The Bank for International Settlements does not typically name names. Its reports favor taxonomy over target. But BIS Occasional Paper No. 27, published April 23, breaks from that tradition by cataloguing six specific platforms — Binance, Bybit, Coinbase, Crypto.com, MEXC, and OKX — as "multifunction cryptoasset intermediaries" that have quietly assembled bank-equivalent balance sheets without bank-equivalent oversight. The paper's 38 pages land at an awkward moment: stablecoin legislation is stalled in the U.S. Senate, yield products are being bundled into crypto debit cards, and the October 2025 flash crash left roughly $20 billion in liquidations unresolved for days. The BIS is not shy about connecting the dots.
How Multifunction Crypto Intermediaries Assembled Bank-Like Balance Sheets Without a Banking Licence
Traditional financial regulation separates functions deliberately. A firm that holds customer deposits is a bank, subject to capital and liquidity requirements. A firm that executes trades is a broker-dealer, subject to net capital rules. A firm that runs a market is an exchange, subject to best-execution mandates. The architecture exists because collapsing these functions into a single entity concentrates risk in ways that amplify rather than absorb shocks.
The six platforms the BIS identifies have dismantled that separation. Each offers spot trading and derivatives in the same interface where customers also hold idle balances, earn yield on those balances, and access lending facilities. Coinbase's "Coinbase Earn" product, Binance's "Simple Earn," and Bybit's structured products all share the same underlying structure: the platform pools customer assets, deploys them into lending or market-making, and distributes a share of returns to users. The BIS characterizes this arrangement bluntly: "Customers may regard MCIs as safe places to hold their digital assets, yet in many jurisdictions these platforms operate without prudential safeguards, such as capital and liquidity requirements, that typically apply to financial intermediaries."
The key word in that sentence is "regard." From the customer's vantage point, an earn product that pays 5% annually on USDC holdings looks indistinguishable from a savings deposit. The mechanism that generates that return, and the risk it carries, is not disclosed with the granularity that banking law would require. The yield is not guaranteed. The principal is not insured. The liquidity terms can be altered unilaterally by the platform. What looks like a high-yield savings account is, in regulatory terms, an unsecured loan to a lightly supervised counterparty.
The Earn Product Revenue Engine and Where the Money Actually Goes
Crypto earn products are not a marginal feature. They have become the primary retention mechanism for exchanges competing on custody as much as on trading fees. As spot trading volumes compressed and maker-taker spreads tightened through 2024, the major platforms responded by deepening their earn offerings: extending yield to a wider range of assets, stretching lock-up periods, and marketing passively to retail users who might not trade actively but are willing to park balances for incremental return.
The revenue model that funds those yields depends on deploying customer assets into activities the platform controls: lending to margin traders, providing liquidity to proprietary market-making operations, and funding institutional borrowers via over-the-counter lending desks. Celsius Network used exactly this playbook. At peak, Celsius held approximately $25 billion in customer assets, paid up to 17% annual yield on certain positions, and deployed those funds into DeFi protocols and proprietary trading. When collateral values fell and redemptions accelerated in mid-2022, Celsius froze withdrawals within a week. Three Arrows Capital, a major counterparty, filed for liquidation days later. FTX and Alameda Research, which had exposure to both, collapsed four months after that.
The BIS paper treats that cascade as a proof of concept rather than a post-mortem. The same credit, liquidity, and maturity transformation risks that destroyed Celsius are structurally present in today's earn products at platforms that have grown substantially larger. Binance's reported user base exceeds 200 million accounts. Its earn product suite spans dozens of asset types. The gap between what that balance sheet looks like and what regulators can see into it is the systemic risk the paper is naming.
The $20 Billion Flash Crash and What Platform Opacity Actually Costs
The October 2025 flash crash offers a more recent and more precise data point than the 2022 cascade. Over approximately 90 minutes on October 14, a coordinated series of liquidations in perpetual futures markets drove Bitcoin's price down 18% and Ethereum's price down 23% before both partially recovered. Total liquidations across tracked platforms exceeded $20 billion. Several platforms suspended withdrawals for periods ranging from 20 minutes to several hours. At least two smaller exchanges processed orders at prices that deviated by more than 10% from the underlying spot market, raising questions about execution integrity that remain unresolved.
The BIS paper cites the October event as evidence that leverage, opacity, and deposit-like promises interact in specific ways under stress. When a platform uses customer earn balances to fund margin lending, a rapid price move creates simultaneous pressure on three channels: earn depositors may seek to redeem, margin borrowers are being liquidated, and the platform's own market-making operations are drawing on the same pool. A traditional bank manages this through mandatory capital buffers and liquidity coverage ratios. The major crypto platforms manage it through discretionary suspension of services, a mechanism that transfers the cost of systemic stress to the customer who has the least information and the least recourse.
The competitive consequence of the October event was immediate consolidation. Three exchanges that had offered earn products above 8% annual yield on stablecoins either shuttered those products or suspended them indefinitely in the weeks after. Binance, Coinbase, and OKX retained their earn product lines with minimal modification. Platform opacity makes it impossible to know whether their risk management differed or whether they simply had more runway to absorb losses.
The Regulatory Perimeter Gap and What Comes Next for Stablecoin Issuers
The BIS paper identifies a structural gap that legislative efforts in the U.S. and EU have not closed. Banking regulation governs entities that accept deposits. Broker-dealer regulation governs entities that execute securities transactions. Crypto earn products, structured as contractual arrangements to deploy customer assets for a return, fall outside both categories in most jurisdictions. The platforms exploit this gap deliberately. "Cryptoasset borrowing and lending remain outside regulatory perimeters in many jurisdictions," the report notes.
This creates a regulatory arbitrage that benefits large incumbents over smaller competitors. Coinbase, operating under U.S. money transmission licences and CFTC oversight for certain derivatives, faces more compliance friction than OKX or MEXC, which service U.S. users through offshore structures. The effect is an unlevel playing field in which the most regulated platforms bear cost disadvantages relative to the most opaque ones. The BIS argues this dynamic accelerates risk migration toward less transparent counterparties.
The stablecoin connection matters for traditional finance. Tether and Circle each hold substantial reserves in U.S. Treasury instruments and money market funds. If a major exchange that holds large stablecoin balances in its earn product faces a liquidity event, the redemption pressure on stablecoin issuers would transmit through Treasury bill markets to conventional financial plumbing. The BIS names this as the primary channel through which a crypto platform failure could generate spillovers that matter to central banks: not contagion through direct bank exposure, but contagion through the stablecoin-Treasury nexus.
Which Platforms Face the Sharpest Regulatory Scrutiny
The BIS paper stops short of recommending specific regulatory action, which is consistent with its mandate as a research body rather than a rulemaker. But its taxonomy does the work that a recommendation would do: by naming Binance, Bybit, Coinbase, Crypto.com, MEXC, and OKX as multifunction cryptoasset intermediaries, it creates a classification that regulators can operationalize.
Coinbase is already subject to U.S. securities regulation in certain product lines and is navigating the SEC's evolving token taxonomy framework, announced by Chairman Paul Atkins at the Economic Club of Washington on April 21. Bybit is rebuilding compliance infrastructure after the February 2025 hack that drained $1.5 billion in Ethereum and exposed weaknesses in its multisignature custody model. Binance operates under a 2023 settlement with U.S. authorities that included a $4.3 billion penalty and ongoing monitoring of its compliance program.
The platforms that face the most immediate regulatory pressure are those that have expanded earn products into new asset classes: tokenized real-world assets, restaking derivatives, and long-duration stablecoin vaults released since the October 2025 flash crash. These products represent the next layer of the same risk architecture the BIS paper describes: customer assets deployed into complex, illiquid strategies with returns marketed as passive income and risks buried in terms of service.
The BIS paper arrives at a moment when the political appetite for crypto regulation in the U.S. is higher than it has been since 2022, but the legislative calendar remains tight. The Clarity Act has a path through the Senate, but the timeline is measured in months, not weeks. Until it passes, the shadow crypto financial system the BIS describes will continue to operate in the gap between what the law currently covers and what the risk profile of these platforms actually requires.
For traditional banks, the BIS taxonomy creates an opportunity as much as a warning. JPMorgan Chase, Goldman Sachs, and BlackRock have all signaled intentions to expand digital asset custody and tokenized fund products. If multifunction crypto intermediaries face mandatory capital and liquidity requirements, their earn products become structurally less competitive against bank-administered alternatives. Regulatory compliance, perversely, becomes a moat. The platforms that have invested most heavily in compliance infrastructure (Coinbase chief among them) will absorb the cost more easily than offshore competitors who have used lighter oversight as a pricing advantage.
The stakes are not abstract. Celsius had 1.7 million creditors when it filed for bankruptcy. FTX had more than one million. The six platforms the BIS names serve a combined user base that likely exceeds 400 million accounts. The next stress event will not give regulators months to calibrate a response. The BIS paper is, at minimum, a clock. The more important question is whether the Clarity Act and SEC's evolving token taxonomy will close the perimeter gap before the next liquidation cascade makes the answer irrelevant.