How Does Paxos Labs Work?
Paxos Labs is a DeFi infrastructure spin-off from Paxos Trust Company, offering the Amplify Stack: white-label stablecoin issuance (Mint), embedded yield (Earn), and DeFi lending (Borrow). Its flagship products include USDG0 — USDG bridged via LayerZero OFT to chains including Hyperliquid — and USAD, a zero-knowledge privacy stablecoin on Aleo. The protocol scored C+ reflecting the very early stage (launched 2025, limited TVL), absence of public smart contract audit reports for the bridge, and centralized control, offset by the strong regulated backing from Paxos Digital Singapore and monthly KPMG reserve attestations for USDG.
TVL
—
Sector
Stablecoin
Risk Grade
C+
Value Grade
B
Core Mechanisms
8.1.1
LayerZero OFT lock-and-mint bridge for USDG0
USDG locked on native chains (Ethereum, Solana, Ink, X Layer) in smart contracts; USDG0 minted 1:1 on destination chains (HyperEVM, Aptos, Plume) via LayerZero OFT standard. Same OFT architecture as USDT0 but with USDG as the source asset.
2.3.2
MAS-regulated fiat-backed stablecoin reserve (USDG)
USDG backed 1:1 by USD deposits, short-duration US government securities, and cash equivalents held at DBS Bank. Issued by Paxos Digital Singapore under MAS supervision. Monthly KPMG attestations. USDG0 inherits all USDG reserve characteristics.
2.1.3
White-label stablecoin issuance infrastructure (Amplify Mint)
API-driven white-label stablecoin issuance allowing partners to issue branded stablecoins backed by USDG, USDC, PYUSD, or USDT. Partners own the brand and capture stablecoin economics. Similar to Stripe's white-label payment infrastructure but for stablecoins.
8.2.3
NovelZero-knowledge privacy stablecoin on Aleo L1 (USAD)
USAD is a USD-backed privacy stablecoin on Aleo's ZK L1, encrypting wallet addresses and transaction amounts via Aleo's proof architecture with selective disclosure for compliance. No comparable production-grade ZK privacy stablecoin exists at institutional scale. Launched October 2025.
7.1.1
Embedded yield infrastructure (Amplify Earn)
SDK allowing fintechs/neobanks to embed yield on idle stablecoin balances via Paxos Labs' managed backend. Hyperbeat (neobank) is live with $510K+ AUM since April 2026. Yield sourced from short-duration money market instruments.
6.1.1
DeFi lending market (Amplify Borrow, Euler v2)
Configurable DeFi credit markets with automated collateral management deployed on HypurrFi (Hyperliquid, built on Euler v2 isolated market architecture). Live pilot as of April 2026; USDG0 is accepted collateral.
How the Pieces Interact
A smart contract exploit in the USDG0 OFT bridge (contracts described as audited but no public report) could enable unbacked USDG0 minting on HyperEVM, Aptos, or Plume. Unlike USDT0 (nine public audits, $6M bounty), USDG0 bridge security is not independently verifiable from public sources.
Regulatory action against Paxos Digital Singapore by MAS (or US regulators via Paxos Trust's OCC charter) could halt USDG minting and restrict redemptions. All Amplify Mint partners issuing USDG-backed stablecoins would simultaneously lose their reserve asset access.
Amplify Borrow on HypurrFi accepts USDG0 as collateral. If USDG0 depegs due to a bridge exploit or USDG reserve issue, USDG0-collateralized positions across HypurrFi become under-collateralized simultaneously, creating a liquidation cascade against thinly-liquid USDG0 markets.
USAD's ZK privacy design could attract regulatory scrutiny under evolving AML frameworks (precedent: Tornado Cash OFAC sanctions, 2022). A regulatory determination that ZK privacy stablecoins require additional licensing could force Paxos Labs to restrict USAD issuance, disrupting partners (Toku payroll) that depend on the privacy mechanism.
What Could Go Wrong
- USDG0 bridge exploit: USDG0 is USDG bridged via LayerZero OFT, with the source USDG locked in smart contracts described as 'audited' but with no public audit reports linked. A bridge exploit could enable unbacked USDG0 minting — the same infinite-mint risk that affected Wormhole and Ronin, with USDG0 contracts not yet independently verifiable.
- MAS regulatory dependency: USDG (the backing for USDG0 and USAD) is issued by Paxos Digital Singapore under Monetary Authority of Singapore supervision. Regulatory action against Paxos Digital Singapore would halt new USDG minting and could restrict redemptions, cascading to USDG0 holders.
- Centralized control: Paxos Labs (incorporated 2025) retains full control over USDG0 smart contract upgrades, Amplify stack configuration, and APY parameters. No DAO governance or timelock disclosed.
- USAD ZK regulatory risk: USAD is a zero-knowledge privacy stablecoin on Aleo — an early-stage product with no published regulatory framework. Privacy tokens have faced regulatory action (Tornado Cash, 2022); USAD faces uncharted compliance risk as it scales.
Unverified Bridge Exploit Drains USDG0 Supply
ModerateTrigger: A smart contract vulnerability in the USDG0 OFT bridge contracts (no public audit verification) allows an attacker to mint USDG0 on HyperEVM without locking USDG on source chains.
- 1.Attacker discovers bug in USDG0 OFT lock or mint contract due to absence of public audit verification — Attacker mints unbacked USDG0 on HyperEVM and immediately deposits into HypurrFi lending market as collateral
- 2.Attacker borrows maximum available assets against inflated USDG0 collateral on HypurrFi — Real assets (ETH, USDC) drained from HypurrFi lending pools via undercollateralized borrow
- 3.Paxos Labs detects unbacked supply and halts USDG0 bridge — Legitimate USDG0 holders on HyperEVM cannot bridge back to USDG on source chains; secondary market USDG0 depegs
Risk Profile at a Glance
Overall: C+ (41/100)
Lower score = safer