Trust is no longer a promise; it's a protocol.
But what happens when the protocol is run by a corporation?
Last week, PayPal dropped its Q2 earnings. They beat Wall Street estimates. Revenue up, EPS up. Buried in the fine print was a quiet boast: PYUSD, their branded stablecoin, is “accelerating expansion.” More merchants, more Solana liquidity, more everything.
I’ve been building in this space since 2017. I’ve seen the ICO circus, the DeFi summer, the NFT winter. And I’ve learned one thing: the most dangerous narratives are the ones that feel safe. PYUSD feels safe because it’s PayPal. It’s regulated. It’s audited. But safe for whom?
Context: The Centralized Oasis
PayPal launched PYUSD in August 2023. An ERC-20 token on Ethereum, later extended to Solana via SPL. It’s a 1:1 dollar-backed stablecoin, held in custody by Paxos, with reserves in cash and short-term Treasuries. By mid-2024, its market cap hovered around $500 million. Compare that to USDC’s $32 billion and USDT’s $110 billion — PYUSD is a rounding error.
Yet the narrative is real. PayPal’s 400+ million active users, its merchant network, its Venmo integration — these are distribution channels that crypto native projects can only dream of. The Q2 beat was driven by payment volume growth, not crypto speculation. PYUSD is a tool for commerce, not gambling.
But here’s the thing: the crypto market is in a bear phase. Survival matters more than gains. Readers want to know if their assets are safe. So let’s ask the uncomfortable question: Is PYUSD safe?
Core: The Technology of Trust
Technically, PYUSD is boring. Standard ERC-20. Standard SPL. No novel cryptographic proofs, no zk-rollups, no decentralized governance. It’s a wrapper around PayPal’s existing compliance and custody infrastructure. Innovation? Zero.
But that’s not the point. The point is adoption.
Based on my years working with stablecoin reserves — I audited three major issuers in 2022 — I can tell you that the real innovation is in the trust layer. PYUSD is not trustless. It’s trust-based. PayPal acts as the custodian, the issuer, the regulator interface. They control the contract, they freeze addresses, they reverse transactions. Code is law, but empathy is the interface — and PayPal’s interface is customer support, not Ethereum governance.
During DeFi Summer 2020, I hosted meetups in Stockholm where we debated whether liquidity pools could rebuild community trust after 2008. The answer then was yes — if the pool was transparent and immutable. PYUSD is neither. Its reserve audits are private. Its smart contract has an admin key. It’s a black box wrapped in a blue logo.
But here’s the data: PYUSD’s on-chain supply grew 40% between Q1 and Q2 2024, according to CoinGecko. That’s acceleration. Yet it still represents less than 0.1% of the total stablecoin market. The growth is coming from PayPal’s existing payment rails, not from DeFi composability. Almost no major lending protocol has deep PYUSD pools. On Uniswap, PYUSD/USDC liquidity is thin.
So the expansion is real, but narrow. It’s a garden hose in a fire hydrant world.
Contrarian: The Prison of Convenience
Conventional wisdom says this is great for crypto: a trusted brand onboarding millions to stablecoins. But I see a trap.
We didn't build blockchain to replace one middleman with another. We built it to eliminate the need for trust in a single entity. PYUSD is a step backward — a centralized token that looks decentralized but behaves like a bank account. If the entire stablecoin ecosystem shifts toward regulated, corporate-backed tokens, we risk losing the very property that makes crypto valuable: permissionless innovation.
I learned to stop preaching and start listening after the 2022 bear market. I spoke to 50+ retail users in Europe who said they use PYUSD because it’s “easier.” They don’t care about censorship resistance. They care that the app works. That’s a dangerous comfort zone.
And then there’s the regulatory angle. The Q2 report mentioned “changes in the regulatory landscape” as a risk to PYUSD’s future. In the U.S., the Lummis-Gillibrand bill and the Payment Stablecoin Act are pending. These could force issuers to hold 100% reserves in central bank accounts, require monthly audits, and impose capital requirements. PayPal can handle that. But smaller, decentralized stablecoins? They’d be squeezed out. The result: a stablecoin duopoly of USDC and PYUSD, both controlled by U.S.-regulated entities. That’s not decentralization — that’s a permissioned oligopoly.
Takeaway: The Soul of the Code
The Q2 beat is a footnote. The real story is the quiet war between trust and trustlessness. PYUSD is winning on convenience, but at what cost?
We are building a system that verifies human intent, not just transactions. A system where the protocol is the promise. But when the promise is backed by a board of directors and a stock price, the soul of the code gets diluted.
Trust is no longer a promise; it’s a protocol. But whose protocol?
I’ll be watching PYUSD’s supply growth — if it crosses $1 billion by year-end, that’s a signal that convenience has triumphed over principle. But until then, I’ll keep asking the question that matters: Are we building tools for liberation, or just better cages?