BlackRock BUIDL

Identification (as of September 4, 2026). Name: BlackRock USD Institutional Digital Liquidity Fund (BUIDL), tokenized and serviced by Securitize. Website: Securitize BUIDL product page. Docs: No public technical documentation repository was located; the operational interface is Securitize’s BUIDL page and bridge. Category: permissioned, institutional RWA/tokenized money-market fund—not a conventional permissionless DeFi protocol. Launch: March 20, 2024, initially on Ethereum. Chains: Ethereum, Arbitrum, Avalanche, BSC/BNB Chain, OP Mainnet, Polygon, Solana, and Aptos. Securitize confirmed the first seven by March 25, 2025; BNB Chain was added subsequently.

Native token: no governance or protocol token. “BUIDL” is the fund-share/security token, with permissioned transfers and issuer-controlled compliance functions. Contract identifiers / verification. Independent listings agree on these primary identifiers: Ethereum 0x7712…2aec; Arbitrum 0xa652…5872; Avalanche 0x53fc…6a2f; BSC 0x2d5b…f84f; OP Mainnet 0xa1cd…7cf5; Polygon 0x2893…0e99; Solana GyWgeq…6phr; Aptos 0x5003…5f89. Full addresses and a Dune cross-check are Not verifiable as of September 4, 2026 because Dune MCP was unavailable. The registry reports explorer/source verification for Ethereum and Solana and explorer verification for the EVM deployments, but this was not independently re-run here.

> Contradiction / evidence gap: DeFiLlama labels BUIDL as eight-chain and supplies the same truncated identifiers; no raw on-chain/Dune query is available to validate balances, deployment provenance, or chain-by-chain canonical-vs-bridged status. Fork lineage. BUIDL is not evidenced as a fork of an upstream DeFi protocol; it is an issuer-specific tokenized fund deployment. Therefore, “what changed versus upstream” is not applicable.

Public audit evidence for the canonical BlackRock/Securitize deployments, including scope-to-address mapping and whether all eight deployments were audited, is Not verifiable as of September 4, 2026. Search results contain audits for unrelated “BUIDL Official” projects using the same ticker/name, a material name-collision risk. A verified malicious-modification history in comparable BUIDL forks is Not verifiable as of September 4, 2026.

Securitize presents BUIDL as a real product portal rather than a marketing-only landing page: the site has a dedicated BUIDL page, and third-party coverage describes live subscription/redemption workflows through the Securitize portal rather than a static brochure. Public descriptions also indicate actual product functionality, including whitelisted transfers, redemption requests, and investor onboarding/KYC flows, which is consistent with an operational institutional fund experience rather than a template demo. For user-facing maturity, the strongest external signal is that BUIDL is referenced as accessible through Securitize and, separately, through an integration with UniswapX, implying active distribution plumbing and not just a standalone landing page.

However, a detailed assessment of broken links, fake metrics, and UX quality is not verifiable as of 2026-09-04 from the gathered sources. Open API: Not verifiable as of 2026-09-04. The gathered sources show an API example for RWA.xyz data and BlackRock Aladdin APIs, but no confirmed public open API for the BUIDL/Securitize product itself.

Securitize operates a public bug bounty / vulnerability disclosure program for its platforms, and the disclosed scope includes production and sandbox web applications plus the published security contact. The available sources do not provide a clear launch date for the program, nor a public list of paid findings or aggregate results. The program states rewards are discretionary and severity-based (Critical/High/Medium/Low), with response notification targeted within two weeks.

Scope listed in the indexed policy includes id.securitize.io, cp.securitize.io, their sandbox equivalents, and other Securitize-controlled web properties; black-box testing against production is permitted, while social engineering, phishing, DDoS, and third-party services are out of scope. For BlackRock BUIDL specifically, publicly indexed evidence confirms the fund is hosted on Securitize, but a BUIDL-specific bounty program or bounty payout schedule is not verifiable from the gathered sources as of 2026-09-04.

Оценка: высокий структурный риск концентрации на эмитенте, трансфер-агенте и кастодиане; прямое DeFi-, oracle- и LST/restaking-воздействие не подтверждено.

• Issuer/SPV: BUIDL — доля в BVI-фонде BlackRock USD Institutional Digital Liquidity Fund, Ltd.; BlackRock управляет портфелем, а активы должны состоять преимущественно из cash, U.S. Treasuries и fully-collateralized repo. Это не банковский депозит и не stablecoin; риск включает NAV-loss, ограничения/задержки выкупа, юридические или санкционные ограничения и неплатёжеспособность/операционный сбой фонда или его сервис-провайдеров.
• Custody/administration: BNY Mellon указан как custodian и administrator; Securitize выполняет placement/transfer-agent и токенизационные функции. Такая концентрация создаёт single-/dual-counterparty risk: сбой BNY может задержать NAV, расчёты или redemptions; сбой Securitize — whitelist, mint/burn, pause и transfer processing.
• Bridges/interoperability: Securitize объявила Wormhole основной interoperability-инфраструктурой. Следовательно, для cross-chain операций присутствует риск Wormhole messaging/verification, chain finality, replay/configuration и liveness; однако модель использует кастомные контракты Securitize, а не полностью permissionless bridge.
• Oracles/manipulation: базовый BUIDL-токен не требует DeFi price oracle для своей юридической стоимости; manipulation risk возникает в сторонних рынках/лендинге через stale NAV, thin liquidity или ошибочную valuation feed. Not verifiable as of September 6, 2026 для конкретных oracle integrations и лимитов.
• Stablecoin/LST/restaking/CEX/MM: прямая экспозиция к LST/restaking не подтверждена. USDC/CEX/market-maker exposure и внешние DeFi-позиции фонда: Not verifiable as of September 6, 2026. Отсутствие публичного exchange listing снижает, но не устраняет liquidity risk.
• Multi-chain: доли TVL/exposure по Aptos, Arbitrum, Avalanche, BSC, Ethereum, OP Mainnet, Polygon и Solana: Not verifiable as of September 6, 2026 без Dune. Предоставленный список включает BSC, тогда как доступный независимый отчёт подтверждает семь сетей и не перечисляет BSC — это неразрешённое расхождение. Failure scenarios: дефолт/заморозка фонда; insolvency или outage BNY/Securitize; Wormhole compromise или cross-chain halt; chain outage; whitelist/contract pause; depeg на вторичном рынке вследствие redemption queue или stale NAV.

BUIDL’s custody is organized in two layers. The underlying fund assets are held off-chain by BNY Mellon as custodian for the Treasury bills, repo, and cash, while BlackRock manages the portfolio and Securitize serves as the tokenization/transfer-agent layer that handles subscriptions, redemptions, KYC, and whitelisting. Investor-held BUIDL tokens can be self-custodied or held through approved institutional custodians, but only whitelisted wallets can receive or transfer the token.

The token layer is permissioned, not freely bearer-style.

Key-person risk: not verifiable as a specific disclosed person-level concentration as of 2026-08-30. What is verifiable is organizational concentration in BlackRock, BNY Mellon, and Securitize functions, which creates operational dependency risk if any of those institutions suffer outage, policy change, or control failure.

Key-management organization — BlackRock BUIDL BUIDL uses a centralized, role-based control model, not decentralized governance. Securitize controls the privileged token-contract roles through multi-permissioned wallets operated with Fireblocks infrastructure. Publicly identified roles are:

• MASTER: smart-contract upgrades and token-wide administration.
• ISSUER: routine minting for new subscriptions and related issuance operations.
• TRANSFER AGENT: operational actions such as burning, freezing, and handling impaired or lost tokens. Securitize’s DS Protocol separates these permissions through a Trust Service; roles can be assigned to multiple accounts or applications. The reference architecture also supports proxy upgrades, meaning the deployed token logic is not necessarily immutable. Fireblocks states that Securitize uses its key-management infrastructure to deploy and operate BUIDL smart contracts and to secure issuance and burn processes. However, the public disclosures do not specify the signer threshold, number or identity of signers, exact MPC/HSM configuration, geographic separation, key-rotation policy, recovery process, or whether the same signer configuration is used on every listed chain. Not verifiable as of September 4, 2026. This control layer is distinct from asset custody: BNY Mellon is identified as custodian/administrator for the fund’s traditional assets, while investors may hold BUIDL through institutional custodians or approved self-custody wallets. Investor wallets are permissioned/whitelisted, and Securitize states that impaired tokens can be burned and reissued against its off-chain security records. Risk conclusion: key risk is concentrated operational authority at Securitize—especially upgrade, mint, freeze, and burn privileges. Fireblocks and multi-permissioning reduce single-key compromise risk, but the public record does not establish the actual quorum or independence of signers. Chain-by-chain key-management equivalence is Not verifiable as of September 4, 2026.

As-of September 6, 2026. Dune MCP is unavailable in this run; therefore no on-chain query ID/execution ID, block-height snapshot, decoded proxy-admin events, role-membership checks, or timelock-delay measurement are available. Per policy: Not verifiable as of September 6, 2026 for current admins/owners, role renunciation, proxy-admin custody, timelocks, and cross-chain parity. Reported token addresses (not Dune-verified): Ethereum 0x7712c34205737192402172409a8f7ccef8aa2aec; Arbitrum 0xA6525Ae43eDCd03dC08E775774dCAbd3bb925872; Avalanche 0x53FC…6A2F; BSC 0x2D5BdC96D9C8AabBDB38c9A27398513e7E5ef84F; OP Mainnet 0xa1CD…57cF; Polygon 0x2893Ef551B6dD69F661Ac00F11D93E5Dc5Dc0e99; Aptos 0x50038b…45f89; Solana mint GyWgeq…btMw6phr. Ethereum also has BUIDL-I 0x6a9DA2D710BB9B700acde7Cb81F10F1fF8C89041. Architecture: DSToken-style regulated security token behind an upgradeable proxy; the reference implementation specifies an OpenZeppelin ERC-1967 proxy, and BSC/Polygon explorer records identify proxy implementations.

Roles include Owner/Master, Issuer, Transfer Agent, registry/compliance services, and proxy administrator. Issuer powers include mint/issue, burn, seize, and locking; Master can pause trading. Compliance/transfer-agent controls can restrict or freeze transfers. User → Proxy → DSToken implementation → Registry/Compliance/Transfer Agent ↓ Owner/ProxyAdmin → upgrade Exit risk: users do not have a permissionless redemption path in the token contract; exit depends on issuer/transfer-agent compliance, approved counterparties, and off-chain fund redemption.

A compromised privileged key could upgrade the implementation, mint unbacked BUIDL, burn/seize or lock balances, pause transfers, alter service addresses, or permanently freeze transfers. Direct withdrawal of underlying cash from the token contract is not established; reserves are held through the fund/custody structure. This is a high centralization/freeze/confiscation risk, not a permissionless DeFi vault.

Audits exist for Securitize DSToken and related components, but deployment-to-audited-bytecode parity and unresolved severity counts are Not verifiable as of September 6, 2026.

CoinFabrik — Securitize Smart Contract Audit

Cyfrin — Securitize DSToken v4 Audit v2.1

Cyfrin — Full Investor Locks v2.0

Cyfrin — Compliance Permissionless Diff v2.0

Halborn — DSToken v4 Security Assessment

Traditional financial audit of the BlackRock USD Institutional Digital Liquidity Fund Ltd (BUIDL) as a money market fund; covers portfolio, NAV, financial statements, and controls, not on‑chain code.

Ethereum BUIDL-related smart contracts (likely Securitize/PoolFactory infrastructure; not the public ERC‑20 at 0x7712c3… on Etherscan, which shows “No Contract Security Audit Submitted”).

Veritas Protocol — BUIDL Proxy automated security assessment

BlackRock BUIDL is not a founder-led retail DeFi project; it is BlackRock’s tokenized institutional money-market fund issued on Ethereum with Securitize acting as transfer agent, tokenization platform, and placement agent. The most clearly identified operating team is Securitize, whose public leadership includes co-founder/CEO Carlos Domingo and co-founder/president Jamie Finn; BlackRock also disclosed a strategic investment in Securitize and added Joseph Chalom to Securitize’s board. Founders / team: Securitize is publicly associated with Carlos Domingo and Jamie Finn, both of whom have long, visible professional histories rather than anonymous backgrounds. Jamie Finn’s prior roles include Telefónica/O2, Ericsson, Thumbplay, Kontera, AT&T, and Aki Technologies, which supports operating credibility in enterprise tech and business development.

Carlos Domingo is publicly named in Securitize and BlackRock communications as co-founder/CEO, but the available sources here do not fully document his prior projects/outcomes beyond that leadership role. Credibility / reality check: The project has strong off-chain substance: BlackRock’s own announcement, Securitize’s materials, and subsequent partner coverage show a real institutional product, not a purely web-fronted token. The presence of BlackRock, a named transfer agent, and board-level involvement materially reduce “anonymous team” risk. Office / jurisdiction: Public company listings show Securitize’s headquarters in Miami, Florida, with a Tokyo location also listed, indicating a real operating footprint rather than a shell-only presence. I could not verify the exact legal onshore/offshore entity structure from the gathered sources, so that remains Not verifiable as of 2026-09-04. Hacks / adverse history: In the sources gathered for this pass, I did not find verified evidence of founder-level hacks or major exploit outcomes tied to the core team; Not verifiable as of 2026-09-04.

BlackRock BUIDL is a tokenized U.S. dollar institutional liquidity fund issued by BlackRock via Securitize, not a typical DeFi-native protocol. Reputation assessment focuses on BlackRock and Securitize rather than pseudonymous founders. Founders / Sponsors / Investors

• BlackRock is the world’s largest asset manager (~$10T AUM) and has longstanding regulatory oversight in the U.S. and EU.
• The BlackRock USD Institutional Digital Liquidity Fund (BUIDL) is issued by BlackRock and distributed/tokenized via Securitize, a regulated digital asset securities firm.
• Securitize is registered with the U.S. SEC as a transfer agent and operates an alternative trading system through Securitize Markets, indicating higher regulatory scrutiny than typical DeFi platforms. Auditors / Attestations
• As a BlackRock-managed fund, BUIDL sits inside BlackRock’s standard fund governance and audit framework; however, specific public smart-contract audits for the token wrappers across chains are not easily traceable to standard DeFi auditors (e.g., Certora, Trail of Bits). Not verifiable as of 2026-09-04. Sentiment & Market Position
• Industry and media coverage is broadly positive, viewing BUIDL as a major proof point for institutional tokenization of real-world assets (RWA) and on-chain cash management.
• BUIDL is commonly cited as a cornerstone asset in RWA narratives and is integrated on multiple chains via partners such as Coinbase and Securitize. Criticisms & Concerns
• Main criticisms are *structural*, not fraud-related:
• Centralization and reliance on off‑chain legal claims to fund shares, meaning on-chain holders depend on traditional custody and transfer-agency records.
• BlackRock and Securitize maintain KYC/AML and whitelisting, which limits open DeFi composability and raises censorship/blacklisting concerns for some users.
• Smart contract risk on the bridging/tokenization infrastructure across multiple chains; detailed independent code audits for each chain are not publicly consolidated. Not verifiable as of 2026-09-04. Fraud / Rug / Insolvency / Legal / Sanctions
• No credible allegations of fraud, rug-pull, or insolvency involving BUIDL, BlackRock, or Securitize’s handling of this product as of 2026-09-04.
• BlackRock and Securitize are subject to extensive U.S. regulatory oversight; no protocol-specific enforcement actions or sanctions against BUIDL were identified as of 2026-09-04. Unresolved Risk Points for Institutional DeFi
• Dependence on off‑chain fund records vs. on-chain state.
• Limited transparency on per-chain smart contract audits and incident response.
• Counterparty/regulatory risk concentrated in BlackRock and Securitize.

Economic model (as of September 6, 2026): BUIDL is a permissioned, tokenized institutional money-market fund—not a leveraged DeFi strategy. It invests 100% of assets in cash, U.S. Treasury bills and repurchase agreements; yield is therefore organic interest income tied mainly to short-term U.S. rates, not token emissions or liquidity mining.

Dividends accrue daily and are distributed monthly as additional tokens while targeting a $1 NAV. Risk/positioning: Directional to short-term rates and Treasury/repo credit, with no verified evidence of looping, leverage, restaking, yield farming, or external protocol exposure. Because Dune MCP is unavailable, leverage and collateral composition cannot be independently verified on-chain: Not verifiable as of September 6, 2026. No lock-up was identified, but access is restricted to eligible, pre-approved investors; transfers are permitted 24/7/365 only between approved wallets. Primary subscriptions/redemptions and transfer permissions are handled through Securitize. Fees, gates and revenue: DeFiLlama reports management fees of approximately 18–50 bps depending on share class/chain and treats underlying-asset yield plus management fees as gross fees; its current estimate is $509,192 protocol revenue over the last 30 days.

These are aggregator estimates, not audited cash-flow data. TVL / chain exposure: DeFiLlama’s asset page reports $2.778B on-chain market cap: Ethereum $938.63M (33.8%), Solana $937.90M (33.8%), Avalanche $564.23M (20.3%), Aptos $161.34M (5.8%), BSC $136.26M (4.9%), OP Mainnet $26.41M (1.0%), Arbitrum $8.56M (0.3%), and Polygon $4.89M (0.2%). Native yield is shown as 3.57%. Contradiction: DeFiLlama’s protocol page separately reports $3.621B TVL, versus $2.778B on its BUIDL asset page; methodology/snapshot differences are unresolved. Dune total TVL, product-level TVL, chain trend, and Dune-vs-DeFiLlama reconciliation: Not verifiable as of September 6, 2026. APY history is not fully available from the retrieved sources; current reported yield is approximately 3.4–3.57%, with sustainability dependent on short-term rates and fee drag.

Subsidized-vs-organic yield split is Not verifiable as of September 6, 2026.

Assessment (as of September 6, 2026): BUIDL is a tokenized investment fund, not a conventional DeFi treasury. Its economic reserves are primarily off-chain and held through fund custody arrangements.

• Size / exposure: DeFiLlama reports $3.621bn TVL, up from the previously recorded $3.562bn. This is an analytics estimate of token balances, not proof of fund NAV or reserves. Chain distribution: Solana $977.9m (27.0%), Aptos $967.1m (26.7%), Ethereum $935.6m (25.8%), Avalanche $564.2m (15.6%), BSC $136.3m (3.8%), OP Mainnet $26.4m (0.7%), Arbitrum $8.6m (0.2%), Polygon $4.9m (0.1%).
• Composition / reserve policy: BUIDL states that 100% of assets are invested in cash, short-term U.S. Treasury bills and repurchase agreements secured by those assets. Tokens represent fund interests, not direct ownership of specific securities. Exact current percentages, maturities and counterparties are Not verifiable as of September 6, 2026.
• Custody / control: BNY Mellon is identified as BUIDL’s cash and securities custodian and administrator; BlackRock manages the portfolio. Securitize acts as transfer agent, tokenization platform and placement agent. Investors may use digital-asset custodians including Anchorage, BitGo, Copper, Coinbase Custody and Fireblocks. Transfers and redemptions are subject to eligibility, whitelist and onboarding controls.
• Addresses / on-chain balances: Specific reserve-wallet addresses and underlying securities balances are not publicly established by the reviewed sources. Dune MCP was unavailable for this run; therefore on-chain balances, wallet composition, liabilities and reserve coverage are Not verifiable as of September 6, 2026. Token contract addresses are not equivalent to reserve addresses.
• Attestations: A current independent public reserve attestation for BUIDL itself was not located. NAV/holdings disclosure to investors may exist, but a public attestation is Not verifiable as of September 6, 2026. Contradiction / risk finding: DeFiLlama’s $3.621bn TVL should not be treated as verified reserves; the fund’s assets are predominantly off-chain and the difference between token TVL and independently evidenced NAV is unresolved. Structured fields: liquid_reserves_usd: null; liabilities_usd: null

As of September 4, 2026. BUIDL has no native DeFi/governance token. “BUIDL” is the ticker for tokenized Class A shares of BlackRock USD Institutional Digital Liquidity Fund—not an emissions-based protocol asset. Contracts / supply. Reported deployments are: Ethereum 0x7712c34205737192402172409a8f7ccef8aa2aec; Arbitrum 0xa6525ae43edcd03dc08e775774dcabd3bb925872; OP Mainnet 0xa1CDAb15bBA75a80dF4089CaFbA013e376957cF5; Polygon 0x2893Ef551B6dD69F661Ac00F11D93E5Dc5Dc0e99; Aptos 0x50038be55be5b964cfa32cf128b5cf05f123959f286b4cc02b86cafd48945f89; Solana mint GyWgeqpy5GueU2YbkE8xqUeVEokCMMCEeUrfbtMw6phr; Avalanche 0x53fc…6a2f; BSC 0x2d5b…f84f. Full Avalanche/BSC addresses: Not verifiable as of September 4, 2026. DeFiLlama reports approximately $2.76bn supply/TVL at a $1 NAV; third-party market data reports total and circulating supply as equal, implying roughly $2.76bn market cap and FDV.

These are aggregator figures, not on-chain-verified; exact consolidated supply is Not verifiable as of September 4, 2026. Utility / economics. Each token represents a fund share backed by cash, U.S. Treasury bills and repo.

Holders receive daily income/dividends, normally reflected through additional tokens or distributions; there is no staking, buyback, burn-to-value, or protocol revenue-share mechanism. The shares are generally non-voting and do not confer governance over Securitize or BlackRock. Supply, allocations and unlocks. Supply is elastic through subscriptions/redemptions, not a fixed emission schedule.

No team/investor/treasury/community allocation or vesting schedule is applicable to fund shares; announced unlocks are Not verifiable as of September 4, 2026. Controls / concentration / liquidity. Contracts support minting, burning, allowlisting/blacklisting, transfer restrictions, pause/clawback and upgrades; issuer/transfer-agent control is centralized, but the exact controlling wallets are Not verifiable as of September 4, 2026. Top-holder concentration by chain and insider attribution are Not verifiable as of September 4, 2026. Public DEX liquidity is negligible relative to NAV (DeFiLlama shows about $24.6k on a Uniswap V2 pool); primary liquidity is issuer redemption and permissioned wallet-to-wallet transfers, not exchange order books.

A collapse in bitcoin below $10,000 is largely *indirect* risk for BlackRock BUIDL, which is a tokenized U.S. dollar money-market fund backed by Treasuries and cash, but it can create *pathways* to stress via collateral use, liquidity, and counterparty risk across DeFi. 1. Core product risk (NAV, peg, underlying assets)

• BUIDL invests in cash, U.S. Treasury bills, and repo to maintain a stable $1 per token value; its economics are those of a dollar money-market fund, not a crypto-asset.
• A bitcoin crash does not directly impair the underlying portfolio, unless it triggers broader systemic stress in traditional markets (e.g., forced selling of Treasuries or funding stress), which is second-order.
• For pure exposure to BUIDL’s underlying assets (off-exchange holdings, primary fund shares), risk from BTC < $10k is therefore *limited and mainly macro* (rates, government credit, liquidity in Treasuries). 2. DeFi / collateral usage channels BUIDL is now integrated into multiple DeFi rails (UniswapX, Binance off-exchange collateral, BNB Chain, multi-chain share classes). Key stress channels if BTC collapses:
• Collateral rehypothecation risk: BUIDL used as collateral on exchanges or in DeFi could face:
• Margin calls on positions paired with BTC (e.g., BUIDL/BTC traders), leading to forced liquidation of BUIDL positions.
• Operational or legal risk if an exchange becomes distressed while holding BUIDL as collateral.
• Liquidity and secondary market spreads:
• On UniswapX and other liquidity venues, a BTC crash tends to widen spreads, reduce RFQ depth, and increase slippage, even for “stable” RWAs.
• BUIDL secondary trading may remain functional but on-chain liquidity could thin out, increasing execution risk for large redemptions or exits.
• Cross-chain and bridge risk:
• Expansion to Aptos, Arbitrum, Avalanche, OP Mainnet, Polygon, Solana and BNB Chain depends on cross-chain infrastructure (e.g., Wormhole for BNB).
• Systemic crypto stress historically increases bridge exploit and de-peg risk; failure or compromise of bridging infrastructure could strand BUIDL share classes or create price dislocations between chains. 3. Counterparty and operational risk
• Securitize operates as regulated broker-dealer / transfer agent; redemptions and subscriptions remain off-chain and subject to traditional-market plumbing.
• Extreme crypto stress could still affect:
• Custody chain (e.g., if stablecoin or USDC rails used to subscribe see disruptions).
• Regulatory or bank counterparties if they restrict crypto-related flows during a market crisis. 4. Institutional risk posture (for your desk)
• Treat BUIDL as money-market fund exposure with crypto integration, not as a stablecoin; NAV stability risk is more tied to U.S. government & rates than BTC.
• In a BTC < $10k scenario, your focus should be:
• Mapping where BUIDL is pledged as collateral (CEXs, DeFi lending, RFQ venues) and tracing rehypothecation chains.
• Monitoring cross-chain liquidity and any chain-specific technical or governance incidents.
• Stress-testing redemption timing, settlement, and FX/stablecoin rails used to enter/exit BUIDL. On-chain verification of actual TVL per chain and specific collateral exposures: Not verifiable as of 2026-09-04.

A 20% depeg of BUIDL’s collateral (short‑term U.S. Treasuries, cash and repos) is an extreme tail event that would effectively be a 20% NAV shock to what is designed to be a stable, fully collateralized money‑market‑style fund. Under current structures, BUIDL shares target a constant $1.00 NAV, fully backed by these assets. ### 1. Nature of the stress

• BUIDL represents fractional ownership of a regulated, tokenized money market fund holding short‑duration U.S. government securities and cash equivalents.
• A 20% collateral devaluation implies NAV ≈ $0.80 per BUIDL until BlackRock can realize recoveries or adjust the portfolio.
• Because tokens are claims on the off‑chain fund, the economic loss sits in the fund, not in the tokenization wrapper (Securitize) itself. ### 2. Direct protocol impact
• Token holders: Qualified investors and institutional DeFi users holding BUIDL suffer mark‑to‑market losses on all chains (Aptos, Arbitrum, Avalanche, Ethereum, Optimism, Polygon, Solana, BSC via BNB Chain integrations).
• Yield protocols / venues:
• Off‑exchange collateral arrangements (e.g., Binance collateral use) face immediate margin re‑assessment; positions may be forcibly reduced or liquidated.
• RFQ/UniswapX trading venues that use BUIDL for liquidity see spreads widen, volumes drop, and may restrict quotes as NAV uncertainty rises.
• Stablecoin‑like usage: Any DeFi strategy treating BUIDL as a near‑risk‑free stable asset experiences:
• Under‑collateralization of loans against BUIDL.
• Liquidation cascades where LTV was calibrated assuming near‑zero volatility. ### 3. Cross‑chain and Wormhole bridge risk
• BUIDL is live on seven+ chains with cross‑chain transfers via Wormhole.
• A uniform 20% NAV drop applies to every representation of BUIDL; however:
• Chains with thinner BUIDL liquidity (smaller pools, fewer RFQ counterparts) will see larger price dislocations and slippage.
• Bridge design assumes fungibility at par; a persistent 0.80 price versus assumed 1.00 can create accounting and oracle mismatches in integrated DeFi protocols. ### 4. Systemic / behavioral effects
• Confidence shock: A regulated, BlackRock‑backed product depegging 20% would challenge the core narrative that tokenized Treasuries are *near‑cash*.
• Flight to safety: Institutions may rotate out of BUIDL and similar RWA tokens into conventional Treasuries or on‑chain assets with simpler risk profiles.
• Regulatory follow‑through: Given SEC‑registered status and institutional investor base, supervisory scrutiny and potential changes to risk, disclosure, and liquidity management frameworks are likely. ### 5. Data caveat
• On‑chain positions, protocol‑level exposures, and TVL by chain for BUIDL are Not verifiable as of 2026‑09‑04 without direct on‑chain queries and protocol‑specific position data; impact must therefore be assessed qualitatively based on public descriptions of BUIDL’s use in DeFi.

BlackRock BUIDL is a tokenized U.S. Treasury fund issued via Securitize on Ethereum (and wrapped to other chains), where the main economic counterparty is the fund / custodian / issuer complex, not DeFi borrowers. Because Dune/on‑chain queries are unavailable in this run, all on‑chain metrics are: Not verifiable as of 2026‑09‑04. ### 1.

Identify “top counterparty” for stress For BUIDL the critical counterparties are:

• Issuer / fund manager: BlackRock.
• Transfer agent / tokenization platform: Securitize.
• Custodian / bank holding Treasuries and cash for the fund (typically a major U.S. custodian; exact entity not verifiable here). On typical DeFi integrations (Aave, Morpho, etc.), BUIDL is treated as collateral or a yield-bearing asset; DeFi protocols themselves are *secondary* counterparties. ### 2. Stress: issuer–custodian complex insolvent Assume a failure where the custodian or BlackRock vehicle holding the underlying Treasuries becomes insolvent or assets are frozen. Loss path
• Underlying Treasuries/cash backing BUIDL are impaired or inaccessible.
• Net asset value (NAV) of the off‑chain fund falls; redemption in USD is halted or deeply haircut.
• On-chain BUIDL tokens continue to exist but become partially or fully unbacked – a “wrapped claim” with broken linkage. Who absorbs losses
• Token holders (wallets, CeFi exchanges, DeFi protocols holding BUIDL as collateral) bear economic loss: BUIDL market price de-pegs from 1 USD and can gap toward recovery value (if any).
• BlackRock/Securitize equity holders may suffer via legal claims, but that is off‑chain; smart contracts do not socialize losses. Compensation
• Any compensation would be via off‑chain legal/regulatory processes (insurer, SIPC‑like schemes if applicable, court‑ordered recoveries). Not encoded on-chain; therefore DeFi users are unsecured claimants. ### 3. Impact path via smart contracts
• Core BUIDL ERC‑20 / token contracts:
• Continue to function; no automatic write‑down logic. Smart contracts cannot detect custodian insolvency. Not verifiable as of 2026‑09‑04.
• Bridged / wrapped forms on other chains (Arbitrum, Solana, etc.):
• Bridges maintain 1:1 representation versus Ethereum BUIDL. If Ethereum BUIDL is unbacked, bridged tokens inherit the same economic impairment.
• DeFi lending / collateral protocols:
• Oracles typically continue to report near‑par price until secondary markets reprice; once price collapses, positions using BUIDL as collateral are liquidated, spreading losses to liquidators and LPs.
• AMMs/LPs:
• Pools holding BUIDL auto-rebalance; LPs end up overexposed to the de‑pegged asset and realize losses. No protocol-level guarantee or automatic compensation mechanism for BUIDL holders could be identified in public docs; any safety net is purely regulatory / legal, not smart-contract based.

In a committed fraud by DAO/owners scenario for BlackRock BUIDL, the dominant risk is loss of trust, potential asset misappropriation at the tokenization/issuer layer, and rapid unwind of secondary-market liquidity across all chains. 1. Governance / ownership structure (fraud vector)

• BUIDL is a tokenized U.S. dollar institutional liquidity fund issued by BlackRock, with tokenization and distribution handled by Securitize.
• Governance is centralized, not a typical DAO: BlackRock controls the fund; Securitize controls tokenization, compliance, and onchain representations.
• Smart contracts appear to be permissioned and operated by Securitize/BlackRock (whitelists, KYC, transfer restrictions). *Implication:* A “fraud by DAO” stress must be reframed as fraud by issuer (BlackRock) or tokenization platform (Securitize)—e.g., misreporting NAV, misusing underlying assets, or issuing tokens not backed 1:1 by fund shares. 2. On-chain vs off-chain exposure
• Underlying assets are off-chain money market / short-term U.S. Treasuries, custodied in traditional finance infrastructure.
• On-chain positions on Aptos, Arbitrum, Avalanche, BSC, Ethereum, OP, Polygon, Solana are merely claims on the off-chain fund, not bearer assets. *Fraud scenario:* If issuer or Securitize misrepresents backing or diverts assets, on-chain holders become unsecured or subordinated claimants in legal resolution. On-chain TVL metrics from aggregators cannot prove backing; they only show token balances—"Not verifiable as of [date]" for true asset coverage. 3. Impact pathways
• NAV / price gap: Tokens may continue to trade at par on-chain until fraud is revealed; then rapid depeg versus expected $1, with liquidity collapse on all supported chains.
• Redemption freeze: Issuer can halt redemptions or transfers through centralized controls; holders face gating and legal recourse instead of smart-contract-based recovery.
• Cross-chain contagion: Protocols using BUIDL as collateral (lending, structured products, RWAs) would mark down positions, triggering liquidations and possible insolvency for leveraged users. 4. Legal / regulatory overlay
• As a BlackRock product tokenized by Securitize, BUIDL is embedded in U.S. securities regulation (SEC, broker-dealer/ATS rules).
• Fraud would likely be pursued via regulatory enforcement and civil litigation; on-chain holders rely on off-chain legal outcomes rather than any autonomous recovery mechanism. Risk analyst takeaway: For institutional DeFi users, the key risk is issuer / platform integrity and regulatory oversight, not smart-contract DAO governance. Exposure sizing must treat BUIDL as counterparty risk to BlackRock/Securitize plus legal-claims risk on the fund, with conservative assumptions for recovery in a fraud scenario.

If BUIDL’s primary yield source (short‑term U.S. Treasuries, repos and cash) turns negative over a 30‑day window, the token should still hold ~$1 NAV, but your *income stream collapses or in extremis flips to net costs*, shifting risk from rate to liquidity, counterparty and structural risks. ### What “negative 30‑day yield” means for BUIDL

• BUIDL invests 100% in cash, U.S. Treasury bills, and repurchase agreements, benchmarked to secured overnight financing and short‑term USD rates.
• Yield today is around low‑to‑mid single digits annualized, paid as extra BUIDL tokens monthly while targeting stable $1 per token.
• A negative 30‑day yield scenario = after fees, the fund’s *net* income on T‑bills, repo and cash over that month is ≤0. Operational consequences for a DeFi integration:
• No monthly rebase / distribution: If net yield ≈0 or <0, Securitize/BlackRock would logically not mint new BUIDL as dividends; you hold the same token count and value stays near $1 absent credit or liquidity stress. This is an inference; exact policy is Not verifiable as of 2026‑09‑04.
• Protocol‑level yield goes to zero: Any DeFi protocol using BUIDL as its primary yield leg (e.g., vaults that pass through BUIDL’s rate) will see headline APY collapse to 0% or slightly negative over that 30‑day window.
• Fee drag becomes visible: Management/operational fees that were previously absorbed by positive rates become explicit drag; net return to holders may be slightly negative. Risk re‑assessment for an institutional DeFi user:
• Interest‑rate risk realization: BUIDL is economically a tokenized money market fund; negative short‑term USD rates or a spike in fees vs. gross yield would directly hit distributions.
• Liquidity risk: In stress, large redemptions from institutional holders across chains (ETH, BNB, etc.) could force rapid unwinding of T‑bills and repo; on‑chain liquidity pools using BUIDL may see slippage and wider spreads. Specific chain‑level TVL shares are Not verifiable as of 2026‑09‑04.
• Collateral and rehypothecation risk: Where BUIDL is used as collateral (e.g., CEX margin, DeFi lending), negative yield reduces its attractiveness, potentially tightening collateral haircuts or triggering position re‑pricing. From a pure DeFi risk‑management perspective, the key stress outcome is yield compression to ~0% with preserved principal, plus secondary effects: liquidity stress, fee drag, and tighter collateral terms on all chains where BUIDL is integrated, without direct protection from protocol‑level mechanisms beyond normal money‑market fund safeguards.

As of September 13, 2026, BUIDL is centrally controlled by the issuer and service providers, not by a DAO. BlackRock USD Institutional Digital Liquidity Fund Ltd. is a British Virgin Islands limited company formed in 2023 (SEC CIK 0002013810); disclosed directors are Ian Pilgrim, W. William Woods, Noelle L’Heureux and Jennifer Collins.

The BVI corporate registration number is Not verifiable as of September 13, 2026. BlackRock Financial Management, Inc. is investment manager; BNY Mellon is custodian and administrator; Securitize LLC, a Delaware LLC, provides the platform, transfer-agent, registrar and dividend-disbursing functions. Control map: the issuer gives written instructions for issuance and can instruct Securitize regarding transfers; Securitize maintains the register and may process transfers/redemptions under the offering memorandum.

The underlying assets are held in fund accounts with BNY Mellon, subject to the fund board’s supervision. There is no identified public proposal, token-holder voting, DAO constitution, or governance forum controlling upgrades, parameters, issuer instructions, or fund assets. DAO governance is therefore false; any apparent on-chain token ownership is economic exposure, not protocol governance.

Proposal process is corporate/legal—issuer, investment manager, board, custodian and contractual service providers—not community voting. Dune was unavailable in this run. Voting concentration, top holders, contract-admin ownership, proxy/admin history, multisig signers, signer independence, timelock delay, and chain-by-chain exposure are Not verifiable as of September 13, 2026.

No public evidence reviewed establishes a timelock or multisig governance layer. Technical ability of an admin key or contract role to drain or forcibly move user funds is Not verifiable as of September 13, 2026; corporate redemption/transfer authority exists without a DAO vote, but that is not equivalent to verified smart-contract drain capability. BUIDL-specific Terms of Service, company registration number, and directors of Securitize LLC are Not verifiable as of September 13, 2026.

BlackRock’s general website terms use New York law and New York courts, but are not confirmed as BUIDL-specific.

As of September 4, 2026 Legal structure / entity. BUIDL is not a permissionless DeFi protocol; it is a tokenized private fund. The issuer is BlackRock USD Institutional Digital Liquidity Fund Ltd., incorporated in the British Virgin Islands (BVI) in 2023. BlackRock Financial Management, Inc. is investment manager; Securitize LLC provides platform/transfer-agent services, while Securitize Markets, LLC acts as placement agent.

Classification and restrictions. The issuer filed SEC Form D under Investment Company Act §3(c)(7), and states it is not a registered investment company. This is an exempt/private securities offering, not a retail money-market fund or deposit. Access is limited to eligible institutional/qualified investors; transfers are permissioned and subject to onboarding, contractual restrictions, and applicable securities laws.

The SEC filing expressly warns that the SEC has not reviewed or validated the Form D. KYC/AML and data protection. Securitize publishes AML/CIP disclosures and its regulated broker-dealer materials describe customer onboarding and securities-market compliance. Expect identity, beneficial-owner, sanctions, jurisdiction, accreditation/qualified-purchaser and source-of-funds checks.

Personal and institutional data is therefore concentrated with Securitize and related service providers; the precise BUIDL-specific retention, cross-border transfer, breach-notification and deletion terms were Not verifiable as of September 4, 2026 from the accessible public materials. Warnings/enforcement. No active regulator action against BUIDL or its BVI issuer was identified. BlackRock Advisors did receive an SEC 2023 cease-and-desist/order concerning inaccurate disclosures for a different fund and obtained a waiver; this is sponsor-level historical risk, not a BUIDL enforcement action.

Securitize entities also appear in 2026 Delaware commercial/IP litigation, apparently unrelated to BUIDL. Actual risk. The BVI fund wrapper and regulated U.S. intermediaries reduce—but do not eliminate—issuer, manager, custodian, redemption, sanctions-screening, smart-contract, chain-outage, cross-border insolvency and investor-rights risks. Multichain deployment does not make the underlying shares fungible or unrestricted. Structured fields:

• active_enforcement: false
• sanctioned: false (no official entity-level designation identified; address-level screening remains necessary)
• entity: BlackRock USD Institutional Digital Liquidity Fund Ltd.; manager: BlackRock Financial Management, Inc.; placement/platform providers: Securitize Markets, LLC and Securitize LLC
• jurisdiction: British Virgin Islands (issuer); United States—Delaware/New York entities (service providers)

Legal entity per GLEIF: BLACKROCK FINANCIAL MANAGEMENT INC. (LEI 549300LVXYIVJKE13M84; jurisdiction US-DE; registration ACTIVE). OFAC SDN screening of 'BlackRock Financial Management Inc', 'Securitize LLC', 'Securitize Markets LLC', 'BlackRock BUIDL': no match. SEC litigation and administrative release feeds: no mention.

BlackRock BUIDL is not an issued retail fiat stablecoin; it is a tokenized institutional money-market fund share that targets a stable $1 NAV, so own_stablecoin is false. In the retrieved independent sources, no verified historical depeg event for BUIDL was found; the latest market pages still show it at or near $1.00. However, because on-chain verification is unavailable in this run and the sources reviewed do not establish a complete historical price record, depeg_count, last_depeg_date, and max_depeg_pct are not verifiable as of 2026-09-06. stable is set to true based on the fund’s stated stable-NAV design and the absence of any verified depeg in the retrieved sources.

BUIDL is a permissioned tokenized fund, not a decentralized yield protocol: investor access, transfers, redemptions, and token administration depend on BlackRock, Securitize, custodians, and approved counterparties. The principal risks are centralized control, legal/eligibility constraints, liquidity mismatch, operational/security failure, and underlying cash-equivalent asset risk. Current on-chain TVL, chain-by-chain exposure, and cross-chain concentration are Not verifiable as of September 5, 2026 because Dune access is unavailable.

Top 5 strengths of BlackRock BUIDL are: 1) Institutional credibility: it is BlackRock’s tokenized fund, distributed through Securitize, which adds strong brand trust and a regulated issuance stack. 2) Regulated structure: it operates within a compliance-focused framework with whitelisted/permissioned access, which is important for institutional users. 3) Multi-chain reach: it is available across multiple networks, improving accessibility and integration options.

4) On-chain liquidity and settlement: it offers near-instant, 24/7 USDC redemption and faster transfer/settlement than traditional fund rails. 5) Composable treasury asset: it is useful as a tokenized short-duration Treasury product that can serve as collateral and a building block for DeFi/RWA strategies.