Vitalik Buterin’s proposal to rebuild DeFi on options instead of debt is already moving from theory into code, and the Ethereum co-founder is urging builders to formally verify it before it reaches mainnet.
In a follow-up to his June 1 research post, Buterin noted that the idea is “happening already,” pointing to several teams building different versions in the forum thread and to at least one working implementation. He paired the endorsement with a caution, urging that any design heading to mainnet quickly be formally verified first, and tagged the Vyper team and formal-verification developers to help.
From a Research Post to Running Code
Buterin’s original proposal, published June 1, argued that DeFi could drop forced liquidations entirely by making options, not collateralized debt, the base primitive for synthetic assets. The core construct splits one ETH into a paired set of claims, P and N, that always sum back to one ETH; because the two payoffs are complementary, “there is no possibility of liquidation,” Buterin wrote. Settlement happens once, at maturity, which lets the system run on slow, dispute-friendly oracles rather than the real-time price feeds that liquidation-based protocols depend on.
What changed in under two weeks is that the design stopped being a whiteboard exercise. The research thread filled with developers stress-testing the economics and, in several cases, shipping code.
What’s Already Being Built
The most visible implementation is Cleave, a testnet options exchange that bills itself as DeFi’s missing third pillar, alongside Uniswap for spot and Hyperliquid for perpetuals. Cleave splits any asset into upside exposure and a cash floor, fully backed, with no margin, no funding, and nothing to liquidate — a direct expression of Buterin’s no-liquidation premise.
Others have gone further down the stack. One developer posted that they had implemented a physically settled version of the P/N construction live on Base, running the full lifecycle—minting the paired claims from WETH, transferring them, exercising against a USDC strike, and settling the vault—with real contract addresses and transaction hashes.
Crucially, that prototype settles by moving the underlying assets rather than reading a price, removing the oracle from the critical path entirely. Builders also pointed to related, already-live work, including a perpetual liquidity-backed variant of the same no-liquidation principle.
Buterin’s Warning: Verify Before Mainnet
The speed is exactly what prompted Buterin’s caution. His message was not to slow the building down but to gate it on proof: anything moving toward mainnet should be formally verified—mathematically checked to behave as specified—before it handles real funds. The ask is consistent with a theme Buterin has pushed for months, arguing that AI-assisted formal verification could become the standard for shipping secure crypto code.
He also flagged the next unsolved piece: oracle robustness. Even though the options design tolerates slow oracles, the question of how to make those oracles resistant to manipulation remains open, and Buterin signaled it as the right problem for builders to focus on now.
Why Options Instead of Debt
The motivation is structural. Today’s synthetic assets and algorithmic stablecoins mostly rely on collateralized debt positions that liquidate when prices move too fast, a mechanism that has triggered cascading forced selling during past market crashes and that depends on real-time oracles—one of DeFi’s most-exploited attack surfaces. Replacing that with options trades a sudden, global liquidation event for a gradual drift in exposure that users manage by rolling positions over time.
The tradeoff is real: holders must rebalance, and slippage on each roll is the main risk that could make the approach uncompetitive, a limitation Buterin acknowledged and that thread participants debated at length. The primitive itself is not entirely new — protocols like Panoptic, Opyn, and Premia have run on-chain options for years — but using options as the foundational layer for index-tracking synthetics is the shift Buterin is pushing. For now, it remains early-stage and unproven at scale, but the gap between proposal and prototype has closed faster than almost any recent DeFi idea.
