Ondo OUSG and USDY
Review open since 2026-09-30: Open item: Re-read the ondo-usdy eligibility file: its issuer documents changed. The verdict stands until the review closes.
The research assessment is favorable with conditions, but OUSG remains rejected. OUSG is a Delaware private-fund limited partnership interest offered under Rule 506(c) and Section 3(c)(7). A holder must be both an accredited investor and a qualified purchaser and must pass Ondo onboarding; the $5,000 instant transaction minimum does not relax those legal tests. The fund invests primarily through short-government-security funds, currently led by BlackRock BUIDL, with bank deposits and stablecoins for liquidity. Its instant USDC rail is a strong design, but the fund is not a Rule 2a-7 money-market fund, is administered by Ondo affiliates, and relies on contracts with special access, an off-chain NAV process and finite stablecoin liquidity. A mass-affluent client cannot enter the product through either primary issuance or a transfer to an unapproved wallet. Reopen only for a genuinely U.S.-eligible share class, not a secondary-market workaround. USDY is a separate Ondo product with a separate access bar. It is a tokenized secured note offered only under Regulation S, so no US person may subscribe, acquire or redeem it, whatever their wealth. Since 2025-12-15 the issuer is Ondo Global Markets (BVI) Limited, the same company that issues Ondo Stocks; earlier notes came from Ondo USDY LLC. The note moves between wallets like a stablecoin, with only a blocklist in the way, but that does not make it available to US clients. USDY is also rejected on access, for the same reason as OUSG but under a different rule.
- Ondo opens USDY to US persons, or new USDY turns out to track the iShares Short Treasury Bond ETF rather than hold Treasuries directly
- No U.S.-eligible share class covering the intended client population
- Failure of proposed-size redemption within the published instant or business-day window
- Any NAV discrepancy, principal impairment, entitlement failure, or unauthorized transfer
- Any portfolio holding outside approved short-government, government-fund, cash, or operational-stablecoin assets
- Any live contract, oracle, registry or privileged role not mapped to a current audit and authority record
Watched nightly. The review opened 2026-09-30 is shown under the verdict above; the memo stands as issued until it closes.
The research file
USDY: the offshore note
USDY is a note, not a fund share. Ondo describes it as a tokenized secured note whose holders have a security interest in the backing assets, with Ankura Trust Company as collateral and verification agent; a missed redemption is an Event of Default that lets Ankura liquidate the portfolio, subject to a holder vote. The backing depends on issuance date: short-term Treasuries, iShares Short Treasury Bond ETF shares, or bank demand deposits. On 2026-09-21 Ondo reported $2.09B of USDY outstanding against $2.28B of assets, a 106.49% ratio, with $2.08B in Treasuries and $198.8M in ”Ondo Stocks issued USDY”. Until early 2026 new buyers received a Temporary Global Certificate and waited 40 to 50 days for transferable tokens; that FAQ page now returns 404, the USDYc bookkeeping token has zero supply, and the current docs describe instant minting. Redemption needs onboarding with the issuer and pays USDC, or USD only to a non-US bank. The access rule is absolute: US persons and US-originated orders are prohibited from subscribing, acquiring or redeeming.
Instrument and portfolio mechanism
Each OUSG represents a unitized limited-partnership interest in Ondo I LP, not a direct Treasury or BUIDL claim. Ondo Capital Management allocates subscription proceeds among short-government-security products and liquidity balances. The September 30, 2026 holdings table shows State Street Galaxy SWEEP at 47.33%, BlackRock BUIDL at 31.85%, Franklin BENJI at 12.92% and Fidelity FYOXX at 6.89%, with USDC, bank deposits and other assets making up the rest. The FAQ on the same page still claims a significant BUIDL majority. It conflicts with the dated table; the overview documents describe a mix of funds and liquidity balances. Broader documents permit other funds and direct Treasuries. NAV is calculated each business day, then an Ondo-controlled oracle updates the on-chain price. Token balances do not rebase; yield accrues through increasing NAV per token.
Who controls the claim
Ondo I GP, Ondo Capital Management and Ondo Finance are affiliated entities that control the fund, investment decisions, tokenization and investor registry. Only wallets in the Ondo ID registry may hold OUSG. Special roles operate the instant manager, compliance registry, oracle, fees and rate limits; Halborn explicitly identified the concentration of these trusted roles as a centralization risk. Coinbase and Circle handle stablecoin-to-dollar paths, underlying managers hold the securities, and NAV Consulting has read-only account access and produces daily financials. This is a controlled securities system by design, not bearer cash.
Assurance and incident record
Ondo publishes contract reviews, including Cyfrin and Halborn work on OUSG-related managers, registries, compliance, oracle and rate-limit code. Annual fund audits are made available to investors, while daily administrator financials may lag the on-chain price update by as much as three days. No OUSG principal loss, missed redemption or contract exploit was identified in the reviewed primary materials; that is a limited finding, not proof of an incident-free record. Ondo has retired old managers and registries, so any reliance must match the live chain and contract to the relevant audit instead of citing the project audit list as a whole.
Exit and liquidity
On Ethereum, an eligible wallet can redeem at current NAV for USDC in one transaction. Instant mints and redemptions have a $5,000 transaction minimum, a $50M rolling global 24-hour limit and a $25M per-investor limit; redemption also depends on USDC availability supported by Circle. Non-instant redemption has a $50,000 minimum and ordinarily settles the next business day when submitted before the 4pm ET cutoff. Other chains do not receive the same instant rail. Transfers work only between onboarded wallets. The client exit therefore depends on the lowest of available instant capacity, service-provider liquidity and legal entitlement, not fund AUM.
Comparison and decision
Compared with BUIDL, OUSG adds a manager-of-funds layer and an unusually usable stablecoin redemption interface; compared with USTB, it uses multiple underlying funds rather than a direct T-bill portfolio. Compared with a broker-held Treasury ETF or government money-market fund, it adds settlement through code but also private-fund eligibility, wallet allowlisting, oracle and stablecoin dependencies. The $5,000 rail makes the transaction size accessible, not the security legally accessible. The recommendation remains rejection for the current client base, with a high-priority review if Ondo launches a registered or otherwise suitable class.
Observable reopening conditions
Reopen only when a current offering document establishes that intended U.S. clients, not merely accredited investors who are also qualified purchasers, may subscribe and hold; the minimum fits the proposed sleeve; counsel confirms eligibility and custody; daily holdings and administrator NAV reconcile; all live contracts, roles and oracle authorities match current audits; and proposed-size instant and non-instant exits pass written cost and timing limits. Any reserve fund outside the approved government/cash universe, NAV discrepancy, entitlement failure, or redemption suspension closes the reopened file.
Sources
The claims above trace to these. Where a number could not be independently verified, the thesis says so.
- Ondo OUSG holdings table and FAQ · primary · accessed 2026-09-30
Supports: September 30 holdings mix, FAQ conflicts with holdings table - Ondo OUSG overview · primary · accessed 2026-09-30
Supports: fund mix, liquidity balances - Ondo docs: basics · primary · accessed 2026-09-23
Supports: USDY - Ondo docs: eligibility · primary · accessed 2026-09-23
Supports: USDY - Ondo docs: important notes · primary · accessed 2026-09-23
Supports: USDY - Ondo docs: comparison stablecoins · primary · accessed 2026-09-23
Supports: USDY - Ondo docs: mantle integration guidelines · primary · accessed 2026-09-23
Supports: USDY - Ondo docs: usdy instant manager integration · primary · accessed 2026-09-23
Supports: USDY - Ondo docs: usdy · primary · accessed 2026-09-23
Supports: USDY - Ondo docs — OUSG overview and portfolio mechanism · primary · accessed 2026-08-14
Supports: portfolio assets, NAV mechanism, $5,000 instant minimum, fund fees - Ondo docs — legal and investor eligibility · primary · accessed 2026-08-14
Supports: accredited investor, qualified purchaser, Rule 506(c), Section 3(c)(7), affiliate roles - Ondo docs — OUSG instant limits · primary · accessed 2026-08-14
Supports: $50M global limit, $25M investor limit, USDC liquidity dependency - Ondo docs — OUSG redemption terms · primary · accessed 2026-08-14
Supports: atomic redemption, $50,000 non-instant minimum, 4pm cutoff, business-day settlement - Ondo docs — trust, structure and counterparties · primary · accessed 2026-08-14
Supports: GP and adviser control, BUIDL majority, Coinbase and Circle, fund structure - Ondo docs — reporting and financial assurance · primary · accessed 2026-08-14
Supports: NAV Consulting, daily financials, three-day reporting lag, annual audit - Ondo docs — live OUSG contracts and supported chains · primary · accessed 2026-08-14
Supports: Ethereum, Polygon, Solana, XRP Ledger, ID registry, oracle, deprecated contracts - Halborn — Ondo smart-contract security assessment, 2025-02 · primary · accessed 2026-08-14
Supports: privileged roles, centralization risk, OUSG manager audit scope
Inherited controls
The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.
| Chain | Verdict | Control | Control constraint |
|---|---|---|---|
| Ethereum | Approved | No freeze key | No sequencer, no upgrade key, no operator who can be compelled. Rule changes require social consensus. |
| Polygon PoS | Rejected | Mixed control | a public validator set orders transactions, but a 5-of-9 multisig can instantly upgrade staking and canonical bridge contracts, while a 5-of-8 controls custom child tokens. |
| Solana | Approved with limits | Governed, no freeze | no admin key can seize funds, but stake concentration and a sub-25 Nakamoto coefficient are the standing watch items. |
| BNB Smart Chain | Rejected | Issuer can freeze | the validator set concentrates around one company, and the chain has been halted by decision. |
| Mantle | Rejected | Issuer can freeze | the team can push instant upgrades; there is no exit window a client could use. |
| Sui | Rejected | Issuer can freeze | freeze and seizure are demonstrated: standing validator deny lists began freezing the Cetus exploiter’s ~$162M within about 80 minutes, and a Foundation-organized vote later moved the frozen funds without the owner’s keys. |
| Arbitrum One | Approved with limits | Mixed control | a single sequencer orders >99% of transactions and admin keys can upgrade bridge contracts on a ~7-day timelock. |
| Stellar | Rejected | Issuer can freeze | freeze is native at every level: issuers hold revocation and clawback flags on their assets, and since Protocol 26 the validator quorum can vote to freeze specific accounts and trustlines on-chain (CAP-77). |
| Asset | Control | Who can freeze it |
|---|---|---|
| OUSG | Issuer can freeze | Ondo Short-Term US Government Treasuries. Permissioned transfer, redeems through Ondo. |
| USDY | Issuer can freeze | Ondo administers this yield-bearing note, including its upgradeable token, allowlist, blocklist, sanctions checks, reserve custody, and redemption process. |