<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/">
    <channel>
        <title>Montagu</title>
        <link>https://paragraph.com/@montagu-2</link>
        <description>undefined</description>
        <lastBuildDate>Fri, 15 May 2026 21:55:27 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>https://github.com/jpmonette/feed</generator>
        <language>en</language>
        <image>
            <title>Montagu</title>
            <url>https://storage.googleapis.com/papyrus_images/02a60286a90e268bc86b27082b4c656df1fa5e8601489dabf13263af7ae3ac24.jpg</url>
            <link>https://paragraph.com/@montagu-2</link>
        </image>
        <copyright>All rights reserved</copyright>
        <item>
            <title><![CDATA[M0: The base layer for verifiable issuance]]></title>
            <link>https://paragraph.com/@montagu-2/m0-the-base-layer-for-verifiable-issuance</link>
            <guid>t6KMYY5IKNyAsNyoKDkD</guid>
            <pubDate>Tue, 21 Oct 2025 08:58:47 GMT</pubDate>
            <description><![CDATA[Last week, 300 trillion PYUSD (PayPal’s stablecoin issued by Paxos) was minted on Ethereum. For a brief moment, PYUSD was the most valuable asset on earth. To put it in perspective: that’s worth more than 10x the value of every ounce of gold ever mined. It was a glitch, obviously. And after 22 minutes, the 300 Trillion in question was burned, just as easily as it was created. Ironically, this isn’t PayPal’s first brush with astronomical numbers. In 2013, the payment app mistakenly credited a ...]]></description>
            <content:encoded><![CDATA[<p>Last week, 300 trillion PYUSD (PayPal’s stablecoin issued by Paxos) was <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://x.com/Paxos/status/1978565015943950411">minted</a> on Ethereum. For a brief moment, PYUSD was the most valuable asset on earth. To put it in perspective: that’s worth more than 10x the value of every ounce of gold ever mined.</p><p>It was a glitch, obviously. And after 22 minutes, the 300 Trillion in question was burned, just as easily as it was created.</p><p>Ironically, this isn’t PayPal’s first brush with astronomical numbers. In 2013, the payment app mistakenly credited a user’s account with $92 quadrillion, then reversed the error before the user even noticed.</p><p>In a centralized database, errors like that are mostly harmless. The user can’t actually move that kind of money out of PayPal, and even if they could the risk is contained to Paypal only.</p><p>On-chain issuance is a different story, however. The ability to mint a deeply-integrated, deeply liquid asset like PYUSD out of thin air is a systemic risk to DeFi, and 22 minutes is plenty of time to do real damage.</p><p>This one was a mistake and it was fixed fast. But it does expose a bigger issue: asset issuance still lacks basic guardrails.</p><p>If mint authority is compromised, the outcome will be catastrophic.</p><p>Which brings us to this piece’s theme: how issuance works for centralized stablecoins and what a safer issuance stack should look like.</p><h1 id="h-the-problem-non-verifiable-reserves" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0">The problem: non-verifiable reserves</h1><p>Fiat stablecoins are supposed to be fully backed by their underlying fiat currency. For example, for every dollar on-chain, there should be a matching dollar (or dollar-equivalent) in dedicated reserves.</p><p>So how did Paxos end up minting 300 trillion PYUSD when there clearly weren’t enough off-chain reserves to back it? Because the mint function was executed without consulting off-chain reserves first.</p><p>Most fiat-backed issuance designs used today rely heavily on trust ( and monthly attestations). On-chain mint/burn is gated by issuer permissions, not by querying off-chain reserve balances.</p><p>That means there are no safety measures at the protocol-level to halt mints if that control is compromised or is triggered with the wrong parameters, which is what happened with PYUSD.</p><p>Stablecoins have clearly hit escape velocity. PayPal’s PYUSD is only the beginning. Multiple Web2 businesses announced plans to explore or issue their own stablecoins because the rails offer structural advantages for moving and storing value.</p><p>But if businesses are coming on-chain at scale, the issuance infrastructure has to level up in order to meet this demand. For this to happen, protocol-level verifiability of off-chain reserves is a must.</p><p>The good news: <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://x.com/m0">@m0</a> saw this coming years ago and built accordingly.</p><p>I think this is a good moment to dig into their issuance mechanism, among other features, and why it matters.</p><h1 id="h-the-m0-issuance-stack" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0">The M0 Issuance Stack</h1><p>Before we get into M0’s design, let’s quickly recap how things work with centralized issuers:</p><ol><li><p>Distributor submits mint instructions (stablecoin, chain, destination address)</p></li><li><p>Distributor wires funds to the issuer’s bank</p></li><li><p>Issuer mints tokens and transfers them to the distributor’s wallet</p></li></ol><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/68bc88bcfcddda9b8a237a6bbdf0acb81a0a436d33d112303b69d752c5c05236.png" alt="Figure 1. Mint flow - Centralized issuers " blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 1. Mint flow - Centralized issuers</figcaption></figure><p>This design works but it comes with real drawbacks for distributors:</p><ul><li><p><strong>Issuer-absolute mint power:</strong> A privileged signer can mint. Distributors can’t constrain it on-chain.</p></li><li><p><strong>Trust-heavy, off-chain operations:</strong> With the exception of mint/ burn functions, everything else (reserves proofs, branded issuance, profit sharing) is coordinated off-chain.</p></li></ul><p>Now, how does M0 address this?</p><h3 id="h-1-m0-protocol-actors" class="text-2xl font-header !mt-6 !mb-4 first:!mt-0 first:!mb-0">1. M0 Protocol Actors</h3><p>M0 isn’t a company, it’s a protocol. A coordination layer that enforces a set of parameters for all actors to abide by.</p><p><strong>Governance-Approved Actors:</strong></p><ul><li><p><strong>Minters (issuers):</strong> Qualified entities with mint power proportional to eligible collateral held in Special Purpose Vehicle (SPV) that meet M0 governance-adopted requirements.</p></li><li><p><strong>SPV Operators (custody):</strong> Independent operators of the SPVs that control the custody accounts and enforce protocols designed to protect the stability of issued assets.</p></li><li><p>Validators (auditing): Independent firms engaged by Minters to verify eligible collateral and post regular proofs.</p></li><li><p>Earners (distributors): Holders of M0 stablecoins (and branded extensions) who share in earnings generated by off-chain collateral.</p><p><strong><em>Note:</em></strong> Minters, Validators and Earners have to be approved by governance and are bound by M0&apos;s <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://github.com/m0-foundation/adopted-guidance/blob/main/m0_adopted_guidance_v1.50.pdf">Adopted Guidance</a> in order to participate in the protocol&apos;s activities.</p></li></ul><h3 id="h-2-off-chain-custody-stack" class="text-2xl font-header !mt-6 !mb-4 first:!mt-0 first:!mb-0"><strong>2. Off-chain custody stack</strong></h3><p>M0 tightens issuance by separating duties and defining how Actors interact, even off-chain:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/17db98d064e0518b0cacfbd73a731af72b9a1850e2cee73b01ebe8e15f2b4acd.png" alt="Figure 2. Off-chain custody stack" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 2. Off-chain custody stack</figcaption></figure><p>→ Minters do not control custody. Instead, they sign a legally binding agreement with an SPV Operator, who manages collateral to protect the stability of issued assets in all conditions.</p><p>→ Validators have read access to Custody Accounts and are required to publish regular proofs on Eligible Collateral.</p><h2 id="h-3-on-chain-mint-flow" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>3. On-chain mint flow</strong></h2><p><strong><em>Note:</em></strong> $M refers to M0’s dollar-pegged stablecoin and the protocol’s canonical unit.</p><p>With the custody and attestations design in place, issuance on M0 is reserve-aware and challengeable at the protocol-level:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/eb9015a1b0c294f3cf72482cd4e4de67eba352470cac6a48f42641b294669055.png" alt="Figure 3. $M Minting flow" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 3. $M Minting flow</figcaption></figure><p>Minting basically boils down to two moves:</p><ol><li><p><strong>Update collateral:</strong> Every ~30 hours, Minters publish their Eligible Collateral on-chain with a valid Validator proof. Failure to do so incurs a penalty fee.</p></li><li><p><strong>Request mint:</strong> Minters request the amount of $M to issue. The request is checked against on-chain Eligible Collateral and held for a delay window during which Validators can halt the mint if something looks off.</p></li></ol><p><strong>This architecture would have halted the 300T $PYUSD mint event if Paxos was leveraging the M0 stack:</strong></p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/c126f1634281eadfeb5dd07f681d48f33d690073acf11cc628794a61d82fedf7.png" alt="Figure 4. M0 blocking mint request" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 4. M0 blocking mint request</figcaption></figure><h2 id="h-4-collateral-retrieval-flow" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>4. Collateral Retrieval flow</strong></h2><p>M0’s custody design means Minters don’t control the SPV’s custody accounts.</p><p>So how do they pull out free collateral (e.g., after burning $M)? Via an on-chain, validator-gated retrieval flow:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/b9cc733c476b41997022b33da6facaa0d564c1ad1c7867c4b043223b88cbc6a7.png" alt="Figure 5. Collateral Retrieval by Minters" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 5. Collateral Retrieval by Minters</figcaption></figure><p>→ Deducting the proposed amount immediately from on-chain collateral ensures the Minter remains adequately collateralized throughout the process.</p><p>→ On-chain logic initiates the flow, the SPV Operator executes the transfer and Validators attest to the validity.</p><p>→ Just like mints, outflows are reserve-aware and challengeable.</p><h1 id="h-closing-thoughts" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Closing thoughts</strong></h1><p>With reserve-aware issuance and protocol-level safeguards, M0 makes issuance verifiable instead of trusted. Which is critical, in order to reduce the attack surface and operational error risk.</p><p>But that&apos;s not all. The M0 stack innovation extends beyond issuance to unlock the best building experience for Apps wanting to issue their own stablecoins: fully customizable, yield-bearing, branded stablecoins with interop and liquidity baked in.</p><p>I&apos;ll be writing about it on my next article.</p>]]></content:encoded>
            <author>montagu-2@newsletter.paragraph.com (Montagu)</author>
            <enclosure url="https://storage.googleapis.com/papyrus_images/6d216c065a5ffcbef235934e72c8ae3de9c487b8745741bce9fe6d359171f6f0.png" length="0" type="image/png"/>
        </item>
        <item>
            <title><![CDATA[Native P2P Rails: The Missing Piece on Payment-Focused Networks]]></title>
            <link>https://paragraph.com/@montagu-2/native-p2p-rails-the-missing-piece-on-payment-focused-networks</link>
            <guid>zB8cL0zbxJJEoZfq8NUn</guid>
            <pubDate>Wed, 08 Oct 2025 08:57:38 GMT</pubDate>
            <description><![CDATA[IntroAbout a year ago, Plasma landed in Cobie’s group on Echo at a 40m FDV. I was among those who had access to the deal but ended up passing. At the time, I dismissed Plasma as “just another L1.” Payment-focused infra always made sense imo, but I believed success hinged on tackling the first/last mile problem: Sure, I can send USDT instantly and for free across the world, but the receiver still has to off-ramp somewhere else to actually spend it locally. Fast forward to last week… Plasma TGE...]]></description>
            <content:encoded><![CDATA[<h1 id="h-intro" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Intro</strong></h1><p>About a year ago, <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://x.com/Plasma">Plasma</a> landed in Cobie’s group on Echo at a 40m FDV. I was among those who had access to the deal but ended up passing.</p><p>At the time, I dismissed Plasma as “just another L1.” Payment-focused infra always made sense imo, but I believed success hinged on tackling the first/last mile problem: Sure, I can send USDT instantly and for free across the world, but the receiver still has to off-ramp somewhere else to actually spend it locally.</p><p>Fast forward to last week…</p><p>Plasma TGE’d with one of the strongest launches this cycle. That stung. Enough to send me down a deep dive. Nothing like missing out on life-changing money to make you rethink your thesis, right?</p><p>So, was I wrong? Obviously. But I still believe Plasma’s biggest unlock will come from solving the first/last mile problem at the protocol level. The good news? The tech that actually solves this is already here.</p><p>This piece is my attempt to dig into that problem, go through some of the use cases and why solving it could be Plasma’s real unlock.</p><h1 id="h-understanding-the-problem" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Understanding the problem</strong></h1><p>To clarify, this isn’t a global issue. First/last mile friction mostly shows up in emerging markets with weak/ informal banking systems.</p><p>WTF is First/last mile</p><p>Let’s take cross-border payments (aka remittances) as an example.</p><p>Sending 100$ from the US to Tunisia via Western Union looks like this:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/65247bd47a8adf212c22b4842ea2664ed760ff45ba3143cfb7358b449e2f97d2.png" alt="Figure 1. WU cross-border payment from US to TUN" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 1. WU cross-border payment from US to TUN</figcaption></figure><ul><li><p><strong>First mile:</strong> Accepting dollars from the sender</p></li><li><p><strong>Middle mile:</strong> Western Union rails handle cross-border transfer, FX conversion and liquidity</p></li><li><p><strong>Last mile:</strong> Delivering pesos to the receiver</p></li></ul><p>Now replace Western Union with stablecoins:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/597d69ca25dece0a3bb78e56af4b124bf10d381bbda49d9411254ddf5545737e.png" alt="Figure 2. Stablecoin cross-border payment from US to TUN" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 2. Stablecoin cross-border payment from US to TUN</figcaption></figure><p>Acquiring stablecoins in a developed economies is a relatively seamless process. Off-ramping them into Dinars in Tunisia? Not so much. The options are plenty: P2P markets, crypto debit cards or even an in-person cash exchange. All come with their own trade-offs.</p><p>They do have one thing in common though: <strong>far from seamless.</strong></p><p>And this isn’t just Tunisia. Across emerging markets, the same story repeats.</p><p>On top of that, stablecoins in emerging markets often come at a premium thanks to constant demand for dollars.</p><p>This is where Plasma One enters the picture. As a neobank and card native to the chain, it tackles the last mile by letting users spend USDT via the Plasma One card in supported countries (+150).</p><p>But Plasma One scaling has limits. Card coverage will always depend on local regulations. And it can’t solve the first mile either, users still need to source USDT elsewhere before deploying it on Plasma.</p><p>So here’s an idea: what if Plasma can lean on its permissionless design to fill the gap Plasma One can’t, and solve both the first and last mile?</p><h1 id="h-native-p2p-markets-the-missing-piece" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Native P2P markets: The missing piece</strong></h1><p>That stablecoin adoption is highest in emerging markets shouldn’t surprise anyone. As policies tighten, more people look for stable alternatives.</p><p>But no matter how strong that demand gets, it’s unlikely we’ll see regulated venues openly selling USDT. It cuts against the point of those monetary policies, which aim to keep hard currencies flowing in, not out.</p><p>That vacuum has fueled crypto&lt;&gt;fiat P2P markets, especially on CEXs.</p><p>What began as a workaround for onboarding users in emerging markets is now a standalone business line, processing millions in volume daily.</p><p>Which raises the obvious question: if the goal is to build an all-in-one money app, why send users off-platform to hunt for USDT before they can even touch the Plasma ecosystem? Why not let them acquire it directly inside the app in a trustless, permissionless way?</p><p>How? Put CEX-style P2P markets on-chain.</p><p>And here’s the kicker: someone’s already done it.</p><p>In my last piece, I broke down <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://x.com/zkp2p">ZKP2P</a>, a project solving a major blocker for crypto: permissionless crypto&lt;&gt;fiat interop.</p><p><a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://x.com/EarlMontagu/status/1970939210975641929">https://x.com/EarlMontagu/status/1970939210975641929</a></p><p>I recommend reading it for full context but the tl;dr: they took CEX P2P markets, stripped out the middlemen and brought them on-chain. It supports any real-time payment network, any currency and uses cryptographic proofs to verify off-chain payments.</p><p>This is where Plasma’s permissionless design kicks in.</p><p>With ZKP2P-style rails baked into the chain, Plasma doesn’t just fix onboarding. It unlocks a set of use cases that could finally make it the full-stack payments product it aims to be.</p><p>Here are a few that come to mind.</p><h2 id="h-use-case-1-cross-border-fiat-to-fiat-transfers" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Use Case 1: Cross-Border Fiat-to-Fiat Transfers</strong></h2><p>Here’s how Fiat-to-Fiat looks like with Plasma One:</p><ol><li><p><strong>First mile:</strong> Sender on-ramps into Plasma One</p></li><li><p><strong>Middle mile:</strong> Free in-app USDT transfer from sender to receiver</p></li><li><p><strong>Last mile:</strong> Receiver cashes out at an ATM with the Plasma One card</p></li></ol><p>Good but limited. The moment someone’s outside a supported country, or doesn’t have a card, the flow breaks. And it gets worse if the sender is in a non-supported region.</p><p>Now imagine Plasma with both native P2P markets and the card. With both built into the chain, users can move freely between the app and real-time payment networks, no matter where they are.</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/e443fafeda91527de83cf881ec46995360e9b73b85633d704150d991054a6d4b.png" alt="Figure 3. Cross-border Fiat-to-Fiat transfer" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 3. Cross-border Fiat-to-Fiat transfer</figcaption></figure><p>That’s all it takes to enable true fiat-to-fiat transfers, anywhere. And the best part? App users won’t even realize the whole thing is powered by USDT under the hood.</p><h2 id="h-use-case-2-payment-service-provider" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Use Case 2: Payment Service Provider</strong></h2><p>In many emerging markets, international card payments are still restricted. Friends and family sometimes ask me to book a flight or an Airbnb on their behalf, paying me back in cash.</p><p>With native P2P markets covering the first mile, a temporary virtual Plasma One card covering the last mile and everything in between handled trustlessly by smart contracts and USDT, that workaround disappears.</p><p>Users, from anywhere, can make online payments directly from the Plasma One app.</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/2a62c49a839b97a0bcca3e077896ff256aadf8df0be6969cd131180c98a3d306.png" alt="Figure 4. Online payment from anywhere" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 4. Online payment from anywhere</figcaption></figure><p>That means someone in a restricted market could pay for ChatGPT, stream Netflix or shop online for whatever they want. That’s not just cool, it’s freedom to access the same digital services the rest of us take for granted.</p><h1 id="h-final-thoughts" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Final thoughts</strong></h1><p>The chain that will win payments won’t be the one that moves stablecoins the fastest or the cheapest. It’ll be the one that nails distribution…</p><p>The neobank + card model can’t do that on its own. It will always be tethered to traditional banking rails and that limits how far it can scale.</p><p>That’s exactly why stablecoins blew up in struggling economies: people needed rails that worked outside the system.</p><p>In order to truly redefine how money moves, having native P2P rails alongside the neobank/ card is a must. Together, they create the only setup that can scale globally and serve emerging markets.</p>]]></content:encoded>
            <author>montagu-2@newsletter.paragraph.com (Montagu)</author>
            <enclosure url="https://storage.googleapis.com/papyrus_images/2b220c99b068726a064e0ae4178cc48b30247048920269c9a1e48fa8f101573a.jpg" length="0" type="image/jpg"/>
        </item>
        <item>
            <title><![CDATA[ZKP2P: Stitching together Payment Networks with Crypto rails]]></title>
            <link>https://paragraph.com/@montagu-2/zkp2p-stitching-together-payment-networks-with-crypto-rails</link>
            <guid>XeDlBZnz89msnBQui05h</guid>
            <pubDate>Thu, 25 Sep 2025 08:36:20 GMT</pubDate>
            <description><![CDATA[INTROEarlier this year, MegaMafia opened applications for its second cohort to find the next wave of breakout apps launching on MegaETH. One section asked applicants to choose a question from a list and answer it. I went for this one: “Bonding curves have become a core mechanic in breakout apps. What’s the next big design mechanism that will unlock new user behavior at the app level?” My answer: zkTLS. MegaMafia’s answer: thanks, but no thanks. I didn’t make the cut. Many months later and we’...]]></description>
            <content:encoded><![CDATA[<h1 id="h-intro" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>INTRO</strong></h1><p>Earlier this year, MegaMafia opened applications for its second cohort to find the next wave of breakout apps launching on MegaETH.</p><p>One section asked applicants to choose a question from a list and answer it.</p><p>I went for this one: <strong>“Bonding curves have become a core mechanic in breakout apps. What’s the next big design mechanism that will unlock new user behavior at the app level?”</strong></p><p>My answer: zkTLS.</p><p>MegaMafia’s answer: <em>thanks, but no thanks.</em> I didn’t make the cut.</p><p>Many months later and we’ve yet to see a zkTLS-powered breakout app. But I think that’s about to change.</p><p>Below I dig into an overlooked protocol tackling crypto’s biggest pain point: web2-web3 interoperability, and drop in a feature-request to the team while at it: <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://x.com/zkp2p">ZKP2P</a></p><h1 id="h-wtf-is-zktls" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>WTF is zkTLS?</strong></h1><p>I’m not gonna bore you with technical jargon and even if I wanted to, I’m not qualified. Instead, let’s walk through a real-life example:</p><p>While attending ETH Cannes last year, Ben’s employer committed to cover his Uber rides to the conference venue and reimburse him in USDC upon providing proof.</p><p>Ben could wait until the end of the conference, send receipts, and wait again for review and refund. But that process is clunky, invades his privacy and isn’t fraud-proof for the company.</p><p>This is where zkTLS comes in. A cryptographic primitive that lets users export data securely and verifiably from any website while revealing only the minimum required.</p><p>In Ben’s case, he can share just the fare amount and destination address in a way the company can verify:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/9299c984dc7612d5dd2e92e0f641a970d547c1d91166b75ba9ac6a5513a39fa2.png" alt="Figure 1. zkTLS attestation" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 1. zkTLS attestation</figcaption></figure><p>You might ask, “Why do we need a blockchain for this?”. We don’t.</p><p>The real unlock comes from submitting those attestations on-chain, so on-chain actions can be triggered based on off-chain behavior.</p><p>Back to Ben: what if his refund happened automatically the moment he left the car?</p><p>Today, that’s possible by combining zkTLS attestations with smart contracts:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/13b179808f045d424b36e3b683cc41bcb730e36f1d115e82d10fe79dba53fcae.png" alt="Figure 2. Uber refund dApp" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 2. Uber refund dApp</figcaption></figure><p>With this setup:</p><ul><li><p>Ben gets refunded instantly after stepping out of his ride.</p></li><li><p>He hides all unnecessary info from the Uber invoice. E.g., his pickup address, which just happens to be a nightclub (Ben was partying all night).</p></li><li><p>The company is certain the invoice is authentic and saves time.</p></li></ul><p>That’s how zkTLS and blockchains work together. Think of zkTLS as a bridge between web2 and web3, letting users bring verified web2 data on-chain and enabling use cases that simply weren’t possible before.</p><p>Automated expense reimbursement is cool, but it’s not exactly the killer app we’ve all been waiting for.</p><p>Now that we’ve got the basics down, let’s get into that part.</p><h1 id="h-zktls-killer-app" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>zkTLS killer app</strong></h1><h2 id="h-the-problem" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>The problem</strong></h2><p>For retail users, depending on their location, crypto⇄fiat swaps remain pricy, slow and/or unreliable.</p><p>The reason? Fiat on/off-ramp providers depend heavily on legacy banking rails, currency stability and each region’s regulatory environment. Making them sub-optimal for anyone who wants to on/off-ramp at a reasonable speed and a reasonable cost.</p><p>P2P markets, brought back by centralized exchanges, resurfaced as a reliable solution. By connecting local users to trade on their own terms, with transparent fees and broader fiat currency support, CEX P2P platforms are fast becoming the retail’s go-to solution for on/off ramps. But they’re hardly perfect:</p><ul><li><p>Users take on custody risk.</p></li><li><p>Users rely on CEX to settle disputes.</p></li></ul><p>This is where a blockchain + zkTLS combo really kicks into action: Smart contracts handle custody and zkTLS removes the need for human arbitration.</p><p>That’s exactly what ZKP2P is building.</p><h2 id="h-enter-zkp2p" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Enter ZKP2P</strong></h2><p>Simply put, ZKP2P is an on-chain version of CEX P2P markets. Except it’s faster, trustless, and composable with on-chain activity. Here’s how it works:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/61693fd0a810e0ccef5511f9cb88f777d762c984041e86b59681507c8aaec4bd.png" alt="Figure 3. ZKP2P flow - Revolut Example" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 3. ZKP2P flow - Revolut Example</figcaption></figure><p>Think of ZKP2P as a two-sided marketplace for crypto ⇄ fiat swaps.</p><ul><li><p><strong>Supply side:</strong> sellers lock up USDC and set limit orders.</p></li><li><p><strong>Demand side:</strong> buyers fill those orders when the quotes make sense.</p></li></ul><p>The first visual uses an example of Revolut as payment network platform and USD as currency to keep things simple, but the reality is broader.</p><p>ZKP2P is platform-agnostic &amp; currency-agnostic, the protocol can support any payment network and any fiat currency as long as sellers are willing to accept payments there.</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/886cbc597e1e7d0981c5ddd198a9a0d8da3c9a6ea8cd7bb50abb0688212f7484.png" alt="Figure 4. ZKP2P flow - In general" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 4. ZKP2P flow - In general</figcaption></figure><p>With eight payment platforms supported, USDC liquidity across 20+ fiat currencies and +$3.4M in total volume, ZKP2P has already gained traction and quickly found PMF as the go-to ramp for on-chain natives.</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/b7c2b0c90486526c5235ca3f1dd714a617623b9ca96a820a913fa84aed441a29.png" alt="Figure 5. ZKP2P markets vs CEXs P2P markets" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 5. ZKP2P markets vs CEXs P2P markets</figcaption></figure><p>Compared to ZKP2P, CEXs P2P markets fall short on speed, custody, cost and composability but still holds one advantage: <strong>Liquidity</strong>.</p><p>Liquidity is the last moat. Remove it and ZKP2P becomes the default on-ramp. The question is how to spark that momentum?</p><p>Cold starts and network effects aren’t solved overnight, but a few smart features could narrow the gap and draw in more liquidity.</p><h2 id="h-fiat-side-lping-zkp2ps-missing-piece" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Fiat-side LPing: ZKP2P’s missing piece</strong></h2><p>The current design of ZKP2P relies entirely on USDC-side LPs ( offrampers) to function.</p><p>Meaning that only USDC sellers are able to dictate terms. So if no one locks USDC, ZKP2P cannot function.</p><p>This is a feature, not a bug. We can rely on smart contracts to enforce the conditions of the exchange —i.e., release the USDC ONLY IF the proof is valid— but the same cannot be said about humans. That’s what makes ZKP2P-powered swaps trustless.</p><p>But this design introduces significant limits, especially when compared to CEX P2P markets:</p><ul><li><p>USDC sellers cannot offramp quickly. They must wait for a buyer to come in.</p></li><li><p>Buyers are forced to choose from existing rates and sizes, preventing them from expressing their own bids.</p></li><li><p>Spreads are wide and liquidity thin because LPing is one-sided.</p></li><li><p>Growth of supported markets and expansion to new ones depends entirely on USDC LPs.</p></li></ul><p>That got me wondering: could ZKP2P add a way for onrampers to LP just in an equally-trustless manner?</p><p>The mechanics I have in mind aren’t far off from existing flow. But they do require an extra step:</p><ol><li><p><strong>Intent:</strong> the fiat LP (onramper) expresses intent with a tx specifying currency, amount, rate and Telegram ID (optional).</p></li><li><p><strong>Escrow:</strong> a USDC seller (offramper) who likes the terms locks the required USDC and adds his off-chain payment ID.</p></li><li><p><strong>Payment:</strong> the fiat LP makes the off-chain payment to that ID and submits a proof with zkTLS extension.</p></li><li><p><strong>Settlement:</strong> a valid proof triggers the smart contract to release the escrowed USDC to the fiat LP.</p></li></ol><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/792d0a702aebc78f8dca848bbaffbba6c0b4b16c5fad23bf8a2bb1c3f983063a.png" alt="Figure 6. ZKP2P - Fiat-side LPing flow" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 6. ZKP2P - Fiat-side LPing flow</figcaption></figure><p>The fiat-side LP experience might not be as slick as USDC LPing as the intents are collateral-free and the extra step can slow things down. But a tight escrow window, in-app chat (like CEX P2P markets) and Telegram alerts can smooth it out.</p><p>The trade-off is a bit less speed, but the protocol stays fully trustless. And the upside is huge:</p><ul><li><p><strong>Faster fills for USDC sellers. No waiting for buyers to appear</strong></p></li><li><p><strong>Tighter spreads with both sides able to dictate their own terms</strong></p></li><li><p><strong>Deeper liquidity overall</strong></p></li><li><p><strong>Native market-making on ZKP2P:</strong> Today USDC LPs earn yield by selling at a premium, but to keep doing that they have to re-onramp somewhere else. Fiat-side LPing closes that loop.</p></li></ul><h1 id="h-final-thoughts" class="text-4xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Final thoughts</strong></h1><p>Recently Venmo announced an upcoming integration with Paypal, enabling immediate, seamless transfers between the two platforms. Cool, right? Not really… Apparently it took them <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://x.com/mdudas/status/1970197150177915206">12 years</a> to make it happen.</p><p>Now imagine how long will it take for all platforms to talk to each other.</p><p>ZKP2P is uniquely primed to solve this much faster. And by this I mean: <strong>interoperability between off-chain payment platforms</strong>.</p><p>Enabling LPing on the fiat side is the first step for the protocol to evolve beyond bilateral crypto ⇄ fiat swaps, to enable multi-lateral fiat-to-fiat swaps. The use cases that can be unlocked are endless; my next post will dive into some of them.</p><p>That&apos;s it. That’s the killer feature: <strong>borderless, near-instant fiat-to-fiat swaps powered by crypto rails in the middle.</strong></p>]]></content:encoded>
            <author>montagu-2@newsletter.paragraph.com (Montagu)</author>
            <enclosure url="https://storage.googleapis.com/papyrus_images/b2cc57693c9c0c84d1f03153c13d7135bf0c8c2168d9adc17ef55fd6578b015c.png" length="0" type="image/png"/>
        </item>
        <item>
            <title><![CDATA[CAP: Bridging the gap Between DeFi users and unreachable yield]]></title>
            <link>https://paragraph.com/@montagu-2/cap-bridging-the-gap-between-defi-users-and-unreachable-yield</link>
            <guid>U2586xz1r07cQ2E8UzfP</guid>
            <pubDate>Thu, 30 Jan 2025 21:10:13 GMT</pubDate>
            <description><![CDATA[IntroductionDespite DeFi&apos;s maturity, most users remain locked out of its most lucrative yield opportunities. Tapping into MEV, arbitrage and complex yield strategies remains, for the most part, exclusive, limiting the average user’s choices to wrapped TradFi products and “player vs. player” schemes when pursuing yield. Current solutions fall into two categories, each with distinct limitations:Single-strategy products, such as Ethena&apos;s sUSDe focusing on funding rate arbitrage, leavin...]]></description>
            <content:encoded><![CDATA[<h2 id="h-introduction" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Introduction</strong></h2><p>Despite DeFi&apos;s maturity, most users remain locked out of its most lucrative yield opportunities. Tapping into MEV, arbitrage and complex yield strategies remains, for the most part, exclusive, limiting the average user’s choices to wrapped TradFi products and “player vs. player” schemes when pursuing yield.</p><p>Current solutions fall into two categories, each with distinct limitations:</p><ol><li><p>Single-strategy products, such as Ethena&apos;s sUSDe focusing on funding rate arbitrage, leaving users vulnerable to changing market conditions.</p></li><li><p>Modular solutions like Morpho connect users with yield curators but shifts risk assessment to users who often lack the qualifications for the task.</p></li></ol><p><strong><em>This isn’t, in any way, a critic to Ethena or Morpho ( both are great products imo) but rather the challenges facing the average user when pursuing yield on DeFi.</em></strong></p><p>Not to add that both approaches share a critical flaw: users bear full responsibility for losses from exploits, insolvencies, or rugs, in return for a significantly limited upside potential.</p><p><strong>Enters CAP</strong>, a Stablecoin engine attempting to solve these frictions through a three-sided marketplace:</p><ol><li><p>Lenders: Users deposit capital into asset-specific CAP Stablecoins</p></li><li><p>Yield Experts: Vetted Agents compete to generate yield using deposited assets</p></li><li><p>Guarantors: EigenLayer Restakers provide risk coverage in exchange for a share of the profits</p></li></ol><p>In addition, CAP will leverage this marketplace to power native asset issuance on MegaETH, unlocking additional yield sources for CAP stablecoins.</p><p>That’s the what. Does it sound complicated? Only if you stop here. Read on to learn how CAP will achieve this, with illustrations.</p><p>Let’s start by addressing the elephant in the room:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/6a5a606ed84722da0f74cc0a8ae95846d8cd6c941202dc082e265d59a416bd15.png" alt="" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="hide-figcaption"></figcaption></figure><h2 id="h-yield-strategies-on-cap-aka-where-does-the-yield-come-from" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>Yield strategies on CAP - AKA where does the yield come from?</strong></h2><p>At its core, yield in crypto could be split into two categories:</p><ul><li><p><strong>Endogenous yield</strong></p><p>This refers to revenue generated purely from in-protocol mechanisms. As an example, consider Maker’s DAI where the protocol relies on borrowing fees paid by direct users to generate yield.</p></li><li><p><strong>Exogenous yield</strong></p><p>This refers to out-of-protocol mechanics where the protocol exploits external market inefficiencies/ opportunities to generate yield. Take USDe as an example: Ethena deploys users’ capital to capture funding rate arbitrage opportunities and redirect revenue back to users, minus the protocol&apos;s commission.</p></li></ul><p>CAP focuses on exogenous yield generation (not exclusively, but more on this later). But instead of executing strategies directly, CAP creates a competitive environment where specialized yield curators (Agents) regularly bid for the opportunity to borrow assets deposited on CAP. Here&apos;s how it works:</p><ul><li><p><strong>Lending market Structure</strong></p><ul><li><p>A separate market is maintained for each asset.</p></li><li><p>A hurdle rate ( minimum acceptable return) is assigned to each market</p></li></ul></li><li><p><strong>Competitive Bidding Process</strong></p><ul><li><p>Agents submit bids specifying: desired loan amount and estimated return for CAP depositors</p></li><li><p>Any bids that do not meet the hurdle rate are automatically filtered out</p></li><li><p>CAP allocates capital to agents that meet the hurdle rate, prioritizing the highest-yielding bids</p></li></ul></li></ul><p>Below is an illustration of what the lending market for USDC, one of the assets backing CAP’s USD stablecoin, could look like:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/0009805627df841115977c42c762650544be25e55da47a7af7bb40b4ac94c144.png" alt="Figure 1. Lending market of USDC on CAP" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 1. Lending market of USDC on CAP</figcaption></figure><p>Implementing a hurdle rate, at least initially, will guarantee depositors a minimum return and filter-out any suboptimal bids from agents trying to get more favourable borrowing rates.</p><p>By prioritizing the highest bidders when allocating loans CAP ensures automatic capital reallocation to highest-performing strategies, regardless of market conditions.</p><p>At the same time, accommodating a diversified set of Agents solves yield’s biggest bottleneck, scalability:</p><p>Yield opportunities persist in all market conditions, but maintaining optimal exposure in an ever-changing market is challenging. CAP’s approach of an asset-specific, unified pool of capital which multiple agents, specializing in different domains, can concurrently tap into solves this and presents an optimal solution for scalable competitive yield.</p><p>CAP’s success will depend, significantly, on the protocol’s ability to attract borrowing demand. ie, why would agents borrow from CAP instead of other markets?</p><p>CAP’s value proposition to borrowers is analogous to flash loans - the backbone of many complex DeFi strategies - but with the benefits of extending the zero-collateral requirement from one block to a few days, and the possibility of deploying capital not just to a specific chain but anywhere.</p><p>Another competitive feature CAP’s design unlocks is allow protocols offering specific yield strategies to tap into the Cap’s large pool of assets by onboarding them as agents. Think of this as a better alternative for protocols to scale their proven strategies compared to the overhead and uncertainty of liquidity mining campaigns. For example, Ethena could borrow stablecoins directly from CAP&apos;s pools to power their funding rate arbitrage strategy.</p><blockquote><p><strong>So what happens when an agent doesn’t repay borrowed funds?</strong> - Those of you who are still following</p></blockquote><p>The short answer is CAP leverages EigenLayer’s economic security marketplace to cover defaulting risks. Keep reading for the long answer.</p><h2 id="h-caps-productivity-based-incentives-on-eigenlayer" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0"><strong>CAP’s productivity-based incentives on EigenLayer</strong></h2><p>If you’re not familiar with EigenLayer, I highly recommend checking <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://mirror.xyz/0x83c21bb4Bf0EC116f5a1945AaeF847Fe3b321B32/Xg7gCAqgmcxgXhuwaWXVJDSCEIMn3_dewNWAie2Tn_k">CAP’s post</a> before continuing.</p><p>So far, EigenLayer use cases have been limited to leveraging capital provided by Restakers to underwrite risk for technical tasks performed by Operators. However, with a TVL north of $23B and less than 60 AVS’, is it fair to assume the demand for validation services hasn’t been able to match the supply of capital deposited to earn yield by Restakers on EigenLayer.</p><p>If we zoom out, EigenLayer’s trust marketplace extends beyond mere validation services to one where restaked capital can underwrite risks for any type of productive activities.</p><p>CAP leverages this framework, by taking advantage of the yield-seeking idle capital on EigenLayer, to introduce a <strong>productivity-based service</strong> where Restakers delegate capital to underwrite risk for Operators focusing on generating yield.</p><p>In other words, CAP will use EigenLayer to allow anyone to be an Agent and source cost-free capital from CAP’s Stablecoins to generate yield, as long as they have enough economic security from restakers to cover shortfalls.</p><p>Sounds complicated? Let’s try with an illustration of an Agent looking to borrow ETH:</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/fa97d46d1b74dfb68f2169bc8a72b0e21119d9bdc6a1f8393e031bd6504b024e.png" alt="Figure 2. Illustration of productivity-based dynamics between EL Restakers, Agents and CAP " blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 2. Illustration of productivity-based dynamics between EL Restakers, Agents and CAP</figcaption></figure><p>You would notice that the illustration used the worst outcome possible for the failure scenario: total loss of funds. This is highly unlikely ( but it helps demonstrate that even in the worst case CAP deposits remain safe.</p><p>Instead, I expect partial loss of funds and repayment delays to be the main failure reasons. In which case Restakers will be subject to minor slashing penalties.</p><h2 id="h-powering-megaeth-with-yield-bearing-cap-stablecoins" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0">Powering MegaETH with yield-bearing CAP stablecoins</h2><p>So far we’ve covered yield sources and risk management on CAP, but nothing about Stablecoins issuance or MegaETH.</p><p>In this part we’ll explore CAP’s key role as the issuance layer for yield-bearing assets on MegaETH, and potentially powering all the chain’s native dApps.</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/3979e576c9a97c4cd54d7d2df88740cf85fd5c22cf60b139a50a17db5ed5e58e.png" alt="" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="hide-figcaption"></figcaption></figure><p>Let’s zoom out for a bit and consider bridging: A bridge allows users to convert tokens that are native to one chain into a representation of those tokens on another chain. Take $ETH issuance on L2s as an example, it’s all done by locking the equivalent amount of $ETH in a smart contract on Ethereum mainnet. Thus, guaranteeing enough backing, even on worst case scenarios when everyone redeem bridged assets at once.</p><p>Similarly, assets deposited into CAP are also locked in smart contracts on Ethereum, and while they’re not idle assets they are always fully backed by Restakers’ collateral, if borrowers default.</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/fbe5b432bf19d8f9e09266ccbcabb91407efb4d507eac1f1ac4da943cc3b7465.png" alt="Figure 3. Classic bridge vs CAP Stablecoins redemptions: Worst case scenarios" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 3. Classic bridge vs CAP Stablecoins redemptions: Worst case scenarios</figcaption></figure><p>This enables the tokenisation of CAP deposits, and the yield they generate, on MegaETH.</p><p>From a design perspective, CAP is asset-agnostic and will accommodate any asset that could produce yield ( ie, with high-borrowing demand). But initially I would expect CAP to support for the following assets: USD, ETH and BTC. Let’s take a look at how that happens:</p><p><strong>Minting stablecoins on CAP:</strong></p><p>For every supported asset, a list of tokens to back CAP-token minting 1:1 are selected. For example, capUSD could be backed by deposits of USDC, USDT and potentially any other Stablecoin with high-borrowing demand.</p><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/05a83d240eb3b35c06f4cda5b050e0a94e5b143a1e2ac6a5ceddcd26c2bd2ecc.png" alt="Figure 4. high-level flow of minting CAP Stablecoins on MegaETH." blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 4. high-level flow of minting CAP Stablecoins on MegaETH.</figcaption></figure><p>CAP Stablecoins will be deployed as EigenLayer AVS’, meaning that any deposits will take place on Ethereum mainnet but to simplify the UX, users will be able to do so directly from MegaETH where they will receive the issued CAP Stablecoin.</p><p><strong>“Now that I’ve minted capUSD, does that mean I’m already earning yield?” - You, just now.</strong></p><p>Not exactly, CAP adopts a dual-token design for every Stablecoin:</p><ul><li><p>stableTOKEN: A token pegged to the asset, backed by deposits 1:1 that does not accrue any yield from CAP.</p></li><li><p>yieldTOKEN: A yield-bearing token with exposure to CAP exogenous yield.</p></li></ul><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/b05e317183aa6b0dc14ffe0e8a6201dd176ee769980af8fbe4bea45c2f4e4473.png" alt="Figure 5. High-level flow of Staking CAP stablecoins to earn yield, capUSD used as an example." blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 5. High-level flow of Staking CAP stablecoins to earn yield, capUSD used as an example.</figcaption></figure><p><strong>Why Two Tokens?</strong></p><p>Each version enables different use cases and caters to different users</p><ul><li><p>yieldTOKENs are best suited for capturing passive yield, generated from borrowing demand from Agents on EigenLayer.</p></li><li><p>stableTOKEN taps into active yield, enabled by native-MegaETH DeFi</p></li></ul><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/dd607b7cc001eb69027f0d035e00cc84df7d97af7fb8103d47a6c9e898b36536.png" alt="Figure 6. Source of yield for CAP’s dual token design." blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="">Figure 6. Source of yield for CAP’s dual token design.</figcaption></figure><p>In addition to the most-competitive yield, CAP aims to leverage MegaETH to offer its depositors more utility and capital efficiency for their assets. This is where the dual-design comes in:</p><ul><li><p>Enable leveraged exposure to CAP exogenous yield on MegaETH money markets via borrowing stableTOKEN against yieldTOKEN</p></li><li><p>Enabling CAP Stablecoins as borrowable assets and settlement assets to unlock additional sources of revenue for depositors ( this can only be done with stableTOKEN)</p></li><li><p>Integrating CAP stablecoins deeply within all MegaETH dApps to offer users more utility for their assets</p></li></ul><figure float="none" data-type="figure" class="img-center" style="max-width: null;"><img src="https://storage.googleapis.com/papyrus_images/3ffcf83cbe8dd138c067f62d9141f8ce5926e2b38720b88f27b94b5b7d6864af.png" alt="" blurdataurl="data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=" nextheight="600" nextwidth="800" class="image-node embed"><figcaption HTMLAttributes="[object Object]" class="hide-figcaption"></figcaption></figure><p>If succeeded, CAP Stablecoins will offer the most competitive yield for any specific asset, regardless of market conditions. This will quickly lead to substantial growth in deposits, as yield-seeking users rotate to CAP.</p><p>The tokenization of, both, deposits and yield will take place on MegaETH. This will lead to CAP-issued Stablecoins becoming the most liquid and most adopted versions of any asset, and CAP becoming the canonical bridge to MegaETH which, in turn, will lead to more yield.</p><h2 id="h-conclusion" class="text-3xl font-header !mt-8 !mb-4 first:!mt-0 first:!mb-0">Conclusion</h2><p>The idea of using economic security to underwrite risk for collateral-free loans is intriguing on its own, but when combined with the tokenization of positions on MegaETH—a high-performing blockchain— CAP has the potential to redefine the DeFi yield landscape entirely.</p><p>Of course, this doesn’t come without caveats. CAP’s success hinges on the effectiveness of EigenLayer’s slashing mechanism, as it acts as the backbone for protecting users’ deposits. This dependency introduces a layer of risk.</p><p>Another potential hurdle lies in scalability. Currently, EigenLayer boasts billions in idle capital waiting to underwrite risk for CAP’s yield agents. But what happens when borrowing demand outpaces the available economic security? This scenario could present an inflection point for CAP’s growth. However, considering EigenLayer’s current TVL of <a target="_blank" rel="noopener noreferrer nofollow ugc" class="dont-break-out" href="https://dune.com/hahahash/eigenlayer">$23B</a>, this seems like a distant problem and a good one to have as it would mean CAP succeeded.</p><p>That’s it for now! If you’ve made it this far, thank you for reading and I hope you found this helpful!</p>]]></content:encoded>
            <author>montagu-2@newsletter.paragraph.com (Montagu)</author>
            <enclosure url="https://storage.googleapis.com/papyrus_images/cee28893a7804892a98c54d934eb4f71284fc6149f77c6b0bc5bd9d439a2bf78.png" length="0" type="image/png"/>
        </item>
    </channel>
</rss>