[Asset Technical Assessment] USDe on Aave V3 Monad
Author: Aave Labs
Date: 2026-06-30
Summary
Technical assessment of USDe for onboarding to Aave V3 Monad, following the Technical Asset Listing Framework.
Overall result: 
MEDIUM
USDe on Monad is an unusually clean bridged token: an immutable LayerZero V2 Omnichain Fungible Token (OFT) with no token-level admin powers at all (no owner mint, no cap, no blacklist, no freeze, no pause, no fee on transfer, no rebase, no hooks), whose supply is created only by a rate-limited LayerZero message that has cleared four independent required verifiers and is fully backed by canonical USDe locked on Ethereum. The considerations that hold this at Medium are that the bridge configuration and delegate on both ends sit on a single 5-of-10 Ethena Safe with no on-chain timelock, and that no dedicated published audit of Ethena’s OFT deployment was located.
Listing Recommendation
From a technical standpoint, USDe on Aave V3 Monad is technically eligible for listing, with conditions to surface and revisit as exposure to the asset grows. The LayerZero bridge configuration and delegate, on both the Monad OFT and the Ethereum lockbox, are a single 5-of-10 Ethena Safe with no on-chain timelock, which can rewire the verifier set, peers, libraries, or rate limits in a single transaction; obtaining a commitment from the issuer to pre-notify Aave governance of such changes is recommended as a hardening measure. No dedicated published audit of Ethena’s OFT, OFT Adapter, and rate-limiter deployment was located. None of these is a blocker for an initial listing.
Asset under review
| Field |
Value |
| Asset |
USDe (Ethena’s synthetic dollar), a bridged representation on Monad of Ethereum-canonical USDe |
| Target chain |
Monad (chain ID 143) |
| Target market |
Aave V3 Monad |
| Token contract |
0x5d3a1Ff2b6BAb83b63cd9AD0787074081a52ef34 |
| Native to target chain? |
No. Bridged: a LayerZero V2 burn-and-mint OFT on Monad, with canonical USDe locked in an OFT Adapter (lockbox) on Ethereum. |
| AAcA classification |
Stablecoin (USD-pegged synthetic dollar) |
USDe is Ethena’s synthetic dollar, targeting a value of one US dollar through a delta-hedged collateral strategy held largely off-chain. On Monad it is not independently issued: the canonical USDe is locked inside an OFT Adapter on Ethereum and a matching amount of USDe is minted on Monad, kept in step by LayerZero cross-chain messages. The Monad token itself is a plain, immutable token whose value depends on the Ethereum lockbox staying fully collateralised and on the bridge being honest.
0. Pre-screening
USDe is a non-proxy contract reporting name and symbol USDe, 18 decimals, and a negligible total supply consistent with a freshly seeded deployment. The asset is in the USD-pegged stablecoin class, which is not a non-approved or sanctioned category, and the same shared address resolves on Ethereum to the OFT Adapter (the lockbox), so the deployment is disambiguated by the per-chain reads rather than the address alone. The contract is immutable: the implementation, admin, and beacon storage slots are empty and there is no upgrade path, so there is no implementation rotation to track. The deployed bytecode behaves as the canonical LayerZero V2 OFT, with the deployed source verified on the Monad explorer.
Rating: 
GOOD
1. ERC20 Compliance
USDe on Monad is a standard ERC20 with 18 decimals: transfer() and transferFrom() return bool, with no fee on transfer, no rebasing, no ERC777 or ERC1363 hooks, and no flash mint. There is no allowlist, blacklist, or transfer restriction, so any address, including contracts, can hold and transfer it freely. There is no mint entry point on the token itself, and the absences are present by design rather than merely zeroed. 18 decimals sits within Aave’s accepted band and needs no precision adjustment.
Rating: GOOD
2. Oracle
A live Chainlink USDE/USD feed exists on Monad with 8 decimals and a 1-hour heartbeat, and at review it was fresh, well inside its heartbeat. The feed sits in Chainlink’s Low Market Pricing Risk category with a Stablecoin asset class, so the price reference is usable for parameterisation.
Rating: GOOD
3. Access Control
The token itself is admin-free: there is no AccessControl role system and no privileged token role of any kind, so minter(), cap(), paused(), and isBlacklisted() are all absent, and the issuer cannot mint, freeze a holder, blacklist, or block an Aave liquidation at the token level. New supply is created only by the verified LayerZero receive path, not by any callable mint function, and burning happens only on outbound bridging, so no account can burn from an arbitrary wallet. The contract is immutable, so there is no proxy admin and no upgrade authority to capture. The only privileged authority that exists is over the LayerZero bridge configuration and delegate, which sits on a 5-of-10 Ethena Safe with no on-chain timelock (covered in Section 6).
Rating: MEDIUM → the token is admin-free and immutable, but the bridge configuration and delegate sit on a 5-of-10 Safe with no on-chain timelock, the residual concern carried into Section 6.
4. Exchange Rate and Yield
Not applicable. USDe is a USD-pegged stablecoin and is not yield-bearing: one USDe targets one US dollar, with no exchange rate exposed on-chain and no accrual mechanism to mis-price. No Correlated-Asset Price Oracle (CAPO) requirement arises, since a flat USDE/USD feed prices it directly. The staked, yield-bearing form, sUSDe, is a separate asset.
Rating: 
N/A
5. Token Architecture
USDe on Monad is a single immutable token with a single supply path: balances rise only via verified LayerZero inbound mints and fall via outbound burns, with no fixed token-level cap. Every supply change emits a standard Transfer event to or from the zero address, providing observability, and there are no transfer restrictions, so the token is fully composable. The contract contains no tx.origin authorization and no delegatecall, and all privileged functions are limited to the owner-gated LayerZero configuration setters. There is no migration contract or duplicate entry point to the same supply.
Rating: GOOD
6. Bridge and Cross-Chain Risk
Monad USDe is a LayerZero V2 OFT: it mints and burns locally in response to verified messages, while canonical USDe is locked on Ethereum in the OFT Adapter, a burn-and-mint on Monad against lock-and-release on Ethereum design. The route is a single reciprocal lane to the Ethereum lockbox with no other peers, and message verification requires four independent Decentralized Verifier Networks (DVNs) to attest (LayerZero Labs, Canary, Nethermind, and Horizen Labs, none operated by the issuer), over pinned canonical message libraries; the lane is rate-limited to 10,000,000 USDe per hour on each leg, inbound to Monad and outbound. Backing is a large surplus: the Ethereum Adapter holds roughly 1.81 billion canonical USDe against a negligible Monad supply, so the locked balance vastly exceeds the Monad representation. The residual concern is that the bridge configuration and the LayerZero delegate, on both the Monad OFT and the Ethereum lockbox, are the same 5-of-10 Ethena Safe with no on-chain timelock, alongside the single-provider design.
Rating: MEDIUM → four independent required DVNs, pinned libraries, a single clean lane, and a fully collateralised lockbox are strong, but the bridge configuration and delegate concentrate on a 5-of-10 Safe with no on-chain timelock on both ends.
7. Audit and Security History
The deployed token behaves as the canonical LayerZero V2 OFT and uses the standard message libraries and rate limiter, and LayerZero’s OFT and OFT Adapter standard contracts carry public audits. No audit dedicated to Ethena’s assembled cross-chain deployment, the OFT, the Ethereum OFT Adapter, and the rate-limiter wiring, was located in Ethena’s public audit set, so the building blocks are audited at the standard-contract level while the specific deployment and its configuration are not covered by a dedicated published report. The contract is immutable, so no implementation rotation is possible, and the deployed source is verified on the Monad explorer.
Rating: MEDIUM → built on LayerZero’s audited OFT standard, but no dedicated published audit of Ethena’s OFT, Adapter, and rate-limiter deployment was located.
8. Dependencies
USDe on Monad rests on canonical Ethereum USDe and Ethena’s off-chain delta-hedged collateral as the ultimate backing, which is the dominant economic dependency and is attested off-chain rather than verifiable through on-chain reads. Its on-chain dependencies are LayerZero V2 for supply integrity and the Ethereum lockbox that holds the roughly 1.81 billion USDe backing all remote supply, both the audited standard contracts, plus the Chainlink USDE/USD feed for valuation. Redemption to Ethereum runs through the bridge, where Monad USDe is burned and canonical USDe is released, subject to the outbound rate limit. No dependency in the critical path is controlled by an externally owned account (EOA), though the bridge and lockbox are governed by the no-timelock Ethena Safe.
Rating: MEDIUM → the on-chain dependencies are the audited standard contracts and the escrow is a large surplus, but the bridge and lockbox are governed by a no-timelock multisig and the dominant economic backing is attested off-chain rather than verifiable on-chain.
9. Summary
Findings table
Ratings in this table are plain text (Good / Medium / Critical / N/A), no icons.
| Area |
Key finding |
Rating |
| 0. Pre-screening |
Immutable non-proxy USDe at 0x5d3a1Ff2…ef34, freshly seeded; USD-pegged stablecoin class; behaves as the canonical LayerZero V2 OFT, no implementation rotation. |
Good |
| 1. ERC20 |
Standard 18-decimal ERC20; returns bool, no fee on transfer, no rebase, no hooks, no flash mint, no transfer restrictions; no token-level mint entry point. |
Good |
| 2. Oracle |
Live, fresh Chainlink USDE/USD feed (8 decimals, 1-hour heartbeat, Low Market Pricing Risk, Stablecoin class); prices USDe directly. |
Good |
| 3. Access control |
No token roles, mint, blacklist, freeze, pause, or upgrade path; supply only via the verified bridge path, burn on outbound only; sole authority is the 5-of-10 Ethena Safe over bridge config, no timelock. |
Medium |
| 4. Exchange rate / yield |
Not yield-bearing; 1:1 USD peg, no exchange rate exposed on-chain, no accrual, no CAPO requirement. |
N/A |
| 5. Token architecture |
Single immutable token, single bridge supply path with standard events; no tx.origin, no delegatecall; no duplicate or migration entry point. |
Good |
| 6. Bridge and cross-chain |
LayerZero V2 OFT, four independent required DVNs, pinned libraries, single reciprocal lane to the Ethereum lockbox (escrow surplus), rate-limited; owner and delegate are a 5-of-10 Safe with no timelock on both ends. |
Medium |
| 7. Audit and security |
Built on LayerZero’s audited OFT standard, but no dedicated published audit of Ethena’s OFT, Adapter, and rate-limiter deployment was located. |
Medium |
| 8. Dependencies |
LayerZero V2 and the Ethereum lockbox (audited standard, surplus escrow), Chainlink feed for pricing; bridge and lockbox governed by a no-timelock Safe; off-chain collateral attested off-chain. |
Medium |
Disclaimer
Aave Labs has no formal or informal affiliation with Ethena or the USDe issuer beyond this technical assessment. Aave Labs has not been compensated by Ethena or any related party in connection with this work.
Copyright
Copyright and related rights waived via CC0.