Chainlink on Monday 26 October published the design of CustodySync, a set of smart contracts and data services meant to let crypto held by a regulated custodian back a loan in an on-chain lending market without ever leaving that custodian. In its blog post, Chainlink says CustodySync “goes live with Anchorage Digital Bank, N.A. as the official launch partner.” The post names no lending protocol, no client, no loan, no amount and no date for a first borrowing.
That gap is the story. What exists today is a mechanism, written up in five steps, and a federally chartered bank willing to put its name and its chief executive behind it. The only lending protocol that has publicly drawn up a market around CustodySync is Aave, through a separate Aave Labs proposal posted on 14 September. Its forum thread closed automatically on 18 October after 30 days without a reply. No vote was held.
“Institutions should not have to choose between qualified custody and onchain liquidity,” Anchorage chief executive Nathan McCauley said in the Chainlink post. He added that Anchorage would monitor loan health and “manage margin and liquidation across the full lifecycle of the loan.” The tension he describes is old: many funds and companies must keep their assets with a qualified custodian, while DeFi lending pools want collateral inside a blockchain that runs exactly as written when it is called, holding and moving funds according to its code, without an intermediary able to change the outcome.">smart contract.
What Chainlink CustodySync announces, and on whose word
The primary source is a single post on the Chainlink blog, dated 26 October with no time of publication. It presents CustodySync as a way for qualified custodians to give institutional clients access to DeFi lending while the assets stay in custody, with the custodian’s books and the lending market kept in step from the deposit to the repayment and, when needed, the liquidation.
Anchorage is described as the first qualified custodian to build with it. Its custody systems and its Atlas Collateral Management product work alongside lending protocols, handling core functions on their behalf as their “appointed collateral agent”, in Chainlink’s words. Anchorage, not an on-chain liquidator, would hold the collateral and sell it if a loan went bad. Anchorage Digital Bank holds a national trust bank charter: the Office of the Comptroller of the Currency conditionally approved the conversion of Anchorage Trust Company, a South Dakota trust company, into Anchorage Digital Bank, National Association on 13 January 2021, under an operating agreement on capital, liquidity and risk management, according to the OCC’s release at the time.
The words “goes live” have to be read next to the post’s own disclaimer. It says the text contains statements about future features and rollout timelines, that not all features may be available at Anchorage, and that features may vary from one custodian to another. The post does not say which parts work today. Coindaro found no contract address, loan or deposit figure tied to CustodySync on Monday, and no announcement from Anchorage itself beyond its chief executive’s quote in Chainlink’s text. Other outlets that relayed the news named no protocol or borrower either.
How a CustodySync loan works without moving the bitcoin
Chainlink lays out the flow in five steps, from the deposit to a possible forced sale.
- The client’s balance at the custodian is published on-chain through Chainlink Proof of Reserve, so the lending market can see what sits in custody.
- A receipt token reflecting those assets is posted to the lending market as collateral. It cannot be freely transferred and, according to Chainlink, carries no claim on the underlying assets outside the lending integration.
- When the client borrows, the funds move from the lending market to the borrower in one transaction. Borrowing, repayments and interest are recorded in the custodian’s own books.
- Both sides price the collateral from the same data. The lending market reads Chainlink Data Feeds on-chain, while Data Streams send the same values to the custodian’s off-chain systems, so both compute the loan-to-value ratio from one source.
- If the loan crosses its liquidation threshold, the collateral agent sells the asset through its own process. The committed sale proceeds are recorded on-chain and the final settlement happens in a single atomic transaction.
Step two carries the whole idea. The token on the lending market is an accounting receipt, not a wrapped bitcoin that a holder can redeem or move to another protocol. The asset stays at Anchorage; the lending market sees only a mirror of it.
Chainlink Runtime Environment runs it, not CCIP
Four Chainlink services appear in the design. The Chainlink Runtime Environment (CRE) automates the synchronisation, executes the on-chain actions the parties have authorised and writes loan activity back to the custodian. Data Feeds and Data Streams supply the prices. Proof of Reserve reports the custodied balance. The contracts are standard ones “designed by Chainlink and deployed by the lending market or a risk curator”, in the words of the post.
The Cross-Chain Interoperability Protocol (CCIP), Chainlink’s product for moving messages and tokens between blockchains, is not part of the description. That detail matters for anyone assessing the dependency, because several published risk reviews of Chainlink focus on CCIP. Our page on the Chainlink oracle network and its bank pilots covers its data services.
An Aave V4 proposal is the only market design, and it never reached a vote
CustodySync is named in one lending-protocol document: a Request for Final Comment (ARFC) posted by Aave Labs on 14 September, titled “Custodied Collateral Lending: Aave V4 Isolated Hub & Spoke”. It is a separate text, six weeks older, and the Chainlink post does not cite it.
The proposal would create one new hub supplying stablecoin liquidity, one new spoke accepting the collateral and one bridge stack per onboarded borrower, isolated so that, as Crypto Briefing summed it up, other Aave hubs carry no exposure to it. The initial listing would be a single asset: a Custodied Collateral Token (CoCT) representing bitcoin pledged as collateral in Anchorage custody. The proposal calls it an internal accounting unit, not tradable, with no direct claim on the bitcoin; legal recourse runs through an account control agreement with the custodian. CustodySync, developed by Chainlink and “deployed and administered under DAO control”, would be the only contract allowed to act on Aave for the borrower’s position. At each cycle, Chainlink CRE would read the custodied balance and any open liquidation commitments from the custodian’s system, then mint or burn CoCT to match. Anchorage would hold the bitcoin. Chainlink and Aave never would.
Liquidations in the Aave design would be over-the-counter sales by the custodian. The proceeds would settle on-chain in one atomic transaction that repays the debt, withdraws and burns the CoCT and clears the commitment, and the whole transaction would revert if any step failed. Partial liquidations would be allowed. Other users could never borrow the CoCT: its draw cap would be set to zero on every spoke permanently, and onboarding each borrower would need four permissioned actions by the Aave DAO.
The text leaves blank what a lender would ask first. The collateral factor, liquidation bonus, health factor, caps, interest rate strategy and oracle configuration were not set; risk providers were to recommend them before a formal Aave Improvement Proposal (AIP). The planned path was feedback, then a Snapshot vote if sentiment was positive, then an AIP. The topic auto-closed on 18 October with no Snapshot vote and no AIP. Crypto Briefing reported the proposal on 15 September; the thread’s last replies date from 17 and 18 September.
So there is no live Aave market for custodied bitcoin, and Chainlink’s post does not claim one: it speaks only of “lending markets” and “leading lending protocols”. No source connects CustodySync to Aave Horizon or to Morpho. How proposals move from a forum thread to the chain is covered on our Aave project page.
Custodied collateral against wrapped collateral: ClearLoop and Coinbase-Morpho
Copper’s ClearLoop is the closest precedent, though it serves centralised exchanges, not DeFi. Assets stay in off-exchange custody with Copper while the client trades on connected exchanges. On 16 June 2026 Copper and FalconX launched ClearLoop Loans: eligible clients borrow from FalconX, the proceeds land in their ClearLoop account and can be used on Bybit, Deribit and OKX, and Copper says leverage can reach 4x. Copper’s announcement does not say who handles margin calls or forced sales.
Coinbase took the opposite route on 16 January 2025 with Morpho, the lending network behind its bitcoin loans. Customers can borrow up to $100,000 in USDC against bitcoin on Base, but their BTC is converted one for one into cbBTC and moved into Morpho. The minimum collateral ratio is 133% and liquidation starts at 86% loan-to-value, The Block reported. Coinbase’s own FAQ, quoted by The Block, warns that it “cannot prevent collateral liquidation on Morpho”. At launch the service was open across the US except New York.
| Product | Where the collateral sits | Who sells it in a liquidation | Venue | Status on 26 October 2026 |
|---|---|---|---|---|
| Coinbase with Morpho | Converted to cbBTC inside a Morpho contract | On-chain liquidators on Morpho | DeFi, on Base | Live since January 2025, loans up to $100,000 in USDC |
| Copper ClearLoop Loans with FalconX | Copper off-exchange custody | Not described in the sources | Centralised exchanges | Launched 16 June 2026 |
| Chainlink CustodySync with Anchorage | Anchorage custody; receipt token on-chain | Anchorage, as collateral agent, off-chain | DeFi lending markets, none named | Announced 26 October 2026; no market, client or loan named |
| Aave V4 custodied collateral proposal | Anchorage custody; CoCT token on-chain | Anchorage, by OTC sale settled on-chain | Aave V4 isolated hub | Posted 14 September 2026; thread closed 18 October without a vote |
Who carries the risk when the collateral never moves
This is Coindaro’s reading of the documents. In the wrapped model, the risk sits in the contract and the wrapper: if the code fails, the collateral can be lost. In exchange, anyone can liquidate an undercollateralised loan, at any hour of any day.
Custody-sync turns this around. The bitcoin is out of reach of a contract bug, and also out of reach of an on-chain liquidator. Lenders depend on the custodian to report the balance honestly, on the collateral agent to sell in time and at a fair price, and on Chainlink’s runtime to keep both ledgers aligned. Liquidation stops being permissionless.
Aave forum participants raised exactly that. On 17 September a user posting as CryptoInvest wrote that the design implicitly trusts the custodian to liquidate, and warned that price gaps after a weekend can push collateral below its liquidation price with no liquidity to sell into. Its example was a stock such as Tesla opening about 7% lower, not bitcoin, which trades around the clock. A day later Foreshock, which publishes risk scores, noted that Chainlink infrastructure sits in the minting, burning and liquidation path. It cited its reading of 41.0 for Chainlink CCIP as of 6 September (higher is worse, 50 is neutral), driven mostly by dependency risk, with findings from a July 2024 Cyfrin CodeHawks audit contest it could not read. Foreshock said this was not an objection. The proposal relies on CRE rather than CCIP, so carrying that score over is Foreshock’s own inference.
Coinpedia flagged a related risk: if the two ledgers value the collateral differently, liquidations can come too early or too late. Chainlink’s answer is step four, one price source for both sides. It does not shorten an off-chain sale once prices move. Our glossary entry on liquidation in DeFi lending explains how the on-chain version normally works.
The market sizes come from Chainlink, which sells the plumbing
Chainlink sells the infrastructure, and the figures in its post are its own choice. It puts digital assets under custody at about $700 billion, linking to Standard Chartered for that figure, and says this is under 0.5% of roughly $250 trillion held in traditional custody. It says DeFi lending markets hold more than $80 billion in deposits and over $30 billion in active loans, linking to DefiLlama for the loans. It also says it “actively secures tens of billions of dollars across 70% of all DeFi markets”, a claim about its own reach with no source given. Coindaro has not rechecked these numbers.
The post does not say how Chainlink will be paid for CustodySync, or whether the LINK token plays any part in it.
No borrower, no rate, no date: what CustodySync still lacks
For a product described as live, much is missing. No lending market is named, and no borrower, bank or fund. Nobody has published a loan size, an interest rate, a loan-to-value ratio or a liquidation threshold. There is no date for a first loan and no public contract address. How US bank rules treat the receipt token is not discussed in the post.
It is not the first time this month. Chainlink’s partnership with LG CNS in Korea came the same way, without a won stablecoin, a bank or a date. None of the sources on CustodySync names a European custodian or regulator.
The next concrete signal has to come from a protocol. On Aave, that would be a new thread or a Snapshot vote with the risk parameters filled in. Elsewhere, it would be a lending market or a second custodian saying it runs on CustodySync. Until one of those appears, no loan backed by bitcoin held at Anchorage through CustodySync has been made public.