Ethena: A Synthetic Dollar Built on Ethereum
Executive summary
Ethena's USDe paper formalises the cash-and-carry trade — long staked ETH/BTC collateral, short equivalent perpetual futures — as a stablecoin issuance mechanism, and the 2024 deployment validated that synthetic-dollar designs can scale past $5B and survive multi-year operation. The paper is structurally honest about the central risk (extended negative-funding regimes), commits to specific mitigants (insurance fund, multi-collateral basis), and offers a credible operational architecture (off-exchange settlement custodians). It is, however, light on stress-testing under correlated CEX-failure scenarios and dismissive of regulatory risk. DI rates the paper an eight on mechanism clarity and a six on robustness analysis; in 2026 USDe is the third-largest stablecoin and the synthetic-dollar category exists, but the paper's risk model has been augmented heavily in operation.
Background and motivation
By 2023, the stablecoin landscape had bifurcated into two dominant categories with structural problems. Fiat-collateralised stables (USDC, USDT) had product-market fit and regulatory traction but offered zero passive yield to holders, despite the issuers earning 4-5% on their reserve T-bills (an estimated $7-10B/year captured by Tether and Circle in 2024). Crypto-collateralised stables (DAI, LUSD, FRAX) offered some yield but at the cost of capital inefficiency (140%+ overcollateralization for DAI) and were structurally limited to roughly $5B in supply each. Algorithmic stables (UST, IRON, USDD, BasisCash, Empty Set Dollar) had repeatedly failed — UST's May 2022 collapse erased $40B+ in market cap — and the category had a credibility crisis. The opportunity Ethena identified was that the cash-and-carry trade in crypto perp-futures markets had been a profitable, well-understood arbitrage for institutional traders since 2018, with annual median funding rates on ETH and BTC perps in the 5-15% range and capacity in the multi-billions. Wrapping that trade in a stablecoin envelope would let retail and institutional holders access the funding-rate yield in tokenised form, while the delta-neutral structure would maintain a 1:1 USD peg without requiring fiat reserves. The intellectual lineage is partly tradfi (cash-and-carry, basis trades, repo-financed long positions are textbook fixed-income strategies) and partly UXD Protocol (a 2022 Solana-native synthetic dollar that pioneered the concept but failed to scale due to perp-market depth limits on Solana). Ethena's distinctive contribution was matching the design to the deeper Binance/OKX/Bybit perp markets while solving the off-exchange-settlement problem for institutional custody.
Core technical contributions
The mechanism has three layers. First, mint and redeem: an authorised participant (AP) deposits collateral (initially stETH, later USDT and BTC) with Ethena, which mints USDe at a 1:1 USD-equivalent ratio. Simultaneously, Ethena opens an offsetting short perp position equal to the collateral's USD value, creating a delta-neutral portfolio. Redemption reverses the flow — APs return USDe and receive the underlying collateral. Second, custody: rather than sending collateral to the centralised exchange directly (which would expose users to FTX-style exchange-failure risk), Ethena uses 'off-exchange settlement' custodians (Copper, Ceffu, Fireblocks) that hold the collateral off-exchange but allow the exchange to recognise it as margin. This decouples custody from execution. Third, the yield mechanism: USDe holders can stake into sUSDe and earn the protocol's distributable yield. The yield comes from two sources — staking yield on the underlying ETH collateral (~3-4% from stETH) and the perp funding rate (typically positive for crypto perps, in the 5-30% annualised range historically). When funding is positive, the short perp position earns funding from longs; combined with staking yield, sUSDe APYs through 2024 ranged from 7% to 35%. When funding is negative (longs are paid by shorts), the protocol pays funding, eroding NAV. The Insurance Fund is a stand-by reserve that absorbs negative-funding periods and is replenished from positive-funding revenue.
Methodology and rigor
The paper does an above-average job for a project whitepaper of describing the central economic risk. Section 4 explicitly addresses negative-funding regimes, presents historical funding-rate data (2019-2023), and shows that on a rolling basis, funding has been positive 80-90% of the time across major perp pairs. The Insurance Fund target sizing is derived from a stress-scenario assumption (e.g., 30 days of -10% annualised funding at peak supply), and the paper commits to building the fund from the first $20-30M of revenue. This is genuine work and contrasts favourably with most stablecoin whitepapers that ignore tail risk entirely. That said, the analysis has gaps. The historical funding-rate data is short (5 years) and largely covers a regime where crypto was in a structural bull market with sustained long demand. The paper does not analyse what happens in a scenario like Q1 2025 when funding rates went negative across multiple major perp pairs simultaneously for an extended period — this happened in practice and the protocol survived but with measurable drawdown on sUSDe APY (from 25% peak to 8-10% trough). The paper also does not adequately treat the scenario in which multiple major exchanges (Binance, OKX, Bybit) simultaneously fail or are sanctioned. The off-exchange settlement architecture mitigates but does not eliminate this risk, because the protocol's hedge positions are still on-exchange. The regulatory analysis is essentially absent. By 2024-25 USDe faced direct regulatory scrutiny (the SEC, EU MiCA, and Asian regulators all engaged with the synthetic-dollar question), and the paper's lack of preparation for that scrutiny was visible in operational decisions made under pressure.
Strengths
The paper's central strength is honesty about the trade. Cash-and-carry stablecoin design has been proposed for years, but earlier attempts (UXD on Solana) did not scale because they tried to use thin perp markets and failed to design around CEX counterparty risk. Ethena's choice to (a) accept reliance on centralised perp markets where depth exists rather than fight that battle, and (b) use off-exchange settlement to mitigate CEX failure, was clear-eyed engineering. The OES architecture is genuinely innovative in the stablecoin context: it gives institutional-grade custody (Copper, Ceffu, Fireblocks are tradfi-credible counterparties) while still enabling exchange-side hedging. The mint-and-redeem design with whitelisted APs creates institutional integrity at the boundary while the USDe token itself remains permissionless to hold and trade — a structurally similar approach to USDC (where Coinbase/Circle gate the mint flow but USDC is freely transferable) but extended to a delta-neutral collateral basket. The sUSDe staking design separates yield-bearing from non-yield-bearing exposure, which is operationally useful (USDe can serve as transactional money while sUSDe captures yield) and regulatorily helpful (sUSDe explicitly looks like a security, USDe arguably less so). The Insurance Fund commitment, while not a complete defence, is a real mechanism with a sized target and a published replenishment rule. The paper's transparency commitments (regular attestation of collateral and short positions) have largely been honoured, and the operational disclosure has been better than typical for stablecoin issuers.
Weaknesses and limitations
The largest substantive weakness is the underdeveloped treatment of correlated tail risks. The protocol depends simultaneously on (i) sustained positive funding rates over time, (ii) continuous CEX operability (Binance, OKX, Bybit primarily), (iii) functional off-exchange custodians, and (iv) liquid stETH/BTC collateral. A tail event correlated across these — for instance, a major macro sell-off that drives funding negative for weeks while also stressing CEX solvency and stETH liquidity — exceeds what the Insurance Fund alone can absorb. The paper does not size this scenario or commit to a backstop beyond the Insurance Fund. A second weakness is the absence of a clear policy for what happens if USDe loses its peg under stress: the redeem mechanism is defined for orderly conditions but the paper does not specify how the protocol would defend a multi-percent depeg, how it would queue redemptions if claims exceeded available collateral on short notice, or what governance process would activate emergency measures. The 2024-2025 period saw USDe trade in a 0.99-1.00 band consistently but did not test its peg defense at scale. A third weakness is the regulatory gloss: the paper treats the 'synthetic dollar' framing as if it were a stable categorical claim, but in 2024-25 regulators (notably the SEC and ESMA under MiCA) have been actively skeptical of synthetic stablecoins as non-securities. Ethena has had to make regulatory concessions in 2025 (geographic exclusions, KYC at the AP boundary) that the paper did not anticipate. Fourth, the multi-collateral expansion (stETH first, then USDT, then BTC) was presented as a feature but in practice has produced an opaque collateral mix where users do not always know the precise basket composition. Fifth, the paper underweights the Lindy/credibility problem: a stablecoin needs years of perfect operation to be perceived as money, and the protocol's three-year track record is still short by money-credibility standards.
Subsequent influence
USDe's commercial success was rapid and substantial: from launch in February 2024 to peak supply in the multi-billion-dollar range in early 2025, then a stable plateau through 2026 (third-largest stablecoin behind USDT and USDC). The category effect is significant. Resolv launched in 2024 with a related but distinct delta-neutral architecture (using ETH spot rather than stETH and emphasising over-collateralisation). Elixir launched a similar product. Several smaller projects (Honey, Bolt, USDX) attempted comparable designs with varying success. The synthetic-dollar category did not exist as a recognisable product line before this paper; by 2025 it was the second-largest source of new stablecoin supply after fiat-backed issuance. The paper also influenced the broader stablecoin design conversation. The 'reserve-yield-to-holders' question — why do holders of USDC and USDT not receive the T-bill yield on the reserves? — gained urgency once a yield-bearing alternative existed at scale. Circle's USDC migration toward higher transparency and Tether's continued silence on yield-distribution can both be read as responses to USDe's market traction. The OES custody pattern has been adopted beyond Ethena: institutional crypto-trading desks now widely use Copper/Ceffu OES for derivatives margining, which was a niche practice pre-2024. Academically, the synthetic-dollar literature is small but growing, with empirical studies of USDe's funding-rate exposure, peg stability, and reserve composition appearing in 2024-2025.
How it holds up in 2026
Two years post-launch and three years post-paper, the design has been validated at the level of basic functionality: USDe has held its peg, sUSDe has paid yields meaningfully above other dollar instruments, and the protocol has navigated multiple stress periods (Q1 2024 LRT contagion fears, Q3 2024 ETH drawdown, Q1 2025 negative-funding episode) without catastrophic failure. The technical mechanism — delta-neutral basis trade with OES custody — has proven robust enough to scale and to absorb manageable stress. The paper's core claim that the cash-and-carry trade is durable enough to underwrite a stablecoin has been provisionally vindicated, with the qualifier that 'durable' means 'profitable on a multi-year average', not 'profitable every quarter'. The paper has aged less well on the regulatory front. By 2026, USDe operates under significant regulatory constraints in major markets that were not anticipated in the original paper: EU MiCA classification has been ambiguous, several US states have issued no-action or enforcement letters, and APAC regulators have variably engaged. The protocol has had to add geographic exclusions, KYC at the AP boundary, and structural adjustments that constrain the original permissionless design. The paper has aged moderately well on tail-risk treatment: the Insurance Fund has been adequate so far, but the Q1 2025 negative-funding stress drained it materially and required a governance-driven recapitalisation. The synthetic-dollar category exists, USDe is its anchor, and competing designs are converging on similar structures with minor variations. DI's holistic view is that the paper documented a real opportunity, designed a credible mechanism, and shipped a product that has scaled meaningfully — but the paper's risk model has needed substantial augmentation in operation, and the long-term durability question (what happens in a sustained bear market with persistent negative funding) remains open. The conservative reading is that USDe is durable so long as crypto perp markets are healthy; the durability question is a derivative question of the broader market it lives in.
Strengths
- Cash-and-carry mechanism specified clearly and matched to deep CEX perp markets
- Off-exchange settlement (OES) custody is genuine innovation in stablecoin context
- sUSDe vs USDe separation is operationally clean and regulatorily helpful
- Insurance Fund mechanism with sized target and replenishment rule
- Honest treatment of negative-funding-rate risk in Section 4
- Operational transparency via regular collateral and position attestation
Weaknesses
- Correlated tail-risk (negative funding plus CEX stress plus stETH stress) under-analysed
- Peg-defense mechanics not specified for stressed redemption scenarios
- Regulatory exposure barely addressed — material constraints emerged 2024-25
- Multi-collateral mix opacity makes user risk-assessment difficult
- Lindy/credibility problem unaddressed — money requires years of perfect operation
- Governance and emergency-measure activation processes not specified
Key contributions
- Delta-neutral synthetic dollar via spot-perp basis trade as stablecoin issuance mechanism
- Off-exchange settlement (OES) custodian architecture isolating CEX counterparty risk
- sUSDe staking yield combining funding-rate spread plus collateral staking yield
- Insurance Fund mechanics for negative-funding-rate periods
- Multi-collateral support (stETH, BTC, USDT) with delta-hedge per collateral type
- Mint/redeem flow with whitelisted authorised participants (AP) for institutional integrity
- Transparent attestation of perp-short positions and underlying collateral
TL;DR
Specified the cash-and-carry stablecoin clearly, scaled USDe past $10B, and anchored the synthetic-dollar category — but the regulatory and tail-risk model needed substantial augmentation in operation.
Get DeFi Intel research in your inbox
Weekly long-form coverage of papers, incidents, jurisdictions, chains, tokens and the people building them. Free tier covers headlines; Pro adds the analyst-grade breakdowns.
Sources
External references gathered from the body of this brief. Last reviewed 2026-05-03.