Chia CAT Stablecoin Design: Collateral & Oracle Guide

Key Takeaways

Chia Asset Tokens (CATs) use TAIL programs written in Chialisp to control token supply and enforce collateral rules on-chain
Stable CATs require overcollateralization to protect against price volatility in the collateral asset — Circuit Protocol currently sets a maximum loan-to-value of 60–66%, meaning every dollar of Bytecash is backed by significantly more than a dollar of XCH
Price oracles feed external market data onto the blockchain, enabling stablecoins to maintain their dollar peg automatically
The CAT2 standard replaced CAT1 in July 2022 after external auditor Trail of Bits identified a class of concatenation vulnerabilities
Successful CAT stablecoin design combines proven CDP models with Chia’s unique smart coin architecture for enhanced security

Article Summary: Designing stable Chia Asset Tokens requires combining collateral mechanisms with reliable price oracles to maintain a dollar peg. This guide explains how TAIL programs enforce supply rules, how overcollateralization protects the system, and how oracles provide the price data needed for automated stability.

Understanding Chia Asset Tokens and TAIL Programs

Chia Asset Tokens represent a powerful way to create fungible tokens on the Chia blockchain. Unlike simple token standards on other blockchains, CATs use a unique approach where each token’s behavior is controlled by a TAIL program — short for Token and Asset Issuance Limiter¹. This Chialisp program defines exactly when and how tokens can be created or destroyed, making it the foundation for building stable value assets. If you are new to the CAT standard, our guide to designing and minting CAT tokens in Chialisp covers the full creation workflow from scratch.

The CAT puzzle ensures that the supply of a specific CAT never changes unless the rules encoded in its TAIL program explicitly allow it². When you spend CAT coins, you provide an “Extra Delta” value that indicates whether you’re increasing the supply (positive value), decreasing it (negative value), or keeping it the same (zero value)³. Any time this Extra Delta is non-zero, the TAIL program must run to verify that the supply change follows the token’s rules.

For stablecoin designers, this architecture provides powerful on-chain guarantees. Your TAIL program can enforce that new stablecoins are only minted when matching collateral has been locked, and that tokens can only be burned when redemptions occur. This happens entirely on-chain without requiring trusted intermediaries.

The CAT1 to CAT2 Security Evolution

Security remains paramount when designing financial primitives. In July 2022, Chia Network upgraded from CAT1 to CAT2 after external auditor Trail of Bits identified a class of vulnerabilities related to insecure string concatenation⁴. To be precise, Trail of Bits raised the potential vulnerability class during their general audit of the CAT1 standard; Chia engineers then investigated and confirmed the broader, fatal implications for the standard. Paul Hainsworth, Chia’s Vice President of Product, emphasized the seriousness of the issue: “This is a serious vulnerability. We should end-of-life CAT1, patch it and upgrade everybody to CAT2”⁵.

The transition to CAT2 occurred at block height 2,311,760 on July 26, 2022, with all CAT1 tokens being reissued under the new, more secure standard⁶. This incident demonstrates Chia’s commitment to security-first development, particularly important for enterprise and institutional blockchain applications.

Collateral Mechanisms for Stable CATs

Creating a dollar-pegged stablecoin on Chia requires establishing robust collateral mechanisms. The core principle is overcollateralization — backing each dollar of stablecoin value with more than one dollar worth of cryptocurrency collateral. This buffer absorbs price volatility and ensures the system remains solvent even during market downturns.

Collateral Approach	Collateral Ratio	Best For	Example
Off-Chain Fiat-Backed	100% (1:1)	Maximum stability, regulatory compliance	Stably USD (USDS)⁷
On-Chain Crypto-Backed	150%+ overcollateralized	Decentralization, transparency	Circuit Protocol Bytecash (BYC)⁸
Hybrid Multi-Collateral	Variable (110–200%)	Diversified risk, flexibility	MakerDAO DAI model⁹

On-Chain Collateralized Debt Positions

The most decentralized approach to CAT stablecoins uses on-chain collateral locked in smart coins. Circuit Protocol, which launched on Chia mainnet in beta in January 2026, implements this model using XCH as collateral to mint Bytecash (BYC), a dollar-pegged stablecoin¹⁰. This follows the proven Collateralized Debt Position (CDP) model pioneered by MakerDAO on Ethereum.

Here’s how the process works: Users deposit XCH into a vault smart coin. The TAIL program calculates how much stablecoin can be minted based on the collateral value and the protocol’s maximum loan-to-value (LTV) ratio. Circuit’s current Max LTV is set at 60% by governance — meaning a user depositing $1,000 worth of XCH can borrow up to $600 worth of BYC¹¹. In practice, borrowers are advised to stay well below the maximum to avoid liquidation if XCH prices fall suddenly. It is worth noting that this governance parameter can change; the live Circuit application has displayed a 66% ceiling during the beta period, so always check current protocol parameters before opening a vault.

Who This Strategy Benefits: On-chain collateralization works best for crypto-native users who value decentralization and want to maintain exposure to their underlying assets while accessing liquidity. It’s ideal for traders who believe their collateral will appreciate in value over time.

Liquidation Mechanisms and Keeper Incentives

When collateral value drops too low, the system must liquidate positions to protect remaining users. Circuit Protocol implements this through automated Dutch-auction liquidations, where third-party “keepers” can bid on undercollateralized vault collateral to repay the outstanding debt¹². The protocol charges a liquidation penalty of 13% on the debt outstanding at the point of liquidation, creating a strong financial incentive for borrowers to maintain healthy positions and for keepers to act quickly¹³. This mechanism ensures liquidations happen promptly without centralized oversight.

This keeper-driven approach mirrors the model that has protected billions in value across CDP-based protocols since MakerDAO’s launch in December 2017¹³. The 13% liquidation penalty is consistent with early MakerDAO parameters, reflecting an industry-tested balance between deterring risky borrowing and not being so punitive that it discourages protocol participation.

Oracle Integration for Price Stability

Price oracles solve a critical problem: blockchains cannot access external data on their own. For a CAT stablecoin to maintain a dollar peg, it needs reliable, up-to-date information about cryptocurrency prices. Oracles serve as the bridge between on-chain smart contracts and real-world price data.

How Price Oracles Work in DeFi

A price oracle is a service that fetches asset prices from external sources and delivers them onto the blockchain where smart contracts can use them¹⁴. The most widely-used oracle networks, like Chainlink Price Feeds, aggregate data from multiple independent sources and node operators to prevent manipulation¹⁵.

For CAT stablecoins on Chia, oracles must provide the current exchange rate between XCH and USD. The TAIL program or vault smart coins query this price feed to determine how much collateral is needed, when liquidations should trigger, and whether the stablecoin is trading at its proper peg.

Oracle Security Considerations for Chia

Chia’s architecture offers unique advantages for oracle design. In a 2021 blog post outlining a DeFi vision for Chia, the development team explained how singletons — unique on-chain identities embodied by exactly one coin at any time — can create price oracles that provide significant resistance to Miner Extracted Value (MEV)¹⁶. Because all transactions in a Chia block are processed simultaneously, a malicious farmer can manipulate the price in only one direction per block — not both directions, which limits the profitability of classic sandwich-style MEV extraction.

The simplest oracle implementation updates once per block with a price from a designated source. More sophisticated designs aggregate multiple price feeds, implement time-weighted averages, or use decentralized oracle networks for enhanced security¹⁷. For developers looking at how cross-chain assets and gateways interact with these oracle-dependent systems, our article on bridging to Chia via Warp.green, Offers, and CAT gateways provides useful context on how external asset prices flow into the Chia ecosystem.

Oracle Type	Security Level	Update Frequency	Implementation Complexity
Single Trusted Source	Low (single point of failure)	Every block	Simple TAIL integration
Singleton-Based Oracle	Medium (MEV resistant)	Once per block	Moderate Chialisp coding
Decentralized Oracle Network	High (multi-source aggregation)	Configurable heartbeat	Complex external integration

Real-World CAT Stablecoin Implementations

Stably USD: The First Chia Stablecoin

Stably USD (USDS) launched on Chia Network on January 12, 2022, as the blockchain’s first dollar-denominated stablecoin¹⁸. Gene Hoffman, Chia’s President and COO, stated at the time: “Chia is meeting critical security and compliance needs to make peer-to-peer transactions safer and easier”¹⁹. USDS used off-chain collateral held by Prime Trust with 1:1 USD backing and published audited reserves.

However, USDS faced a serious setback when its custodian Prime Trust was placed into receivership by Nevada regulators in June 2023 after being declared insolvent and unable to honor customer withdrawals²⁰. Stably announced it was pausing all USDS minting and redemptions as a direct result. This incident highlighted the fundamental custodial risk of centralized, off-chain collateral and reinforced the value proposition of fully on-chain alternatives like Circuit Protocol.

Circuit Protocol: On-Chain CDP Model

Circuit Protocol represents the evolution toward fully decentralized CAT stablecoins. Launched in mainnet beta in January 2026, it allows users to mint Bytecash (BYC) stablecoins by locking XCH collateral in vault smart coins²¹. The protocol has been audited through a public security competition hosted by Cantina, and implements on-chain governance through its CRT token, with all CRT holders collectively forming CircuitDAO²². Bug bounty rewards for critical findings are offered through Cantina on an ongoing basis.

Circuit’s yield mechanism is sustainable because it comes directly from stability fees paid by borrowers, which are then distributed to users who deposit BYC into savings contracts²³. This aligns incentives between borrowers seeking liquidity and savers providing stability — a self-balancing model that does not rely on external subsidies or inflationary token emissions.

Key Design Decisions for Your CAT Stablecoin

Choosing Your Collateral Type

Your first decision is whether to use on-chain cryptocurrency collateral (like XCH) or off-chain fiat collateral held by a custodian. On-chain collateral provides transparency and eliminates custodial risk but requires significant overcollateralization. Off-chain collateral enables 1:1 backing but introduces counterparty risk, as the USDS and Prime Trust episode demonstrated. The collapse of USDS is also a reminder that CAT token design cannot be evaluated in isolation from the broader infrastructure it depends on — understanding how assets flow across chains matters too, and our explainer on token standards across ERC-20, ASA, CAT, and SPL provides a useful cross-chain perspective.

Setting Collateralization Ratios

Higher collateralization ratios provide more safety buffer but reduce capital efficiency. Most successful crypto-collateralized stablecoins use collateralization ratios equivalent to between 130% and 200% of the outstanding stablecoin value²⁴. More volatile collateral assets require higher ratios. Circuit Protocol’s governance-set maximum LTV of 60% (equivalent to a ~167% collateralization ratio) reflects this principle applied to XCH’s historical volatility profile. Consider implementing dynamic ratios that adjust based on market conditions and collateral volatility.

Implementing Your TAIL Program

Your TAIL program must enforce your chosen collateral rules. For a simple overcollateralized design, the TAIL should verify that sufficient collateral is locked when minting new tokens, ensure debt is repaid before collateral can be withdrawn, enable liquidations when collateralization falls below the minimum threshold, and integrate with your chosen oracle for price data.

Multi-issuance TAILs use delegated signatures to allow authorized parties to mint additional tokens when collateral backing increases²⁵. This flexibility supports ongoing issuance as your stablecoin grows.

Conclusion

Designing stable CATs on Chia Network combines proven DeFi mechanisms with the blockchain’s unique smart coin architecture. By understanding TAIL programs, implementing robust collateralization, and integrating reliable price oracles, you can create stablecoins that maintain their dollar peg while leveraging Chia’s security and energy efficiency advantages. Whether you choose off-chain fiat backing for regulatory compliance or on-chain crypto collateral for decentralization, the key is matching your design to your target users’ needs. With Circuit Protocol demonstrating the viability of the CDP model on Chia — and the hard lessons learned from USDS’s custodial collapse — the path forward for stable CAT development is clearer than ever. Start by reviewing the Chialisp CAT design and minting guide to build your technical foundation before tackling the collateral and oracle layers described here.

Chia CAT Stablecoin FAQs

What is a Chia CAT stablecoin?

A Chia CAT stablecoin is a stable-value asset implemented as a Chia Asset Token whose behavior is controlled by a TAIL program in Chialisp. The TAIL enforces supply rules and collateral requirements to maintain a stable dollar peg through on-chain mechanisms.

How does overcollateralization protect Chia CAT stablecoins?

Overcollateralization requires more collateral value than stablecoins issued. Circuit Protocol, for example, sets a maximum loan-to-value of 60%, meaning the collateral must always be worth at least 167% of the outstanding stablecoin debt. This buffer absorbs price volatility in the collateral asset and ensures liquidations can repay debts even during market downturns.

What oracles can Chia CAT stablecoins use for price data?

Chia CAT stablecoins can use singleton-based oracles that update once per block, decentralized oracle networks like Chainlink that aggregate multiple price sources, or custom oracle implementations. The choice depends on security requirements and implementation complexity.

Why did Chia upgrade from CAT1 to CAT2?

Chia upgraded to CAT2 in July 2022 after external auditor Trail of Bits identified a class of concatenation vulnerabilities in the CAT1 standard. Chia engineers investigated and determined the vulnerability was severe enough to allow unlimited inflation of CAT1 assets. The upgrade patched these issues and required all CAT1 tokens to be reissued under the more secure CAT2 standard at block height 2,311,760.

Can Chia CAT stablecoins lose their dollar peg?

Chia CAT stablecoins maintain their peg through overcollateralization and arbitrage opportunities, but extreme market conditions can cause temporary deviations. If the stablecoin trades below $1, arbitrageurs profit by buying cheap stablecoins to repay debts, which supports the peg. A sustained depeg could only occur if collateral values fell faster than the liquidation system could respond — a risk mitigated by conservative LTV limits and active keeper networks.

Designing Stable CATs: Collateral & Oracles