Skip to main content

Stablecoin Risk Management: A Framework

Stablecoin risk management explained: credit, counterparty, custody, settlement, and orchestration risk surfaces institutions hedge in a $315B market.

Written by Eco


Stablecoin risk management is the discipline of measuring and hedging credit, market, operational, and settlement exposures across tokenized dollar instruments. The global stablecoin market reached $315.3B in supply by June 2026 (DeFiLlama), with USDT at $187.2B and USDC at $75.6B, and that scale has pulled the asset class inside the same risk frameworks that govern money market funds, repo, and payment systems. Treasurers at asset managers, payment companies, and tokenization issuers now apply familiar TradFi lenses, including CPMI-IOSCO Principles for Financial Market Infrastructures, FSB recommendations, and Federal Reserve financial stability analysis, to instruments that clear and settle onchain.

This piece maps the four primary risk surfaces, examines how institutions actually hedge de-peg exposure, and proposes a working risk matrix that a corporate treasury or asset manager can monitor weekly. It treats stablecoins as financial instruments inside a maturing market structure rather than as crypto curiosities.

What are the four risk surfaces in stablecoin markets?

The four risk surfaces in stablecoin markets are credit, market, operational, and settlement. Credit risk addresses reserve quality and issuer solvency. Market risk addresses de-peg events and liquidity depth. Operational risk addresses custody, key management, and smart-contract behavior. Settlement risk addresses finality, orchestration, and cross-chain transport. Each surface maps to an existing TradFi discipline.

The framing follows the CPMI-IOSCO guidance on stablecoin arrangements published in July 2022, which extended the Principles for Financial Market Infrastructures to systemically important stablecoin arrangements. The same surfaces appear, with different weights, in the FSB final recommendations on global stablecoin arrangements.

The institutional reading is that a stablecoin combines features of a money market fund (a reserve claim), a payment instrument (a transfer rail), and a market infrastructure (settlement venue). Risk on any of those layers can transmit to the others. A reserve disclosure event becomes a price event becomes a liquidity event within minutes onchain.

Credit and reserve risk: what backs the float?

Credit and reserve risk is the exposure to the asset pool sitting behind a stablecoin. Holders are unsecured creditors of the issuer in most jurisdictions, with claim quality driven by reserve composition, segregation, and custody. Treasury bills, reverse repo, and bank deposits each carry different liquidity and counterparty characteristics. Disclosure cadence and attestation scope determine how quickly a treasurer can verify cover.

Tether reports its reserve composition on the Tether transparency page, with the bulk of USDT backing in US Treasury exposure custodied via Cantor Fitzgerald. Circle publishes weekly composition for USDC on its Circle transparency page, with reserves split between short-duration Treasuries in the Circle Reserve Fund and cash at regulated banks including BNY Mellon. PayPal PYUSD and Ripple RLUSD follow similar Treasury-and-cash structures with their own custodial chains.

Tokenized money market shares add a different credit profile. BlackRock's BUIDL reached $3.0B in assets under management by June 2026, structured as a regulated fund interest rather than an issuer liability. Ethena's USDe, at $4.5B supply (DeFiLlama, June 2026), takes yet another shape, with cover provided through delta-neutral hedges on perpetual futures and staked ether collateral, exposing holders to funding-rate and exchange counterparty risk rather than only T-bill yield. A treasurer choosing among USDC, BUIDL, and USDe is choosing between three distinct credit structures, not three flavors of the same instrument.

Counterparty and custody risk: who holds the keys?

Counterparty and custody risk is the exposure that arises when reserves sit with banks, brokers, and custodians, and when issued tokens sit in wallets controlled by institutions or qualified custodians. Bank failure, custodian insolvency, key compromise, and operator error each sit inside this surface. The risk is bilateral on the reserve side and operational on the token side.

The March 2023 USDC depeg is the canonical case study. USDC traded as low as $0.87 on March 11, 2023 after Circle disclosed $3.3B of reserve deposits at Silicon Valley Bank. The bank entered FDIC receivership the same weekend. The peg recovered after the Federal Reserve and Treasury invoked the systemic risk exception, but the episode showed how a single banking counterparty can transmit stress to a payment instrument used by millions. The Fed FEDS Notes on stablecoin financial stability risks published in April 2023 catalogs the channels.

On the token side, qualified custodians including BNY Mellon, State Street, Fireblocks, and Anchorage operate the cold storage and policy controls that institutions require. The relevant questions are whether segregation is bankruptcy-remote, whether the custodian carries insurance and SOC 2 attestations, and whether withdrawal policy can be enforced through multi-party authorization. Cantor Fitzgerald's role as primary T-bill custodian for Tether sits on this same surface: a single broker-dealer relationship intermediates a large share of USDT cover.

How do institutions hedge de-peg risk in practice?

Institutions hedge de-peg risk through reserve diversification, basis monitoring, prefunded liquidity facilities, and onchain options or swap structures. The goal is not to eliminate de-peg probability, which is path-dependent and headline-driven, but to bound loss given de-peg and shorten the window between signal and action. Most institutional desks operate a written de-peg playbook.

Reserve diversification is the first lever. A treasury holding only USDC carries undiversified bank and issuer exposure. Splitting balances across USDC, USDT, PYUSD, and a tokenized money market fund such as BUIDL spreads issuer credit, banking counterparty, and reserve composition. The ECB Macroprudential Bulletin on stablecoins from July 2024 frames concentration as a primary systemic concern.

Basis monitoring sits on top of diversification. Institutional dashboards track the spread between each stablecoin and a synthetic dollar reference, the depth of secondary venues, primary mint and redemption queues, and the implied funding cost of holding one stablecoin versus another. A widening primary-secondary spread is often the first observable signal. Onchain options markets on Aave V3, which holds $11.6B TVL with much of it stablecoin collateral (DeFiLlama, June 2026), and OTC options from regulated desks provide instruments to cap downside. Prefunded redemption access through primary mint channels at the issuer is the cleanest hedge for any holder large enough to qualify.

Operational and orchestration risk: bridges and routers

Operational and orchestration risk is the exposure that arises when stablecoins move across chains, through bridges, and via routers and aggregators. Smart-contract bugs, oracle manipulation, sequencer halts, and bridge compromises sit on this surface, alongside the orchestration logic that selects routes and venues. Operational risk on the token is distinct from operational risk on the rail.

The asset has fragmented across chains. Ethereum holds $37.1B in TVL, with substantial USDC and USDT float; Tron carries large USDT supply; Base, Arbitrum, Solana, and BSC each host material stablecoin inventory (DeFiLlama, June 2026). Moving a dollar from one chain to another requires either a native issuer mechanism, such as Circle's CCTP, or a third-party bridge such as LayerZero or Wormhole. Each transport choice carries different trust assumptions, validator sets, and historical incident records. The IOSCO policy recommendations for crypto and digital asset markets treat these arrangements as financial market infrastructures and recommend governance, segregation, and resilience standards.

Orchestration risk is the newer category. As stablecoin flows route through aggregators, the layer that chooses paths, sources liquidity, and routes settlement becomes a material risk surface itself. A neutral orchestration layer that combines primary mint access, onchain liquidity, and offchain RFQ inventory consolidates that risk explicitly rather than leaving it implicit across a dozen integrations. Eco is building toward that neutral aggregator position, with the operational goal of giving institutions one integration across markets rather than twelve.

Settlement and finality risk under PFMI

Settlement and finality risk is the exposure to incomplete, reversed, or delayed settlement of a stablecoin transfer. The PFMI framework treats settlement finality as a foundational property of a financial market infrastructure. Onchain, finality is probabilistic on some chains and economic on others, and the legal status of finality varies by jurisdiction. The CPMI-IOSCO extension applies the same standard to systemic stablecoin arrangements.

Different chains offer different finality models. Ethereum reaches economic finality after roughly two epochs, around 12.8 minutes, under Casper FFG. Solana finalizes faster but with different validator dynamics. Layer 2 rollups inherit Ethereum finality after a challenge or proving window. Each window is a settlement risk a treasurer must price. The CPMI-IOSCO guidance explicitly addresses settlement finality as a principle that applies to stablecoin arrangements used at scale.

Cross-chain settlement compounds the problem. A USDC transfer from Ethereum to Base via CCTP burns on origin and mints on destination, with a window between the two states. During that window, the holder has neither asset, only a claim. Best-execution analytics, the discipline borrowed from equities and FX, applies here: an institution should be able to demonstrate that the routing and settlement path it chose produced the best available outcome on cost, time, and counterparty exposure, with auditable evidence.

Regulatory risk after GENIUS: capital and disclosure

Regulatory risk for stablecoin issuers and institutional holders is the exposure to capital, disclosure, segregation, and licensing requirements that change market structure. The US GENIUS Act, the EU MiCA regime, and parallel work in the UK, Singapore, and Hong Kong have shifted the operating model toward bank-like reserve and reporting standards. The change is structural, not cosmetic.

The GENIUS Act (S.1582) text on congress.gov sets a federal framework for payment stablecoin issuers in the United States, with reserve composition, segregation, and disclosure requirements layered on top of state or federal charters. Issuers must hold one-to-one reserves in cash and short-dated Treasuries, segregate reserves from operating funds, and publish monthly composition with annual audited financials. Holders gain a clearer claim hierarchy in resolution, which reduces credit risk but raises operational requirements for issuers.

For institutional holders, the regulatory picture changes a familiar set of questions. Is the issuer chartered or licensed in a jurisdiction whose regime the holder can rely on? Are reserves bankruptcy-remote and identifiable? Does the issuer support primary redemption at par for institutional counterparties? Does the disclosure cadence match the holder's own risk reporting? The answers determine which stablecoins are eligible for which use cases, and the matrix differs across treasury, payments, and tokenization desks.

The institutional stablecoin risk matrix

An institutional stablecoin risk matrix scores each instrument across the four risk surfaces and the regulatory overlay. The output is not a single rating. It is a multidimensional view that lets a treasurer or portfolio manager allocate by use case, with explicit budgets for each exposure. The matrix is the working document, updated as disclosures and market data refresh.

The table below sketches a comparison across major instruments. It uses descriptive categories only and does not represent an investment view on any issuer.

Instrument

Issuer / Structure

Reserve composition

Primary custodian

Disclosure cadence

Notable risk surface

USDT

Tether, offshore issuer

T-bills, repo, cash, secured loans, other

Cantor Fitzgerald (T-bills)

Quarterly attestation

Issuer disclosure scope and offshore venue

USDC

Circle, US regulated

Short-duration Treasuries, bank cash

BNY Mellon, State Street custodial chain

Monthly attestation, weekly composition

Banking counterparty (per March 2023)

PYUSD

Paxos for PayPal, NYDFS

T-bills, reverse repo, cash

NYDFS-supervised custody

Monthly attestation

Distribution concentration in PayPal channels

RLUSD

Ripple, NYDFS

T-bills, cash, cash equivalents

NYDFS-supervised custody

Monthly attestation

Newer instrument, supply at $1.7B

USDS / DAI

Sky protocol, onchain CDP

Mixed: USDC, RWAs, crypto collateral

Smart contracts and RWA vaults

Onchain, continuous

Collateral mix and protocol governance

BUIDL

BlackRock, regulated fund

US Treasuries, repo, cash

BNY Mellon, regulated custodians

Fund-level reporting

Fund share, not payment instrument

USDe

Ethena, synthetic

Staked ETH plus short perp hedges

Custodians plus exchange margin

Onchain dashboards

Funding rate and exchange counterparty

The matrix shows why use case drives selection. A payments treasury optimizing for redemption depth and bank-grade disclosure leans toward USDC and PYUSD. A yield-aware allocator with longer holding periods may overweight BUIDL. A delta-neutral basis allocator may hold USDe, with full understanding of the funding exposure. None of these are interchangeable choices.

What should treasurers monitor weekly?

Treasurers should monitor reserve disclosures, supply changes, primary redemption queues, secondary market depth and basis, custodian and bank counterparty signals, regulatory filings, and orchestration incidents on a weekly cadence. The list mirrors the risk matrix and turns it into a dashboard. A live workflow shortens the lag between event and action, which is the single largest driver of de-peg loss outcomes.

A working weekly checklist includes the following items.

  • Reserve disclosures and attestation updates from Tether, Circle, Paxos, BlackRock, Sky, and any other held issuer, sourced from each issuer's transparency page.

  • Supply changes across the top fifteen stablecoins, with attention to large mints and burns that often precede market events. The DeFiLlama stablecoin dashboard and Artemis stablecoin flows dashboard are common sources.

  • Primary mint and redemption queue depth at each issuer, where institutional access is available.

  • Secondary market depth and basis across major venues, including CEX and onchain pools. The Dune stablecoin analytics notebooks are useful for pool-level visibility.

  • Banking and custodian counterparty signals, including credit spreads, earnings calls, and regulatory actions affecting BNY Mellon, State Street, Cantor Fitzgerald, and any other custodian in the chain.

  • Regulatory filings and rulemaking under GENIUS, MiCA, and parallel regimes, including any change in capital, segregation, or disclosure standards.

  • Orchestration and bridge incidents, including CCTP, LayerZero, Wormhole, and any router or aggregator in the institution's path.

The discipline is borrowed from money market and repo treasury workflows. Stablecoins behave like short-duration cash-equivalent instruments with a payments overlay, and they deserve the same monitoring rigor.

Eco's role in stablecoin risk management

Eco operates as a neutral orchestration platform across stablecoin issuers and chains. The role in risk management is to consolidate primary mint access, onchain liquidity, and offchain RFQ inventory into one integration, so that institutions can hedge and rebalance without managing twelve separate counterparty relationships. Eco is a platform, not a market maker, and does not take principal risk on the instruments it routes.

The institutional outcome is efficiency on the operational surface and best-execution evidence on the settlement surface. By centralizing route selection and producing auditable cost analytics, an orchestration layer makes it easier for treasurers and portfolio managers to apply the risk matrix above in live workflows. Eco is building toward a published stablecoin reference rate that would let allocators compare execution against a transparent benchmark, in the same way TradFi desks reference SOFR or WMR fixings. The category is forming and the operational standards with it.

Methodology

Stablecoin supplies and market caps in this article use the DeFiLlama snapshot dated June 5, 2026, with Total stablecoin supply at $315.3B, USDT at $187.2B, USDC at $75.6B, USDe at $4.5B, and BUIDL at $3.0B. Aave V3 TVL at $11.6B is from the same DeFiLlama snapshot. The USDC depeg episode references the March 11, 2023 trough at $0.87 following disclosure of $3.3B in Circle reserves at Silicon Valley Bank. The TerraUSD collapse references the May 9 to May 13, 2022 window, during which approximately $40B in market cap was lost. BUIDL AUM of $3.0B is as of June 2026. Regulatory references include CPMI-IOSCO (July 2022), FSB final recommendations (July 2023), IOSCO crypto policy recommendations, Fed FEDS Notes (April 2023), ECB Macroprudential Bulletin (July 2024), and the GENIUS Act (S.1582). All figures are point-in-time and should be refreshed against primary sources before use in production risk reporting.

Related reading

Did this answer your question?