Stablecoin Run Risk vs Money Market Fund
The mechanics by which stablecoin peg pressure and money market fund redemption shocks propagate into systemic stress — compared across reserve structure, run trigger, and regulatory response.
Definition
What is a stablecoin run?
A stablecoin run occurs when holders collectively attempt to redeem their tokens faster than the issuer can liquidate reserves — or, in the case of algorithmic stablecoins, when peg pressure creates a reflexive collapse of the collateral system. It is the digital asset equivalent of a bank run or money market fund redemption shock.
The term run dynamics covers the mechanics by which peg pressure spreads: how quickly redemptions accelerate, whether the issuer can absorb redemption volume at par, whether secondary market prices diverge from the $1.00 redemption value, and whether a brief depeg becomes a structural break. Understanding these dynamics is essential for any institutional firm that holds stablecoins as a settlement asset — not because USDC is likely to break its peg, but because the operational response plan must exist before the stress event occurs.
How money market fund runs work
A money market fund (MMF) holds short-term debt instruments — commercial paper, certificates of deposit, Treasury bills, agency notes — and promises investors a stable $1.00 net asset value (NAV) with same-day or next-day liquidity. The structural vulnerability is a liquidity mismatch: the fund holds assets that may take time to sell at par, while investors can demand redemption at any time.
Under SEC Rule 2a-7, a government MMF must maintain at least 10% of its assets in daily liquid assets and 30% in weekly liquid assets. These minimums exist to absorb redemption spikes without fire sales. The shadow NAV — the mark-to-market value of the fund's portfolio per share — is calculated daily. If the shadow NAV falls below $0.9950, the fund has broken the buck, an event requiring immediate SEC notification and potentially triggering a fund wind-down.
The 2008 Reserve Primary Fund break triggered a broader run on the prime MMF industry, as investors interpreted one break as a systemic signal. The SEC's subsequent reforms — enhanced liquidity requirements, mandatory redemption gates at the 30% WLA floor, and swing pricing — were designed to contain this contagion dynamic. The institutional lesson was clear: a confidence shock in one MMF becomes a redemption shock across the entire fund complex within hours.
How fiat-backed stablecoin stress events differ
A fiat-backed stablecoin holds reserves equal to 100% of tokens in circulation, invested exclusively in HQLA: Treasury bills with maturities of 90 days or less, FDIC-insured bank deposits, Federal Reserve balances, and Treasury-collateralized repos. The payment stablecoin reserve requirements article covers the GENIUS Act asset eligibility rules in detail.
The structural difference from a prime MMF is significant. USDC reserves are shorter-dated, more liquid, and free of credit risk. A prime MMF holding commercial paper faces illiquidity risk if that paper cannot be sold in a stress event. USDC reserves in 90-day T-bills carry essentially no credit risk — only the operational question of how quickly the issuer can process the liquidation and return dollars.
A stress scenario for USDC concentrates at the issuer level: Can Circle process a spike in redemption requests within the settlement window? Are the underlying T-bill positions large enough to require multiple days to unwind at scale? Is there sufficient bank deposit liquidity to absorb immediate cash redemptions before Treasury positions can be sold? These are operational run questions rather than solvency questions — the assets exist; the question is the pace at which they can be converted at par.
This distinction matters for how institutional desks classify stablecoin risk. The appropriate reserve adequacy monitor for a fiat-backed stablecoin is not asset credit quality (as it would be for a prime MMF) but redemption processing capacity and reserve composition verification.
The algorithmic stablecoin death spiral
Algorithmic stablecoins maintain their peg through protocol mechanisms rather than fiat reserves — typically by holding a governance or companion token as collateral, using arbitrage incentives to restore the peg when it drifts, or operating as an over-collateralized crypto-backed system.
The structural vulnerability is reflexivity: collateral value and the stablecoin's peg are linked. When the stablecoin de-pegs, arbitrage mechanisms require selling the collateral token, which reduces collateral value, which weakens the peg further, which increases selling pressure. The Terra/UST collapse in 2022 illustrated this feedback loop at scale: the stablecoin lost its peg, arbitrage mechanisms accelerated LUNA selling, LUNA collapsed, and UST followed — within 72 hours.
This is categorically different from an MMF run or a fiat stablecoin stress event. It is not a liquidity problem that can be solved by faster reserve liquidation, or an operational problem solvable by processing redemptions at scale. It is a fundamental design failure where the mechanism intended to restore the peg instead accelerates its collapse. Institutional risk frameworks that treat all stablecoins as equivalent — fiat-backed, crypto-backed, and algorithmic — cannot correctly assess the run dynamics of any of them.
The $0.995 threshold — universal institutional circuit breaker
The $0.995 threshold — originally defined in Rule 2a-7 as the break-the-buck level for money market funds — has become the de facto circuit breaker for stablecoin de-peg monitoring in institutional operations. When a stablecoin trades at $0.995 or below in secondary markets, most institutional written supervisory procedures require mandatory escalation: review of issuer reserve attestations, evaluation of redemption queue depth, and assessment of whether the de-peg is a transient liquidity event or an incipient run.
The parallel is deliberate. Regulators and institutional risk committees understand the $0.995 level from decades of MMF oversight. Framing stablecoin de-peg risk in the same terms — shadow NAV, break threshold, liquidity stress — allows institutional operations teams to apply familiar risk frameworks to a new asset class without requiring an entirely new monitoring architecture.
For tokenized money market fund positions, the $0.995 shadow NAV threshold is a hard monitoring line built into the fund's own Rule 2a-7 framework. For fiat-backed stablecoin positions, it is the trigger for mandatory WSP review and potential contingency action. The threshold is the same; the underlying mechanics and the appropriate institutional response differ depending on the instrument's structure.
Peg stress — three run paths
Devancore Glossary · devancore.com
Peg stress — three run paths
Devancore Glossary · devancore.com
How it works
How stablecoin run dynamics unfold — step by step
1. Stress trigger identification. Run dynamics begin with a trigger: a news event about reserve composition, a large-scale redemption by a major holder, a broader market liquidity shock, or a regulatory announcement affecting the stablecoin's legal status. The trigger itself may be minor — secondary market prices often react to rumor rather than confirmed reserve failure. Operations teams must distinguish between transient market dislocations and structural threats to reserve adequacy before activating the contingency playbook.
2. Secondary market de-peg spread. As redemption pressure builds, the stablecoin begins trading below $1.00 in secondary markets — exchanges, AMM pools, OTC desks. The spread between the secondary market price and the $1.00 redemption value is the de-peg spread. A spread of 10–20 basis points is within normal market microstructure. A spread approaching $0.995 triggers institutional monitoring thresholds. A spread below $0.990 — 100 basis points below peg — represents a significant stress event requiring immediate escalation.
3. Reserve position verification. Once a de-peg spread is detected, institutional operations verify the issuer's most recent reserve attestation or proof-of-reserve report. For USDC, this includes the monthly third-party attestation of reserve composition and daily NAV disclosure. If the reserve report is current and shows full HQLA backing, the de-peg is likely a sentiment-driven or operational event rather than a solvency event. If reserve data is stale or disclosure has been suspended, the risk classification escalates to the highest tier immediately.
4. Synthetic shadow NAV calculation. An institutional operations team — or an automated monitoring system — calculates a synthetic shadow NAV for the stablecoin: what would the per-token value be if the issuer's disclosed reserve assets were marked to market at current prices? For a USDC portfolio invested entirely in 90-day T-bills, this calculation is straightforward and the result stays very close to $1.00 even in stressed Treasury markets. For a reserve composition that includes longer-dated or less-liquid instruments, the shadow NAV calculation reveals the remaining margin before the $0.995 circuit breaker is reached.
5. Threshold breach assessment and escalation. If the secondary market price or the synthetic shadow NAV breaches the $0.995 threshold, the event triggers mandatory escalation under written supervisory procedures. The escalation playbook typically requires: CCO notification, review of stablecoin position size across all accounts, evaluation of hedging options (alternative settlement asset, direct issuer redemption), and a determination of whether the event is idiosyncratic to this stablecoin or systemic. The maker-checker workflow governs any contingency action above a defined notional threshold — no unilateral position change is permitted during a stress event.
6. Position management and stress log. Contingency actions — hedging, direct redemption with the issuer, atomic swap to an alternative settlement asset — are executed through the standard settlement workflow and logged in the operational stress log. The log records the trigger, the de-peg spread at detection, the reserve verification result, the escalation chain, and the action taken. This log is the primary evidence that the firm's stablecoin risk management framework operated as designed — essential for examination under operational risk management frameworks and for external reporting to grant sponsors and institutional counterparties.
De-peg monitoring — detection pipeline
Devancore Glossary · devancore.com
De-peg monitoring — detection pipeline
Devancore Glossary · devancore.com
In Devancore™
Devancore early warning system
Devancore Glossary · devancore.com
Stablecoin stress monitoring in Devancore
Devancore's early warning system (EWS) provides continuous monitoring of stablecoin and tokenized MMF positions for de-peg risk and reserve stress — the prudential monitoring layer that operationalizes the WSP playbook without requiring manual intervention at each step.
Synthetic shadow NAV engine. Devancore pulls real-time pricing for the assets underlying stablecoin reserves — Treasury bill yields, repo rates, and cash deposit rates — and calculates a synthetic shadow NAV for each stablecoin position the firm holds. The engine uses the issuer's most recently disclosed reserve composition and marks each reserve asset to market at current prices, producing a continuously updated per-token economic value that reflects the true liquidation value of the reserves rather than $1.00 par. For USDC backed by short-dated T-bills, the synthetic shadow NAV stays within a few basis points of $1.00 under normal conditions. Under stressed Treasury markets, the calculation reveals the remaining margin before the circuit breaker is reached and surfaces the result in the Investment Book of Record alongside the position.
De-peg spread monitor. Devancore tracks the secondary market price of each stablecoin in the position universe against the $1.00 redemption parity. When the spread reaches a configurable warning threshold, operations supervisors receive an automated alert. When the spread reaches the $0.995 circuit breaker level, the alert escalates to the CCO and the position is flagged as requiring mandatory WSP review. Both thresholds are configurable per stablecoin and per account type. The monitor runs continuously — on 24/7 digital asset rails, a stress event does not wait for business hours or a batch reconciliation window.
Tokenized MMF liquidity watch. For tokenized money market fund positions, Devancore monitors the fund's reported weekly liquid assets (WLA) percentage against the SEC's 30% regulatory floor. As the WLA percentage approaches the floor, the position is flagged in the Investment Book of Record with an elevated risk classification. This triggers the same escalation workflow as a stablecoin de-peg event, ensuring that both run vectors — MMF liquidity mismatch and stablecoin de-peg — are covered under a unified monitoring framework with consistent escalation thresholds and audit trail requirements.
Automated contingency engine. Devancore allows operations teams to pre-configure contingency responses to de-peg triggers. When a stablecoin's secondary market price falls below the configured threshold, Devancore can automatically propose: an atomic swap via DvP into a configured alternative settlement asset, a free of payment transfer to a designated safety wallet for manual approval, or a direct redemption instruction to the issuer through the configured redemption rail. All proposed actions require maker-checker approval before execution — the system surfaces the contingency action with full context; a human approves it. This preserves the firm's operational control while eliminating the latency of building a contingency instruction from scratch during a live stress event.
WSP-compliant stress log. Every de-peg event — detection, spread level at trigger, reserve verification result, escalation chain, and action taken — is logged in a structured stress event record. The stress log satisfies the written supervisory procedures documentation requirement for stablecoin risk events and provides the operational evidence trail required for regulatory examination. Stress logs are exportable by stablecoin, by account, and by date range, supporting both internal compliance review and external reporting to grant sponsors and institutional counterparties who require evidence that the firm's stablecoin risk management framework operates as documented.