CryptoSlate
Andre Cronje, founder of Yearn Finance and now CEO of Flying Tulip, argues that decentralization was the starting point of DeFi but is no longer a complete operating model for most protocols. In a guest post on CryptoSlate, Cronje says the industry needs more precise language: onchain finance, where protocols behave like operating companies with disclosure, governance and infrastructure security rather than pure trustless code. Flying Tulip's own design serves as his working example, with equity-based margin accounts, multi-layer circuit breakers and an RFQ-based liquidation process.
Why it matters
Cronje is a structural figure in DeFi: Yearn launched in 2020 with no team allocation, no foundation and no pre-mine, and the original protocol ran entirely onchain apart from the domain name. His argument that the 2020 trust model, where the smart contract was the sole counterparty, no longer fits modern protocols reflects an industry-wide shift. Curated vaults, offchain credit facilities, non-liquidatable onchain RWAs and IOUs now sit behind many products. Cronje's framing is that these can still be sound, but risk emerges wherever a product's presentation does not match its actual trust and counterparty model.
Market impact
Flying Tulip's ftUSD design illustrates the new operating standard. The system takes USDC and USDT deposits as collateral, borrows ETH against them, swaps the borrowed ETH into staked ETH and posts the staked ETH back as additional collateral. Under modeled parameters it can support up to roughly eight turns of leverage; the protocol is running at about 1.5x today, deliberately below capacity. Staked ETH earns around 2.4% versus about 2.1% ETH borrowing costs, contributing roughly 0.3 percentage points of carry per turn, with the stablecoin side adding another 3.2% to 4%. Withdrawals enter a six-hour queue through layered circuit breakers; money-moving functions sit behind a timelock and multisig, while pause and delay controls are deliberately separated so they remain functional in emergencies. Liquidations run through an RFQ; during recent market stress, nearly all liquidatable debt was repaid dollar for dollar without a haircut.
Frequently asked questions
-
What does Andre Cronje mean by onchain finance?
Cronje argues the label should reflect how modern protocols actually operate: as companies running financial infrastructure onchain, with teams, fees, disclosure, governance and infrastructure security rather than as pure trustless smart contracts.
-
Why does Cronje argue for upgradeability over immutability?
In complex financial systems that must respond to changing markets, integrations and threats, immutability can become a constraint. The trade-off is that upgradeability creates a large threat surface, which Cronje says must be matched with proper governance and security controls.
-
How does Flying Tulip's equity-based margin model differ from an LTV model?
An LTV model cannot fully neutralize delta, leaving a residual balance-sheet requirement even when price exposure is hedged. Equity accounts assess actual equity including P&L and offsetting positions, letting the system recognize 100 against 100.
-
How does Flying Tulip's circuit breaker system work?
Withdrawals enter a queue and become claimable six hours later. Money-moving functions sit behind a timelock and multisig, while pause and delay controls are deliberately separated so they can act in emergencies without waiting through the same delay.
-
Why does Cronje say audits are not a sufficient security strategy?
Cronje argues audits remain necessary but are only one layer. Infrastructure security, key management, circuit breakers and real-time outflow monitoring carry weight that audits alone cannot address, given repeated eight-figure losses across the industry.
CoinTelegraph
TheBlock
Crypto Rank News
CoinDesk
Benjamin Cowen
WatcherGuru