Skip to content
PROTOCOL RESEARCH

Ondo USDY risk

Tokenized US Treasury note from a bankruptcy-remote SPV with Ankura Trust as collateral agent, 105.45% collateralisation and a deep audit roster - the credit side is about as clean as this category gets. It gates to caution on control and access rather than credit: the token contract is a verified upgradeable proxy, every transfer checks allowlist, blocklist and sanctions contracts, Ondo used that freeze power in April 2026, buyers must be non-US and cannot transfer for 40 days after purchase.
CautionResearched Jul 26, 2026

Scorecard

strong: Audits & contractsUnusually deep roster for the category, taken from Ondo's own audits page: Spearbit (Mar 2025), Halborn (Feb 2025), Code4rena (Apr 2024, Sep 2023, Jan 2023), Cyfrin (Apr 2024), Zokyo (Aug 2023), Nethermind (Apr 2023) on Ondo Funds and USDY, plus Halborn (Jun-Jul 2024) for the Noble deployment. A bug bounty exists and Ondo says it expanded the reward levels after the March-April 2026 wave of third-party exploits.
watch: Admin controlVerified directly on-chain this run: USDY at 0x96f6ef951840721adbf46ac996b59e0235cb985c is a TokenProxy over OpenZeppelin TransparentUpgradeableProxy (Etherscan Proxy flag 1, implementation 0xea0f7eebdc2ae40edfe33bf03d332f8a7f617528), so an admin can call upgradeTo and changeAdmin. Transfers are gated by external allowlist, blocklist and sanctions-list contracts, and that power is not theoretical: Ondo froze the Drift attacker's address in April 2026, by its own account the only RWA issuer to do so. Whether the proxy admin is a multisig and whether any timelock sits in front of it: refresh.
strong: OracleNo oracle in the token's own mint or redeem path - value comes from the note's accrual and the issuer's daily NAV reporting, not an on-chain feed. DeFi venues that list USDY take on their own price-feed risk, which is theirs and not the issuer's.
watch: Liquidity & exitDaily subscriptions and redemptions, and Ondo advertises 24/7 mint and redeem including weekends. Two real constraints: a 40-day holding period before a newly minted position can be transferred at all, and eligibility limited to non-US persons who clear KYC/AML, so a US-resident subscriber cannot use it. Entry minimum is low for the category at about 50 dollars.
strong: Yield (real vs emission)Real Treasury income, no token emissions: 3.55% APY quoted against a 3.81% portfolio yield-to-maturity on 98.66% US Treasuries. rUSDY is a separate rebasing wrapper that holds a 1 dollar unit price and pays the same yield as new units instead of price accrual.
watch: Holder concentrationNot pulled this run: refresh. Two composition lines are worth watching instead. 0.12% (about 2.5M dollars) sits in Silicon Valley Bank deposits, a small but named uninsured-bank exposure of exactly the kind that broke USDC's peg in March 2023. And 1.23% (about 26.6M dollars) is labelled 'Ondo Stocks issued USDY' - a related-party line whose meaning Ondo does not explain on the page: refresh.
strong: Track recordLive since 2023 with 2.13B dollars of USDY outstanding against 2.17B of assets, 105.45% collateralised as of 2026-07-23, and no peg failure, halt or exploit found. The SEC opened an investigation in October 2023 into whether Ondo's tokenised Treasuries and the ONDO token complied with securities law and closed it without charges. Through the March-April 2026 exploit wave that hit Resolv, Drift and Kelp, Ondo's USDY bridges did not pause.
🟢 strong🟡 watch / caveat🔴 weak / fund-loss risk
Verdict is a gate (worst flaw wins), not an average. Our read, not financial advice.

Live facts

auto-sourced now
TVL—
30dflat
Auditsn/a
Last hacknone

DeFiLlama + our exploits feed. Cross-check the dated report against today.

TL;DR

USDY is not a stablecoin and reading its price as a peg is a mistake: it is senior secured debt issued by Ondo USDY LLC, a US special-purpose vehicle, and the yield accrues into the token price, which sat at about 1.14 dollars on 2026-07-26. The same shape as reUSD in our own coverage - above a dollar by design, not broken.

On credit this is close to the top of the tokenised-Treasury category. 98.66% of the portfolio is US Treasuries, collateralisation is 105.45%, Ankura Trust acts as verification and collateral agent publishing daily reports, the issuer is structured for bankruptcy-remoteness with an independent director, and the smart-contract audit roster is deeper than most protocols twice its age.

It still gates to caution, and the reason is control and access rather than solvency. We verified on-chain that the token is an upgradeable transparent proxy, and that every transfer consults allowlist, blocklist and sanctions contracts. In April 2026 Ondo used that authority to freeze the Drift attacker's address - useful, and simultaneously a demonstration that a named party can freeze a holder. On top of that, US persons cannot buy it at all, and a fresh position cannot be transferred for 40 days.

Checklist

  • Can I use it? Only if you are not a US person and you clear KYC/AML. Entry from about 50 dollars.
  • Can I get out? Daily redemptions with the issuer, and Ondo advertises 24/7 mint and redeem. But not for the first 40 days after purchase - the position is untransferable in that window.
  • What actually backs it? 98.66% US Treasuries, 0.12% Silicon Valley Bank deposits, 1.23% an unexplained 'Ondo Stocks issued USDY' line, the rest cash equivalents. 105.45% collateralised.
  • Who can stop me? Ondo, via the blocklist and sanctions checks that run on every transfer, and via a proxy upgrade. This has been exercised once, against an attacker. The power is address-level rather than a protocol-wide pause - a blocklist entry stops one holder's balance while everyone else keeps transferring normally - and no multisig or timelock has been confirmed in front of it: refresh.
  • Is the yield real? Yes. 3.55% APY out of a 3.81% Treasury yield-to-maturity. No emissions anywhere.
  • Is the price supposed to be 1 dollar? No. Use rUSDY if you want a 1 dollar unit that rebases instead.

Worst case

The tail is not a bank run on Treasuries; it is administrative. The proxy admin key, whose owner and timelock we could not verify, pushes a malicious or buggy implementation and the token's transfer logic changes underneath holders. A softer and more likely version: your address ends up on the blocklist through error, sanctions-list overreach or a compliance dispute, and the position becomes untransferable while the SPV keeps accruing yield you cannot reach. Redemption then runs through Ondo's process, not through code you control.

The credit tail is small but not zero. The Silicon Valley Bank deposit line is only 0.12%, yet March 2023 showed that an uninsured bank deposit inside an otherwise-Treasury reserve is exactly where a peg breaks first. A structural tail sits in the 40-day transfer lock: if something goes wrong in your first month, you hold an instrument you cannot sell to anyone.

Bottom line

Caution, and a comfortable one. If you are a non-US holder who wants Treasury yield on-chain, this is a well-built instrument with real oversight and honest reporting, and our reservation is not about whether the assets are there. It is that a low-risk label should not hide a freeze switch that has been used, an upgradeable contract whose admin we could not name, and a 40-day window where you cannot leave. Size it as a cash-management position, not as a stablecoin, and know that Ondo can act on your balance.

Data appendix

  • Token: USDY, Ethereum 0x96f6ef951840721adbf46ac996b59e0235cb985c (verified TokenProxy, TransparentUpgradeableProxy, implementation 0xea0f7eebdc2ae40edfe33bf03d332f8a7f617528, read via Etherscan 2026-07-26). Also on Mantle, Solana, Sui, Aptos, Noble, Arbitrum, Stellar, Sei and BNB Chain per Ondo's product page.
  • Manager contract: 0x25A103A1D6AeC5967c1A4fe2039cdc514886b97e (Ondo Finance: USDY Manager, Etherscan label).
  • Size: 2.13B dollars USDY outstanding, 2.17B dollars underlying assets, 105.45% collateralisation, portfolio dated 2026-07-23 (ondo.finance/usdy). DeFiLlama peggedAssets listed 2.16B dollars supply at 1.1375 dollars on 2026-07-26; the DeFiLlama protocol entry ondo-yield-assets (2.57B dollars) covers USDY plus OUSG, and the ondo-finance parent (3.51B dollars) covers the whole business - neither is USDY's own size.
  • Price: 1.1407 dollars (issuer page) / 1.1375 dollars (DeFiLlama), same day.
  • Yield: 3.55% APY quoted, 3.81% portfolio yield-to-maturity.
  • Issuer: Ondo USDY LLC, US-domiciled SPV, board including an independent director, structured for bankruptcy-remoteness. Ankura Trust serves as verification agent and collateral agent with daily reporting.
  • Eligibility: non-US individuals and organisations, KYC/AML required, 40-day transfer restriction after purchase, minimum around 50 dollars.
  • Audits: Spearbit Mar 2025, Halborn Feb 2025, Code4rena Apr 2024 / Sep 2023 / Jan 2023, Cyfrin Apr 2024, Zokyo Aug 2023, Nethermind Apr 2023 (Ondo Funds and USDY, Ethereum); Halborn Jun 2024 and Jul 2024 (Noble). Source: docs.ondo.finance/audits.
  • Regulatory: SEC investigation opened October 2023, closed without charges (reported 2026).
  • Not verified this run: proxy admin identity and timelock, holder concentration, custodian names for the Treasury and deposit legs, the meaning of the 'Ondo Stocks issued USDY' reserve line. All refresh.
  • Ticker note: USDY here is Ondo's US Dollar Yield token. Do not confuse it with the January 2026 'USDG' exploit, which was TMX Tribe's unrelated Arbitrum perps token - see our Global Dollar report for that disambiguation.

← all protocols