A structured framework for evaluating the security, stability, and transparency of a stablecoin before investment or use.
How to Perform Due Diligence on a Stablecoin
Core Due Diligence Principles
Collateral Analysis
Collateral quality and custody are paramount. This involves scrutinizing the assets backing the stablecoin to ensure they are liquid, low-risk, and verifiably held.
- Types: Assess if collateral is fiat cash, commercial paper, cryptocurrencies, or a hybrid.
- Verification: Demand regular, independent attestations or full audits (e.g., USDC's monthly attestations).
- Custody: Confirm assets are held with reputable, regulated custodians, not controlled by a single entity.
- This matters because weak or unverified collateral risks a de-pegging event, as seen with TerraUSD's algorithmic failure.
Issuer & Governance
Evaluating the issuer's credibility and governance structure is critical for long-term stability. A transparent and accountable entity is less likely to engage in risky behavior.
- Entity: Is the issuer a regulated financial institution, a decentralized autonomous organization (DAO), or other?
- Transparency: Look for clear leadership, published policies, and a history of responsible operation.
- Redemption Policy: Understand the clear, legally-binding process for users to redeem the stablecoin for its underlying asset.
- Strong governance, like MakerDAO's community voting on collateral types, builds trust and operational resilience.
Smart Contract & Technical Risk
Code security and upgrade mechanisms form the technical backbone. Vulnerabilities can lead to catastrophic fund losses.
- Audits: Require multiple audits from top firms (e.g., Trail of Bits, OpenZeppelin) with all findings addressed.
- Admin Controls: Scrutinize centralization risks like admin keys that can freeze funds or mint unlimited tokens.
- Battle Testing: Prefer protocols with a long, incident-free track record on mainnet.
- This technical due diligence is essential to avoid exploits like the $190 million Nomad bridge hack, which impacted bridged stablecoins.
Market Liquidity & Peg Stability
Trading volume and peg maintenance mechanisms determine real-world usability and stability. A stablecoin must consistently trade at its peg across various market conditions.
- Liquidity Depth: Analyze 24-hour volume and order book depth on major exchanges to ensure easy entry/exit.
- Stability Mechanisms: Understand the tools used (e.g., arbitrage incentives, on-chain mint/burn, treasury operations) to defend the peg.
- Historical Performance: Review charts for past de-pegging events and the speed of recovery.
- High liquidity, like Tether's on Binance, minimizes slippage and reinforces confidence in the peg during volatility.
Regulatory Compliance
Legal status and regulatory adherence mitigate existential risk. Non-compliant stablecoins face shutdowns or severe restrictions.
- Jurisdiction: Identify the governing legal framework (e.g., NYDFS for Paxos-issued BUSD, EU's MiCA).
- Licenses: Verify the issuer holds appropriate money transmitter, trust, or e-money licenses.
- KYC/AML: Check if the stablecoin enforces know-your-customer and anti-money laundering rules for minting/redemption.
- Compliance ensures operational longevity, as seen when regulators ordered the winding down of BUSD, directly impacting its users.
Step-by-Step Collateral Analysis
A systematic process to verify the backing, transparency, and risk profile of a stablecoin's reserve assets.
Identify and Source Reserve Data
Locate and collect the raw, on-chain and off-chain data that details the stablecoin's collateral holdings.
Detailed Instructions
Begin by identifying the official sources of truth for the stablecoin's collateral attestations and reserve reports. For centralized stablecoins like USDC, this is typically a monthly attestation from a registered accounting firm. For decentralized or algorithmic variants, you must locate the smart contracts holding the assets.
- Sub-step 1: Visit the project's official transparency page. For example, Circle's USDC page provides direct links to attestation reports.
- Sub-step 2: For on-chain reserves, find the canonical custody or vault addresses. For DAI, you would examine the MakerDAO
Vatcore contract to see locked collateral types and amounts. - Sub-step 3: Use a blockchain explorer like Etherscan to verify the holdings of the identified addresses. Check for recent, large inflows or outflows that may indicate minting/burning activity or potential issues.
Tip: Bookmark the relevant Etherscan addresses and attestation URLs for regular monitoring. Be wary of projects that do not provide easily accessible, frequent, and detailed reserve reports.
Analyze Collateral Composition and Quality
Evaluate the types of assets held in reserve and assess their risk characteristics, such as liquidity and creditworthiness.
Detailed Instructions
Scrutinize the asset breakdown within the reserves. High-quality reserves are predominantly composed of cash and cash equivalents (e.g., U.S. Treasury bills) held in regulated institutions. Assess the percentage of riskier assets like commercial paper, corporate bonds, or other cryptocurrencies.
- Sub-step 1: From the attestation report, extract the exact percentages for each asset class. For instance, a report might show "U.S. Treasury Bills: 80%," "Commercial Paper: 15%," "Cash in FDIC-insured banks: 5%."
- Sub-step 2: Evaluate the credit ratings of any debt instruments. Commercial paper should be A-1/P-1 rated. Use resources from Moody's or S&P.
- Sub-step 3: For crypto-backed stablecoins, analyze the collateralization ratio and the volatility of the backing assets. A 150% ratio in ETH is riskier than the same ratio in a basket of blue-chip tokens.
Tip: A high concentration in a single, risky asset class (e.g., >20% in unsecured commercial paper) is a major red flag for de-peg risk.
Verify On-Chain Proofs and Smart Contract Security
Audit the technical mechanisms that control minting, burning, and collateral custody to ensure they are secure and verifiable.
Detailed Instructions
For stablecoins with on-chain components, you must verify the smart contract logic and any proof-of-reserve mechanisms. This involves checking that the circulating supply matches the collateral locked in verifiable contracts.
- Sub-step 1: Obtain the total supply from the stablecoin's contract. For USDT on Ethereum, you would query the
totalSupply()function of the Tether token contract (0xdAC17F958D2ee523a2206206994597C13D831ec7).
code// Example call to get totalSupply via web3.js const supply = await usdtContract.methods.totalSupply().call(); console.log('Total USDT Supply:', supply);
- Sub-step 2: Cross-reference this with the sum of assets in the published reserve addresses. A significant and persistent discrepancy is a critical warning sign.
- Sub-step 3: Review audit reports from firms like Trail of Bits or OpenZeppelin for the core smart contracts. Check if the code is open-source and if there is a bug bounty program.
Tip: Use tools like DeFi Llama's stablecoin pages, which often aggregate this on-chain data and highlight supply/collateral mismatches automatically.
Assess Counterparty and Regulatory Risk
Evaluate the entities managing the reserves and the regulatory environment they operate within.
Detailed Instructions
The safety of the reserves is only as strong as the custodians and issuing entities holding them. This step focuses on counterparty risk and legal structure.
- Sub-step 1: Identify the bank(s) and financial institutions holding the cash and securities. Are they systemically important, well-capitalized banks (e.g., BNY Mellon, State Street) or smaller, less-regulated entities?
- Sub-step 2: Research the legal claims token holders have on the underlying assets. Does the terms of service grant you a direct claim, or are you an unsecured creditor? For example, USDC's terms explicitly state that holders have a proprietary claim to the underlying assets.
- Sub-step 3: Monitor the regulatory stance in the issuer's jurisdiction. Has the issuer received a money transmitter license or similar approval? Are they facing any ongoing litigation or enforcement actions from bodies like the SEC or CFTC?
Tip: The collapse of TerraUSD (UST) highlighted that regulatory scrutiny is often a lagging indicator. Proactive analysis of the issuing entity's transparency and legal commitments is paramount.
Stablecoin Model Risk Comparison
Key due diligence factors for evaluating stablecoin collateral and operational models.
| Risk Factor | USDC (Circle) | DAI (MakerDAO) | USDT (Tether) |
|---|---|---|---|
Primary Collateral Type | Cash & Short-Term U.S. Treasuries | Overcollateralized Crypto Assets (e.g., ETH) | Commercial Paper, Cash, Treasuries |
Monthly Attestation / Audit | Grant Thornton Attestation Report | Public Blockchain Data (Real-time) | BDO Italia Attestation Report |
Regulatory Oversight | Regulated as a Money Transmitter (NYDFS) | Decentralized Autonomous Organization (DAO) | Limited Public Regulatory Clarity |
Redemption Mechanism | Direct 1:1 USD Redemption for Verified Users | Via DAI Savings Rate or Market Swap | 1:1 Redemption for Wholesale Clients ($100k+) |
Transparency of Reserves | Full Reserve Breakdown Published Monthly | Real-time Public Debt Ceilings & Collateral Ratios | Reserve Composition Published Quarterly |
Depeg History (Last 3 Years) | Briefly to $0.97 (March 2023, SVB) | Briefly to $0.96 (March 2020, Black Thursday) | Briefly to $0.95 (May 2022, Terra Collapse) |
Smart Contract Risk | Centralized Upgradeable Contracts | Complex, Audited, Decentralized Contracts | Centralized, Opaque Upgrade Controls |
Due Diligence by Stakeholder
Understanding Stablecoin Basics
Due diligence for a stablecoin is the process of verifying its safety and reliability before using it. A stablecoin aims to maintain a stable value, typically pegged to an asset like the US dollar. Beginners should focus on the fundamentals of how the peg is maintained and who is responsible.
Key Points to Investigate
- Collateral Type: Determine if the stablecoin is backed by cash reserves (like USDC), other cryptocurrencies (like DAI), or uses an algorithmic mechanism (like the former UST). Each has different risks.
- Issuer Transparency: Research the issuing entity (e.g., Circle for USDC, Tether for USDT). Look for regular attestation reports from third-party auditors that confirm the reserves exist.
- Redemption Process: Understand how you can exchange the stablecoin for the underlying asset. A clear, working redemption mechanism is crucial for maintaining trust.
Practical Example
When considering using DAI for savings, you should know it's a decentralized, crypto-collateralized stablecoin managed by MakerDAO. Its value is stabilized through a system of over-collateralized loans and automated smart contracts, not a single company's promise.
Analyzing Peg Stability Mechanisms
A systematic process for evaluating the technical and economic safeguards that maintain a stablecoin's peg to its target asset.
Examine the Collateral Structure
Identify and audit the assets backing the stablecoin to assess risk concentration and quality.
Detailed Instructions
First, determine the collateral type: is it fiat-backed, crypto-backed, algorithmic, or a hybrid? For fiat-backed coins like USDC, verify the attestation reports from independent auditors (e.g., Grant Thornton) which detail the reserve composition. For crypto-backed models like DAI, analyze the collateralization ratio and the types of accepted assets on the protocol's dashboard.
- Sub-step 1: Locate the official reserve reports or smart contract addresses holding collateral. For example, check the USDC reserve attestation at
https://www.centre.io/usdc-transparency. - Sub-step 2: Assess the risk concentration. If over 50% of collateral is in a single asset (e.g., US Treasury bills), consider the liquidity and credit risk of that asset.
- Sub-step 3: For on-chain collateral, use a block explorer to verify holdings. Query the total locked value (TVL) in a Maker Vault:
javascript// Example using ethers.js to get a vault's collateral const collateral = await vaultContract.collateral(); const debt = await vaultContract.debt(); const ratio = (collateral / debt) * 100; console.log(`Collateralization Ratio: ${ratio}%`);
Tip: A healthy, diversified reserve with high-quality, liquid assets significantly reduces peg-breaking risk during market stress.
Analyze the Mint & Redeem Mechanism
Evaluate the user-facing processes for creating and destroying stablecoins, which are primary tools for maintaining the peg.
Detailed Instructions
The mint/redeem mechanism is the primary arbitrage loop that corrects price deviations. You must test the process's accessibility, cost, and speed. A slow or expensive process weakens peg defense. For fiat-backed coins, this involves traditional banking rails; for crypto-backed, it's a smart contract function.
- Sub-step 1: Document the exact steps and requirements to mint 1 stablecoin. For Tether (USDT), this typically requires KYC with a partner and a minimum deposit of $100,000.
- Sub-step 2: Test the redemption process. Note any fees, minimums, and settlement times. For LUSD, redemption is permissionless with a 0.5% fee when LUSD is above peg.
- Sub-step 3: Verify the smart contract logic for minting. Examine the
mintandredeemfunctions in the protocol's source code. Ensure there are no admin functions that can arbitrarily pause redemptions.
solidity// Simplified view of a redeem function function redeem(uint256 stablecoinAmount) external { require(stablecoinAmount >= 1e18, "Min 1.0"); uint256 collateralAmount = stablecoinAmount * oraclePrice(); require(collateralAmount <= collateralBalance, "Insufficient reserves"); _burn(msg.sender, stablecoinAmount); safeTransfer(collateralAsset, msg.sender, collateralAmount); }
Tip: A robust mechanism offers permissionless, 24/7 redemptions at a predictable, low cost, creating a strong incentive for arbitrageurs to correct peg deviations.
Stress-Test the Oracle System
Audit the price feed infrastructure, as inaccurate data is a critical failure point for collateralized and algorithmic stablecoins.
Detailed Instructions
The oracle system provides the definitive price of the stablecoin and its collateral to the protocol. A manipulation or lag here can cause unjust liquidations or incorrect minting. Identify the oracle source (e.g., Chainlink, Uniswap V3 TWAP, internal keeper network) and its security assumptions.
- Sub-step 1: Find the oracle address used by the protocol. For MakerDAO's DAI, the ETH/USD price comes from a medianizer contract aggregating multiple feeds.
- Sub-step 2: Assess oracle robustness. Check the number of independent reporters, update frequency (e.g., every block vs. hourly), and the deviation threshold that triggers an update.
- Sub-step 3: Simulate a potential attack. Calculate the cost to manipulate the price on the underlying DEX for a duration longer than the oracle's heartbeat. For a Uniswap V3 TWAP with a 30-minute window, this requires significant capital.
bash# Example: Querying a Chainlink price feed on Ethereum mainnet cast call 0x5f4eC3Df9cbd43714FE2740f5E3616155c5b8419 \ "latestAnswer()(int256)" --rpc-url $MAINNET_RPC # Returns the latest ETH/USD price in 8 decimals
Tip: Prefer protocols using decentralized, time-weighted (TWAP) oracles with multiple fallback sources. A single-point-of-failure oracle is a high-severity risk.
Model Economic Incentives & Contingencies
Map the stakeholder incentives during peg stress and review the protocol's emergency shutdown procedures.
Detailed Instructions
Understand the economic incentives that align various actors (holders, arbitrageurs, liquidity providers, keepers) to defend the peg. Also, examine the contingency plans or "circuit breakers" for extreme scenarios. This involves analyzing governance parameters and on-chain data.
- Sub-step 1: Identify the profit opportunity for arbitrage. Calculate the spread needed to make redemption profitable after gas fees. For example, if redeeming 100,000 USDC costs $50 in gas, a 0.05% premium is the minimum arbitrage trigger.
- Sub-step 2: Review governance-controlled stability parameters. In MakerDAO, these include the Stability Fee (SF), Debt Ceiling, and Liquidation Ratio. Note who can change them and the voting delay.
- Sub-step 3: Locate and understand the emergency shutdown or pause function. Determine the trigger (e.g., governance vote, multisig) and the process for final settlement. For example, in a shutdown, DAI holders can claim collateral pro-rata.
Tip: A stablecoin with clear, slow-changing parameters and a transparent, multi-sig guarded emergency process is more predictable and secure than one reliant on rapid, discretionary governance.
Critical Red Flags and FAQs
Further Reading and Tools
Ready to Start Building?
Let's bring your Web3 vision to life.
From concept to deployment, ChainScore helps you architect, build, and scale secure blockchain solutions.