LogoLogo
  • Ethena Overview
  • How USDe Works
  • Genesis Story
  • Alternatives: Existing Stablecoins
  • Size of the Opportunity
  • USDtb
  • Ethena Network
  • ENA
    • Tokenomics
  • Video Guides
    • How to Buy USDe
    • How to Stake USDe
    • How to Stake ENA
    • How to [Un]lock positions
  • Solution Overview
    • USDe Overview
      • Delta-Neutral Stability
      • Delta-Neutral Examples
      • Scalability
      • Censorship Resistance
      • Regulatory Compliance
    • Protocol Revenue Explanation
      • Historical Examples
      • Rewards Mechanism Explanation
      • sUSDe Rewards Mechanism
    • Underlying Derivatives
      • Futures vs Perpetuals
      • Inverse vs Linear Contracts
      • Basis Spread
    • Peg Arbitrage Mechanism
    • Liquid Stables: Dynamic Allocation
      • Current Allocation Approach
    • Scenario Analysis
    • Risks
      • Funding Risk
      • Liquidation Risk
      • Custodial Risk
      • Exchange Failure Risk
      • Backing Assets Risk
      • Stablecoin-Related Risks
      • Margin Collateral Risks
    • Governance
      • Risk Committee
  • Backing Custody & Security
    • Overview
      • Off-Exchange Settlement in detail
      • Copper Clearloop Case Study
    • Real-Time Dashboards
  • Solution Design
    • Overview
      • Github Overview
    • Key Trust Assumptions
      • Matrix of Multisig and Timelocks
    • Minting USDe
      • Order Validity Checks
      • User Security Measures
      • Mint & Redeem Key Functions
      • Mint and Redeem Contract V2
    • Staking USDe
      • Staking Key Functions
      • User Security Measures
    • Use of Oracles
    • Hedging System
      • Internal Services
      • Managing Risk from dependencies
    • Reserve Fund
    • Key Addresses
    • Backing Asset Custody
  • API Documentation
    • Overview
  • Resources
    • Custodian Attestations
    • FAQ
    • Data Repository
    • USDe + sUSDe Custodian Availability
    • Audits
    • Media Assets
    • General Risk Disclosures
    • Privacy Policy
    • Terms of Service
    • USDe Terms and Conditions - EEA
    • USDe Terms and Conditions - Non EEA
    • USDe Mint User Agreement - Non EEA
    • Testnet
Powered by GitBook
On this page

Was this helpful?

Export as PDF
  1. Solution Design
  2. Hedging System

Managing Risk from dependencies

Ethena Labs' "Hedging System" has three notable external dependencies (aside from AWS):

  1. CeFi Exchanges, such as Bybit.

  2. "Off-Exchange Settlement" (OES) providers, such as Copper.

  3. Price Feeds, such as Pyth and Redstone.

It is important to note that Ethena Labs has team members available 24/7 across different timezones & countries who are able to manage and address any issues that might occur.

If any of the system checks performed both internally and externally by market making entities with gatekeeper roles can disable the ability to mint & redeem USDe until they are satisfied the system is functioning correctly without discrepancies.

Possible Negative Events

The following is a list of negative events that might occur, what the issue to the system would be, how it is mitigated/ameliorated, and the maximum potential impact to the protocol.

Note: This is not an exhaustive list, but the most common & likely (in the unlikely event they occur).

CeFi Exchange / OES Partner suffers technical issues

Where a CeFi Exchange or OES partner suffers technical issues such as failing to send real-time updates or perhaps inconsistent information per their specification across multiple objects; this would cause internal objects to not match the system's expectations.

As a result, the system would immediately identify this inconsistency and determine if it is isolated to a single partner. If it's possible to continue minting and redeeming USDe while quarantining the affected partner(s), the system will; if not, minting and redeeming USDe will be paused until the issue can be addressed.

The system identifies these inconsistencies by performing a large number of validations upon data in real-time, with constant reconciliation with partners, and alerting.

CeFi Exchange(s) becomes temporarily inaccessible

In the event a CeFi Exchange partner(s) were to become temporarily inaccessible, Ethena would no longer be able to submit or edit existing orders on exchanges. This would result in Ethena losing control of any existing orders & possibly being able to reconcile the exact state of that exchange's portfolio.

The system would immediately identify this issue and attempt to cancel all outstanding open orders on the exchange. The system would attempt to identify the latest portfolio update and would no longer attempt to submit new orders. The system would distribute hedging orders to other exchange partners and only include the affected partner(s) again when service had been satisfactorily restored.

Availability and integrity are considered in a wide range & number of validations that are constantly performed throughout the system.

Market Data prices lack integrity

In the event some or all market data price feeds begin to lack integrity, Ethena would immediately cancel all affected open orders and identify the affected partners. The lack of market data would prevent Ethena from being able to submit orders to exchange partners.

It's important to keep in mind that Ethena is integrated with multiple market data feeds & exchange prices as to ensure the affected partner(s) can be quarantined without damaging the integrity of operations.

The "Hedging System" monitors for integrity in real-time and actively alerts in the event of any concerns.

Internal System component fails

In the event that an internal system service fails, becomes unresponsive, or begins to behave in an inconsistent manner, the system identifies and quarantines the issue in real-time.

The system has been designed to self-heal in the event of any failures or degradations as well as there is a large focus throughout the system upon ensuring each interaction & data stored makes "sense".

The system is actively tested end to end, in addition to unit/component/integration tests, as well as ensuring there is alerting throughout the system that readily notifies the appropriate parties.

In the event a service fails and is unable to self-heal, minting and redeeming USDe is automatically temporarily paused while the outstanding issue is investigated & resolved.

Last updated 6 months ago

Was this helpful?