# Kerne Protocol Whitepaper ## A Self-Custody Synthetic Dollar with Verifiable Delta-Neutral Yield **Version:** 3.0 **Date:** June 2026 **Website:** kerne.fi **Contact:** kerne.systems@protonmail.com > **Legal Disclaimer:** This whitepaper is for informational purposes only and does not constitute an offer or solicitation to buy or sell any securities, tokens, or financial instruments. kUSD and KERNE are not offered to persons in the United States, persons subject to OFAC sanctions, or any other restricted jurisdiction. This document contains forward-looking statements based on assumptions and modeling; actual results may differ materially. Read the live risk surface at kerne.fi/risk before depositing any assets. --- ## 1. Abstract Kerne Protocol is a synthetic dollar protocol on Base. It issues **kUSD**, a token pegged to one US dollar and minted 1:1 from USDC through an on-chain Peg Stability Module, and **skUSD**, an ERC-4626 staking wrapper of kUSD that earns the protocol's delta-neutral yield. The yield comes from two independent sources: Ethereum staking rewards earned by liquid-staked ETH collateral, and perpetual-futures funding payments earned by an equal-sized short position that neutralizes directional ETH exposure. Neither source depends on token emissions, new deposits, or speculation on price direction. Two design commitments distinguish Kerne from custodial yield products: 1. **Self-custody.** kUSD and skUSD live in the holder's own wallet. The protocol never takes custody of a user's stablecoins beyond the on-chain contracts that back them. 2. **Verifiability.** The backing, the yield computation, and the risk thresholds are all published as live, machine-readable endpoints. The headline APY is not a marketing number: it is recomputed every minute from public Lido and Hyperliquid data at kerne.fi/api/apy, and an hourly signed Proof of Reserves is published at kerne.fi/api/por/signed. Anyone can reproduce both. As of June 2026 the published rate is around 15% APY. The rate is variable: it strengthens when perpetual funding is strong and compresses when funding cools. Section 5 derives the full computation chain. This document describes the architecture, yield mechanics, risk management, token economics, governance, and roadmap of the protocol. --- ## 2. The Problem ### 2.1 Stablecoin yield goes to issuers, not holders The global stablecoin market exceeds $220 billion. USDC and USDT together account for more than 75% of that supply, and both are backed by US Treasury bills and money-market instruments. The yield from those instruments goes entirely to the issuer. A USDC holder earns nothing while bearing the counterparty, regulatory, and blacklist risk of the issuer. This is not a design flaw; it is the issuers' business model. It is also a solvable problem, and the existence of $220 billion in non-yield-bearing stablecoins is the market opportunity Kerne is built for. ### 2.2 Liquid staking tokens are underutilized Ethereum's proof-of-stake transition created liquid staking tokens (LSTs) such as Lido's stETH: liquid assets that earn roughly 3 to 4.5% APR in staking rewards. Total LST value exceeds $60 billion, yet most of that capital earns nothing beyond its baseline staking yield. An LST can serve as productive collateral: the staking yield continues to accrue while the same capital backs a market-neutral position that earns additional return. ### 2.3 Delta-neutral carry is locked behind institutional doors Holding a spot asset while shorting an equal notional of its perpetual future earns the funding rate that leveraged long traders pay, without directional price exposure. Quantitative funds have run this carry trade for years. Ethena's USDe demonstrated in 2024 that there is multi-billion-dollar demand for this strategy in a DeFi wrapper. Kerne brings the same class of strategy on-chain on Base, with self-custody of the dollar asset, a transparent yield derivation, and on-chain proof of backing. --- ## 3. Protocol Overview Kerne separates the stable-dollar function from the yield function using three tokens: | Token | Standard | Function | |---|---|---| | **kUSD** | ERC-20 (EIP-2612 permit) | The synthetic dollar. Pegged to $1.00, minted 1:1 from USDC via the PSM. Holding kUSD does not earn yield; it is the stable, composable unit. | | **skUSD** | ERC-4626 | The yield wrapper. Stake kUSD to receive skUSD; the skUSD-to-kUSD exchange rate appreciates as delta-neutral yield accrues. Unstake at any time to realize the accrued value. | | **KERNE** | ERC-20 | The governance token. Fixed 1 billion supply, pre-TGE as of June 2026. Section 7 covers token economics. | **The user flow is three steps:** 1. **Mint.** Swap USDC for kUSD 1:1 through the on-chain Peg Stability Module (10 basis point mint fee). The reverse path, kUSD back to USDC, is available through the same module subject to its published capacity. 2. **Stake.** Deposit kUSD into the skUSD vault. skUSD is a standard ERC-4626 share token: no rebasing, no lock-up on the stable token itself, fully composable with DeFi infrastructure. 3. **Earn.** The protocol's collateral and hedging engine (Section 4) generates yield, which accrues to skUSD as an improving share price. A separate collateral vault, KerneVault (ERC-4626), holds the protocol's productive collateral (WETH and liquid staking tokens) and issues vault shares. This is the asset side of the balance sheet that the hedging engine manages; everyday users interact with the PSM and skUSD. --- ## 4. Architecture ### 4.1 Smart contract stack All contracts are Solidity 0.8.x built on OpenZeppelin v5, deployed on Base (chain 8453), with verified source code on BaseScan. **Core contracts (live, June 2026):** | Contract | Address | |---|---| | kUSD (synthetic dollar) | `0x5C2EfdF0D8D286959b42308966bc2B97f5680AA3` | | skUSD (yield wrapper) | `0xdEd74F7E06efc76455C07418b8b74Cc2bc009DB4` | | KUSDPSM (USDC peg stability module) | `0xFf3025ec18e301855aB0f36Ec6ECa115a29A5Fbc` | | KerneVault (ERC-4626 collateral vault) | `0x8005bc7A86AD904C20fd62788ABED7546c1cF2AC` | | KERNE (governance token) | `0x230f3a63E8413D42bEe9103b98a204030206186c` | | Governance Safe (2-of-3 multisig) | `0x52d3E450bA6c299B1B07298F1E87DD74732D4877` | The always-current contract list, including verification status for every deployed contract, is maintained at kerne.fi/transparency. If this table and that page ever diverge, the transparency page is canonical. **Roles and custody.** Administrative authority over the core contracts is held by the 2-of-3 governance Safe. The hedging engine operates through a separate, limited strategist key that can rebalance positions but cannot upgrade contracts or withdraw user collateral to arbitrary addresses. kUSD is mintable only against the PSM and vault paths defined in code. ### 4.2 The Peg Stability Module The PSM holds USDC reserves and performs 1:1 conversions in both directions: deposit USDC to mint kUSD (10 bps fee), or redeem kUSD for USDC. This gives kUSD a structural arbitrage floor: if kUSD trades below $1.00 on a DEX, anyone can buy it and redeem through the PSM at $1.00, closing the gap. Mint capacity is capped per stable asset so PSM exposure scales deliberately rather than without bound. ### 4.3 The hedging engine The yield side of the protocol is run by an autonomous hedging engine that maintains the delta-neutral position continuously: - **Collateral leg.** The vault holds WETH and liquid-staked ETH, which accrues Ethereum staking rewards. - **Hedge leg.** The engine maintains short ETH perpetual positions on **Hyperliquid**, sized to offset the collateral's ETH exposure. Hyperliquid is the production venue because it is an on-chain venue with transparent, queryable positions and no withdrawal gatekeeping, which keeps the entire backing path verifiable. Additional venue diversification is on the roadmap (Section 10) and will be adopted under the concentration limits described in Section 6. - **Delta neutrality.** If ETH rises, the collateral gains what the short loses; if ETH falls, the short gains what the collateral loses. Net directional exposure is held at approximately zero, and the position earns only the two yield streams: staking rewards plus funding payments. - **Monitoring.** The engine recomputes its funding regime hourly (published live at kerne.fi/funding), monitors position health continuously, and operates under the circuit breakers described in Section 6. An independent Sentinel process can pause the protocol and unwind hedges if solvency thresholds are breached. ### 4.4 Proof of Reserves Kerne publishes its backing rather than asking users to trust it: - **Hourly signed Proof of Reserves** at kerne.fi/api/por/signed: a signed attestation of on-chain collateral, hedge equity, kUSD liabilities, and the resulting solvency ratio. - **Reserve breakdown** at kerne.fi/api/por, rendered for humans at kerne.fi/transparency. - **Live risk thresholds** at kerne.fi/api/risk-status: the actual constants wired into the production risk engine, with source-file attribution, rendered at kerne.fi/risk. Because the hedge venue is on-chain, the short leg is independently observable; the protocol's solvency can be checked block by block without trusting any Kerne-operated server. --- ## 5. Yield Methodology ### 5.1 The two yield sources **Source 1: Ethereum staking rewards (roughly 3 to 4.5% APR).** Liquid-staked ETH collateral accrues consensus-layer rewards determined by Ethereum protocol economics. This stream is reliable and independent of market sentiment. **Source 2: Perpetual funding rates (variable).** Crypto perpetual markets structurally skew long, so funding has historically been positive on average: longs pay shorts. The protocol's short leg collects these payments. This stream varies with market conditions and can go negative for stretches; Section 6 describes how the protocol responds when it does. ### 5.2 The published formula The user-facing APY is not a target or a promotion. It is computed every minute from public data and served at kerne.fi/api/apy: ``` userAPY = 3 x (Lido 7-day SMA staking APR + Hyperliquid 180-day trailing funding APR) x (1 - 22.32% strategy costs) x (1 - 10% insurance allocation) x (1 - protocol fee) ``` In English: take the staking yield plus the trailing funding rate, multiply by the leverage ratio (approximately 3x notional exposure to the carry spread, achievable because the hedge is margined rather than fully funded), then deduct strategy operating costs, route 10% of the remainder to the Insurance Fund, and finally deduct the protocol fee (0% during the Genesis phase). The 180-day trailing funding window is deliberate: a shorter window makes the headline whip around with daily noise, while a full-year window still averages in last year's regime. Every term in the formula is published, so when funding compresses, users can see why the rate moved before it moves. The full derivation lives at kerne.fi/docs/yield-methodology. As of June 2026 this computes to around 15% APY. It is a variable rate, not a guarantee. Under strong funding regimes it rises; under prolonged weak or negative funding it compresses toward the staking component alone. ### 5.3 Fee structure | Fee | Value | |---|---| | PSM mint fee (USDC to kUSD) | 0.10% (10 bps) | | Management fee | None | | Performance fee, Genesis phase (under $100k TVL) | 0% | | Performance fee, Growth phase ($100k to $1M TVL) | 5% | | Performance fee, Maturity phase (over $1M TVL) | 10% | | Insurance allocation | 10% of net yield, routed to the Insurance Fund | The performance fee scales with protocol maturity and is taken only on yield generated, never on principal. At maturity the 10% fee remains half the 20% standard charged by funds running comparable strategies. --- ## 6. Risk Management ### 6.1 Insurance Fund A fixed 10% of net yield flows continuously to an on-chain Insurance Fund dedicated to depositor protection. It deploys in two scenarios: restoring full backing after a shortfall event (exchange failure, oracle error, extreme market event), and defending the peg if kUSD trades below $0.99 and PSM capacity is exhausted. Deployment requires multisig approval plus a timelock; no single individual can access the fund. Per-event claims are capped at 50% of the fund balance to prevent full depletion. The fund provides material protection, not a guarantee. At early TVL it is small relative to deposits and grows proportionally with protocol revenue. It is not equivalent to deposit insurance. ### 6.2 Circuit breakers and the Sentinel The production risk engine enforces published thresholds, all of which are live-readable with source attribution at kerne.fi/api/risk-status: - **Solvency monitoring.** Collateralization is computed continuously. Breaching the wired solvency thresholds triggers a circuit breaker that pauses new minting; clearing it requires recovery above the safe threshold plus a cooldown. - **Negative funding response.** If funding turns negative for a sustained period, the engine reduces hedge size in steps rather than paying carry indefinitely, letting the staking stream carry the position until funding normalizes. - **Venue concentration.** Hedge exposure is bounded per venue; as additional venues are added, no single venue is permitted to dominate the hedge book. - **Emergency unwind.** In a catastrophic scenario the Sentinel closes hedge positions and pauses the vault on-chain. After an orderly unwind, the vault reopens for withdrawals only, paying pro-rata claims at final NAV, with the Insurance Fund covering any shortfall before user redemptions. The full trigger ladder and runbook are documented at kerne.fi/docs/exit-triggers-and-emergency-runbook. ### 6.3 No liquidation cascade by construction kUSD holders cannot be liquidated. kUSD is not a loan against volatile collateral: there is no liquidation price, and a falling ETH price does not force collateral sales, because the hedge gains what the collateral loses. The only leveraged positions in the system are the perpetual shorts, which are conservatively margined and managed by the engine before exchange liquidation thresholds are approached. ### 6.4 Honest risk accounting Delta-neutral does not mean risk-free. The material risks are: smart contract vulnerabilities, hedge venue failure, oracle failure, sustained negative funding, stablecoin depeg of PSM reserves, and operational failure of the hedging engine. Kerne's posture is to publish these risks with live numbers rather than minimize them; the risk surface at kerne.fi/risk is the canonical statement, and it is wired to the same constants the production engine runs on. --- ## 7. KERNE Token Economics ### 7.1 Supply and distribution KERNE has a fixed total supply of 1,000,000,000 tokens, minted at genesis on Base, with no inflation mechanism. As of June 2026 the token is deployed but pre-TGE: it is not publicly circulating. | Allocation | Amount | Share | Vesting | |---|---|---|---| | Team | 200M | 20% | 4-year linear, 1-year cliff | | Investors | 150M | 15% | 2-year linear, 6-month cliff | | Ecosystem and liquidity mining | 250M | 25% | 4-year emission via esKERNE | | Treasury (DAO-controlled) | 150M | 15% | DAO-governed unlock | | Community and Opal rewards | 50M | 5% | Distributed at TGE via Opal program | | Protocol-owned liquidity | 50M | 5% | Permanently locked | | Public sale / TGE | 50M | 5% | Liquid at TGE | All team and investor allocations are issued as **esKERNE**, an escrowed, non-transferable form of KERNE that vests linearly over 180 days and carries full governance and staking rights during vesting. This prevents insider sell pressure during the protocol's growth phase. ### 7.2 Value accrual - **Buyback and burn.** A share of net protocol revenue purchases KERNE on the open market and burns it, making the fixed supply deflationary as revenue grows. - **Staking revenue share.** KERNE stakers earn a share of protocol revenue, distributed in kUSD. - **Governance.** KERNE governs fee parameters, collateral whitelisting, venue limits, Insurance Fund criteria, and upgrades (Section 9). Precise revenue-split parameters are set by governance and published in the protocol documentation; they take economic effect as the performance fee phases in with TVL. --- ## 8. The Opal Rewards Program Opal is Kerne's pre-TGE rewards program. Depositors accrue **Opal Fragments** hourly on active kUSD balances, with multipliers for early participation and a 10% referrer bonus on referred users' accrual. Fragments are off-chain reputation units, visible on a public leaderboard at kerne.fi/opal and in the app at app.kerne.fi/rewards. At TGE, the 50,000,000 KERNE community allocation (5% of supply) is distributed pro-rata to Fragment holders: ``` user allocation = (user fragments / total fragments) x 50,000,000 KERNE ``` Anti-gaming rules apply: fragments accrue only on active deposited balances, accrual is based on sustained holdings rather than snapshot balances, and flagged or restricted-jurisdiction deposits forfeit accrued fragments. Current rates and multipliers are published in the app rather than fixed in this document. --- ## 9. Governance ### 9.1 Current: multisig with full transparency Protocol administration is held by a 2-of-3 Gnosis Safe (`0x52d3E450bA6c299B1B07298F1E87DD74732D4877`) whose signers are independent keyholders on hardware wallets. All critical operations require Safe approval: contract upgrades, fee changes, collateral whitelisting, Insurance Fund deployment, and emergency pause or unpause. Multisig governance is a deliberate early-stage choice: security incidents and market events demand response times that token voting cannot deliver. The compensating control is radical transparency: every Safe transaction is publicly visible on Base, and protocol state is continuously published through the transparency and risk endpoints. ### 9.2 Planned: DAO transition When KERNE reaches meaningful holder distribution after TGE, governance transitions to on-chain token voting with a proposal threshold, a quorum requirement, a timelock on execution, and an emergency veto council as protection against governance attacks during the transition period. Certain properties remain outside governance reach by construction: total KERNE supply is fixed, and users' right to withdraw within the documented timelock cannot be voted away. --- ## 10. Status and Roadmap **Live today (June 2026):** - Core contracts deployed and verified on Base mainnet; first public kUSD mint executed May 2026 - PSM mint and redeem path live (USDC to kUSD and back) - skUSD staking live with yield distribution - Production hedging engine live on Hyperliquid with hourly funding-regime computation - Hourly signed Proof of Reserves, live risk-status API, public transparency dashboard - Opal Fragments program live with public leaderboard - Public bug bounty (kerne.fi/security) and public security findings tracker **Next:** - External security audit by a top-tier firm (the protocol is pre-audit today; see kerne.fi/security/audits for the current posture and internal review history) - Continued TVL scaling through the phased fee schedule - Hedge venue diversification beyond Hyperliquid under the Section 6 concentration limits - KERNE TGE with Opal Fragment conversion, followed by DAO governance transition - Additional collateral types and ecosystem integrations (DEX liquidity, lending-market listings, yield-tokenization integrations) Timelines are intentionally not promised in this document. Milestone announcements are made at kerne.fi/roadmap and on the protocol's public channels when they are real. --- ## 11. Competitive Landscape **Versus fiat-backed stablecoins (USDC, USDT).** Holders earn nothing and bear issuer counterparty risk, including blacklisting. kUSD holders who stake to skUSD earn the protocol's yield, hold their assets in their own wallets, and can verify backing on-chain at any time. The honest trade-off: kUSD carries smart contract and strategy risk that fiat-backed coins do not. **Versus over-collateralized stablecoins (DAI and successors).** Over-collateralization is capital-inefficient: more than one dollar of collateral per dollar minted. Delta-neutral backing targets 1:1 capital efficiency, while savings-rate yields on over-collateralized designs have generally sat below delta-neutral carry. **Versus Ethena (USDe/sUSDe).** Ethena validated delta-neutral synthetic dollars at scale, and Kerne shares the kUSD/skUSD split with its design. The differences are deliberate: Kerne is Base-native, hedges on an on-chain venue where positions are independently observable rather than attested by custodians, runs its entire stack in-house, and publishes its full yield derivation and signed reserves hourly. A detailed comparison is maintained at kerne.fi/kusd-vs-usde. **Versus delta-neutral protocols with custodial infrastructure (Resolv, Axis, and similar).** These designs route hedges through centralized exchanges via custody and off-exchange settlement providers, trading verifiability for venue depth. Kerne's choice is the opposite: a fully on-chain backing path that anyone can audit block by block. See kerne.fi/resolv-vs-kerne. --- ## 12. Team Kerne is built by a small founding team across protocol engineering, operations, and business development, operating under an offshore protocol-entity structure. The team has built, reviewed, and hardened every component in-house: the contracts, the hedging engine, the risk engine, and the transparency infrastructure. Consistent with the protocol's verification-first philosophy, claims about the system are published as live endpoints rather than resumes: the proof of the team's work is checkable at kerne.fi/transparency. --- ## 13. Legal Disclaimer This whitepaper has been prepared by Kerne Protocol for informational purposes only. It does not constitute, and should not be construed as, an offer to sell or a solicitation to buy any securities, tokens, or financial instruments in any jurisdiction. The information herein is based on assumptions and projections that may not prove accurate. Actual results may differ materially from those projected or implied. **Not financial advice.** Nothing in this document constitutes investment, financial, trading, legal, or tax advice. Conduct independent research and consult professional advisors before depositing assets. **Forward-looking statements.** Statements regarding yield rates, roadmap items, and business plans are forward-looking and subject to change. Kerne undertakes no obligation to update them. **Restricted jurisdictions.** kUSD and the Kerne Protocol are not available to persons in the United States, persons subject to OFAC sanctions, persons in mainland China, or any other jurisdiction where access is restricted by applicable law. By accessing kerne.fi or the protocol contracts, you represent that you are not in a restricted jurisdiction. **Risk acknowledgment.** Depositing digital assets involves substantial risk, including total loss. Smart contracts may contain undiscovered vulnerabilities; the protocol has not yet completed an external audit. Oracles may fail. Hedging venues may fail. Funding rates may remain negative for extended periods. Regulation may change adversely. Read kerne.fi/risk before depositing. **No warranty.** The protocol is provided "as is" without warranty of any kind, express or implied. --- *Kerne Protocol Whitepaper v3.0, June 2026* *kerne.fi | @KerneProtocol*