Aave’s proposed USAT gateway could cut off the return swap after a deposit

Aave’s proposed USAT gateway would require approval for every return swap, allowing access to be revoked after an institution had exchanged its deposit receipts for GHO.

TokenLogic’s Oct. 15 governance proposal would introduce a permissioned GHO Stability Module, or GSM, on Avalanche. It would let approved counterparties exchange waUSAT, a receipt for the dollar stablecoin USAT supplied to Aave V4, for GHO. Approval would apply in both directions, so revocation could prevent a participant from returning GHO to recover waUSAT.

That creates three separate conditions on the route back to dollars: access to the return swap, the ability to withdraw underlying USAT from lending, and eligibility to redeem USAT with its issuer, Anchorage Digital Bank.

As of Oct. 18, the public proposal still describes a Snapshot vote followed, if approved, by an implementation proposal as its next steps. Important addresses and contracts remain unspecified.

The proposed entry route involves two transactions. An approved counterparty would supply USAT to Aave V4’s Tokenization Spoke and receive waUSAT. It would then exchange those receipt tokens for GHO through the GSM, which would hold the waUSAT while the USAT remained supplied to Aave.

The return swap would therefore recover a receipt token. It would not directly deliver USAT or dollars.

The permission check would apply to the swap originator every time. TokenLogic explicitly says that revoking approval would prevent further swaps, including exchanges intended to recover previously deposited assets.

An approved originator could name another recipient or have a relayer submit a valid signed swap. Neither would need separate participant approval, but those options would preserve the approval requirement on the originator.

GHO received through the module would remain freely transferable. Aave’s GHO documentation distinguishes ordinary transfers from GSM conversions, so a participant whose module access was revoked could still transfer GHO.

The proposal would also retain emergency controls. Freezing would halt exchanges; seizure would transfer module-held assets to the designated treasury and prevent further exchanges. Those powers are distinct from revoking an individual participant’s approval. TokenLogic says restrictions on reversing a swap would need to be reflected in counterparty agreements.

The initial whitelist would include a commercial counterparty and an Aave DAO Safe controlled by the Aave Finance Committee. Both would use the same liquidity and pricing. The module would not keep individual principal balances or require a participant’s swaps to match its earlier deposits.

Recovering waUSAT would leave a second step: obtaining the USAT represented by those shares. TokenLogic says that would depend on the selected integration and available liquidity. V4 withdrawals require a sufficient withdrawable amount and an unpaused reserve. The final USAT receipt-token integration remains unspecified.