What it is
A peg stability module (PSM) is a direct swap window built into a stablecoin system: users can deposit an accepted reference asset (commonly a widely-trusted stablecoin like USDC) and mint the protocol's own stablecoin at a fixed 1:1 rate, or do the reverse — redeem the protocol's stablecoin for the reference asset — also near 1:1. It acts like a pressure valve that keeps the stablecoin's market price from drifting far from its $1 target, by making arbitrage trivially cheap.
How it works
- The protocol designates one or more "reference" assets it trusts as reliably worth $1 (often other established stablecoins).
- A PSM contract holds a pool of that reference asset and offers to mint the protocol's own stablecoin against deposits of it, and to accept the protocol's stablecoin back in exchange for the reference asset, both near a fixed 1:1 rate.
- Usually a small fee (sometimes zero) applies to swaps in either direction, which can be adjusted to tune the module's capacity and profitability.
- If the protocol's stablecoin trades above $1 on the open market, arbitrageurs deposit the reference asset into the PSM to mint the stablecoin cheaply, then sell it on the market above peg for a profit — this new supply pushes the market price back down toward $1.
- If the stablecoin trades below $1, arbitrageurs buy it cheaply on the market and redeem it through the PSM for the reference asset at full value, profiting on the difference — this reduces the circulating supply and pushes the market price back up toward $1.
- The PSM typically has a debt ceiling — a cap on how much of the reference asset it will accept — to limit how exposed the protocol becomes to any single reference asset's own risk.
Why designers use it
- Provides a cheap, fast, always-available arbitrage path that keeps a stablecoin's market price tightly pegged, without relying solely on collateral liquidations or interest-rate changes.
- Deepens liquidity and reduces price slippage for the stablecoin, since the PSM effectively acts as an infinite-depth market maker up to its ceiling.
- Lets a protocol diversify or bootstrap its stablecoin's backing by accepting other trusted stablecoins as collateral, rather than only volatile crypto assets.
- Reduces the need for aggressive interest-rate or supply interventions to defend the peg, since arbitrage does most of the work automatically.
Failure modes
- Reference-asset contagion: if the trusted reference stablecoin itself depegs or fails (e.g., due to an issuer freezing funds or losing reserves), the PSM directly imports that risk into the protocol's own stablecoin.
- Ceiling exhaustion: if the debt ceiling is hit during a large one-directional demand shock, the PSM stops absorbing further arbitrage, and the peg can drift outside the intended band.
- Concentration risk: relying heavily on a single reference asset for peg defense makes the whole system a bet on that one asset's continued stability and issuer trustworthiness.
- Fee mistuning: if swap fees are set too high, arbitrage becomes unprofitable at small deviations and the peg can drift further before it's worth correcting; too low, and the module can be drained rapidly during stress.
- Reflexive drain during panic: in a crisis, users may rush to redeem through the PSM simultaneously, which can exhaust the reference-asset reserves quickly if not managed with rate limits or ceilings.
What to check before using it
- Assess the credit and censorship risk of any reference asset before accepting it — a PSM is only as trustworthy as its weakest accepted asset.
- Set a debt ceiling appropriate to the protocol's total risk tolerance, and monitor utilization so it can be adjusted before a crisis, not during one.
- Model fee levels against expected peg-deviation size and arbitrageur behavior to ensure the module actually gets used when needed.
- Plan for reference-asset diversification so no single stablecoin's failure can single-handedly break the peg.
- Consider rate limits or gradual redemption mechanisms to prevent a sudden, coordinated drain during a panic.