Ethena

Delta-neutral mechanics (the basis trade)

USDe is a tokenized cash-and-carry basis trade. For each USDe, Ethena holds ~$1 of long spot collateral and an offsetting short perpetual-futures position, so the net price exposure (delta) is ~zero and the token holds its $1 value through volatility.

• Long leg: LSTs (mostly Lido stETH) and spot BTC, plus stables/USDtb.
• Short leg: perpetual futures on ETH/BTC sized to offset the spot delta.
• If spot falls, the short gains and offsets the spot loss (and vice versa) → peg stability.
• The trade is what hedge funds/market-makers have run for years; Ethena's innovation is packaging it into a transferable token.

Yield sources & sustainability

sUSDe yield is the sum of three streams, net of the protocol's cut. The headline driver is perp funding, which is positive most of the time in bull/neutral markets but turns negative in bear markets — the central risk to the yield (and the reason for the reserve fund).

• Perpetual funding / basis spread on the short legs (the main, most volatile component).
• Staking rewards from LST collateral (e.g. stETH base ~3%).
• Allocation to T-bills / USDtb / stables for a baseline return.
• Funding has averaged ~11% APY across the cycle but ranged from roughly -6% (2022 bear) to +75% (early-2024 bull).
• Only sUSDe earns; raw USDe holders effectively subsidize stakers, boosting the staked yield.

Custody & exchange counterparty model (OES)

Ethena does not deposit collateral directly onto exchanges. It uses Off-Exchange Settlement (OES) providers — institutional custodians that hold assets on-chain while letting the protocol delegate them to exchanges as margin without transferring custody. This caps, but does not remove, exchange-failure loss.

• OES providers: Copper (ClearLoop), Ceffu (MirrorX), and Fireblocks.
• Collateral is mirrored to exchanges as margin; an exchange insolvency does not directly seize the underlying.
• Residual exposure: unsettled PnL/funding owed by an exchange between settlement cycles, plus custodian risk itself.
• Settlement happens on a frequent cadence to minimize the amount 'at risk' on any venue at a time.

Reserve fund & risk management

• Reserve fund $500M+ acts as the backstop for sustained negative funding and to absorb tail losses.
• Collateral can rotate toward USDtb / T-bills when funding is negative, trading yield for stability.
• Reserve-fund RWA allocations were voted on by ENA governance — BlackRock's BUIDL received the largest allocation.
• Key residual risks: prolonged negative funding draining the reserve, exchange/custody failure, LST de-peg, and smart-contract bugs.

Converge chain & ENA ecosystem

Ethena is expanding from an issuer into an ecosystem. ENA is the governance token; sENA (staked ENA) secures forthcoming infrastructure. Converge is a planned EVM/WASM L1 aimed at bridging TradFi and DeFi, secured by a validator network using sENA.

• ENA — governance over collateral assets, risk parameters, and reserve allocations; sENA is its staked form.
• Converge — high-performance EVM chain for institutional + retail access to tokenized assets, secured via sENA (Converge Validator Network).
• Ethereal — an Ethena-aligned DEX in the ecosystem voted on by ENA governance.
• Roadmap themes: institutional iUSDe, payments/neo-bank ambitions, and deeper TradFi distribution.

Architecture

Two integration surfaces. (1) For consumers/protocols, sUSDe is a standard ERC-4626 vault: deposit USDe, receive value-accruing shares, and read the live exchange rate via convertToAssets — this is how Aave/Pendle/Morpho list it as collateral. (2) For market makers, USDe minting/redemption is a permissioned RFQ flow against the Mint & Redeem V2 contract: stream indicative quotes, request a formal quote, then submit an EIP-712-signed order; Ethena uses a last-look architecture with tight quote-validity windows, and only whitelisted benefactor addresses can execute.

Integration shape

Most builders integrate sUSDe (the ERC-4626 token) rather than the mint flow. Holding/earning is permissionless; minting USDe 1:1 is not. The public minting API (public.api.ethena.fi) plus Python/TypeScript SDKs are gated to whitelisted MMs.

API surface

ERC4626.deposit / mint

Stake USDe into the sUSDe vault to receive value-accruing shares.

ERC4626.convertToAssets(shares)

Read the USDe value of sUSDe — the basis for collateral pricing in DeFi.

cooldownShares / cooldownAssets

Begin the ~7-day unstake cooldown before withdrawing USDe.

POST /rfq (minting API)

Whitelisted MMs request a firm mint/redeem quote (pair, side MINT|REDEEM, size, benefactor).

POST /order (minting API)

Submit an EIP-712-signed mint/redeem order referencing the RFQ id (last-look).

Minimal integration

Read the live sUSDe→USDe rate to price it as collateral (permissionless, ERC-4626).

import { createPublicClient, http, parseAbi, parseUnits } from 'viem';
import { mainnet } from 'viem/chains';

const sUSDe = '0x9D39A5DE30e57443BfF2A8307A4256c8797A3497';
const client = createPublicClient({ chain: mainnet, transport: http() });

// 1 sUSDe share -> how many USDe? (rate > 1 and rising as yield accrues)
const usdePerShare = await client.readContract({
  address: sUSDe,
  abi: parseAbi(['function convertToAssets(uint256) view returns (uint256)']),
  functionName: 'convertToAssets',
  args: [parseUnits('1', 18)],
});
// Use this rate to mark sUSDe collateral; staking/unstaking USDe is via deposit() + cooldownShares().

Build notes

• sUSDe is value-accruing (ERC-4626), not rebasing — track the exchange rate, never a fixed 1:1 to USDe.
• Unstaking is not instant: a ~7-day cooldown gates USDe withdrawal; model this in any leverage/liquidation logic.
• Minting USDe is permissioned (whitelisted market makers, RFQ + last-look); typical integrators source USDe/sUSDe on the secondary market instead.
• [verify exact API field names and cooldown duration against the latest docs — these evolve]