Ethena completes SOC 2 Type II audit with zero exceptions

Ethena Labs, the team behind the synthetic dollar protocol USDe, says it has completed a SOC 2 Type II audit with a clean opinion and zero exceptions. In plain terms, an independent auditor examined the company’s security and availability controls over an extended period and found nothing wrong.

What SOC 2 Type II actually means

SOC 2 is an auditing framework developed by the American Institute of Certified Public Accountants. It evaluates how a company handles data security, system availability, processing integrity, confidentiality, and privacy.

The “Type II” distinction is the important part. A Type I audit checks whether a company’s controls are properly designed at a single point in time. Type II goes further: it tests whether those controls actually worked as intended over a sustained period, typically several months to a year.

A “clean opinion with zero exceptions” means the auditor found no instances where controls failed or deviated from their stated design.

Why this matters for Ethena and USDe

Ethena’s core product, USDe, is a synthetic dollar that maintains its peg through delta-neutral hedging strategies. The protocol uses crypto collateral like staked ETH and BTC, managed through perpetual futures positions, to keep USDe hovering around $1.

As of July 2026, USDe’s supply stood at approximately $4.46 billion with a backing ratio exceeding 100%. The protocol already undergoes multiple smart contract audits, with no critical or high-severity vulnerabilities reported. Monthly custodian attestations confirm that assets backing USDe are held off-exchange.

Smart contract audits verify that code behaves as expected. Custodian attestations confirm assets exist where they’re supposed to. SOC 2 Type II evaluates the human and organizational layer: access controls, incident response procedures, change management, monitoring systems, and the operational discipline that keeps everything running.

The institutional credibility play

Ethena recently launched Ethena Pay in beta on September 1, 2026, a self-custodial application that lets users earn USDe yields and cashback rewards. Partnerships with platforms including Coinbase and asset manager Janus Henderson signal that Ethena is positioning itself as a bridge between DeFi yields and traditional finance infrastructure.

SOC 2 Type II certification is essentially table stakes for any technology company that wants to work with banks, asset managers, and regulated financial institutions. Most DeFi protocols don’t pursue SOC 2 because their users are primarily retail participants and other protocols.

Circle, the issuer of USDC, has long touted its SOC 2 compliance as a competitive advantage over less transparent alternatives. Notably, as of the audit’s claimed completion date of September 14, 2026, no independent confirmation of Ethena Labs’ SOC 2 Type II result has appeared in crypto media or Ethena’s official channels.

The key question going forward is whether Ethena will publish the full SOC 2 report or make it available to prospective partners under NDA, which is the more common practice. Full public disclosure would set a new transparency benchmark for DeFi protocols, while restricted access would follow the standard playbook used by most enterprise software companies.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.