Updated v1.0.48 revisions
Cite
Caper. "Ondo Finance (ONDO)." October 12, 2026. https://caper.network/wiki/daos/lending/ondo-financeOndo Finance is one of the largest real-world-asset (RWA) platforms in crypto: it wraps short-term US Treasuries and other regulated instruments into freely-composable on-chain tokens. It is the RWA sibling to the on-chain money markets in this section: where Aave lends crypto collateral, Ondo brings the collateral itself – tokenized government debt – on-chain. By 2026 it held on the order of $3.5–3.8 billion in tokenized assets across more than a dozen chains – track the live figure on DeFiLlama rather than trusting a fixed number, since it moves with subscriptions and yield. Ondo was founded in 2021 by Nathan Allman, a former member of Goldman Sachs’ digital-assets desk; after Allman’s death in May 2026 at 32, longtime president Ian De Bode took over as CEO.
Ondo matters to the DAO industry because it is the clearest live example of a structural split that RWA protocols cannot escape: the token is on-chain, but the asset is not. The ONDO governance token and the Flux Finance lending market run as smart contracts a DAO can vote on; the Treasuries backing OUSG and USDY sit in bankruptcy-remote legal wrappers with off-chain custodians and administrators, gated behind KYC. Reading Ondo honestly means keeping those two layers apart – which is exactly what makes it a useful case study alongside fully on-chain protocols like Aave and Compound.
Ondo’s products are issued and operated by Ondo entities under off-chain legal structure – they are not governed by ONDO holders. What the token buys is exposure and composability, not a vote over the reserves.
The on-chain governance surface is narrower than Ondo’s balance sheet suggests. ONDO is the governance token for the Ondo DAO and Flux Finance, and the DAO’s concrete authority centers on Flux Finance – a lending protocol forked from Compound that lets tokenized assets like OUSG serve as collateral. Flux inherits Compound’s governance machinery directly:
The 100-million-ONDO proposal threshold is worth dwelling on: against a 10-billion fixed supply it is a fraction of a percent, but in absolute terms it is a very large, concentrated stake – a reminder that a low percentage threshold can still be a high practical bar to who can steer the protocol. Compare Compound’s own 25,000-COMP threshold on a 10-million supply.
Ondo is the archetype for a problem every tokenized-asset DAO runs into: on-chain governance cannot reach the off-chain asset. ONDO holders can vote to change Flux’s interest-rate parameters or upgrade its contracts, but they cannot vote to break the custody of the Treasuries behind OUSG, override a redemption freeze, or force a distribution – those live in legal agreements, regulated administrators, and KYC gates that a smart-contract vote has no power over. The token votes on the wrapper; a court and a custodian govern the collateral.
That is not a flaw unique to Ondo – it is the honest cost of putting a real-world bond on a public chain, and it is the same seam that shows up whenever a DAO holds assets it does not natively control. It sits in useful contrast to protocols whose entire object of governance is on-chain and therefore fully reachable by a vote, and to the recurring failure mode where token-holders believe they govern something the legal structure has quietly placed out of reach – a pattern the wiki catalogues in how DAOs fail and in the Aragon DAO episode, where holders discovered the treasury they thought they controlled was not theirs to direct. The same seam runs through Maple Finance, a peer institutional-credit DAO whose token can rewrite the protocol’s revenue and buyback policy on-chain but cannot itself underwrite the off-chain loans that generate that revenue.
Caper is a DAO protocol, not an RWA issuer – it does not tokenize Treasuries or custody off-chain assets. Where it speaks to Ondo’s tension is the opposite design choice: Caper is built so that what a member governs and what a member can redeem are the same on-chain object, with no off-chain layer that a vote cannot reach.
Every vote in a caper mints a soulbound proof-of-vote token – 1 per ranked ballot, and nothing for a buy or a sell – fractional but non-transferable in the contract (DIVISIBILITY_MAXIMUM, with deposits gated to the component’s own calls, so it cannot be sent peer-to-peer). A member’s earned voting record folds directly into both their voting weight and their exit share of the treasury, computed by the same on-chain function: (held · votes) / (supply · circulation).
The right to leave and pull your share is not a promise held in a legal wrapper; it is the same contract call that reads your on-chain vote token and burns it as it redeems. Influence is untransferable by design, and since the genesis redeploy of 11 September 2026 it is not purchasable either: the vote token is minted only to the account that casts a ballot, so anyone can earn their own and nobody can acquire anyone else’s. Nor is it bag-less – holdings still multiply weight. (Verified against contracts/logic/src/lib.rs and contracts/core/src/caper_dao.rs.)