A new proposal for the Aave protocol could introduce a permissioned Aave USAT gateway for an institutional-grade stablecoin that comes with a significant catch: the door to exit might be locked after entry.
Submitted on October 15 by TokenLogic, the plan outlines a system where the approval to swap back deposited assets could be revoked at any time, adding a new layer of risk for participants.
The governance proposal details the creation of a permissioned GHO Stability Module (GSM) on the Avalanche network. This module would allow approved institutions to deposit the dollar-backed stablecoin USAT, issued by Anchorage Digital Bank, and in return receive Aave’s native stablecoin, GHO.
How the Aave USAT gateway works
However, the permission check works both ways, meaning a firm’s access could be cut off, preventing them from reversing the trade to reclaim their underlying assets.
The proposed mechanism introduces a multi-step process for institutions looking to leverage their USAT holdings within the Aave ecosystem. First, an approved counterparty would supply USAT to Aave V4’s Tokenization Spoke, receiving a wrapped receipt token called waUSAT. This token represents their claim on the underlying deposit.
In the second step, the institution would swap these waUSAT tokens for GHO through the new GHO Stability Module. The GSM holds onto the waUSAT while the original USAT deposit remains in the Aave lending pool, earning yield. The crucial detail lies in the return journey.
To get their funds back, a user must swap GHO back to waUSAT, and this reverse swap requires fresh approval for every transaction.
According to the proposal documents, TokenLogic explicitly states that revoking a participant’s approval would block any further swaps. This includes exchanges intended to recover previously deposited assets, creating a scenario where an institution could be left holding GHO with no direct path back to their original USAT deposit via the module.
While the GHO itself remains freely transferable on the open market, its value could differ from the USAT it was swapped from, introducing potential slippage and loss.
The system design reflects a growing trend in decentralized finance to build compliant, permissioned environments for institutional players. This often requires trade-offs between the open, accessible nature of traditional DeFi and the controlled, KYC-gated world of traditional finance. The monolithic vs modular blockchain architecture of various protocols often dictates how such features can be implemented.
A complex and multi-layered route back to dollars
Getting cash back from this system is not a simple, one-click affair. The proposal creates a complex chain of dependencies that users must navigate. An institution seeking to redeem its GHO for U.S. dollars faces at least three distinct hurdles, each with its own set of conditions and potential points of failure.
The first obstacle is securing permission for the return swap within the GHO Stability Module. As noted, this approval is not guaranteed and can be revoked. Even if approval is granted, the user only receives waUSAT, the receipt token, not the actual USAT stablecoin. This leads to the second step: withdrawing the underlying USAT from the Aave V4 lending protocol.
This withdrawal is subject to standard protocol conditions, including sufficient liquidity in the reserve pool and the reserve not being paused by governance. If the pool is experiencing high utilization or is frozen due to emergency measures, the user would be unable to retrieve their USAT, even while holding the waUSAT receipt.
Understanding these mechanics is key to grasping altcoin tokenomics fundamentals, where utility is tied to accessibility.
Finally, after successfully obtaining the USAT, the institution faces the third hurdle: redeeming it for dollars with the issuer, Anchorage Digital Bank. This is not an on-chain process. It requires the holder to be an onboarded client of Anchorage in good standing, subject to the bank’s own terms, conditions, and potential delays for legal, risk, or operational reasons.
Proposal specifics and lingering questions
The TokenLogic proposal outlines several key parameters for the new module. It suggests an initial reserve funding of 65 million GHO for the new Avalanche reserve, with the module itself having a draw limit of 25 million GHO. The total exposure to the wrapped receipt token is capped at 20 million waUSAT.
While the proposal specifies zero fees for swaps in either direction within the GSM, this does not mean the entire process is free. Anchorage Digital charges its own redemption fee, currently listed at 10 basis points (0.10%), which would be applied during the final step of converting USAT to dollars. This distinction is crucial for any institution calculating the round-trip cost of using the gateway.
As of October 18, several critical details in the public proposal remain unspecified. Key contract addresses for the Avalanche USAT token, the waUSAT receipt token, and the commercial counterparty have yet to be filled in.
Furthermore, the proposal notes a discrepancy in its own funding calculations, where a figure for outbound bridge capacity does not match the stated percentage of initial funding, an issue that remains unresolved.
Anchorage Digital and the USAT stablecoin
The choice of USAT is central to the proposal’s institutional focus. USAT is a dollar-backed stablecoin issued by Anchorage Digital Bank, a national trust bank chartered by the U.S. Office of the Comptroller of the Currency (OCC). Its reserves are held in a segregated trust and consist of U.S. dollar cash and reverse repurchase agreements collateralized by U.S. Treasury securities.
However, access to USAT’s core functions is highly restricted. Issuance and redemption are limited to clients who have a pre-existing account relationship with the bank. Holding the token alone does not confer any right to redemption. LlamaRisk, a risk assessment service provider for Aave, reported an ordinary mint-and-burn minimum of $1 million, reinforcing the stablecoin’s focus on large-scale institutional clients.
The proposal represents another step in how digital currencies reshape industries by attempting to bridge the gap between regulated finance and DeFi. Yet, the stringent controls and revocable permissions highlight the persistent friction.
The Aave community must now weigh the benefits of attracting institutional capital against the introduction of centralized controls that run counter to DeFi’s core ethos. The proposal will move to a non-binding Snapshot vote before any implementation can proceed.