Skip to content
PROTOCOL RESEARCH

Global Dollar risk

Regulated, T-bill-backed, par-redeemable Paxos stablecoin now attested monthly by KPMG LLP (ISCA standards), with on-chain admin power verified directly from the source; the real caveats are custodial (Paxos-controlled roles can freeze, wipe and upgrade) and growth that leans on paid distribution.
SolidResearched Jul 14, 2026
watch: Audits & contractsOpen-source and verified on Etherscan (contract name USDG); on-chain layout confirmed as an ERC1967 proxy over a UUPS-upgradeable, diamond/facet implementation. No named third-party smart-contract audit confirmed this run (refresh).
watch: Admin controlAccessControl role model (not Ownable): ASSET_PROTECTION_ROLE freezes/unfreezes/wipes any balance, PAUSE_ROLE pauses all transfers, SUPPLY_CONTROLLER_ROLE mints/burns, and the logic is UUPS-upgradeable under a single timelocked DEFAULT_ADMIN. Disclosed and regulated but real custodial power.
strong: OracleNo oracle in the token itself; the peg is held by 1:1 par redemption through Paxos, not an on-chain price feed.
strong: Liquidity & exitPar redemption for verified Paxos accounts plus deep secondary liquidity across Robinhood, Kraken and OKX; ranked around #28 by market cap (CoinGecko, 2026-07-14).
watch: Yield (real vs emission)Reserve income is real T-bill yield rather than emissions, but it is paid to Global Dollar Network partners as a growth incentive and ordinary on-chain holders earn nothing.
watch: Holder concentrationBalances concentrate at partner venues (Robinhood Chain, exchanges) by design; exact top-holder split not pulled this run (refresh).
strong: Track recordAbout 20 months live with no USDG peg failure or protocol exploit; the Jan 2026 TMX Tribe 'USDG' exploit was an unrelated Arbitrum perps-DEX token. Paxos redeemed BUSD at par after NYDFS ordered it to stop minting in 2023, a clean exit but a regulator-shutdown precedent.
🟢 strong🟡 watch / caveat🔴 weak / fund-loss risk
Verdict is a gate (worst flaw wins), not an average. Our read, not financial advice.
auto-sourced now
TVL
30dflat
Auditsn/a
Last hacknone

DeFiLlama + our exploits feed. Cross-check the dated report against today.

TL;DR

Global Dollar (USDG) is a fiat-backed stablecoin issued by Paxos Digital Singapore under MAS oversight and, in the EU, under MiCA. Each token is meant to be backed 1:1 by cash and short-dated US Treasuries held in segregated, bankruptcy-remote accounts at DBS Bank (primary) and Standard Chartered, with monthly third-party attestations. Since 27 Feb 2026 the attestor is KPMG LLP (Big Four), an upgrade from the smaller Singapore firm Enrome LLP that signed the earlier reports. The peg holds near $1.00 and verified users redeem at par. The real risks here are not smart-contract exploits, they are custodial: Paxos-controlled roles can freeze and even wipe any address, the implementation is upgradeable, and demand is propped up by yield-sharing paid to partners rather than by organic use.

Checklist

Audits & contracts. Open-source and verified on Etherscan (contract name USDG, contracts/stablecoins/USDG.sol). The on-chain layout is an ERC1967 proxy delegating to a UUPS-upgradeable implementation built with a diamond/facet pattern; this was read directly from the verified source, not just asserted. No named third-party smart-contract audit firm was confirmed this run (refresh). Admin control. Heavy and centralized, governed by OpenZeppelin AccessControlDefaultAdminRules (a single DEFAULT_ADMIN_ROLE with a timelocked two-step transfer), not a plain Ownable. An ASSET_PROTECTION_ROLE can freeze, unfreeze and wipe any balance; a PAUSE_ROLE can pause all transfers; a SUPPLY_CONTROLLER_ROLE mints and burns; and the logic is UUPS-upgradeable behind an access-controlled _authorizeUpgrade. Mint and redeem are gated to verified Paxos accounts. This is standard for a regulated stablecoin, but it is genuine custodial power over your tokens.

Freeze / seizure. Unlike PAUSE_ROLE, which halts everyone at once, ASSET_PROTECTION_ROLE is pointed at a single address - a freeze or wipe lands in the transaction that calls it (the contract's timelock covers only handover of DEFAULT_ADMIN, not asset protection), immobilizing your balance while the rest of the token transacts normally - and no USDG freeze is on record to date; whether a Paxos multisig sits behind the role is refresh. Oracle. None in the token. The peg is held by 1:1 par redemption through Paxos, not by an on-chain price feed, so there is no oracle-manipulation surface on the asset itself. Liquidity & exit. Par redemption for verified accounts, deep secondary liquidity across Robinhood, Kraken, OKX and others for everyone else. Around #28 by market cap. Yield (real vs emission). Reserve income is real (T-bill yield), not token emissions, but it is paid to Global Dollar Network partners as a distribution incentive. Ordinary on-chain holders earn nothing, and much of the growth leans on those payments. Holder concentration. Balances concentrate at partner venues (Robinhood Chain, exchanges) by design; the exact top-holder split is refresh. Track record. About 20 months live (Ethereum contract deployed 7 Oct 2024, public launch Nov 2024) with no USDG peg failure or protocol exploit. The Jan 2026 "USDG" TMX Tribe exploit on Arbitrum ($1.4M, 5-6 Jan) hit a different, unrelated perps-DEX internal token, not Paxos Global Dollar. Paxos has run regulated stablecoins for years; NYDFS ordered it to stop minting BUSD in Feb 2023 and BUSD has been redeemed at par since, a clean exit but also a reminder that a regulator can shut a Paxos coin.

Worst case

Under a legal or regulatory order, Paxos freezes and wipes the tokens at an address, or a proxy upgrade changes token behavior. Your protection is that this is a regulated, attested, par-redeemable issuer, not immutable code you can verify. A softer worst case: the yield-sharing incentives get cut, incentive-driven demand contracts, and secondary-market depth thins, though par redemption still anchors the peg for verified holders.

Bottom line

Solid. T-bill reserves, monthly KPMG attestation, MAS and MiCA regulation, and par redemption put the fund-loss surfaces in good shape, and the attestor quality actually improved this year. Price the caveats in: you are trusting Paxos's freeze, seize and upgrade authority, and a growth story that leans on paid distribution rather than organic demand.

Data appendix

  • TVL / circulating: ~$2.89B (DeFiLlama stablecoin 'global-dollar', 2026-07-13, orchestrator-verified). CoinGecko shows ~$3.15B market cap and ~3.15B circulating at rank #28 (2026-07-14), consistent with continued growth; treat the exact figure as source-dependent.
  • Reserves: cash deposits plus short-dated US Treasuries, segregated and bankruptcy-remote; custodians DBS Bank (primary) and Standard Chartered. Exact cash-vs-Treasury percentage from the latest monthly attestation: refresh.
  • Audits / attestation: monthly reserve attestations by KPMG LLP (ISCA standards) for reports posted on or after 27 Feb 2026; earlier reports by Enrome LLP. Named smart-contract audit firm: refresh (the KPMG engagement is a reserve attestation, not a code audit).
  • Admin / governance: issuer Paxos Digital Singapore Pte Ltd (MAS-regulated; MiCA in the EU). On-chain roles (verified): ASSET_PROTECTION_ROLE freeze/unfreeze/wipe; PAUSE_ROLE pause transfers; SUPPLY_CONTROLLER_ROLE mint/burn; governance via AccessControlDefaultAdminRules (single DEFAULT_ADMIN, timelocked transfer); UUPS-upgradeable implementation (diamond/facet), upgrade gated by _authorizeUpgrade. Mint and redeem via verified / institutional Paxos accounts.
  • Oracle: none; par redemption anchors the peg.
  • Peg history: trades roughly $0.9998 (2026-07-14). Aggregator all-time range shows early thin-liquidity ticks (an ATL near $0.9076 on 2024-11-11 launch week and an ATH tick near $1.65 on 2025-01-30); no sustained depeg or reserve failure found.
  • Holder concentration: concentrated at partner venues by design; exact figures refresh.
  • Chains: Ethereum, Solana, Ink, X Layer and Robinhood Chain confirmed via CoinGecko platform list; Hyperliquid L1 announced by Paxos but not in that list (refresh).
  • Recent-news scan (2026-07-13/14): no USDG-specific incident, depeg or reserve issue found. The Jan 2026 TMX Tribe "USDG" exploit is an unrelated token. Growth is driven by Global Dollar Network yield-sharing (partners can receive up to 100% of reserve returns on balances they bring, plus mint and acceptance revenue).

Maintained monthly. Methodology: DeFi Research Instruction v2.

← all protocols