DeFi Protocols

Sky (MakerDAO) USDS Vault Minting

Vault-minted stablecoin — deposit ETH, mint USDS. $21B supply. Open question: who is the issuer under GENIUS Act?

Vendors

Sky Protocol · SKY Governance

Compliance Center

Oracle-based liquidation at Authorization. GENIUS Act issuer ambiguity.

D3 — Sky USDS vault minting · Rails: defi · Protocols: Sky Protocol, SKY Governance · Origin: United States — Federal
CTR (USD 10,000+)TRAVEL-RULE (USD 3,000+)ENHANCED-DUE-DILIGENCE (USD 50,000+)
D3 — SKY USDS VAULT MINTINGYOU ARE HERE● User WalletPOLICY⬣ Oracle Collater…CODE Vault Creation …CODE Liquidation Eng…CODE● USDS in Circula…POLICYIntentIdentityDiscoveryNegotiationTransportAuthorizationFacilitationFinalitySTEP 1STEP 2STEP 3STEP 4STEP 5ETHEREUMVisual system: StablecoinAtlas.com · Steps mapped to 8 STP Stages
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L5 APPLICATIONWallet UX, consent, policy engineBank customer channel / issuer app
L4 ACCOUNTBalances, addresses, signing keysCore banking ledger / DDA

Step 1 · User Wallet (Ethereum)Policy-EnforcedBlockchain-Native

The investor's custody account — collateral available, no identity check, permissionless deposit.

User self-custody wallet on Ethereum holds collateral (ETH, WBTC, RWA tokens, etc.) and prepares to lock it in a Sky vault. The protocol is permissionless — no KYC, no whitelist, no identity layer. L4 Account (token balance, approval) and L5 Application (wallet UX, vault interface) are lit. HONESTY MARKER: D1 (Identity) is technically required by GENIUS Act and BSA, but Sky Protocol enforcement is absent. The protocol cannot identify users, cannot freeze addresses. Compliance is structurally absent at the protocol level.

⚠ ENHANCED-DUE-DILIGENCE triggered at USD 50,000 — 31 CFR § 1010.312 — Enhanced Due Diligence (United States — Federal)
Counterparty
Self (user holds keys, no KYC counterparty)
Latency
Instant · no on-chain tx yet
Finality
N/A — vault not yet opened
Vendors
MetaMask / Fireblocks · EOA / ERC-4337
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L3 EXECUTIONSmart contracts, swap / bridge logicClearing & matching engine
◆ Enforcement Line — code-enforced below, policy-enforced above

Step 2 · Oracle Collateral ValuationCode-EnforcedBlockchain-Native

Real-time collateral appraisal — determines how much USDS the vault owner can mint against locked collateral.

Chainlink oracle (primary) + Sky in-house oracle determine collateral value. For ETH vaults, the minimum collateral ratio is enforced at 150%: if collateral drops 40% below entry price, the vault becomes underwater. Oracle price feed is global, code-enforced. L3 Execution layer: smart contract reads oracle, calculates available USDS minting capacity. No jurisdiction sensitivity; oracle is neutral market data.

Counterparty
Chainlink + Sky oracle operators
Latency
2–10 minutes (oracle heartbeat)
Finality
Real-time feed, not finalized
Vendors
Uniswap v4 · Chainalysis OFAC Oracle · Circle CCTP v2
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L4 ACCOUNTBalances, addresses, signing keysCore banking ledger / DDA
L3 EXECUTIONSmart contracts, swap / bridge logicClearing & matching engine
L2 CONSENSUSValidator ordering, block productionRTGS settlement engine
◆ Enforcement Line — code-enforced below, policy-enforced above

Step 3 · Vault Creation & USDS MintCode-EnforcedBlockchain-Native

Vault issuance — collateral is locked, USDS is minted into existence. Stability fee accrues in real time.

User creates a vault smart contract instance, locks collateral (ETH, WBTC, RWA tokens), and mints USDS. The protocol enforces minimum 150% collateral ratio (for ETH) — if user tries to mint more USDS than collateral supports, the transaction reverts. Stability fee (interest rate set by SKY governance) accrues immediately on minted USDS. No human counterparty — user interacts directly with smart contract. HONESTY MARKER: Under GENIUS Act and BSA, who is the 'issuer' of USDS? Sky Protocol has no legal entity. The protocol itself IS the issuer. This is the existential regulatory question for decentralized stablecoins: how do you regulate an issuer that is code?

Counterparty
Sky Protocol (algorithmic issuance, no legal entity)
Latency
1–15 seconds (Ethereum L1)
Finality
Finalized on block confirmation
Vendors
Ethereum PoS Validators · Uniswap v4 · Chainalysis OFAC Oracle · Circle CCTP v2 · EOA / ERC-4337
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L3 EXECUTIONSmart contracts, swap / bridge logicClearing & matching engine
L2 CONSENSUSValidator ordering, block productionRTGS settlement engine
◆ Enforcement Line — code-enforced below, policy-enforced above

Step 4 · Liquidation EngineCode-EnforcedBlockchain-Native

Automated collateral seizure — vault is auctioned if collateral ratio drops below 150%.

Continuous oracle monitoring of collateral ratio. If collateral value drops such that (collateral ÷ USDS debt) < 1.5, the vault is eligible for liquidation. Any liquidator bot can trigger a Dutch auction: the vault's collateral is offered at declining prices until a buyer emerges. Liquidation fee (typically 13% of seized collateral) is deducted; remainder is returned to vault owner. This is permissionless and code-enforced — no discretion, no governance intervention, no human approval. OPEN QUESTION: who bears loss if the liquidation yield is insufficient? Who is liable? No legal framework exists for protocol-level liquidation. This is the existential risk gap in decentralized finance.

⚠ TRAVEL-RULE triggered at USD 3,000 — 31 CFR § 1010.410(f) — Funds Transfer Recordkeeping (United States — Federal)
Counterparty
Liquidator bots (permissionless)
Latency
Seconds to minutes (oracle price update + liquidator execution)
Finality
Finalized on block confirmation
Vendors
Ethereum PoS Validators · Uniswap v4 · Chainalysis OFAC Oracle · Circle CCTP v2
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L5 APPLICATIONWallet UX, consent, policy engineBank customer channel / issuer app
L4 ACCOUNTBalances, addresses, signing keysCore banking ledger / DDA

Step 5 · USDS in CirculationPolicy-EnforcedBlockchain-Native

USDS in the wild — freely transferable, no restrictions, no freeze capability.

Minted USDS is freely transferable to any Ethereum address. Unlike USDC (which Circle can freeze per law enforcement orders), USDS cannot be frozen. This is by design: the protocol has no pause mechanism, no freeze switch. HONESTY MARKER: USDS cannot comply with law enforcement asset freeze orders. This is the core regulatory tension: a stablecoin is only useful if it's truly stable and transferable. But stability requires backing (collateral + liquidation engine), and transferability requires freedom from freeze. Sky chose transferability over compliance. The consequence: USDS is non-compliant with sanctions and asset recovery law. Recordkeeping is the on-chain transaction receipt (D11); no traditional AML alert or CTR filing.

⚠ CTR triggered at USD 10,000 — 31 CFR § 1010.311 — Currency Transaction Report (United States — Federal)
Counterparty
Any Ethereum address (open network)
Latency
Instant on-chain transfer
Finality
Finalized on block confirmation
Vendors
MetaMask / Fireblocks · EOA / ERC-4337

Resolved 5 steps across 1 chain(s). 3 threshold(s) triggered. Frameworks: Bank Secrecy Act, GENIUS Act, OFAC Sanctions Program, FATF Recommendation 16 (Travel Rule), Common Reporting Standard / FATCA.

TOOL 01 · PURPOSE-BUILT vs GENERAL-PURPOSE

Compliance Depth Thesis

Interactive exploration of compliance depth: purpose-built stablechains (Arc, Tempo) vs general-purpose chains (Ethereum, Solana).

ArcCircle · Institutional-grade stablecoin L1 · Malachite BFTA-301 · ARC SECTION CUTCOMPLIANCE DEPTH →L5 APPLICATIONWallets, dApps, UIL4 MIDDLEWAREAPIs, bridges, oraclesL3 EXECUTIONSmart contracts, VML2 CONSENSUSBlock production, finalityL1 NETWORKP2P transport, gossipSTATE CHANGEMalachite BFTPermissioned validatorsT6 · S2Confidential TransfersTEE-shielded amountsT3 · S6EVM ContractsSolidity-compatibleT1 · S7CCTP v2Cross-chain transferT5 · S5Regulatory View KeysSelective disclosureT6 · S2Institutional FXCircle GatewayT2 · S4CIRCLE INFRASTRUCTUREReservesCross-ChainIdentityAccountTokenGate (pre-condition)Monitor (concurrent)Obligation (post-settlement)Solid = code-enforcedDashed = policy-enforced

COMPLIANCE DEPTH THESIS

Arc — Compliance by construction

Circle's Arc embeds compliance mechanisms from L2 Consensus upward. Malachite BFT uses a permissioned validator set — participation requires Circle approval. At L3, confidential transfers shield amounts via TEE while regulatory view keys allow selective disclosure. CCTP v2 at L4 is Circle-native. The result: 4 of 6 blocks are code-enforced, and compliance reaches all the way to the consensus layer.

4CODE-ENFORCED
2POLICY-ENFORCED
L2DEEPEST LAYER
67%CODE RATIO

A-301 · ARC SECTION CUT