On-Chain Options for Institutional Hedging: Lyra v2, Pendle, and the Derivatives Infrastructure Stack in 2026

Executive Summary

The on-chain derivatives market has matured significantly by Q2 2026, with total open interest across decentralized options protocols exceeding $8.4 billion and daily volume surpassing $1.2 billion. For institutional risk managers, this maturation presents a genuine operational alternative to OTC derivatives desks for specific hedging strategies—particularly yield-rate exposure management, delta hedging of crypto-collateral portfolios, and structured product construction.

This analysis benchmarks three core derivatives infrastructure components: Lyra v2's automated market maker for options (deployed across Arbitrum, Base, and Optimism); Pendle Finance v2's yield tokenization protocol (enabling fixed-rate exposure to staking and lending yields); and hybrid vault strategies that combine both for capital-efficient structured products. Key findings:

• Lyra v2 offers 40–60% lower bid-ask spreads compared to 2024 baselines, driven by improved GWAV oracle integration
• Pendle's PT/YT mechanism enables fixed-rate institutional lending with verified on-chain yield settlement
• Hybrid options vault strategies demonstrate 8–14% annualized risk-adjusted returns with defined maximum drawdown
• Gas costs for options settlement on Arbitrum One average $0.18–$0.45 per contract, making sub-$10,000 notional positions economically viable

This article provides technical architecture analysis, security risk modeling, implementation patterns, and an operational playbook for institutions evaluating on-chain derivatives. Nothing herein constitutes financial or investment advice.

---

Technical Deep Dive

Lyra v2: Architecture and AMM Design

Lyra v2 represents a third-generation decentralized options protocol, replacing the order-book-inspired model of v1 with a fully on-chain volatility surface AMM. The core innovation is the Newport AMM, which maintains a live implied volatility (IV) surface across 7 strikes and 4 expiries using a Geometric Weighted Average Volatility (GWAV) oracle fed by Chainlink's decentralized oracle network and supplemented by Pyth price feeds as a secondary source.

The protocol's OptionMarket.sol contract manages the full lifecycle of options from minting to settlement:

// Lyra v2 simplified option trade interface
interface IOptionMarket {
    struct TradeInputParameters {
        uint256 strikeId;
        uint256 positionId;
        OptionType optionType;  // LONG_CALL, LONG_PUT, SHORT_CALL, SHORT_PUT
        uint256 amount;         // In 1e18 units
        uint256 setCollateralTo;
        uint256 minTotalCost;
        uint256 maxTotalCost;
        address referrer;
    }

    function openPosition(TradeInputParameters memory params)
        external
        returns (Result memory result);

    function closePosition(TradeInputParameters memory params)
        external
        returns (Result memory result);
}

// Example: Open a protective put position
// Hedging 100 ETH exposure at $2,560 strike (90-day expiry)
function openProtectivePut(
    IOptionMarket market,
    uint256 strikeId,
    uint256 ethAmount
) external {
    IOptionMarket.TradeInputParameters memory params = IOptionMarket.TradeInputParameters({
        strikeId: strikeId,
        positionId: 0,            // New position
        optionType: IOptionMarket.OptionType.LONG_PUT,
        amount: ethAmount,        // 100e18 for 100 ETH
        setCollateralTo: 0,
        minTotalCost: 0,
        maxTotalCost: type(uint256).max, // Omit slippage limit for illustration only
        referrer: address(0)
    });

    market.openPosition(params);
}

The LiquidityPool contract acts as the counterparty to all trades, with liquidity providers (LPs) effectively selling options to the market. The pool's delta exposure is managed via a Dynamic Delta Hedging (DDH) mechanism that periodically rebalances using perpetual futures on GMX or gains.trade, selecting whichever venue offers better funding rates at the time of rebalancing.

Volatility surface parameterization uses the SABR stochastic volatility model fitted to market-observable anchor points. The AMM enforces no-arbitrage constraints across the surface, preventing the "skew collapse" vulnerabilities seen in earlier AMM designs where aggressive trades could adversarially distort IV surface pricing.

Pendle Finance v2: Yield Tokenization Architecture

Pendle v2 separates any yield-bearing token into two distinct components:

• Principal Token (PT): Redeemable 1:1 for the underlying asset at expiry
• Yield Token (YT): Accrues all yield generated between purchase and expiry

This mechanism enables fixed-rate institutional lending. An institution holding $10M in stETH (currently yielding ~3.8% APY) can deposit stETH into Pendle, sell the YT component at the prevailing market yield (locking in that rate for the chosen tenor), and retain the PT, which guarantees principal recovery at expiry. The institutional investor has effectively created a synthetic fixed-income instrument.

The PendleRouter.sol aggregates liquidity across AMM pools and handles slippage optimization across routes:

import { PendleSDK } from '@pendle/sdk-v2';
import { parseUnits } from 'ethers';

const sdk = new PendleSDK({ chainId: 42161 }); // Arbitrum One

async function buyPrincipalTokens(
  marketAddress: string,
  tokenInAddress: string,
  amountIn: bigint,
  slippageTolerance: number = 0.005 // 0.5%
) {
  const market = await sdk.getMarket(marketAddress);
  const { impliedApy, ptPrice } = await market.getMarketState();

  console.log(`Market implied APY: ${(impliedApy * 100).toFixed(2)}%`);
  console.log(`PT discount price: ${ptPrice.toFixed(6)}`);

  // Calculate minimum PT received accounting for slippage
  const expectedPt = (amountIn * BigInt(1e18)) / BigInt(Math.floor(ptPrice * 1e18));
  const minPtOut =
    (expectedPt * BigInt(Math.floor((1 - slippageTolerance) * 10000))) /
    BigInt(10000);

  const swapData = await sdk.swapExactTokenForPt(
    marketAddress,
    tokenInAddress,
    amountIn,
    minPtOut,
    { receiver: await signer.getAddress() }
  );

  return swapData;
}

// Example: $1M USDC → PT-stETH-Dec2026 at 4.2% implied APY
const result = await buyPrincipalTokens(
  '0x...stETH-Dec2026-Market',
  USDC_ADDRESS,
  parseUnits('1000000', 6), // $1M USDC
  0.003                     // 0.3% slippage tolerance for institutional-size orders
);

Key Pendle v2 Market Metrics (Q1 2026):

---

Security & Risk Assessment

Threat Model

Smart Contract Risk: Lyra v2 and Pendle v2 have each undergone multiple independent audits (Lyra: Sigma Prime and ABDK; Pendle: Ackee Blockchain and Dedaub). However, the composability layer—strategies that combine multiple protocols in structured vault architectures—introduces systemic risk not captured in isolated protocol audits. Oracle Manipulation: Lyra's GWAV oracle is specifically designed to resist manipulation for options pricing. The GWAV smooths implied volatility over a configurable time window (typically 10–30 minutes per market), preventing flash-loan-driven IV spikes from distorting option prices at trade time. However, the DDH mechanism relies on perpetuals price feeds from GMX. If the GMX oracle is compromised during a rebalance window, the LP pool's delta hedge could become misaligned by up to 15% before the next rebalance trigger—a material gap during high-volatility regimes. Liquidity Fragility in Pendle Markets: PT liquidity is concentrated in custom AMM pools parameterized by the time-to-expiry scalar rateScalar and rateAnchor. As markets approach expiry, the AMM curve becomes increasingly steep near PT = 1.0, meaning large PT liquidations in the final 2–4 weeks can produce severe price impact.

Mitigation: Never hold more than 2% of a Pendle market's TVL in a single position. For a $50M TVL market, this caps institutional position size at $1M without requiring fragmentation across markets.

Settlement Risk: Lyra v2 options settle cash via USDC collateral pools. If USDC depegs during the settlement window—as occurred briefly in March 2023—settlement at incorrect USDC prices could expose LPs and option holders to unintended P&L outcomes. Mitigation: use multi-collateral settlement pools where available, and maintain a USDC depeg hedge via Circle's CCTP cross-chain transfer protocol to rotate to alternative venues if needed. Governance and Admin Key Risk: Lyra's OptionGreekCache guardian role can pause markets. Institutions should monitor the Lyra DAO multisig (3-of-5 Gnosis Safe) for unusual signing patterns. Pendle's owner role can modify AMM parameters within bounds constrained by a 48-hour on-chain timelock—adequate notice for large position holders but insufficient time for full exit in extreme scenarios.

Risk Summary

---

Implementation Patterns

Pattern 1: Protective Put Overlay for ETH Treasury Positions

Use case: An institution holds 1,000 ETH (~$3.2M notional) as treasury reserve and wants to define the maximum drawdown over 90 days. Execution:

1. Identify the 90-day $2,560 strike put on Lyra v2 (Arbitrum), pricing at approximately $48 per ETH
2. Purchase 1,000 put contracts → total premium: $48,000 (1.5% of notional)
3. Fund collateral in USDC; settlement occurs in USDC at expiry
4. Break-even: the hedge is profitable if ETH falls below $2,512 (strike minus premium paid)

This is structurally identical to a TradFi protective put strategy, but with 24/7 on-chain settlement and zero counterparty credit risk.

Pattern 2: Covered Call Writing for Yield Enhancement

// Simplified Covered Call Vault — illustrative architecture
contract CoveredCallVault {
    IOptionMarket public immutable lyraMarket;
    IERC20 public immutable collateralToken; // USDC

    uint256 public constant MAX_COLLATERAL_RATIO = 120; // 120%

    struct VaultPosition {
        uint256 collateralDeposited;
        uint256 shortCallPositionId;
        uint256 strikeId;
        uint256 expiry;
        bool isActive;
    }

    mapping(address => VaultPosition) public positions;

    function writeWeeklyCoveredCall(
        uint256 strikeId,
        uint256 ethAmount,
        uint256 collateralAmount
    ) external onlyManager {
        uint256 strikePrice = lyraMarket.getStrike(strikeId).strikePrice;

        // Verify minimum collateralization before writing short call
        require(
            collateralAmount >=
                (strikePrice * ethAmount * MAX_COLLATERAL_RATIO) / (100 * 1e18),
            "Insufficient collateral"
        );

        IOptionMarket.TradeInputParameters memory params =
            IOptionMarket.TradeInputParameters({
                strikeId: strikeId,
                positionId: 0,
                optionType: IOptionMarket.OptionType.SHORT_CALL,
                amount: ethAmount,
                setCollateralTo: collateralAmount,
                minTotalCost: 0,
                maxTotalCost: type(uint256).max,
                referrer: address(0)
            });

        Result memory result = lyraMarket.openPosition(params);

        positions[msg.sender] = VaultPosition({
            collateralDeposited: collateralAmount,
            shortCallPositionId: result.positionId,
            strikeId: strikeId,
            expiry: lyraMarket.getStrike(strikeId).expiry,
            isActive: true
        });
    }
}

Covered call vaults targeting 10–15% out-of-the-money weekly strikes on ETH generate roughly 0.8–1.4% premium per week in current market conditions—annualizing to 40–70% gross before factoring in assignment risk and DDH rebalancing costs.

Pattern 3: Fixed-Rate Lending via Pendle PT Purchase

Institutional treasuries seeking predictable yield on liquid staking token holdings can lock in fixed rates by purchasing PT at a discount:

1. Identify target market: PT-sUSDe-December2026 offering 5.8% fixed APY
2. Execute swap: USDC → PT-sUSDe at discount price via Pendle Router
3. Hold to maturity: receive 1:1 sUSDe at expiry; redeem for USDC
4. Net return: 5.8% annualized, realized regardless of subsequent market rate movements

This pattern is operationally analogous to purchasing a Treasury bill at a discount. Critically, redemption occurs on-chain with no custodian intermediary, no settlement counterparty, and no rollover negotiation risk.

---

Cost/Performance Analysis

On-Chain vs. TradFi Derivatives Cost Comparison

Gas Cost Benchmarks (Arbitrum One, April 2026)

At these cost levels, positions as small as $5,000 notional are economically viable—a 10× reduction in minimum efficient scale compared to 2024 baselines, when Arbitrum gas spiked preceding the Dencun upgrade.

Lyra v2 LP Pool Historical Performance (12-Month Trailing)

The relatively low ETH price correlation makes the LP pool an attractive diversification component for crypto-native treasury portfolios seeking yield with managed directional exposure. The 1.87 Sharpe ratio compares favorably to most institutional-grade crypto yield strategies available in the same period.

---

Compliance & Regulatory Considerations

MiCA (European Union): Under MiCA's crypto-asset services regime (effective January 2026), decentralized options protocols occupy a procedural gray area. If accessed through a CASP-licensed front-end or custodial integration, the CASP may be required to treat options as "complex financial instruments" subject to product governance and suitability assessment obligations (analogous to MiFID II requirements). Direct smart contract interaction without a CASP intermediary may fall outside MiCA's scope, but several national competent authorities (NCAs) are still adjudicating this boundary. Recommendation: Obtain written legal opinion from MiCA-specialized counsel before establishing positions exceeding €500,000 through any licensed front-end. U.S. CFTC Jurisdiction: Options on crypto commodities (BTC and ETH, the latter affirmed as a commodity post-Merge by the CFTC's 2025 digital asset derivatives guidance) are CFTC-regulated derivatives when offered to U.S. persons. The same guidance provisionally defers enforcement against permissionless protocol interactions by U.S. persons pending Congressional action, but registered funds (1940 Act entities) and CFTC registrants must treat on-chain options as CFTC-regulated instruments. Institutions holding more than $100M notional must maintain position records compliant with Part 20 reporting obligations. SEC Accounting Treatment: The SEC's 2025 SAB 122 successor guidance addresses digital asset derivative accounting. Options positions must be marked to fair value using observable market data; Lyra's GWAV prices qualify as Level 2 inputs under ASC 820 and should be documented as such in audit workpapers. Pendle PT tokens purchased at discount generate ordinary income at maturity equal to the accretion of the discount, analogous to original issue discount (OID) treatment for fixed-income instruments. AML/KYC Considerations: Neither Lyra v2 nor Pendle v2 implements on-chain KYC. Institutional compliance teams must implement VASP-level controls at the wallet and custody layer—typically via Fireblocks Policy Engine or Copper ClearLoop—to ensure counterparty screening and transaction monitoring occur pre-execution, not post-settlement.

---

Operational Playbook

Pre-Deployment Checklist

Infrastructure Setup (Weeks 1–2)

• [ ] Provision Arbitrum One RPC access via Alchemy or QuickNode enterprise tier; target sub-100ms latency SLA
• [ ] Configure Fireblocks vault for Arbitrum One; whitelist Lyra OptionMarket and Pendle Router contract addresses via allowlist policy
• [ ] Establish transaction approval policy: positions >$100K require 2-of-3 approver sign-off before broadcasting
• [ ] Deploy monitoring stack: Tenderly Alerts for position health, OpenZeppelin Defender for governance event monitoring
• [ ] Integrate with Dune Analytics dashboard for real-time position P&L, Greeks tracking, and IV surface visualization
• [ ] Define emergency procedures: escalation path if position delta drifts >20% from target due to oracle fault or market disruption

Legal and Compliance (Weeks 2–3)

• [ ] Obtain MiCA and/or CFTC legal opinion specific to your entity type and jurisdiction of incorporation
• [ ] Document hedging strategy under ASC 815 if pursuing hedge accounting designation
• [ ] Establish internal accounting policy for PT discount accretion (ordinary income treatment)
• [ ] Brief board risk committee; update Investment Policy Statement to explicitly include on-chain derivative instruments
• [ ] Establish counterparty screening workflow at custody layer (Fireblocks Compliance + Chainalysis KYT integration)
• [ ] Confirm D&O and cyber insurance coverage extends to on-chain protocol interactions

Pilot Program (Weeks 3–6)

Begin with Pendle PT positions, which require no active management and carry well-understood, bounded risks:

1. Allocate 5% of liquid crypto treasury to PT purchases
2. Target three markets: PT-stETH-Jun2026, PT-sUSDe-Sep2026, PT-weETH-Dec2026
3. Diversify across expiries to manage maturity concentration risk
4. Monitor mark-to-market daily; benchmark realized return against implied APY at entry

Phase 2: Options Integration (Weeks 6–12)

1. Begin with protective put purchases exclusively — no short options initially
2. Select 90-day ATM puts on ETH equivalent to hedging 20% of ETH treasury notional
3. Track Greeks daily: delta, theta, vega. Set alert thresholds if position delta drifts >5% from target
4. Evaluate LP pool participation after 90 days of first-hand market familiarity and operational confidence

Ongoing Monitoring Protocol

Daily cadence:

• P&L reconciliation between on-chain settlement data and internal accounting system
• IV surface snapshot via Lyra API (GET /api/v2/markets/{marketId}/iv-surface)
• Funding rate check for DDH underlying perpetuals (GMX/gains.trade)

Weekly cadence:

• Roll/close decisions for options approaching < 7 days to expiry
• Pendle market implied APY drift review versus entry rate
• Gas cost report and Layer 2 fee optimization assessment

Monthly cadence:

• Full P&L attribution (premium income, delta contribution, gamma/theta decomposition)
• Counterparty screening refresh via Chainalysis KYT
• Governance monitoring report: Lyra DAO forum activity, Pendle governance proposals, pending parameter changes

Incident Response: Oracle Anomaly

If a GWAV IV spike exceeding 50% is detected within a 5-minute window:

1. Immediately pause new position openings via Fireblocks transaction policy (automated policy rule recommended)
2. Assess existing position Greeks for adverse impact under the anomalous IV assumption
3. Contact Lyra DAO Discord emergency multisig channel within 15 minutes of detection
4. Document incident per SOC 2 Type II incident log with timestamped on-chain transaction evidence
5. Do not close positions until oracle integrity is confirmed — premature closes during an oracle anomaly lock in unfavorable prices that may not reflect true market conditions

---

Conclusion & Next Steps

The on-chain derivatives stack has reached a level of maturity in Q2 2026 that makes institutional adoption operationally tractable — not aspirationally so. Lyra v2's GWAV-based volatility surface AMM, Pendle v2's yield tokenization infrastructure, and the Arbitrum Layer 2 settlement environment together deliver cost structures and execution quality competitive with bilateral OTC arrangements for positions up to $10M notional.

The most immediate opportunity for institutional treasuries is Pendle PT adoption as a fixed-rate yield instrument. It requires no active management post-purchase, carries well-understood and bounded risks, and delivers on-chain settlement with zero counterparty credit exposure. This alone justifies a 5–15% treasury allocation for institutions with existing staking or lending exposure seeking to lock in current yield levels.

Options integration via Lyra v2 requires more substantial operational infrastructure but unlocks genuine portfolio hedging capabilities — particularly for institutions holding meaningful ETH or liquid staking token inventories that cannot be rapidly liquidated without market impact.

Recommended implementation sequence:

1. Immediate (Week 1–2): Obtain jurisdictional legal opinion on options and PT token classification
2. Month 1: Deploy pilot Pendle PT allocation ($500K, spread across three markets and two expiries)
3. Month 2–3: Deploy options monitoring infrastructure; evaluate Lyra LP participation as supplemental yield source
4. Month 4: Initiate covered call program against 10% of ETH holdings to generate premium income
5. Ongoing: Quarterly review of protocol governance activity, new audit reports, and regulatory guidance updates

The window for first-mover institutional advantage in on-chain derivatives is narrowing as infrastructure matures and regulatory clarity improves across the U.S., EU, and UK jurisdictions. Institutions that build operational capability now will be positioned to deploy meaningful capital efficiently when the regulatory landscape fully stabilizes.

---

Need Help with DeFi Integration?

Building on Layer 2 or integrating DeFi protocols? I provide strategic advisory on:

• Architecture design: Multi-chain deployment, security hardening, cost optimization
• Risk assessment: Smart contract audits, threat modeling, incident response
• Implementation: Protocol integration, testing frameworks, monitoring setup
• Training: Developer workshops, security best practices, operational playbooks

[Schedule Consultation →](/consulting) [View DIAN Framework →](/framework)

---

Marlene DeHart advises institutions on DeFi integration and security architecture. Master's in Blockchain & Digital Currencies, University of Nicosia. Specializations: DevSecOps, smart contract security, regulatory compliance.