8.3 Crypto-Collateralized — DAI
How MakerDAO creates stable dollars from volatile crypto through over-collateralization, why this achieves true decentralization at the cost of capital efficiency, and what happens when the system faces extreme stress.
Consider the problem: you hold 10 ETH worth $40,000 but need $25,000 in liquid capital for three months. Selling means losing your position and triggering capital gains taxes. Traditional bank loans require credit checks, paperwork, and weeks of processing. Most banks won't accept crypto as collateral.
MakerDAO solves this through crypto-collateralized lending. You deposit 10 ETH into a Vault smart contract and generate 25,000 DAI against it. The transaction settles in 30 seconds with no credit check, no bank approval, and no counterparty. The smart contract autonomously manages collateral tracking, liquidation price calculations, and automatic collateral sales if prices drop below safe thresholds.
Three months later, you repay 25,000 DAI plus a 3.5% annual stability fee (roughly $220 for three months) and withdraw your ETH. If ETH rose during that period, you kept the gains. If it fell but stayed above the liquidation threshold, you maintained your position. The entire interaction operates without any company, bank, or human intermediary.
This is what crypto-collateralized stablecoins make possible: credit without counterparties, stability without centralized reserves, and financial infrastructure that operates autonomously through code. The mechanism elegantly solves the decentralization problem that fiat-backed stablecoins like USDC and USDT sacrifice (covered in [[8.2 Fiat-Collateralized - USDT, USDC]]). But this decentralization comes at a steep price in capital efficiency and complexity.
The Core Mechanism: How Volatile Crypto Backs Stable Dollars
The paradox at DAI's heart is using unstable assets to create stable value. Ethereum swings 10-30% in days. Bitcoin crashes 50% during bear markets. Yet DAI maintains a consistent $1.00 peg backed primarily by these volatile assets 1. The mechanism that makes this work is brilliantly simple: over-collateralization plus automated liquidation.
Over-Collateralization: The Stability Buffer
To generate $100 of DAI, you must deposit at least $150 of collateral. MakerDAO enforces minimum collateralization ratios that typically range from 150% to 175% depending on the asset 2.
Why the large buffer? Crypto volatility. If you deposit $150 of ETH to generate $100 DAI, and ETH drops 20%, your collateral is now worth $120. The system remains solvent. You still have $120 backing $100 of debt. If ETH drops another 15%, collateral reaches $102, triggering automated liquidation before the position becomes undercollateralized.
This buffer protects DAI holders at the expense of capital efficiency. That $150 deposit only creates $100 of usable stablecoins. The other $50 sits locked as a safety margin. Compare this to USDC's 1:1 efficiency where every dollar of reserves creates one dollar of stablecoins.
The trade-off is explicit. As explained in [[00 Inbox/Stablecoin Paper/2.2 Taxonomy of Stability Mechanisms|Stablecoin Paper Section 2.2]], the stablecoin trilemma forces choosing between stability, capital efficiency, and decentralization. DAI optimizes for stability and decentralization. Capital efficiency suffers.
Vaults: Smart Contracts as Autonomous Banks
MakerDAO calls its collateral positions "Vaults" (formerly Collateralized Debt Positions or CDPs). Each Vault is a smart contract that holds collateral and tracks debt 3.
Creating a Vault works like this:
- Deposit Collateral: User sends ETH, WBTC, or other approved assets to the Vault contract
- Generate DAI: User specifies how much DAI to generate, up to the maximum allowed by collateralization ratios
- Receive Stablecoins: The MakerDAO protocol mints new DAI tokens to the user's address
- Accrue Stability Fee: Interest accumulates based on the current rate set by governance
- Repay and Withdraw: User returns DAI plus fees to burn the debt and reclaim collateral
The Vault operates autonomously. No company manages it. No administrator approves requests. The smart contract enforces rules mechanically: check collateralization ratio, mint if above minimum, liquidate if below threshold. This automation enables permissionless access. Anyone with collateral can generate DAI without permission from any authority.
Liquidation: Protecting the System
Liquidation protects DAI holders when collateral values drop. The mechanism is automatic and unforgiving.
Each Vault has a liquidation price calculated from its collateral value and debt. If ETH falls from $4,000 to $2,300 and your Vault becomes undercollateralized, the system triggers immediate liquidation 4:
- Liquidation Triggered: Vault's collateralization ratio drops below the minimum (typically 150%)
- Collateral Auctioned: Smart contract auctions the collateral to the highest bidder, accepting payment in DAI
- Debt Repaid: Auction proceeds burn the DAI debt
- Penalty Applied: Vault owner pays a 13% liquidation penalty on top of the debt
- Remaining Collateral Returned: Any collateral left after repaying debt plus penalty returns to the owner
The 13% penalty serves multiple purposes. It discourages users from letting Vaults approach liquidation. It compensates the protocol for liquidation costs. It creates profit opportunities for liquidators (bots and traders who participate in auctions).
This automated enforcement means no bailouts, no negotiations, no discretion. The code executes mercilessly. If prices crash and you don't add collateral or repay debt fast enough, liquidation happens regardless of circumstances.
Stability Fee: The Cost of Borrowing
Generating DAI isn't free. Users pay a stability fee, essentially interest on borrowed stablecoins. The current rate fluctuates based on market conditions and governance decisions, typically ranging from 0.5% to 8% annually 5.
If you generate 25,000 DAI at a 3.5% annual rate and repay after three months, you owe:
- Principal: 25,000 DAI
- Interest: 25,000 × 0.035 × 0.25 = 218.75 DAI
- Total repayment: 25,218.75 DAI
The stability fee serves economic functions beyond protocol revenue. When DAI trades below $1, governance can raise rates, making DAI generation more expensive. This reduces supply and pushes price back up. When DAI trades above $1, governance lowers rates, encouraging more generation to increase supply and lower price.
MKR holders (explained in detail below) vote on stability fee adjustments weekly based on market conditions. This dynamic rate mechanism helps maintain the peg alongside collateralization.
Price Oracles: The System's Critical Dependency
Smart contracts cannot access external information natively. A contract running on Ethereum doesn't know ETH's current dollar price. It can't check Coinbase or Binance. It only knows what gets written to the blockchain 6.
This creates a fundamental problem: how does the liquidation system know when to trigger? How does it calculate collateralization ratios without price data?
Oracle Networks Provide External Data
MakerDAO relies on oracle networks to feed real-time price data onto the blockchain. The Oracle Security Module (OSM) aggregates prices from multiple sources, implements delays to prevent manipulation, and publishes median values that Vault contracts use for calculations 7.
The process works like this:
- Price Feeds: Multiple independent price feed operators submit ETH/USD prices
- Aggregation: The median value eliminates outliers
- One-Hour Delay: Prices are published one hour after collection, preventing flash attack manipulation
- On-Chain Update: Smart contracts access the delayed median price for liquidation calculations
This architecture protects against single-source manipulation. An attacker would need to compromise multiple independent price feeds simultaneously. The one-hour delay prevents flash loan attacks that briefly manipulate prices.
Oracle Failure Risks
Oracle reliability is existential for crypto-collateralized systems. Wrong prices create two catastrophic scenarios:
Scenario 1 - Prices Too Low: Oracles report ETH at $3,000 when it's actually $4,000. Liquidations trigger unfairly, selling user collateral unnecessarily. Users lose funds to system error.
Scenario 2 - Prices Too High: Oracles report ETH at $4,000 when it's actually $3,000. Liquidations don't trigger when they should. Vaults become undercollateralized. DAI loses backing. The peg breaks.
Black Thursday demonstrated these risks in practice.
Black Thursday: The System's Defining Stress Test
March 12, 2020. COVID-19 panic triggers the fastest stock market crash since 1987. Crypto markets follow. ETH drops from $195 to $90 in 24 hours, a 54% collapse 8.
This should have tested MakerDAO's design perfectly. Over-collateralized positions get liquidated automatically. Auction mechanisms sell collateral. The peg maintains. But cascading failures created chaos.
What Went Wrong:
-
Network Congestion: Ethereum gas prices spiked to 200+ gwei as everyone tried to add collateral or repay debt. Transactions that normally cost $5 exceeded $50. Many users couldn't act fast enough 9.
-
Oracle Delays: Extreme volatility meant one-hour-delayed prices lagged reality badly. By the time oracles updated, ETH had fallen further. Liquidations triggered later than they should have.
-
Auction Failures: The liquidation auction system couldn't handle the volume. Some auctions attracted only single bidders who won collateral for nearly zero DAI (essentially getting free ETH) 10.
-
Cascading Liquidations: As ETH continued falling, more Vaults became undercollateralized. Liquidations accelerated. The auction backlog grew. Network congestion worsened.
By the end of March 12, MakerDAO had $5.4 million in DAI debt backed by zero collateral. Auctions had failed to recover sufficient value. The system was technically insolvent by $4-5 million 11.
The Recovery:
MakerDAO's response demonstrated both the power and limitations of decentralized governance:
-
Emergency Governance Vote: MKR holders passed proposals within 48 hours adding USDC as collateral (a controversial compromise adding centralized assets) and adjusting auction parameters 12.
-
MKR Dilution Auction: The protocol minted and auctioned 20,000 MKR tokens, raising $5.3 million DAI to cover the shortfall 13. This mechanism (explained below) places ultimate risk on governance token holders.
-
System Improvements: Developers implemented new auction mechanisms ("Liquidation 2.0") that handle high volumes better and allow partial liquidations 14.
-
Oracle Upgrades: The community added more price feed sources and improved update frequency.
DAI maintained its peg throughout. Users could still redeem stablecoins for approximately $1 of value. The over-collateralization buffer absorbed losses. The transparent on-chain mechanics allowed real-time monitoring. Compare this to opaque bank failures where depositors learn about problems days later.
The incident taught hard lessons. Over-collateralization works but needs larger buffers during volatility. Auction mechanisms must handle extreme volume. Network congestion is a systemic risk. Oracle delays can create dangerous gaps between reality and data.
But the system survived its most severe test without external bailouts, without freezing user funds, and without central authorities making arbitrary decisions. The code executed as designed, risks fell on those who agreed to bear them, and the community repaired damage through governance.
Governance via MKR: Skin in the Game
MakerDAO's governance through MKR tokens exemplifies the model examined in [[5. Governance Tokens]]. But MKR governance isn't just voting rights. It's economic exposure to protocol performance.
What MKR Holders Control:
- Collateral Types: Which assets can back DAI (ETH, WBTC, USDC, tokenized Treasuries)
- Collateralization Ratios: Minimum collateral required per asset (150% for ETH, 101% for USDC)
- Stability Fees: Interest rates on DAI generation
- Liquidation Parameters: Penalties, auction durations, keeper incentives
- Oracle Sources: Which price feeds to trust
- Protocol Upgrades: Smart contract improvements and new features
These decisions directly affect protocol stability and DAI's peg. Set collateralization ratios too low, and liquidations won't protect the system. Set stability fees too high, and nobody generates DAI. Choose unreliable oracles, and liquidations fail.
The Penalty for Bad Governance:
When DAI becomes undercollateralized (debt exceeds collateral value), the protocol mints new MKR and auctions it to raise DAI 15. This dilutes existing MKR holders proportionally to the shortfall.
The Black Thursday example: 20,000 MKR minted when total supply was around 1 million tokens. Existing holders were diluted by roughly 2% to cover the $5 million deficit. If the shortfall had been $50 million, dilution would have approached 20%.
This mechanism aligns incentives powerfully. MKR holders benefit from protocol growth (MKR value increases as DAI adoption grows) but bear losses from governance failures. They can't vote for risky parameters without accepting dilution risk if those risks materialize.
The Benefit for Good Governance:
Stability fees collected from Vault owners flow to the protocol. When the system operates profitably, excess DAI gets used to buy and burn MKR from the market, reducing supply and increasing value for remaining holders 16.
This creates direct financial motivation for conservative risk management. MKR holders want DAI to scale (more stability fee revenue) but not at the expense of safety (dilution risk). The balance shapes every governance decision.
Compare this to fiat-backed stablecoins where Circle's shareholders benefit from USDC growth without bearing downside risk to USDC holders. MakerDAO distributes both upside and downside to the same stakeholders.
Multi-Collateral DAI: Evolution and Compromise
MakerDAO launched in December 2017 as Single-Collateral DAI, accepting only ETH 17. This maximized decentralization. No centralized assets. No trusted custodians. Pure crypto-native collateral.
But ETH-only collateral created problems. Liquidations during ETH crashes stressed the system. Capital inefficiency limited scale. A single asset concentration created correlation risk.
Multi-Collateral DAI (November 2019):
The upgrade allowed multiple assets as collateral 18:
- WBTC (wrapped Bitcoin)
- USDC (centralized stablecoin)
- Various Ethereum tokens
- Later: tokenized real-world assets
Each collateral type gets separate parameters. WBTC requires 175% collateralization given Bitcoin's volatility. USDC requires only 101% because of its stability. The system can now accept $100 USDC to generate 99 DAI, achieving near 1:1 efficiency.
The Real-World Asset Strategy:
By 2024, over 60% of DAI's backing came from real-world assets, primarily tokenized US Treasury bills 19. This evolution reflects pragmatic compromise.
Pure crypto collateral requires massive over-collateralization. $1 billion in ETH backing only supports $500-600 million in DAI. This capital inefficiency limits growth. Adding stable, real-world assets as collateral allows scaling to billions of DAI without requiring billions more in volatile crypto.
The trade-off: decentralization. Tokenized Treasuries depend on regulated custodians like Paxos or Securitize. These entities can freeze assets, face regulatory pressure, or experience technical failures. The very centralization risks that DAI was designed to avoid creep back through RWA collateral.
MKR governance voted for this strategy to enable growth. The decision reflects the stablecoin trilemma playing out in practice: optimizing further for capital efficiency requires sacrificing some decentralization.
Critics argue MakerDAO is becoming "USDC with extra steps" since much backing comes from centralized stablecoins and regulated assets. Defenders counter that diversified collateral is stronger than any single source, and users can choose whether to use Vaults backed by pure crypto versus RWA.
Key Trade-Offs: What You Give Up for Decentralization
DAI's design makes explicit choices about priorities. Understanding these trade-offs helps evaluate whether crypto-collateralized stablecoins fit specific use cases.
Capital Efficiency vs. Safety:
Locking $150 to generate $100 feels wasteful. That $50 buffer could be deployed elsewhere earning yield. But over-collateralization is the price of stability without central reserves.
Take the opening scenario: you need $25,000 in liquidity but don't want to sell your ETH. To generate that using DAI, you'd lock $40,000 in ETH — a 160% collateralization ratio. From a pure capital efficiency standpoint, this looks wasteful. But consider the alternatives:
- Selling ETH: Loses your position, triggers capital gains taxes, forfeits future upside
- Bank loan: Requires credit checks, paperwork, weeks of processing — most banks won't accept crypto as collateral
- Peer-to-peer lending: Counterparty risk, often higher rates, limited scale
MakerDAO offers instant access with no credit check at 3.5% annual rate while maintaining ETH exposure. The capital inefficiency trades off against real, tangible benefits.
Decentralization vs. Scale:
Pure ETH-backed DAI maximizes decentralization but limits scale. Adding USDC and RWAs enables growth but reintroduces centralized dependencies. MakerDAO chose scale.
This creates a philosophical divide. Crypto purists want DAI backed only by decentralized assets. Pragmatists accept RWA to scale to billions in supply. Governance decisions reflect this tension.
Complexity vs. Accessibility:
Using DAI requires understanding collateralization ratios, liquidation prices, and stability fees. Elena needed to calculate how much ETH to deposit, monitor her liquidation threshold, and plan repayment.
Compare to buying USDC: send dollars, receive tokens. Done. No ongoing monitoring. No liquidation risk. No math.
The complexity filters users. DeFi-native participants understand Vaults intuitively. Mainstream users find them intimidating. This limits DAI's addressable market compared to simple fiat-backed alternatives.
Smart Contract Risk vs. Counterparty Risk:
DAI eliminates counterparty risk (no company can freeze your funds) but introduces smart contract risk (bugs could drain the protocol). As discussed in [[00 Inbox/Stablecoin Paper/5.1 Understanding the Risks|Stablecoin Paper Section 5.1]], these represent different risk profiles.
MakerDAO's contracts have been audited extensively and operated for seven years without critical exploits. But the code handles billions in assets. A single bug could be catastrophic. Formal verification and ongoing audits mitigate but don't eliminate this risk.
Circle can freeze USDC addresses with a simple administrative transaction. MakerDAO cannot freeze DAI because no such function exists in the contracts. Users must decide which risk concerns them more: centralized control or immutable code.
| DAI | USDC | USDT | |
|---|---|---|---|
| Collateral type | Overcollateralized crypto + stablecoins | Fiat reserves (cash, T-bills, repos) | Fiat reserves (cash, T-bills, other assets) |
| Capital efficiency | Low (overcollateralized) | High (1:1 backed) | High (1:1 backed) |
| Decentralization | High (on-chain, DAO-governed) | Low–medium (centralized issuer) | Low (centralized issuer) |
| Censorship resistance | High at protocol level, lower via stablecoin collateral exposure | Low–medium (issuer can freeze addresses) | Low (issuer can freeze addresses) |
| Complexity | High (vaults, liquidation, governance) | Low (simple custody model) | Low (simple custody model) |
| Counterparty risk | Smart-contract + oracle + collateral risk | High reliance on issuer and banking partners | High reliance on issuer, lower banking transparency |
| Freeze capability | No native issuer freeze; some backing assets can be frozen | Yes, contract-level address blacklisting | Yes, contract-level address blacklisting |
| Target user | DeFi users seeking on-chain decentralization | Institutions, payment processors, compliant exchanges | Traders, CEX users, offshore and global liquidity users |
Why DAI Matters Beyond MakerDAO
DAI proved crypto-collateralized stablecoins can work at scale. Over $5 billion in circulation demonstrates the model's viability 20. But DAI's importance extends beyond its market cap.
DeFi Infrastructure:
DAI serves as base collateral across hundreds of DeFi protocols. Aave, Compound, Curve, Uniswap, and countless others integrate DAI as a core asset 21. This composability creates network effects that centralized stablecoins can't match.
Circle could theoretically freeze USDC used in a DeFi protocol. This would break the protocol's functionality. DAI's permissionless nature makes it reliable infrastructure. Protocols build on DAI knowing no company can disrupt operations.
The Decentralization Premium:
Users pay for decentralization. DAI's capital inefficiency increases costs. But for those who prioritize censorship resistance and permissionless access, these costs are worth it.
The existence of DAI alongside USDC and USDT demonstrates that different stablecoin models serve different needs. Traders prioritize liquidity (USDT). Institutions prioritize compliance (USDC). Crypto-natives prioritize decentralization (DAI).
Lessons for Future Designs:
Every crypto-collateralized stablecoin since DAI learns from its design and stresses. Liquity, Aave's GHO, Curve's crvUSD, and others iterate on the model with different trade-offs. Some optimize for capital efficiency through innovative mechanisms. Some reduce oracle dependence. Some simplify user experience.
But they all build on the foundation MakerDAO established: automated collateral management, governance token risk alignment, and stability through over-collateralization rather than central reserves.
The next section examines algorithmic stablecoins, which attempted to achieve stability without any collateral backing. Terra's $60 billion collapse demonstrated why this approach fails catastrophically, teaching lessons that shape every stablecoin design today.
- MakerDAO requires $150 of ETH to generate $100 of DAI, leaving one-third of all collateral permanently idle as a volatility buffer.
- ETH's 54% crash on Black Thursday left $5.4 million in uncollateralized DAI, covered by minting 20,000 MKR and diluting governance token holders.
- By 2024, over 60% of DAI's backing came from real-world assets and USDC, introducing the regulated custodian risk MakerDAO was built to avoid.
- MKR holders profit from stability fees via token burns during good governance, but absorb protocol losses through dilution when Vaults fail, creating direct accountability.
- Circle can freeze any USDC address with a single administrative transaction, while MakerDAO cannot freeze DAI because no such function exists in the code.