Elevated risk — single custodian concentration and centralized governance at $2.64B scale, partially offset by strong regulatory structure, clean track record, and Morgan Stanley Smith Barney custodianship.
Risk Breakdown
Top Risks
Single custodian concentration: all $2.64B in backing assets (US Treasuries, BlackRock iShares ETF, bank deposits) are held by Morgan Stanley Smith Barney LLC. A custodian failure, freeze, or regulatory action against the custodian would prevent USDY redemptions, with no backup custodian arrangement disclosed.
Ondo Finance retains unilateral control over USDY contract upgrades (ProxyAdmin), yield rate setting (monthly), and the allowlist registry. This centralized governance means product parameters can change without holder consent.
USDY is a Regulation S security explicitly prohibited for US persons and residents of several other jurisdictions. A regulatory reclassification, enforcement action against Ondo's BVI issuing entity, or sanctions against the custodian could force product wind-down.
The Chainalysis oracle is queried on every USDY transfer for sanctions screening. If the oracle is unavailable or inaccurately sanctions legitimate addresses, transfers fail; if the oracle is compromised, sanctioned addresses could bypass compliance checks.
Frequently Asked Questions
Is Ondo USDY safe to use?
What are the main risks of using Ondo USDY?
What is Ondo USDY's risk score breakdown?
How does Ondo USDY compare to other RWA protocols?
Has Ondo USDY ever been hacked or exploited?
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.