DeFi Protocols

Sky (MakerDAO) USDS Vault Minting

Vault-minted stablecoin — deposit ETH, mint USDS. $21B supply. Open question: who is the issuer under GENIUS Act?

Vendors

Sky Protocol · SKY Governance

Compliance center

Oracle-based liquidation at Authorization. GENIUS Act issuer ambiguity.

deficdpstablecoinskymakerusdsvaultgenius-act-ambiguity
Filter by shape:
|
D3 · DEFISky USDS vault minting·5 stations(2 compliance, 3 infra)·sky
S1INTENTS2S3DISCOVERYS4NEGOTIATIONS5S6AUTHORIZATIONS7FACILITATIONS801Smart Wallet02Oracle Feed03Mint04Liquidation Engine05Smart Wallet
3+5 shape system
GatePre-condition — blocks if it failsMonitorConcurrent — observes without haltingObligationPost-settlement — reports after the factsolid = codedashed = policy
How to read this diagram
Each station on the rail represents a compliance or infrastructure event in the Sky USDS vault minting path. Hover any station to inspect it. The shape tells you what kind of event it is. The ring tells you how it's enforced.
Gate Monitor Obligation| Ingress Crossing Transform Settlement Venue
This path at a glance
5 stations across 5 of 8 segments. 2 are compliance checkpoints, 3 are infrastructure.
3 code-enforced2 policy-enforced
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L5 APPLICATIONWALLET
L4 ACCOUNTWALLET

Step 1 · User Wallet (Ethereum)Policy-Enforced

"The investor's custody account — collateral available, no identity check, permissionless deposit."

User self-custody wallet on Ethereum holds collateral (ETH, WBTC, RWA tokens, etc.) and prepares to lock it in a Sky vault. The protocol is permissionless — no KYC, no whitelist, no identity layer. L4 Account (token balance, approval) and L5 Application (wallet UX, vault interface) are lit. HONESTY MARKER: D1 (Identity) is technically required by GENIUS Act and BSA, but Sky Protocol enforcement is absent. The protocol cannot identify users, cannot freeze addresses. Compliance is structurally absent at the protocol level.

Counterparty
Self (user holds keys, no KYC counterparty)
Latency
Instant · no on-chain tx yet
Finality
N/A — vault not yet opened
Vendors
MetaMask · MetaMask Institutional (ConsenSys-operated; institutional custody/MPC integrations) · Fireblocks · Safe (Gnosis Safe — multisig + module framework) · EOA (secp256k1 externally-owned accounts) + ERC-4337 account abstraction (EntryPoint singleton + UserOperation mempool — paymaster and aggregator extensions) · Securitize LLC (SEC-registered transfer agent; runs Reg D 506(c)(2)(ii) accredited-investor verification workflow) — off-chain compliance function paired with on-chain DS Protocol enforcement · EigenLayer (restaking primitive — slashing-conditional re-pledge of staked ETH and LSTs to Actively Validated Services; compliance-relevant for AVSs that supply oracle / fast-finality / DA security to downstream protocols) · Securitize Markets ATS (SEC-registered ATS) · INX Securities ATS · BlackRock BUIDL · Franklin BENJI · Hashnote USYC · Ondo OUSG · Apollo ACRED (Ethereum mainnet deployments; issuer profiles carry SEC-registered / NYDFS limited-purpose trust / Reg D 506(c) postures detailed in the respective compliance frameworks)
Chain
Ethereum (Ethereum Foundation (protocol research + core-dev grants; protocol itself is permissionless and operated by the validator set))
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L3 EXECUTIONOracle valuation
◆ Enforcement Line — code-enforced at this layer

Step 2 · Oracle Collateral ValuationCode-EnforcedINGESTDETECTALERT

"Real-time collateral appraisal — determines how much USDS the vault owner can mint against locked collateral."

Chainlink oracle (primary) + Sky in-house oracle determine collateral value. For ETH vaults, the minimum collateral ratio is enforced at 150%: if collateral drops 40% below entry price, the vault becomes underwater. Oracle price feed is global, code-enforced. L3 Execution layer: smart contract reads oracle, calculates available USDS minting capacity. No jurisdiction sensitivity; oracle is neutral market data.

Counterparty
Chainlink + Sky oracle operators
Latency
2–10 minutes (oracle heartbeat)
Finality
Real-time feed, not finalized
Vendors
Uniswap v4 (extensible AMM — concentrated liquidity + custom-logic extension framework) · Curve · Balancer · Chainalysis OFAC Oracle (on-chain SDN-list enforcement primitive · code-enforced at the contract layer for opt-in callers) · Circle CCTP v2 (canonical USDC burn-and-mint cross-chain transport) · Wormhole · LayerZero · Across (intent-based settlement) · Securitize DS Protocol (on-chain transfer-restriction smart-contract framework enforcing eligible-investor whitelisting) · ERC-3643 / T-REX (industry-standard permissioned-token framework — Tokeny-developed, used by issuers outside the Securitize stack)
Chain
Ethereum (Ethereum Foundation (protocol research + core-dev grants; protocol itself is permissionless and operated by the validator set))
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L4 ACCOUNTSETTLEMENT
L3 EXECUTIONSETTLEMENT
L2 CONSENSUSSETTLEMENT
◆ Enforcement Line — code-enforced at this layer

Step 3 · Vault Creation & USDS MintCode-Enforced

"Vault issuance — collateral is locked, USDS is minted into existence. Stability fee accrues in real time."

User creates a vault smart contract instance, locks collateral (ETH, WBTC, RWA tokens), and mints USDS. The protocol enforces minimum 150% collateral ratio (for ETH) — if user tries to mint more USDS than collateral supports, the transaction reverts. Stability fee (interest rate set by SKY governance) accrues immediately on minted USDS. No human counterparty — user interacts directly with smart contract. HONESTY MARKER: Under GENIUS Act and BSA, who is the 'issuer' of USDS? Sky Protocol has no legal entity. The protocol itself IS the issuer. This is the existential regulatory question for decentralized stablecoins: how do you regulate an issuer that is code?

Counterparty
Sky Protocol (algorithmic issuance, no legal entity)
Latency
1–15 seconds (Ethereum L1)
Finality
Finalized on block confirmation
Vendors
Ethereum Proof-of-Stake (Beacon Chain — Casper FFG finality + LMD-GHOST fork choice) — permissionless 32-ETH stake threshold; effective validator economics concentrated via Lido / Coinbase / Binance / Kraken / Figment staking pools · MEV-Boost relays (Proposer-Builder Separation — out-of-protocol; OFAC-compliant relays Flashbots / BloXroute Regulated have periodically dominated relay share) · Uniswap v4 (extensible AMM — concentrated liquidity + custom-logic extension framework) · Curve · Balancer · Chainalysis OFAC Oracle (on-chain SDN-list enforcement primitive · code-enforced at the contract layer for opt-in callers) · Circle CCTP v2 (canonical USDC burn-and-mint cross-chain transport) · Wormhole · LayerZero · Across (intent-based settlement) · Securitize DS Protocol (on-chain transfer-restriction smart-contract framework enforcing eligible-investor whitelisting) · ERC-3643 / T-REX (industry-standard permissioned-token framework — Tokeny-developed, used by issuers outside the Securitize stack) · EOA (secp256k1 externally-owned accounts) + ERC-4337 account abstraction (EntryPoint singleton + UserOperation mempool — paymaster and aggregator extensions) · Securitize LLC (SEC-registered transfer agent; runs Reg D 506(c)(2)(ii) accredited-investor verification workflow) — off-chain compliance function paired with on-chain DS Protocol enforcement · EigenLayer (restaking primitive — slashing-conditional re-pledge of staked ETH and LSTs to Actively Validated Services; compliance-relevant for AVSs that supply oracle / fast-finality / DA security to downstream protocols)
Chain
Ethereum (Ethereum Foundation (protocol research + core-dev grants; protocol itself is permissionless and operated by the validator set))
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L3 EXECUTIONLIQUIDATION
L2 CONSENSUSLIQUIDATION
◆ Enforcement Line — code-enforced at this layer

Step 4 · Liquidation EngineCode-EnforcedINGESTDETECTALERT

"Automated collateral seizure — vault is auctioned if collateral ratio drops below 150%."

Continuous oracle monitoring of collateral ratio. If collateral value drops such that (collateral ÷ USDS debt) < 1.5, the vault is eligible for liquidation. Any liquidator bot can trigger a Dutch auction: the vault's collateral is offered at declining prices until a buyer emerges. Liquidation fee (typically 13% of seized collateral) is deducted; remainder is returned to vault owner. This is permissionless and code-enforced — no discretion, no governance intervention, no human approval. OPEN QUESTION: who bears loss if the liquidation yield is insufficient? Who is liable? No legal framework exists for protocol-level liquidation. This is the existential risk gap in decentralized finance.

Counterparty
Liquidator bots (permissionless)
Latency
Seconds to minutes (oracle price update + liquidator execution)
Finality
Finalized on block confirmation
Vendors
Ethereum Proof-of-Stake (Beacon Chain — Casper FFG finality + LMD-GHOST fork choice) — permissionless 32-ETH stake threshold; effective validator economics concentrated via Lido / Coinbase / Binance / Kraken / Figment staking pools · MEV-Boost relays (Proposer-Builder Separation — out-of-protocol; OFAC-compliant relays Flashbots / BloXroute Regulated have periodically dominated relay share) · Uniswap v4 (extensible AMM — concentrated liquidity + custom-logic extension framework) · Curve · Balancer · Chainalysis OFAC Oracle (on-chain SDN-list enforcement primitive · code-enforced at the contract layer for opt-in callers) · Circle CCTP v2 (canonical USDC burn-and-mint cross-chain transport) · Wormhole · LayerZero · Across (intent-based settlement) · Securitize DS Protocol (on-chain transfer-restriction smart-contract framework enforcing eligible-investor whitelisting) · ERC-3643 / T-REX (industry-standard permissioned-token framework — Tokeny-developed, used by issuers outside the Securitize stack)
Chain
Ethereum (Ethereum Foundation (protocol research + core-dev grants; protocol itself is permissionless and operated by the validator set))
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L5 APPLICATIONWALLET
L4 ACCOUNTWALLET

Step 5 · USDS in CirculationPolicy-Enforced

"USDS in the wild — freely transferable, no restrictions, no freeze capability."

Minted USDS is freely transferable to any Ethereum address. Unlike USDC (which Circle can freeze per law enforcement orders), USDS cannot be frozen. This is by design: the protocol has no pause mechanism, no freeze switch. HONESTY MARKER: USDS cannot comply with law enforcement asset freeze orders. This is the core regulatory tension: a stablecoin is only useful if it's truly stable and transferable. But stability requires backing (collateral + liquidation engine), and transferability requires freedom from freeze. Sky chose transferability over compliance. The consequence: USDS is non-compliant with sanctions and asset recovery law. Recordkeeping is the on-chain transaction receipt (D11); no traditional AML alert or CTR filing.

Counterparty
Any Ethereum address (open network)
Latency
Instant on-chain transfer
Finality
Finalized on block confirmation
Vendors
MetaMask · MetaMask Institutional (ConsenSys-operated; institutional custody/MPC integrations) · Fireblocks · Safe (Gnosis Safe — multisig + module framework) · EOA (secp256k1 externally-owned accounts) + ERC-4337 account abstraction (EntryPoint singleton + UserOperation mempool — paymaster and aggregator extensions) · Securitize LLC (SEC-registered transfer agent; runs Reg D 506(c)(2)(ii) accredited-investor verification workflow) — off-chain compliance function paired with on-chain DS Protocol enforcement · EigenLayer (restaking primitive — slashing-conditional re-pledge of staked ETH and LSTs to Actively Validated Services; compliance-relevant for AVSs that supply oracle / fast-finality / DA security to downstream protocols) · Securitize Markets ATS (SEC-registered ATS) · INX Securities ATS · BlackRock BUIDL · Franklin BENJI · Hashnote USYC · Ondo OUSG · Apollo ACRED (Ethereum mainnet deployments; issuer profiles carry SEC-registered / NYDFS limited-purpose trust / Reg D 506(c) postures detailed in the respective compliance frameworks)
Chain
Ethereum (Ethereum Foundation (protocol research + core-dev grants; protocol itself is permissionless and operated by the validator set))

Resolved 5 steps across 1 chain(s). 0 threshold(s) triggered. Frameworks: Common Reporting Standard / FATCA.

Coverage notes: 5 disclosed gap(s).

TOOL 01 · PURPOSE-BUILT vs GENERAL-PURPOSE

Compliance Depth Thesis

Interactive exploration of compliance depth: purpose-built stablechains (Arc, Tempo) vs general-purpose chains (Ethereum, Solana).

ArcCircle · Institutional-grade stablecoin L1 · Malachite BFTA-301 · ARC SECTION CUTCOMPLIANCE DEPTH →L5 APPLICATIONWallets, dApps, UIL4 MIDDLEWAREAPIs, bridges, oraclesL3 EXECUTIONSmart contracts, VML2 CONSENSUSBlock production, finalityL1 NETWORKP2P transport, gossipSTATE CHANGEMalachite BFTPermissioned validatorsT6 · S2Confidential TransfersTEE-shielded amountsT3 · S6EVM ContractsSolidity-compatibleT1 · S7CCTP v2Cross-chain transferT5 · S5Regulatory View KeysSelective disclosureT6 · S2Institutional FXCircle GatewayT2 · S4CIRCLE INFRASTRUCTUREReservesCross-ChainIdentityAccountTokenGate (pre-condition)Monitor (concurrent)Obligation (post-settlement)Solid = code-enforcedDashed = policy-enforced

COMPLIANCE DEPTH THESIS

Arc — Compliance by construction

Circle's Arc embeds compliance mechanisms from L2 Consensus upward. Malachite BFT uses a permissioned validator set — participation requires Circle approval. At L3, confidential transfers shield amounts via TEE while regulatory view keys allow selective disclosure. CCTP v2 at L4 is Circle-native. The result: 4 of 6 blocks are code-enforced, and compliance reaches all the way to the consensus layer.

4CODE-ENFORCED
2POLICY-ENFORCED
L2DEEPEST LAYER
67%CODE RATIO

A-301 · ARC SECTION CUT

Other DeFi Protocols Paths

SETTLEMENT CHAINS