why a careless version is dangerous.

Where AI already runs the risk desk

AI already handles the simulation, monitoring, and bounded automation behind DeFi risk, and it is now core infrastructure. A few concrete examples, as of late 2026.

Gauntlet builds simulation-driven risk models and has acted as the economic risk brain for major lending markets, tuning parameters like collateral ratios and caps. It now runs some of the largest curated vaults too.

Chaos Labs runs AI-powered economic and security stress tests. Its risk oracles watch indicators in real time and push parameter changes within governance-approved bounds.

Aave’s renewal with the firm described more than 1,100 parameter updates.

AI-curated vaults from firms like Chaos Labs, Gauntlet, and Sentora now sit behind consumer products, rebalancing capital across Aave, Morpho, and Sky inside set risk targets.

The division of labor is simple. The machine does the speed: monitoring, simulation, anomaly detection, bounded adjustments.

The human keeps the judgment: which scenarios to run, which thresholds matter, which bounds to allow. This is real automated risk management in crypto, not a demo.

The part AI still can’t do

AI cannot be trusted to manage on-chain risk unsupervised, and 2026 showed why.

Start with the limits that never go away. It works inside human bounds, so that judgment stays human.

Models depend on data and oracles, and a stale price turns a smart system into a confident fool.

Models can be gamed by adversaries who know which inputs break them. And tail events escape training, because the crisis that matters most is usually the one the model has never seen.

The year drove this home. A string of lending blowups traced back to hardcoded or stale oracles.

In one case a collateral token was marked on-chain near $1.13 while it traded around $0.63 on the open market.

That is not a model being clever. That is automation acting fast on a wrong number.

The uncomfortable twist: automation can add risk. Fast, automated allocation paired with slow or sloppy controls, or a risk curator that itself fails, can spread a problem instead of containing it. Speed cuts both ways.

Governance-safe automation: humans still set the bounds

The norm today is not autonomous AI. It is governance-safe automation: people set the strategy and the limits, and AI acts inside them.

People decide the risk appetite and approve the guardrails. AI monitors, simulates, and makes bounded changes, often with a validation step before anything goes on-chain. And a human brake always exists.

You keep automation’s speed and keep accountability. Handing a model the power to act, with real money and real adversaries on the other side, should not be done blind.

What measured on-chain risk looks like: a Sky case study

The real answer to on-chain risk is not add AI. It is make the risk measurable. Sky is one of the clearer examples of that in stablecoins.

A quick primer, since the names trip people up. USDS is Sky’s fully backed stablecoin and the way into the system. It is the unit of account, not the yield.

sUSDS is what you hold to earn: you supply USDS, receive sUSDS, and it accrues the Sky Savings Rate over time. It is currently the largest rate-bearing stablecoin by supply.

The Sky Savings Rate is the governance-set yield behind sUSDS, funded by revenue from the Sky Agent Network, an independent set of capital allocators who put USDS to work across strategies like onchain loans, Treasury bills, and lending liquidity.

What makes it measured rather than trust me? USDS is over-collateralized and backed by diversified collateral, so the backing is not a single bet.

The yield is risk-adjusted and governance-set, not whatever the market will pay this week.

Sky is the only stablecoin protocol with credit ratings from both S&P Global and Moody’s.

Both are sub-investment grade, S&P at B- and Moody’s at B3, which is the honest part: independent agencies see real credit and concentration risk, and they publish it.

The infrastructure also carries a decade-long track record with no smart-contract exploit, and governance is building a $150 million solvency reserve.

Adoption is following. In September 2026, Galaxy Digital, a Nasdaq-listed firm, put $100 million of sUSDS on its balance sheet and approved it as institutional collateral.

And yes, this ties back to AI. Sky’s own 2026 roadmap names AI-driven automation as a growth theme, alongside Sky Agents and tokenized credit.

The through-line is the same: use quantitative, verifiable risk work, not guesswork.

If you want to go beyond the savings rate, Sky Vaults and stUSDS sit further out on the risk curve, and Sky Ecosystem Rewards layers in token incentives.

One honest caveat for savers: the Sky Savings Rate is variable. It has moved from roughly 8.75% in early 2025 to around 3.6% in late September 2026, and governance can change it. Read the live number before you decide anything.

The agent frontier, and why it’s still risky

The next step is AI agents that do not just advise but act, holding permissions and moving funds on-chain, including around tokenized real-world assets. Promising, and early.

Every limit above gets sharper when the model can pull the trigger. An agent that can act can also be manipulated or prompt-injected. A misbehaving agent causes harm directly, not as a suggestion.

Safety research keeps landing on the same answer: strict, often deterministic guardrails and clear permissions, not unsupervised control.

Full autonomy, with your money, is not here, and it is not obviously what you want.

So, can AI actually manage on-chain risk?

Yes for the parts that need speed and scale. Not yet as a manager you can leave alone.

AI already simulates, monitors, and adjusts risk faster than any human team, and it is now core plumbing for major protocols.

But it works inside human-set bounds, it can be wrong or gamed, it struggles with the crises that matter most, and letting it act unsupervised introduces fresh risk.

The grown-up version of on-chain risk is not a black box making the calls. It is measurable risk, verifiable backing, and humans who own the guardrails, with AI doing the heavy lifting in between.

AI can manage parts of on-chain risk as augmentation inside human guardrails. It is not yet a risk manager you can walk away from.

Frequently asked questions

Q. Can AI manage DeFi risk?

A. It already manages important parts, like simulation, monitoring, and bounded parameter changes, but inside human-set guardrails, not as a fully autonomous manager.

Q. What does AI actually do in DeFi risk management?

A. It stress-tests parameters, watches markets in real time, auto-adjusts limits within approved bounds, rebalances curated vaults, and flags anomalies faster than people can.

Q. What are the limits of AI risk management in DeFi?

A. It only acts within human bounds, depends on data and oracles, can be gamed, struggles with novel tail events, and over-automation can itself spread risk.

Q. How does Sky approach risk?

A. Like other protocols, Sky relies on quantitative, increasingly AI-assisted risk modeling to set the parameters behind USDS and the Sky Savings Rate, and its risk is also measured externally with credit ratings from both S&P and Moody’s. That does not make it risk-free.

• • •

On-chain risk is getting more measurable every year. That is the real story, bigger than any single model. If you want to see what governance-set, verifiable yield looks like up close, you can put your stablecoins to work on sky.money and read the live numbers on the dashboard.

---

AI Risk Management in DeFi: What It Can and Can’t Do was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

The US finalised its stablecoin yield rule on 21 October. The real border is not where you think, and the UK proves it.

On 21 October 2026, the US Office of the Comptroller of the Currency finalised its rules under the GENIUS Act.

One line did most of the work: a permitted payment stablecoin issuer cannot pay a holder interest or yield simply for holding, using or storing the coin.

Most outlets filed that under American news.

It is not. It quietly redrew the map for everyone else.

Because “non-US investor” is not a category. It is roughly 190 different answers wearing one label.

If you are planning around a US border, you are planning around a line that has already moved.

Can Non-US Investors Access Onchain Yield? The Short Answer First

Yes. In most jurisdictions, and often through fewer gates than a US retail investor now faces.

Onchain yield is produced by smart contracts on public blockchains. Those contracts do not read your passport. That is the design, not a loophole.

But three things sit between “the contract will accept you” and “you should proceed”:

• Your local law. Some countries restrict or ban holding cryptoassets. Some require a licence you do not hold.
• The interface you use. A website is a company. Companies have regulators, lawyers and a registered address.
• Tax. Access is not permission, and it is never a tax ruling.

Two routes exist in practice.

The first is permissionless DeFi yield, reachable with a wallet and nothing else.

The second is tokenized real-world-asset products built specifically for non-US investors under securities exemptions.

Those are aimed at you and still gated, usually with KYC, wallet allowlisting, minimums and lockups.

So the honest picture is split. One route is open. The other was designed for you and still asks for papers.

Permissionless at the protocol layer does not mean permitted at the personal layer.

Hold that, because the rest of this depends on it.

Why the US Border Stopped Being the Real Line for Stablecoin Yield

Here is what the “escape the US” takes keep missing.

The EU got there first. Under MiCA, interest on e-money tokens and asset-referenced tokens is already prohibited.

The US arrived at the same place with the GENIUS Act in July 2025, and this week’s final rule confirmed it.

Two of the world’s largest regulatory blocs now agree: the issuer of a payment stablecoin does not pay you for holding it.

So the interesting question is no longer whether you sit inside or outside America.

It is this: where does the yield actually come from, and who is paying it?

A rate funded by a protocol’s own surplus and set by token holder vote is a structurally different object from an issuer passing along reserve interest. That distinction now does real work.

Some scale for context. The total stablecoin market sat near $301 billion on 21 October 2026.

Most of those dollars are idle. Not because people chose idleness, but because the route to anything else was unclear.

Protocol vs Interface: The Two Layers That Decide Your Access

This part surprises people.

The protocol layer is permissionless. Open-source smart contracts, deployed on Ethereum and other public chains. No gatekeeper. Reachable directly, or through any independent front end.

The interface layer is not. A front end is operated by a legal entity, and that entity geo-restricts.

Take a real example instead of a hypothetical. Sky.money publishes its prohibited jurisdiction list in its Terms of Use, version 2.0, updated 1 September 2026.

Thirty-five countries and regions are named. China, Hong Kong, Russia, Iran, Venezuela.

It also names the United Kingdom.

It does not name the United States.

Read that again. Meanwhile the UK’s Financial Conduct Authority published fresh DeFi consultation papers on 21 October 2026, with its full cryptoasset regime due in force from October 2027.

The border is not America versus the world. It is drawn country by country, by lawyers, and it moves.

So much for “non-US access.”

What Actually Crosses Borders? Measurement, Not Tokens

Tokens move freely. Trust does not.

An allocator in Singapore, a founder in Lagos and a saver in Sao Paulo share no vocabulary for “is this safe.” That gap is the real barrier to global onchain yield. Not geography.

Which is why two announcements this year matter more than they look.

On 7 October 2026, Moody’s assigned Sky Protocol a B3 counterparty risk rating with a stable outlook.

It was the first rating Moody’s has issued on any stablecoin protocol. S&P Global had already assigned a B- in August 2025, the first credit rating ever given to a DeFi protocol, and affirmed it this year.

Sky Protocol is currently the only stablecoin protocol formally rated by both.

Neither rating is investment grade. Nobody is pretending otherwise, and both agencies published what would need to improve. That is the point of a scale. A rating is not a compliment.

A credit rating is the one document that reads the same in Singapore, Sao Paulo and Lagos.

Then the backing, which anyone can check without asking permission:

• USDS supply across USDS and DAI: around $10.02 billion
• Collateral backing the system: around $16.24 billion
• sUSDS supply: around $4.86 billion
• Operating since 2017, across every market cycle, with no exploits

That is roughly $1.62 of collateral value behind every $1 of USDS obligation, visible in real time rather than attested once a quarter.

If you want the mechanics, Sky.money has a plain-English explainer on what actually backs a stablecoin.

The protocol underneath is not running on fumes either. Sky Protocol generated $107.35 million in gross revenue in Q2 2026, its second consecutive quarter above $100 million and its fifth straight quarter of surplus.

Trailing twelve-month net protocol revenue stood at $159.63 million, and protocol collateral climbed 45.5% year over year.

Those are numbers a rating agency can audit. Which is exactly why one did.

In September 2026, Galaxy Digital put $100 million of sUSDS on its corporate balance sheet and approved it as collateral across its institutional trading business. Institutions do not do that on vibes.

How Non-US Investors Reach the Sky Savings Rate Through USDS and sUSDS

The mechanics are deliberately boring.

1. Convert USDC to USDS at 1:1 through the Peg Stability Module. No fees, no slippage.
2. Supply USDS and receive sUSDS, the world’s largest yield-bearing stablecoin.
3. Your sUSDS accrues the Sky Savings Rate continuously. No lockup, no maturity date, no claim button.
4. Redeem back to USDS whenever you want.

What separates the Sky Savings Rate from most stablecoin yield:

• It is governance-set, not demand-set. SKY holders vote it up or down onchain, in public, before it takes effect.
• It is funded from aggregate protocol surplus, not one lending market or one borrower.
• It is not paid from token emissions.
• You hold exposure to the rate itself, not to any single Agent, pool, strategy or asset manager.

The rate is variable and can change. Check it live on the sUSDS page rather than trusting a number in an article.

For anyone who wants something other than the baseline, there is Fixed Yield, where the rate is fixed only if you hold to maturity, Vaults curated on Morpho, stUSDS for advanced risk capital, and Sky Ecosystem Rewards. Different risks, different reasons. sUSDS stays the baseline.

The Jurisdiction Checklist Before You Supply a Single Dollar

Run this first:

• Check your own country’s rules. Not the protocol’s. Yours.
• Read the prohibited jurisdictions clause. Two paragraphs, usually decisive, and it changes without a press release.
• Never use a VPN to pass a geo-block. Sky.money treats misrepresenting your location as a material breach of its terms. Most interfaces do the same.
• Confirm whether you get the full app or a limited version. Feature-level restrictions are common and rarely advertised.
• Understand where the yield comes from. Reserve interest, borrowing demand and protocol surplus are three different risks.
• Assume tax applies. It is your filing, in your country.

So What Is the Honest Answer?

Non-US investors can access onchain yield. Many have more routes open than US retail does right now.

But the useful question was never “am I non-US.”

It is: is my specific jurisdiction served, by this specific interface, for this specific product, today?

The protocol does not care where you live. The front end does. Your tax authority definitely does.

What makes any of this work at global scale is not permissionlessness on its own. It is measurement. Published collateral. Rates voted onchain.

Two independent credit ratings on the same scale a pension fund already uses. A shared language for capital that reads the same whatever the jurisdiction or currency.

That is the part that actually crosses borders.

This is informational only. Not legal, tax or financial advice. Yields are variable and not guaranteed.

Now tell me where you are reading this from. Which jurisdiction are you in, and has an interface ever geo-blocked you out of something you were perfectly entitled to hold? I want to see how wide the gap really is. Comments are open.

---

Onchain Yield for Non-US Investors: The Map Is Wrong was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

Chainlink has introduced CustodySync with Anchorage Digital Bank as its launch partner, giving institutions a way to borrow from decentralized lending markets against assets held in qualified custody. Chainlink said in its Oct. 26 announcement that CustodySync connects custodians’ collateral…

Robinhood Chain has recorded a 23.1% weekly drop in decentralized exchange volume while retaining $1.132 billion in DeFi deposits, as traders debate whether its post-launch slowdown signals deeper problems. DefiLlama’s Oct. 26 dashboard lists $683.98 million in 24-hour spot DEX…

Reflect’s Create launch, promoted by Solana on October 22, offers a fast route to issuing a branded yield-bearing token. The interface can simplify issuance, but the economics still come from the collateral behind the token and the way its interest is shared.

TL;DR

• Create wraps approved collateral into a branded token.
• Issuers choose how underlying interest is divided.
• A new name and a faster launch do not remove the collateral’s risks.

The token is a wrapper around an existing economic position

Solana’s launch post points to Create’s availability. Reflect’s product documentation describes a single-transaction issuance flow using approved, freely transferable collateral. A project can issue a branded dollar product or a token representing a basket of assets.

The design also lets an issuer retain a share of generated interest. That share is a division of the underlying income stream, not an additional source of income. If the collateral produces less, there is less to divide between the issuer and holders.

This matters because a familiar brand can make an unfamiliar financial claim feel simple. A user may recognize an application’s name without understanding the lending markets, asset issuers or contracts that ultimately determine the token’s value.

Reflect’s FAQ explicitly distinguishes a yield-bearing stablecoin wrapper from the stablecoin it contains. It says the wrapped position adds the risks of the lending markets receiving the reserves. That qualification belongs beside the product’s convenience claims.

It is the same underlying-versus-wrapper distinction seen in tokenized equities: the token’s appearance cannot explain all the rights and dependencies behind it.

Routing access helps execution but does not create a fixed return

Reflect says its issuance system connects to Jupiter and Titan routing, allowing minting and redemption to form part of a swap route. The operational aim is to avoid requiring a separate liquidity pool for every branded token.

That can reduce a distribution obstacle. It does not make every collateral position equally liquid or establish that every redemption can be completed at a value a holder expects. The quality of the backing assets remains central to what the wrapper can deliver.

The documentation also warns that a basket can contain correlated risks. Several assets exposed to the same issuer, market or failure mode may provide less diversification than their separate names suggest.

Changes in exchange routing illustrate how infrastructure can improve access to liquidity. They do not settle the separate question of what an asset is worth.

Similarly, tokenized-deposit products need to be read through their legal and economic structure, even when the user experience resembles a digital dollar balance.

Create lowers the technical work involved in launching a token. For holders, the durable questions remain concrete: what backs it, where the interest originates, how much the issuer keeps and what happens when the collateral underperforms.

Written by the News Desk and edited by Samuel Rae.

Grayscale’s October 23 research note looks at a more specific crypto-and-AI proposition than a general bet on smarter software: who supplies training data, who finances hardware and who receives payment when computing capacity is used.

TL;DR

• The report highlights DATA, USD.AI and Pearl as examples of different infrastructure roles.
• Hardware financing introduces credit questions alongside blockchain mechanics.
• A useful service and a valuable token remain separate propositions.

Three business models sit behind one broad AI label

In the note, research head Zach Pandl describes DATA’s work on contributed training data, USD.AI’s GPU-backed lending and Pearl’s attempt to combine AI computing with blockchain rewards. These are Grayscale’s selected examples and expectations, not independently proven outcomes for the entire sector.

Each model has a different customer. A data network needs someone willing to license its datasets. A financing protocol needs borrowers who can service debt. A computing network needs useful workloads and a way to measure delivery. Combining them under an AI-token heading can hide more than it reveals.

USD.AI’s documentation makes the credit element explicit. It describes loans secured by GPUs and associated cash flows, with recourse generally limited to the collateral and specified exceptions. Its yield-bearing instrument draws on loan payments and reserve-related income.

That creates familiar underwriting questions in a new distribution format. What happens if the equipment loses value faster than expected? How concentrated are the customers paying to use it? Who can recover and sell collateral if a borrower fails? A blockchain record can improve visibility into a claim without answering all three.

The operating-versus-financing distinction also runs through Bitdeer’s mining and AI disclosures. Machines, funded capacity and realized customer revenue are related measures, but they are not interchangeable.

The token must connect to the underlying activity

Even successful infrastructure does not automatically deliver the same benefit to every associated token. A governance token, a claim on lending income and a token used to pay for a service can have very different rights.

USD.AI’s depositor guide, for example, separates the non-yield-bearing USDai instrument, the income-accruing sUSDai instrument and CHIP governance. Naming the protocol alone does not identify which exposure a holder receives.

The same discipline applies to data. Paying contributors can encourage useful supply, but sustainable demand depends on whether buyers find that data lawful, relevant and difficult to obtain elsewhere. Token incentives can finance initial activity without proving that customers will keep paying once incentives shrink.

Tokenized-asset growth similarly needs to be read through the rights attached to the token. And AI-facing consumer applications still need users who return because a product is useful.

Grayscale’s report provides a set of business models to examine. Adoption, unit economics and enforceable claims will provide the stronger evidence that those models are becoming durable businesses.

Written by the News Desk and edited by Samuel Rae.

Kraken added SFI trading on October 23, bringing fresh exchange access to a token attached to a protocol that has changed substantially since its early DeFi incarnation. Saffron’s current product separates an upfront payment from the uncertain trading fees generated by a Uniswap liquidity position.

TL;DR

• Kraken says SFI trading is live, subject to geographic restrictions.
• Saffron’s current vaults exchange potential future Uniswap fees for an upfront premium.
• Buying the governance token does not itself create a claim on a particular vault’s yield.

Today’s Saffron is built around a fee swap

The listing announcement identifies SFI, also called Spice, as an Ethereum token used in Saffron governance. It expressly distinguishes the current vault system from the project’s retired tranche and insurance mechanisms. App and instant-purchase availability also depend on liquidity conditions.

According to Saffron’s vault documentation, one participant supplies the assets for a Uniswap position and receives an upfront premium. Participants on the other side pay that premium in return for the fees the position produces during an agreed term.

The transaction rearranges uncertainty. The liquidity supplier knows the premium received, while the fee buyer takes exposure to the amount of trading activity that ultimately passes through the position. A predetermined premium does not turn the entire underlying asset position into a fixed-value deposit.

Uniswap’s documentation explains why the selected price range matters: a position outside its range stops earning fees. The position’s token composition can also change as traders move the market through that range.

That makes order routing relevant. The external liquidity connections in NewsBTC’s Aggregator Hooks coverage concern where transactions execute, which ultimately influences which liquidity providers collect fees.

Exchange access does not settle the token’s economics

Three things now sit beside one another: a traded governance token, a protocol offering fee swaps and the liquidity positions underneath those swaps. They should be assessed separately. An exchange listing makes the token easier to access for eligible customers; it does not demonstrate demand for the vaults or establish a direct entitlement to their cash flows.

A vault’s results depend on its term, premium, underlying pair and price range. Even a busy market can disappoint a fee buyer if the relevant liquidity spends much of its time outside the active range. Equally, a premium that looks attractive to one side is a cost the other side must overcome.

The distinction between access and economic exposure also appears in structured Bitcoin fund proposals. The wrapper’s name says less than its actual payout rules.

And as BTF’s wind-down demonstrates, familiar tickers can persist while the claims behind them change. SFI’s new listing is a reason to examine Saffron’s current documentation, rather than rely on descriptions of its original 2020 design.

Written by the News Desk and edited by Samuel Rae.

Aave Labs has clarified that its proposed V3.8 security upgrade would preserve flash-loan liquidations. The October 23 response addresses how a reentrancy guard would interact with existing integrations.

TL;DR: Aave’s proposed V3.8 guard excludes flash-loan entry points. Governance approval and security audits remain pending.

The proposal, posted October 21, adds a guard to Pool operations. Such guards constrain the ability of an external callback to enter protected contract functions again before an earlier call finishes. Aave Labs says flashLoan() and flashLoanSimple() would be excluded, allowing their callbacks to keep invoking Pool actions, including liquidations.

Why The Callback Matters

A smart contract receiving a flash loan needs time within the transaction to do something with the borrowed assets. Aave’s developer guide describes a sequence in which the Pool transfers assets, calls the receiver contract and then checks settlement conditions.

For a simple flash loan, the receiver must make the amount borrowed plus the required fee available for repayment. If the transaction cannot meet its conditions, it reverts. The broader flash-loan interface can cover multiple assets and, under permitted conditions, open a collateral-backed debt position.

Those mechanics explain why the scope of a guard matters. A liquidation integration may need to borrow an asset, repay an unhealthy position and complete the rest of its transaction before settlement. Blocking every subsequent Pool interaction indiscriminately would interfere with that sequence.

The important design question is which routes back into the protocol are intentional. A useful security boundary must account for the transaction patterns that integrations depend on, including calls that occur after assets have left the Pool but before repayment is checked.

A Transaction-Length Lock

The proposed implementation uses transient storage introduced through Ethereum’s EIP-1153. That storage remains available during a transaction and is discarded when the transaction ends. It can therefore carry temporary lock state to track whether a protected operation is already running.

The specification identifies reentrancy locks as a use case and explains why transient storage can cost less than writing temporary state to permanent storage. For a heavily used DeFi protocol, the design question includes the cost imposed on ordinary transactions as well as the protection added by the guard.

Aave’s proposed path includes feedback, a Snapshot vote, security review and an on-chain improvement proposal. Certora and additional reviewers are expected to assess the changes before that final step.

For integrators on Ethereum and other affected networks, the clarification provides a concrete compatibility point to check against the eventual code. The reviewed implementation must preserve the intended transaction sequence while enforcing the new boundary. A statement of design intent is useful during that work; deployed behavior will depend on the implementation governance ultimately accepts.

Written by the News Desk and edited by Samuel Rae.

Aave’s first externally curated V4 markets are live on Ethereum, according to Sentora’s October 22 launch explanation. The curator says it is managing active borrowing markets for RLUSD, PYUSD and OUSD within a governance-approved deployment.

TL;DR: Aave’s first externally curated V4 markets are live on Ethereum with Sentora managing strategy and risk settings. Borrowing options include RLUSD, PYUSD and OUSD.

Sentora manages collateral rules, risk parameters, interest-rate curves and oracle configurations. Those responsibilities put practical decisions about lending conditions with an outside specialist while retaining the framework of Aave governance.

Shared Liquidity, Different Lending Rules

Aave V4 divides the system between hubs and spokes. The protocol’s liquidity documentation describes a hub as the central settlement and accounting layer holding assets. Spokes are specialized smart contracts through which users interact with a market’s collateral, borrowing and liquidation logic.

This arrangement lets different markets draw on an underlying liquidity pool while applying different conditions. Governance controls how much capacity a spoke receives. Credit limits constrain borrowing, and supply limits constrain additions, giving the system ways to limit activity without requiring every market to use the same collateral policy.

For a borrower, that makes the identity of the market relevant. Two markets built on the same protocol can offer different assets, borrowing capacity and liquidation conditions. A shared brand or common liquidity source alone does not establish that their positions will behave alike during a sharp market move.

For suppliers, the practical comparison is between the income offered and the market rules that produce it. A higher rate can be attractive, but it also makes it important to inspect which borrowers can access the liquidity and what happens if collateral values deteriorate.

A New Layer To Monitor

Sentora has also extended its Risk Radar to cover the V4 structure. The monitoring system separates hub, spoke and asset views, with tools for comparing caps against usage and showing where borrowing is concentrated. A governance tracker records changes to assets and parameters.

The company gives a practical example of how a limit works: a spoke that reaches its borrowing cap cannot draw additional funds until capacity becomes available through repayment or an approved increase. That restriction is relevant even when users can see liquidity elsewhere in the wider system.

For DeFi users assessing the new markets, the launch creates another set of decisions to examine. The curator’s collateral choices matter alongside the protocol’s contract design; the market’s allocated capacity matters alongside the total liquidity headline. Monitoring can make those differences visible, although a dashboard cannot remove losses from an unsuitable collateral policy.

The first rollout provides a live test of that division of responsibility: Sentora sets market strategy, Aave supplies the lending framework, and governance determines the boundaries within which the markets operate.

Written by the News Desk and edited by Samuel Rae.

TL;DR: Uniswap has switched on Aggregator Hooks in its web app and API across Ethereum, Base and Robinhood Chain, bringing outside liquidity sources into the v4 routing system.

Uniswap is no longer asking traders to choose between liquidity inside its own pools and prices available elsewhere. On Thursday, Uniswap Labs introduced Aggregator Hooks, a routing system that allows its v4 architecture to draw quotations from external decentralized exchanges.

The feature is live in the Uniswap web application and API on Ethereum mainnet, Base and Robinhood Chain. Seven outside sources were available at launch. Uniswap says those sources represent more than 90% of decentralized-exchange activity across the supported networks, a company-supplied measure rather than a guarantee of the best execution on every swap.

External liquidity, familiar transaction flow

The technical approach is unusual. Rather than requiring traders to move into a separate aggregator product, Uniswap wraps external sources as v4 hooks that resemble liquidity pools to the routing engine. The router can compare new quotations block by block and build a route that includes both Uniswap and outside venues.

According to Uniswap, the resulting swap settles in one transaction and does not require another round of token approvals purely because the order touches external liquidity. That reduces visible friction for users, although network fees, slippage and smart-contract risks remain relevant.

A trader exchanging a thinly traded token might benefit from liquidity that would otherwise sit beyond the boundaries of a single application. For a liquid pair, the improvement could be smaller, particularly once execution costs are included. Aggregation is a tool for finding routes, not a promise that every trade will become cheaper.

A change to the protocol's economics

Uniswap says swaps routed through Aggregator Hooks can contribute protocol fees that support UNI token burns. That gives the protocol an economic reason to capture order flow even when the actual assets are sourced elsewhere.

It also highlights a competitive tension in decentralized finance: liquidity is fragmented across many networks and trading systems, yet users increasingly expect applications to navigate that fragmentation automatically.

Developers using the Uniswap API can integrate the new routing functionality, while ordinary app users will see external liquidity included in eligible swaps. The actual effect on spreads and volumes will need to be measured in live trading rather than assumed from the launch announcement.

For Uniswap, the central strategic change is not another pool type. It is the attempt to make v4 an execution layer across rival venues without requiring the trader to know where each leg of a swap originates.

Source: blog.uniswap.org original announcement or data.

Related Reading: decentralized finance; smart contracts; crypto exchanges.

Written by the News Desk and edited by Samuel Rae.

TL;DR: The Hyperliquid Policy Center supports the SEC’s proposed crypto framework but says five changes are needed to make the rules workable for token developers and markets.

The Hyperliquid Policy Center has welcomed the US Securities and Exchange Commission‘s attempt to clarify how securities law applies to crypto assets, while warning that details around distributions and trading could still create unnecessary barriers.

In a comment published October 19, the group urged the regulator to revise its proposed Regulation Crypto Assets framework in five areas. Its concerns include how administrative steps in token airdrops are treated, how tokens can trade after an exempt distribution, and whether a safe harbour offers clear enough protection once a project has matured.

The centre also wants clearer rules for token buybacks and a consistent approach to the interaction between federal exemptions and state securities requirements.

The proposals reflect a long-running problem for cryptocurrency developers. A network token may begin life inside a fundraising arrangement, yet eventually circulate in a system where thousands of participants trade and use it without dealing directly with its original issuer.

Drawing a line between those stages has been difficult under decades-old securities tests. The SEC’s proposal is intended to offer more predictable treatment, but the consultation process shows that industry participants still disagree about where the boundaries should fall.

The advocacy group’s submission is not a regulatory decision. It is one contribution to a rulemaking process whose final outcome will depend on the commission’s response to the evidence and objections it receives.

Written by the News Desk and edited by Samuel Rae.

TL;DR: The Blockchain Association has urged the US Treasury to draw clearer lines around DeFi software, foreign stablecoin issuers and who could face liability under proposed GENIUS Act rules.

The fight over US stablecoin regulation is shifting from Congress to the details of implementation. In comments on Treasury’s proposed Section 3 rules under the GENIUS Act, the Blockchain Association has argued that a framework designed for regulated payment issuers should not inadvertently catch unrelated software and market participants.

One sticking point is the definition of a digital asset service provider. The association wants officials to distinguish customer-facing financial businesses from infrastructure such as self-custody software and validators that do not provide the same services.

It also disputes how the rules might define knowing participation in unlawful stablecoin issuance. Its position is that enforcement should require genuine knowledge and meaningful assistance, rather than interpreting ordinary secondary-market activity as evidence of involvement.

Foreign-issued stablecoins are another concern. The group says compliance requirements should rely on accessible regulatory information rather than assuming every service provider can investigate an issuer with which it has no direct relationship.

These are advocacy positions, not changes Treasury has adopted. Regulators still have to balance the industry’s request for workable rules against their responsibility to police payment products and financial crime.

The eventual language will help determine whether GENIUS Act compliance is mostly a challenge for stablecoin issuers or one that reaches much further into the surrounding ecosystem.

Written by the News Desk and edited by Samuel Rae.

TL;DR: The Hyperliquid Policy Center supports the SEC’s proposed crypto framework but says five changes are needed to make the rules workable for token developers and markets.

The Hyperliquid Policy Center has welcomed the US Securities and Exchange Commission‘s attempt to clarify how securities law applies to crypto assets, while warning that details around distributions and trading could still create unnecessary barriers.

In a comment published October 19, the group urged the regulator to revise its proposed Regulation Crypto Assets framework in five areas. Its concerns include how administrative steps in token airdrops are treated, how tokens can trade after an exempt distribution, and whether a safe harbour offers clear enough protection once a project has matured.

The centre also wants clearer rules for token buybacks and a consistent approach to the interaction between federal exemptions and state securities requirements.

The proposals reflect a long-running problem for cryptocurrency developers. A network token may begin life inside a fundraising arrangement, yet eventually circulate in a system where thousands of participants trade and use it without dealing directly with its original issuer.

Drawing a line between those stages has been difficult under decades-old securities tests. The SEC’s proposal is intended to offer more predictable treatment, but the consultation process shows that industry participants still disagree about where the boundaries should fall.

The advocacy group’s submission is not a regulatory decision. It is one contribution to a rulemaking process whose final outcome will depend on the commission’s response to the evidence and objections it receives.

Written by the News Desk and edited by Samuel Rae.