Seigniorage is the profit an issuer earns from creating money: the gap between what a unit is worth and what it costs to produce and put into circulation. The same arithmetic applies to token issuance, where minting costs a transaction fee and the token trades at market value, so new supply transfers value from existing holders to whoever receives it. The word also names a stablecoin design class whose best-known implementation failed publicly and has been analysed in detail since.
Issuance is revenue for the issuer and dilution for the holder, and those are one transaction seen from two sides. A model that books the first without recording the second is incomplete by construction.
The monetary concept, before anyone tokenised it
Central banks define this plainly. The European Central Bank describes seigniorage as the profit made from issuing currency, arising because the face value of money exceeds what it costs to produce.1 A high-denomination note costs pennies to print and enters circulation at face value.
The formal treatment matters more than the anecdote, because it puts seigniorage inside a budget constraint. Obstfeld derives the revenue-maximising rate of monetary growth: past a certain rate of issuance, faster issuance yields the issuer less real revenue, because holders adjust.2 Anyone who has watched a project answer a falling token price by raising emissions has watched that result being rediscovered without the maths.
What it becomes when the issuer is a protocol
Mint a token and the marginal production cost is a transaction fee, while the unit enters circulation at market value. The difference is seigniorage, and unlike a central bank the protocol usually hands it straight to somebody else: a validator, a liquidity provider, an airdrop recipient. The issuer captures nothing. The recipient captures it, and existing holders fund it.
That reframes an argument which usually gets stuck. Rather than debating whether emissions are inflationary, ask who receives the seigniorage and what the protocol bought with it. A validator reward buys security. A liquidity incentive buys depth for as long as you keep paying. An unlock buys nothing, because those tokens were already promised. If what the protocol receives is worth less than the value transferred out of existing holders, the emission is a transfer with a story attached.
The seigniorage-share stablecoin design
The design class carrying the name works like this. One token is meant to hold a stable value. A second absorbs the volatility, and the peg is defended by a two-way exchange between them: below target, holders are given an incentive to destroy the stable unit in return for newly minted units of the volatile one; above target, the reverse. The volatile token is the residual claim, and it is the seigniorage instrument.
The arbitrage described here is reconstructed from independent academic postmortems rather than from the issuer's own materials, which we could not verify at a citable URL. Worth saying out loud, because the marketed version and the analysed version of a failed mechanism are not always the same document.
Scroll to see the full diagram
The documented failure, and what it demonstrated
Terra's UST and LUNA is the case with real academic coverage. Harald Uhlig's NBER working paper analyses the collapse formally, as a run rather than an isolated exploit.3
The mechanism that failed is worth stating precisely. The absorbing token's capacity to defend the peg is bounded by its own market value, and that value is a claim on the same system. When the peg comes under real pressure, the collateral defending it reprices downward at the same time as the mechanism issues more of it. The design assumes the absorber has capacity in the exact scenario where it does not.
Our reading, offered as interpretation rather than as a finding in that paper, is that this is not a parameter failure. No mint rate, cap or cooldown makes an absorbing asset uncorrelated with the thing it absorbs. That is a structural property of using your own equity as reserves, and it is why the two-token separation rule is a hard constraint rather than a preference.
What a founder should take from it
Two things, and neither requires believing that every algorithmic design is doomed. Name your seigniorage recipients and price what the protocol receives from each, because that is how you tell a purchase from a transfer. And where any mechanism depends on minting an asset under stress, model the correlation between that asset's value and the stress itself rather than assuming a static reserve. External, uncorrelated backing is the expensive option, and the cheap alternative is cheap because it is a claim on yourself. Nothing here is a recommendation about any asset.
Common questions
What is seigniorage in crypto?
Seigniorage is the value an issuer captures by creating money, the gap between what a unit is worth and what it costs to issue. The European Central Bank defines it as the profit from issuing currency.1 In token systems the production cost is a transaction fee, so nearly the whole market value of new supply is seigniorage. It usually goes to a recipient such as a validator or liquidity provider, funded by dilution of existing holders.
What is a seigniorage-share stablecoin?
It is a design where one token holds a stable value and a second absorbs the volatility, with a two-way mint and burn between them defending the peg. The second token is the seigniorage claim. The best-known implementation, Terra's UST and LUNA pair, collapsed in 2022 and has since been analysed in formal academic postmortems.3
Why do algorithmic stablecoins backed by their own token fail?
Because the asset defending the peg is a claim on the same system it defends. Under stress the mechanism mints more of the absorbing token precisely as that token's value falls, so capacity shrinks at the moment demand for it spikes. Formal analysis of the Terra collapse treats the episode as a run.3 In our view this is structural rather than a matter of parameter tuning.
See Tokenomics Design Services for how this applies in practice.
Sources
- What is seigniorage?
European Central Bank
A central bank's own definition of seigniorage as the profit from issuing currency, being the gap between face value and the cost of production and issuance. - Notes on Seigniorage and Budget Constraints
Maurice Obstfeld, University of California, Berkeley (Economics 202A), 2012
Formal treatment placing seigniorage inside a budget constraint and deriving the revenue-maximising rate of monetary growth. - A Luna-tic Stablecoin Crash
Harald Uhlig, National Bureau of Economic Research, Working Paper 30256, 2022
Formal academic analysis of the Terra and LUNA collapse as a run, used in place of the issuer's own materials, which could not be verified at a citable URL.
Last reviewed 2026-08
Know the terms but not sure how they apply to your project? That is what an engagement is for. We design, document, and stress-test the whole token economy inside the Tokenomics Data Room.
80+ projects advised. Complete tokenomics in 4 to 6 weeks.