The five risk categories
Most risk teams new to stablecoins over-index on one or two dimensions (usually depeg and smart contract) and miss the operational risks that actually cause losses. A complete framework covers:
- Issuer risk. The issuer fails, reserves are impaired, redemption is blocked.
- Depeg risk. The token trades away from par, even temporarily.
- Chain risk. The underlying blockchain fails, reorgs, censors, or halts.
- Smart contract risk. The token contract or protocol is exploited.
- Counterparty risk. Your VASP, custodian, ramp, or liquidity provider fails.
Each needs its own quantification, its own limits, and its own monitoring.
1. Issuer risk
What it is
The risk that the entity issuing the stablecoin cannot or will not honor redemption. This is analogous to money market fund sponsor risk or bank counterparty risk, and is the most material risk on a dollar-weighted basis.
Historical incidents
- USDC (March 2023). Circle held ~$3.3B of USDC reserves at Silicon Valley Bank. When SVB failed, USDC briefly depegged to $0.88 before recovery. No permanent loss, but a real 48-hour exposure event.
- Various smaller issuers have failed entirely over the past five years.
Mitigations
- Diversify across issuers with different reserve banks and jurisdictions.
- Set concentration limits (e.g., no single issuer greater than 40% of stablecoin holdings, no single reserve bank greater than 20%).
- Monitor reserve composition and custodian quality quarterly.
- Maintain redemption-tested relationships with primary issuers.
2. Depeg risk
What it is
The token trades below (or above) its $1 peg in secondary markets, even if redemption remains intact. For an institution marking positions to market, even a 24-hour 2% depeg on a $50M position is a $1M unrealized loss.
Historical calibration
- Top-tier fiat-backed stablecoins: sub-10 bps during normal markets, 50-100 bps during stress, worst recorded ~12% (USDC March 2023).
- Algorithmic stablecoins: catastrophic failure modes. TerraUSD collapsed from $1 to pennies in under a week in May 2022. Do not include in institutional frameworks.
Mitigations
- Real-time depeg alerts on all held positions.
- Pre-defined escalation thresholds (e.g., 25 bps = monitor, 50 bps = reduce, 100 bps = redeem).
- Hedging via perpetual or basis trades for significant exposure.
- Liquidity for rapid conversion to alternate stablecoins or fiat.
3. Chain risk
What it is
The underlying blockchain on which the stablecoin lives experiences failure, reorg, censorship, or extended outage. Your position does not disappear, but it may become inaccessible or temporarily unsettled.
Calibration by chain (early 2026)
| Chain | Maturity | Notable incidents | Institutional posture |
|---|---|---|---|
| Ethereum | Very high | No major reorg in 3+ years | Primary settlement venue |
| Tron | High | Occasional network congestion | Secondary venue, strong for USDT |
| Polygon | High | Periodic validator issues resolved quickly | Lower-cost settlement layer |
Mitigations
- Multi-chain capability, operational fallback to a secondary chain.
- Finality awareness: confirm appropriate block depth before crediting funds.
- Contingency procedures for extended chain halts.
4. Smart contract risk
What it is
Two distinct sub-risks, often conflated:
- Token contract risk. The stablecoin contract itself has a vulnerability. Extremely rare for top-tier issuers whose contracts are widely audited and battle-tested for years.
- Protocol risk. If your flows use DeFi protocols for routing or liquidity (Curve, Uniswap, AMMs), those protocols carry their own exploit risk.
Mitigations
- Use only stablecoin contracts with multi-year production history.
- For routing via on-chain pools, prefer immutable, non-upgradeable, battle-tested contracts.
- Limit exposure through any single protocol; set protocol concentration caps.
- Monitor audit feeds and vulnerability disclosures.
5. Counterparty risk
What it is
The operational partners in your stack can fail: your VASP, custodian, on-ramp, off-ramp, or liquidity provider. This is the most under-modeled risk because it feels procedural, but it is where most real operational losses occur.
Mitigations
- Full counterparty due diligence analogous to your bank counterparty review.
- Redundancy: at least two VASPs or ramp providers per major corridor.
- Segregated client asset structures where possible.
- Contractual SLAs with financial penalties for settlement delays.
Putting it together: the policy outline
A working institutional stablecoin risk policy typically has the following sections:
- Scope and governance. Who owns the policy, who approves limits, review cadence.
- Approved issuers. Whitelist, with rationale and concentration limits per issuer.
- Approved chains. Whitelist, with rationale and fallback procedures.
- Approved counterparties. VASPs, custodians, ramps, liquidity providers, all with tier and limits.
- Monitoring requirements. Depeg alerts, proof-of-reserve monitoring, chain health feeds, counterparty KPIs.
- Escalation protocol. Trigger thresholds for reduction, redemption, or migration.
- Stress testing. Quarterly scenario review: issuer failure, chain halt, severe depeg.
- Reporting. Quarterly risk report to treasury and board; exception reporting real time.
Top-tier treasury operations now hold stablecoin positions across at least two issuers, on at least two chains, with two VASP relationships, and monitor depeg and proof-of-reserves in real time. Anything thinner is a governance gap, not a cost saving.
Bottom line
A stablecoin risk framework is not about predicting which token will fail. It is about ensuring no single failure (issuer, chain, contract, counterparty) threatens the continuity of operations. Diversification, monitoring, and credible redemption relationships are the core controls.