Hook: The Plumbing Disconnect
Visa is scrambling to find a new stablecoin settlement partner after Mastercard quietly acquired BVNK — the very firm that had been handling Visa's own stablecoin settlement flow. The request for proposals, reviewed by CoinDesk, demands a partner with crypto exchange licenses across four jurisdictions: the U.S., Canada, the U.K., and Singapore. The mandate? Swap and support a range of stablecoins, and specifically settle for Open USD, the token Visa launched on July 16 as the first asset on its Visa Stablecoin Platform.
Code is law, but vigilance is the price of entry. Visa built its platform as an enterprise product — wallet infrastructure, minting and burning, dual-control approvals, audit logging. But the settlement layer? That depended on a firm that Mastercard just bought. The irony is sharp enough to cut through a bull market.
Context: The BVNK Bet
BVNK was not a stranger to Visa. In May 2025, Visa Ventures invested in the London-based company, which at the time was processing $12 billion in annualized stablecoin payment volume. That investment was a bet on institutional-grade stablecoin settlement — the kind of plumbing that banks and fintechs need to move tokenized dollars without building their own stack. Mastercard's acquisition on August 3, 2025, turned that bet into a competitive liability.
Open USD complicates the rivalry further. Visa, Mastercard, and Stripe all back the same consortium behind the token. Two card networks compete on infrastructure while sharing the currency that runs over it. This is not a simple vendor swap; it's a governance stress test. Modularity isn't the freedom to scale; it's the freedom to expose dependencies.
Core: The Technical Mandate
Visa's RFP specifies a settlement partner that can handle "the ability to swap and support a range of stablecoins" — not just Open USD. That implies a multi-asset liquidity management layer, likely requiring smart contracts for atomic swaps between USDC, USDT, and Open USD. Based on my audit experience with similar settlement systems, the critical vulnerability is not in the swap logic but in the oracle arbitration. If the settlement partner uses a single price feed, a flash loan attack on a low-liquidity pair could manipulate the settlement rate. Visa's platform includes "dual-control approvals" — a defense against rogue admin keys, but it does not protect against manipulation of external data.
Moreover, the license requirement across four jurisdictions hints at a regulatory strategy: the settlement partner must be a regulated trust or money transmitter in each market. This is a high bar. Only a handful of firms hold such licenses. The short list is likely comprised of Anchorage Digital, Paxos, or perhaps a banking partner like Standard Chartered's Zodia. But Zodia lacks a Singapore license, narrowing the pool further.
Visa's own stablecoin platform is still in beta, so the gap is not yet holding back live volume. But the clock is ticking. The winner inherits Visa's institutional flow for Open USD — a flow that could be billions in short order. The RFP does not disclose the candidate names, but the technical requirements are revealing: support for minting and burning, audit logging, and the ability to settle across multiple blockchains. That last point is key — Open USD initially launched on Ethereum, but the platform likely plans to support L2s and even non-EVM chains.
Contrarian: The Real Battle Is Not Visa vs. Mastercard
The obvious narrative is a card network rivalry. But the contrarian lens is this: the real competition is between centralized settlement (Visa/Mastercard's model) and decentralized settlement (DeFi protocols). Every time Visa or Mastercard acquires a settlement firm, they are buying a centralized key. BVNK had a single point of failure — its own custody infrastructure. Even a multi-sig setup can be frozen by a regulator. The Tornado Cash sanctions set a dangerous precedent: writing code equals crime, putting all open-source developers at legal risk. Now, controlling a settlement firm means controlling the ability to freeze funds.
What Visa is really seeking is a partner that can provide regulatory cover while maintaining operational uptime. The contrarian angle: the best candidate might not be a crypto-native firm but a traditional bank with a stablecoin license. Think Standard Chartered's Zodia, or even a U.S. bank like Silvergate's successor. These entities have the compliance infrastructure but lack the speed. Visa's RFP asks for "ability to swap and support a range of stablecoins" — that implies 24/7 operations, which traditional banks struggle with.
Another blind spot: Open USD's governance. The consortium behind Open USD includes Visa, Mastercard, and Stripe. If Visa's settlement partner is Mastercard's competitor, does that create a conflict of interest? The token's smart contract likely has a pause function controlled by a multi-sig of consortium members. If Mastercard requests a freeze on a transaction sent through Visa's partner, who decides? The code is law, but the keys are not.
Takeaway: The Next Watch
Visa's settlement partner search is a signal that the stablecoin infrastructure race is no longer about technology — it's about operational reality. The winner will be the firm that can bridge the gap between centralized compliance and decentralized speed. Watch for the announcement by Q4 2025. If Visa picks a regulated bank, expect a wave of similar partnerships from Mastercard and Stripe. If it picks a crypto-native firm, expect regulatory scrutiny. The bull market euphoria masks these technical and legal rifts, but the settlement layer is where the real battles are fought.
Sprint over. Reality sets in.