A wealth manager, a treasurer or a family office allocator is shown a note or a fund that promises enhanced yield on bitcoin or ether, sometimes with the word "protected" attached to it. The pitch usually skips the part that matters most: what instrument is actually embedded inside the product, where the venue sits in the regulatory landscape, and what has to go wrong for the buyer to lose money. This is a map of those building blocks, not a case for or against buying any of them.

Three ways to hold the same option

An option on bitcoin or ether can be bought or sold in three structurally different places, and the venue changes what "settlement" and "counterparty" mean.

Regulated exchange

CME Group lists bitcoin and ether options as a US designated contract market under CFTC oversight. The underlying is one CME bitcoin futures contract, itself a claim on five bitcoin. An in-the-money option does not deliver bitcoin: it expires into a futures position that cash-settles to the CME CF Bitcoin Reference Rate, and futures and options are margined together under CME's SPAN methodology, so a hedged book requires less collateral than the same legs held separately. The clearing house, not the counterparty who sold the option, stands behind every trade.

Offshore derivatives venues

Deribit runs bitcoin and ether options outside the US retail perimeter. Coinbase, which closed its acquisition of the venue on 14 August 2025, described it in that announcement as the number one crypto options exchange by volume and open interest, with roughly $60 billion of open interest on the platform at the time. Its regulatory footing has been shifting: in March 2024 Deribit received a conditional Full Market Product licence from Dubai's Virtual Asset Regulatory Authority, the first granted to a virtual asset derivatives exchange in the emirate. That licence changes who supervises the venue. It does not make the product the same instrument as a CME option, and access, margining and default handling still run on the exchange's own rulebook rather than through a clearing house supervised by a derivatives regulator. An allocator has to ask which regime, if any, actually stands behind a given offshore venue today, because "offshore" has stopped being a single category.

Onchain vaults

A third route sells options through a smart contract rather than an order book. Aevo, formerly Ribbon Finance, popularised the model in 2021: a vault takes depositors' bitcoin or ether, sells out-of-the-money call options against it on a weekly cycle through an auction, and reinvests the premium for depositors. There is no order-book counterparty in the ordinary sense. The vault's smart contract and its price oracle are the mechanism, and both can fail in ways an exchange's matching engine does not. That risk stopped being theoretical on 12 December 2025, when an attacker abused an oracle upgrade deployed six days earlier, which had left anyone able to set prices for newly added assets, and drained roughly $2.7 million from Aevo's legacy Ribbon vaults, about a third of the assets in them. Aevo halted the vaults, proposed a 19% haircut on withdrawals rather than passing on the full loss, and opened a claim window that ran to 12 June 2026.

The building blocks

Covered call

A covered call is the simplest structure and the one every options-selling vault runs by default: hold the underlying, sell a call option against it, and collect the premium. The seller keeps the coin if the price stays below the strike at expiry and pockets the premium; if the price rises through the strike, the seller delivers at the strike and gives up everything above it. It is a bet that the asset will not rally hard during the option's life, monetised as income rather than as a directional view.

Put spread

A put spread buys a put at one strike and sells a put at a lower strike, both on the same expiry. It caps the cost of downside protection, because the premium received from the short put offsets part of what is paid for the long put, but it also caps the protection itself: losses below the lower strike are no longer covered. It is a hedge with a floor rather than a guarantee, cheaper than an outright put in exchange for giving up protection past a certain point.

Principal-protected notes, and the ones that are not

A principal-protected note is a bank's own debt obligation with an option position stapled to it. Morgan Stanley Finance LLC's Market Linked Notes tied to the iShares Bitcoin Trust ETF, due 3 July 2031 and filed with the SEC on 29 June 2026, illustrate the structure cleanly: the notes return the full principal amount at maturity however the underlying performs, while giving the buyer 100% participation in the ETF's gain up to a stated cap of at least 57.25%. The protection is not free of risk. The notes are unsecured obligations of Morgan Stanley Finance LLC, guaranteed by Morgan Stanley, and the filing says so directly: all payments are subject to the issuer's credit risk, and a default means the buyer can lose principal that the structure otherwise returns in full.

Many products marketed alongside these are not principal-protected at all, and the naming blurs the difference. GS Finance Corp's auto-callable dual directional trigger note on the same ETF, filed 30 January 2026 and due 3 February 2028, states plainly that "investors in the securities must be willing to accept the risk of losing their entire initial investment". It is redeemed automatically for a fixed 24.85% return if the ETF closes at or above its initial price on 5 February 2027. If it survives that date, it pays 150% of any gain up to a maximum, turns a decline into an equal positive return so long as the final price holds at or above a downside threshold set at 75% of the initial price, and, if the final price breaks that threshold, pays the ETF's performance one-for-one from the initial price, so the holder takes the whole decline and not merely the part beyond the threshold. That is the difference between a trigger and a buffer, and it is the detail most often lost in a summary. Two notes on the same underlying ETF can sit at opposite ends of the risk spectrum, and the only way to know which is which is to read the pricing supplement's own description of principal treatment, not the marketing name. Because both notes reference an ETF rather than the coin itself, their pricing and liquidity also depend on the ETF's own creation-and-redemption mechanics, which we cover in a separate explainer on how those flows work.

Where the yield comes from, and what is given up for it

Every one of these structures monetises the same underlying source: implied volatility, sold to someone who wants to buy it. A covered call vault, a structured note's embedded short call, and a market maker's quoted option price are all extracting a premium for bearing the risk that the market moves further, or faster, than the price implies. That premium is not free money. It is compensation for capping upside, for accepting a barrier or a threshold, or for taking on issuer credit exposure, and the "yield" quoted on a term sheet is a gross figure before those trade-offs are netted out. The same discipline applies to any crypto yield product, not only options-based ones: our explainer on institutional staking risk makes the same point about a quoted rate masking dilution, fees and slashing exposure underneath it, and the questions it puts to a staking yield transfer almost unchanged to an options-based one.

At Proof of Talk's Paris 2026 edition, a panel titled "Institutional Yield in Crypto: From Bitcoin Strategies to Onchain Vaults" covered this territory from the vault side, discussing how allocators were approaching yield generated through onchain mechanisms rather than bank balance sheets. The structure itself, and not only the underlying asset, had become a subject in its own right.

The risks a factsheet may not lead with

A term sheet tends to lead with the headline yield or the cap rate. Several risks sit further down, or are absent entirely.

  • Counterparty and issuer risk. A structured note is a claim on the issuing entity and its guarantor, not a segregated pool of assets. An onchain vault's obligation is only as good as its smart contract and its oracle, as the Aevo exploit showed. An offshore venue's obligation is only as good as its own default fund and risk engine, which is not the same thing as a supervised clearing house.
  • Early termination. Auto-callable and barrier structures can be redeemed on a schedule set at issuance, converting what looked like a multi-year position into a much shorter one on terms fixed before the buyer knew how the market would behave.
  • Liquidity of the underlying. A note or vault priced off an ETF or a futures contract depends on that instrument trading in size at the moment the structure needs to price, hedge or unwind. Thin markets during stress widen the gap between a factsheet's assumed execution and what actually happens.
  • Model and volatility assumptions. Every cap, barrier and participation rate is priced off an implied volatility surface at issuance. If realised volatility, correlation or the venue's own liquidity conditions diverge from what was priced in, the economics the buyer signed up for can look very different from what was modelled.
  • Collateral treatment on default. What happens to posted collateral, margin or vault deposits if the counterparty, issuer or protocol fails depends entirely on the legal form of the instrument. A cleared exchange position, a bank note and a vault deposit are handled under three different insolvency regimes, and a factsheet rarely spells out which one applies.

Regulatory status, by venue, dated

The regulatory picture differs sharply by structure and jurisdiction, and treating it as one settled state is the most common error.

In the UK, the Financial Conduct Authority's policy statement PS20/10, published 6 October 2020 and in force from 6 January 2021, banned the sale to retail clients of both derivatives and exchange-traded notes referencing cryptoassets. Half of that has since been undone: from 8 October 2025 the FCA allowed retail consumers to buy crypto exchange-traded notes traded on an FCA-recognised UK investment exchange, while stating that its ban on retail access to cryptoasset derivatives remains in place. A UK retail client can now hold a crypto ETN and still cannot buy a crypto option. Professional and institutional clients were never inside either prohibition.

In the US, CME's crypto options are regulated by the CFTC as a designated contract market, and there is no equivalent retail ban on the instrument. In the EU, structured notes sold to retail investors fall under the PRIIPs Regulation (EU) 1286/2014, applying since 1 January 2018, which requires a standalone key information document of at most two A4 pages before sale and which names options packaged into securities or banking products as in scope. That regime is being amended rather than replaced: the Retail Investment Strategy package reached political agreement on 18 December 2025 and member states' ambassadors approved the final compromises on 5 June 2026, but the revised rules apply only after a transition period, so the existing key information document, not the amended one, is what governs a sale today. None of these regimes yet has a settled answer for the venue that sits between them: an onchain vault selling options against depositor assets, regulated in most jurisdictions, if at all, under general securities or commodities law written before the structure existed rather than under a rule addressed to it.

What to ask before signing

None of the above is a recommendation for or against any product, venue or issuer named here, and nothing in it is tax, legal, accounting or investment advice. What it does suggest is a short list of questions worth asking before capital moves: which entity is actually on the other side of the trade, and under what insolvency regime; whether "protected" refers to the whole structure or only a portion of it, and down to what level; whether the position can be redeemed early and on what terms; and what happens to the underlying's liquidity, and to the model's assumptions, in the kind of stressed market the structure was presumably sold to survive. Those questions apply whether the product sits on a regulated futures exchange, an offshore venue with a new licence, or a smart contract, and the venue on the term sheet changes the answers more than the yield number does. The margin and settlement mechanics underneath all three venue types, including how funding and mark pricing work on the derivatives side, are set out in our explainer on perpetual futures funding rates, and the broader question of how institutions size any digital asset allocation, options-linked or not, is addressed in how institutions allocate to digital assets.