Ethena: Off-Exchange Custody and USDe Hedging

Delegated margin and retained custody

Off-Exchange Settlement (OES) separates the assets that a custodian holds from the margin balance that a derivatives exchange recognizes. Delegation assigns a notional value of backing to support trading at an exchange. The provider continues holding the underlying assets under its custody arrangement. An exchange balance therefore describes usable trading collateral without establishing that the exchange possesses that backing.

A short futures position offsets price exposure in volatile backing assets. Keeping those assets off-exchange lets the protocol access derivatives liquidity while preserving a separate custody relationship. Custodians and exchanges perform different jobs: one safeguards the backing, while the other hosts the hedge and applies its trading rules. Stable backing assets do not require the same directional price hedge, so not every custody allocation corresponds to a short position. The arrangement depends on both sides recognizing the delegated balance correctly. OES providers can also connect the protocol to decentralized venues and over-the-counter counterparties, depending on their integrations.

What remains at risk after an exchange failure?

Unsettled derivatives profits remain exposed to an exchange counterparty between settlement cycles, even when the underlying backing stays with a custodian. Profit accrued on a derivatives position can represent an amount that the exchange owes the protocol. Custody of the original backing and recovery of that additional amount are separate matters.

Exchange-posted collateral at the custodian supports settlement of those obligations. Frequent settlement reduces the amount that can accumulate between cycles. These mechanisms reduce counterparty exposure, while recovery still depends on the applicable collateral arrangements and the custodian’s operational performance.

A failed exchange also interrupts the hedge that it hosts. The protocol may retain its spot backing while needing replacement derivatives exposure elsewhere. Delegating backing to another functioning venue supports that response. Available market depth, margin capacity, and execution conditions determine whether replacement hedging can proceed.

View full-size image

An exchange insolvency and a temporary connectivity outage require different responses. During a connectivity outage, existing orders and positions may remain live even when the system cannot reliably edit them.

Settlement of trading profits, losses, and funding

Settlement moves amounts owed on derivatives positions between the exchange and the custodial arrangement, separately from allocating backing as margin. The direction depends on the trading outcome. Profits owed to the protocol increase assets in custody when paid. Losses require payment from protocol assets. The custody separation does not cancel a valid obligation arising from the hedge.

Funding payments can also pass through this settlement infrastructure. Their direction follows the relevant contract and market conditions; an off-exchange arrangement creates no fixed funding income. Settlement frequency depends on the provider and venue arrangement. A scheduled cycle does not establish a universal processing time during disruption, and an unsettled receivable remains different from assets already received into custody.

View full-size image

Custodian access and legal separation

Custodial availability governs whether the protocol can deposit, withdraw, and delegate backing when its trading or redemption needs change. A provider outage can impede these operations without itself establishing a loss in backing value. Loss of access becomes consequential when the system needs to adjust a hedge or replenish assets available for redemption.

Depositing backing assets with an OES provider does not transfer beneficial ownership of those assets to that provider. The relevant legal and custody structures preserve the protocol’s claim. Copper’s ClearLoop arrangements include a bankruptcy-remote trust designed to separate covered client assets from the custodian’s insolvency estate.

That protection concerns the assets covered by the particular arrangement. Provider identity alone does not establish identical legal terms for every service or venue integration.

Custodian insolvency can still create operational problems during efforts to move assets to alternative providers. Legal separation supports the claim to backing; the protocol also needs cooperation and functioning transfer arrangements. Using several providers limits dependence on any single operator. That diversification helps distribute custody exposure without making all providers interchangeable or removing the work required during an interruption.

Portfolio coordination and margin integrity

The hedging system reconciles portfolio information with exchanges and OES providers so that delegated collateral and derivatives exposure remain consistent. Its off-chain services calculate risk, route orders, and coordinate backing movements with smart contracts. Price information must also remain timely and internally consistent. Outdated market data can trigger suspension of the affected instrument until the feed recovers sufficiently.

Exchanges continue applying maintenance-margin rules to positions supported through OES. Differences between collateral valuation and derivatives valuation can create liquidation risk despite a portfolio’s intended delta neutrality. The protocol can adjust collateral allocations or reduce positions to manage that exposure. Liquidity, contract design, and the exchange’s margin rules affect those choices; custody location does not determine the margin requirement.

Service interruptions and USDe redemption capacity

Partner inconsistencies can interrupt USDe minting and redemption even when assets remain available in custody. The hedging system can quarantine an affected partner and continue where the remaining connections support consistent operations. If it cannot maintain that consistency, minting and redemption may pause until the problem is resolved. Asset existence and immediate redemption capacity therefore describe different conditions, and neither a healthy custody balance nor a working smart contract establishes that every supporting service is available.

Attestations, omnibus wallets, and hedge records

Monthly custodial attestations report the existence, control, and value of backing at their reporting dates. Some custodians expose relevant wallet addresses, while omnibus arrangements combine several clients’ assets. A public balance at such an address cannot identify the protocol’s allocation simply by totaling the tokens that the wallet holds.

Copper and Ceffu use omnibus arrangements whose visible deposit addresses do not represent the complete value of Ethena’s backing. Some visible addresses show initial minting deposits and omit other parts of the protocol’s custodial allocation. Custody accounting and attestations supply information that a wallet total cannot. Derivatives positions require their own records because an asset balance does not reveal hedge size, exchange allocation, or unpaid trading profits. An attestation date matters whenever backing allocations or exchange exposure have changed since that report.

View full-size image