How Does Ondo USDY Work?
Ondo USDY is a yield-bearing tokenized note backed by short-term US Treasuries and the BlackRock iShares Short Treasury Bond ETF, held in custody by Morgan Stanley Smith Barney LLC. With $2.64B in tokenized assets across 12+ blockchains and a ~3.5% APY, USDY is among the largest tokenized Treasury products in DeFi. The C+ grade reflects its dependence on a single custodian, centralized admin control by Ondo Finance, and significant geographic restrictions (barred for US persons), offset by a clean 3-year track record and the strong regulatory framework of its Reg S security structure.
TVL
$2.6B
Sector
RWA
Risk Grade
C
Value Grade
B
Core Mechanisms
3.4.2
Price-appreciation yield-bearing note (USDY accumulating)
USDY token price appreciates daily as underlying T-bill yield accrues. No rebasing — holder balance stays constant while NAV per token increases. Analogous to wstETH reward-bearing token model, applied to tokenized Treasuries.
1.4.1
rUSDY rebasing variant for constant $1.00 price
rUSDY maintains constant $1.00 price; yield distributed as additional rUSDY tokens via share-based rebase formula: NumTokens_User = NumTokens_Total × (NumShares_User / NumShares_Total).
6.4.3
NovelChainalysis oracle sanctions compliance on every transfer
Chainalysis oracle is queried on every single USDY token transfer to verify both sender and recipient are not sanctioned. This real-time on-chain sanctions enforcement via external oracle is novel in DeFi — most compliant tokens use static blocklists rather than dynamic oracle queries per transfer.
5.4.1
Ondo ProxyAdmin centralized upgrade authority
EIP-1967 transparent upgradeable proxies with Ondo-controlled ProxyAdmin. No governance DAO; Ondo Finance Inc. unilaterally controls contract upgrades.
5.4.3
On-chain allowlist and non-upgradeable blocklist
Three-layer transfer compliance: allowlist (user self-registration + KYC), blocklist (non-upgradeable, Ondo can add but not remove), Chainalysis oracle. All transfers must pass all three checks.
2.3.2
Bankruptcy-remote collateral agent structure
US Treasuries and ETF shares held by Morgan Stanley Smith Barney LLC as custodian via StoneX as broker/dealer. Account-segregated structure with collateral agent to protect holders in Ondo entity insolvency.
How the Pieces Interact
Ondo Finance can upgrade USDY contract implementation via ProxyAdmin at any time. A malicious or compromised upgrade could alter yield distribution logic, modify holder balances, or transfer administrative authority to a new address. No timelock or governance vote is required — Ondo has sole authority.
All $2.64B in backing assets are held by a single custodian (Morgan Stanley Smith Barney LLC) via a single broker (StoneX). Custodian failure, regulatory asset freeze, or insolvency of the BVI issuing entity (Ondo Global Markets) would prevent USDY redemption, causing NAV to collapse. The bankruptcy-remote structure provides legal protection but not operational continuity if the custodian is unavailable.
If the Chainalysis oracle is unavailable or returns incorrect data, every USDY transfer fails until the oracle is restored (liveness risk) or sanctioned addresses incorrectly pass screening (compliance risk). DeFi protocols using USDY as collateral or in liquidity pools would be disrupted by sustained oracle downtime.
Ondo can modify the allowlist requirements (upgrade the allowlist contract), potentially restricting or expanding who can hold USDY. A regulatory directive to exclude additional jurisdictions could effectively lock a subset of holders out of their positions by removing their allowlist status.
If Ondo's BVI issuing entity (Ondo Global Markets) is sanctioned or its assets frozen by OFAC, the Chainalysis oracle would potentially begin blocking all transfers globally, since transfers to/from the issuer entity would fail compliance checks, disrupting all DeFi integrations holding USDY.
What Could Go Wrong
- Single custodian concentration: all $2.64B in backing assets (US Treasuries, BlackRock iShares ETF, bank deposits) are held by Morgan Stanley Smith Barney LLC. A custodian failure, freeze, or regulatory action against the custodian would prevent USDY redemptions, with no backup custodian arrangement disclosed.
- Ondo Finance retains unilateral control over USDY contract upgrades (ProxyAdmin), yield rate setting (monthly), and the allowlist registry. This centralized governance means product parameters can change without holder consent.
- USDY is a Regulation S security explicitly prohibited for US persons and residents of several other jurisdictions. A regulatory reclassification, enforcement action against Ondo's BVI issuing entity, or sanctions against the custodian could force product wind-down.
- The Chainalysis oracle is queried on every USDY transfer for sanctions screening. If the oracle is unavailable or inaccurately sanctions legitimate addresses, transfers fail; if the oracle is compromised, sanctioned addresses could bypass compliance checks.
Custodian Failure Prevents USDY Redemptions
TailTrigger: Morgan Stanley Smith Barney LLC faces regulatory asset freeze, insolvency, or operational failure, OR Ondo Global Markets (BVI) Limited is sanctioned or dissolved, severing access to the $2.64B in backing T-bills and ETF shares.
- 1.Morgan Stanley Smith Barney's custody accounts holding USDY backing assets are frozen by a regulatory order or the custodian enters wind-down proceedings — Ondo cannot access underlying T-bills and ETF shares; USDY redemption pathway from token to cash is blocked
- 2.USDY secondary market price begins discounting from NAV as news spreads and large holders attempt to liquidate — USDY trades below accumulated NAV (~$1.13+) for the first time since inception; DeFi protocols using USDY as collateral trigger liquidations
- 3.DeFi lending markets (Flux Finance, Kamino, Fluid, Dolomite) begin liquidating USDY collateral positions — Forced selling of USDY depresses price further; under-collateralized positions create bad debt across multiple lending protocols
- 4.Ondo invokes bankruptcy-remote structure legal protections, but courts and BVI legal process take weeks to months to resolve asset access — USDY holders are in legal limbo; secondary market price collapses to deep discount as liquidity evaporates
Risk Profile at a Glance
Overall: C (46/100)
Lower score = safer