Bain’s $35 Million M0 Bet Now Runs PayPal’s Rails

Bain Capital Crypto’s $35 million Series A in M0 has become a $100 million minting stack that now issues branded dollars for PayPal, MetaMask, and MoneyGram. The June 5, 2024 round bought a shared protocol, not a consumer coin with a ticker people shout about.

The logos arrived. The float did not. On July 30, 2026, M0 still counted $319 million across 19 coins on those rails, against a stablecoin market M0 itself put at $303 billion a few weeks later.

The $35 Million Bet Bain Placed in 2024

On June 5, 2024, M0 announced the Series A and said the protocol was live on Ethereum. Bain Capital Crypto led. Galaxy Ventures, Wintermute Ventures, and GSR joined. Pantera Capital had already led a $22.5 million seed in early 2023.

Luca Prosperi, then president of the M0 Foundation Council and now co-founder and CEO, told the round’s audience he wanted coins that “all look the same, smell the same, are fully fungible,” while staying off the old banking stack. Stefan Cohen, a partner at Bain Capital Crypto, said in a statement that stablecoins were already “the largest and fastest growing asset for settlement on public blockchains today,” and that he expected the market to grow to trillions of dollars over the next decade.

The 2024 product was $M, a Treasury-backed unit that permissioned minters could issue and that other firms could wrap. U.S. banks, Prosperi said at the time, still lacked permission to issue their own stablecoins, so America was not the first target. The bet was simpler than the branding: one collateral standard, many issuers, one unit that could move.

THE FUNDING PATH TO $100 MILLION

1. Early 2023: Pantera Capital leads a $22.5 million seed for the project then styled M^0.
2. June 5, 2024: Bain Capital Crypto leads the $35 million Series A and the team deploys on Ethereum.
3. August 28, 2025: Polychain Capital, Ribbit Capital, and Endeavor Catalyst lead a $40 million Series B, and M0 states total capital of $100 million.

Bain did not exit the cap table. It came back in the Series B beside Pantera and Road Capital, which is how a 2024 infrastructure wager gets scored in public: the lead writes a second check after the first brands show up.

Polychain and Ribbit Put Another $40 Million on M0

From Zug, Switzerland, M0 said Polychain, Ribbit, and Endeavor Catalyst had led the $40 million Series B in August 2025. The company had been founded in 2023 and staffed with people from MakerDAO and Circle. It still refused to disclose a valuation.

The pitch had shifted. The 2024 language was fungible cryptodollars. The 2025 language was app-specific coins with unified liquidity underneath. Prosperi put the new version on the record the day the round closed.

We want to empower the builders of great fintech products to actually control the digital dollar stack they utilize. The current incarnation of stablecoin technology isn’t fit for that purpose.

Luca Prosperi, Co-founder and CEO of M0, Series B announcement

Josh Rosenthal, a general partner at Polychain Capital, called the tokens “programmable building blocks.” Zack Rosen, a partner at Ribbit Capital, said builders wanted control over how money moves, how it is held, and how it pays users. Both were talking about a protocol that separates reserve custody from the rules a wallet or a game can attach to a dollar.

The same week, M0 said Bridge, a Stripe company, had joined as the first U.S. issuer on the network. That closed the 2024 gap Prosperi had flagged, at least for one regulated minter. The company also said aggregate supply across M0-powered coins had surpassed $300 million in July 2025, a 215% increase since the beginning of that year.

We are thrilled to announce M0’s $40M series B round from @polychain, @RibbitCap and @endeavor_global’s Catalyst Fund.

M0 is building the universal stablecoin platform. pic.twitter.com/tb1PEpQZh4

— M0 (@m0) August 28, 2025

Wallet, Remittance, and Payments Brands on One Stack

By the Series B, M0 was no longer selling a theoretical federation. MetaMask was building mUSD. Noble had USDN. Usual had USD0. KAST was issuing branded dollars on Solana for payments and savings in 150+ countries. Playtron was building a Game Dollar. USD.AI was already on the list of purpose-built coins.

The next twelve months added the names that make the 2024 check look less like a protocol toy. MetaMask USD went live on September 15, 2025, on Ethereum and Linea, with Bridge as issuer and M0 as the on-chain mint. Johann Bornman, senior director of product at MetaMask, said the shared issuer layer let the wallet start with Bridge and keep the option to add others. Circulation jumped to $65 million in the first week. By June 27, 2026, mUSD sat at $32.2 million across Ethereum, Linea, and Monad, a smaller coin than the launch pop implied, which is what happens when a wallet dollar has to live next to USDT and USDC.

MoneyGram followed on June 2, 2026 with its native U.S. dollar stablecoin MGUSD, issued on Stellar. Bridge is the GENIUS Act-ready issuer in that announcement. M0 handles mint and burn. Fireblocks holds the firm’s wallets before tokens move into self-custody balances inside the MoneyGram app. The company said it serves more than 60 million customers and nearly 500,000 retail locations. First international deployments named by M0 were Colombia and El Salvador. Luke Tuttle, MoneyGram’s chief product and technology officer, said the stack gave him optionality on contracts, yield, and where reserves sit.

PayPal arrived as a platform customer, not as a one-off wrapper. On September 9, 2026, PayPal, M0, and MoonPay took live a developer platform backed by PayPal USD, after MoonPay had integrated with M0 on November 13, 2025, and after the three firms had previewed the tokenization framework backed by PayPal USD on February 27, 2026. M0 built the contracts. MoonPay Digital Assets Limited holds the PYUSD reserves. Saturn, Concrete, and Cap launched on day one with more than $100 million in processed volume, a flow figure, not a circulating supply. USD.AI and Fairblock were listed as next.

The stablecoin market is maturing fast. What separates the next phase from the last isn’t the asset. It’s what companies can do with it. PYUSDx is designed to answer that.

May Zabaneh, Senior Vice President and General Manager of Crypto at PayPal

WHO IS MINTING ON M0

Joao Reginatto, M0’s chief product and strategy officer, called PayPal the first global consumer payments brand to turn its stablecoin into a developer platform. That is the Series A thesis in operating form: the brand owns the dollar the user sees, and the protocol owns the mint.

How M0 Turns Treasuries Into App-Branded Dollars

The core is still $M. Docs describe an immutable ERC-20 whose supply is created and destroyed through a MinterGateway, with minting and burning of the $M token limited to permissioned minters. Those firms post eligible off-chain collateral, usually short-term U.S. Treasuries held in special purpose vehicles, and an on-chain collateral value that validators keep current.

A minter rate compounds against issued supply. An earner rate pays approved addresses. The spread, plus penalties, can land in a distribution vault. Extensions wrap $M into the branded coin a wallet or a remittance app actually shows, and a swap facility is meant to keep those wrappers interchangeable at one to one so liquidity does not fragment the way a thousand standalone dollars would.

THE FOUR JOBS ON THE RAILS

• Minters: Permissioned firms that lock eligible collateral and create $M, then pay the minter rate on what they have issued.
• Validators: Parties that attest the off-chain reserve figure so the on-chain collateral value stays honest.
• Earners: Approved addresses, often extension contracts, that can turn on yield so balances grow without a separate coupon payment.
• Extensions: App coins such as mUSD or MGUSD that set branding, freeze rules, and who receives rewards, while still clearing back to the shared layer.

That split is why Bridge can issue for MetaMask and MoneyGram without those firms building a reserve desk from scratch, and why PayPal can let Saturn ship USDat without handing Saturn the PYUSD trust charter. Governance, through a two-token system, decides who is allowed to mint and who is allowed to earn. It is a club with on-chain rules, not an open mint.

Supply Has Barely Moved Since the Series B

July 2025’s $300 million print was the figure M0 took to investors. A year later the official update was almost the same size and much busier on paper.

THE NETWORK ON JULY 30, 2026

• Aggregate supply: $319 million+ across all M0-powered stablecoins, per the firm’s own dashboard post.
• Coin count: 19 live coins on the rails that day.
• Transfer volume: $28.94 billion annualized.
• Rewards paid: $15 million+ distributed through the earner path.

M0’s September 9 research note put the wider stablecoin market at $303 billion in circulation, and said monthly on-chain transfers had reached $7.2 trillion in February 2026. Against those figures, $319 million is plumbing money. It is not a bid to replace Tether. It is also not a failed prototype if the customer is MetaMask’s wallet, MoneyGram’s app, or PayPal’s developer kit rather than a person who wants one more generic dollar in a DeFi pool.

mUSD’s path is the honest version of that trade. A wallet-native coin can print $65 million in a week because the distribution is already on the home screen, then settle near $32.2 million once users rotate back into the dollars they already use for trading. On June 30, 2026, MetaMask added a Money Account on Monad that pays up to 4% variable APY on mUSD through DeFi vaults, with Bridge still holding cash and short-term bills one to one. Yield sits beside the peg, not inside the reserve story. That is a product choice, and it is also an admission that a branded dollar has to buy attention after launch week.

What Builders Get From a Shared Mint

The practical trade, the one that showed up as soon as the Series B thread filled with issuer lists, is that M0 is not a coin you hold for fun. Exposure is the branded dollars, and the list is the product. MetaMask, KAST, Usual, Noble, Playtron, and USD.AI were named in the raise thread because that is where a user actually meets the mint.

On September 16, 2026, M0 described a two-token pattern sitting on the same rails: a spendable dollar backed by Treasuries, and a staked sister token that passes through a real-world yield book. Saturn’s USDat is described as 100% backed by Treasury bills, with sUSDat targeting returns of 11.5%+ tied to Strategy’s STRC. USD.AI finances GPU credit and is migrating USDai onto PYUSDx. DAWN issues USD.infra against connectivity and compute, and on September 22 it opened a vault for that coin.

THREE BUILDERS USING A TWO-TOKEN DOLLAR

• Saturn: USDat for settlement, sUSDat for a credit book M0 says is tied to STRC.
• USD.AI: USDai and sUSDai for GPU-backed loans, with a PYUSDx migration on the calendar.
• DAWN: USD.infra and sUSD.infra, with the vault opened on September 22, 2026.

Prosperi’s 2024 line about coins that all look the same is still the $M layer. The money that showed up later was for coins that do not look the same, which is why PayPal paid M0 to extend PYUSD instead of asking the world to hold $M. Bain’s second check, and Polychain’s first, priced that outcome. On September 22, DAWN opened the USD.infra vault on the same rails. M0’s own calendar now points at Token2049 in Singapore on October 7 and 8, with a main-stage slot on October 8.

Frequently Asked Questions

What is M0’s $M token?

$M is an immutable ERC-20 with a dual-balance design: ordinary non-earning balances that stay put, and earning balances that compound on-chain so the visible token count rises without a separate payout. A non-rebasing wrapper, wM, exists for venues that cannot handle rebasing math, and it uses 6 decimals to match $M. Governance still decides which addresses may earn.

Who is allowed to mint on M0?

Only permissioned minters. They register eligible off-chain collateral, often Treasuries in special purpose vehicles, and keep an on-chain collateral value that validators update. A mint ratio caps how much $M they can issue against that value, so the system stays overcollateralized on purpose rather than running one to one at every hour of the day.

What is PYUSDx, and can those tokens sit in a PayPal wallet?

PYUSDx is the developer platform M0 built so other firms can launch products fully backed by PayPal USD, which Paxos issues against deposits and Treasuries. MoonPay Digital Assets Limited holds the PYUSD reserves. Tokens created through PYUSDx are separate from PYUSD itself and cannot be held, sent, or stored in PayPal or Venmo wallets.

How does M0’s two-token governance work?

A Two-Token Governance system, TTG, uses POWER and ZERO. POWER holders vote through a StandardGovernor to add earners to an on-chain list. Excess interest from minters, the spread over what earners are paid, can be minted to a Distribution Vault for ZERO holders, which is how protocol revenue is supposed to reach governance without a separate off-chain dividend.

When did $M first go live?

Token records list an inception date of May 7, 2024, weeks before the June 5, 2024 Series A and the public Ethereum deployment announced with that round. The seed round sat in 2023. The branded coins that now carry the story, mUSD, MGUSD, and the PYUSDx cohort, all came after that first $M contract.

Disclaimer: This article is news reporting and analysis of M0’s funding, protocol design, and partner launches, and it is for information only. It is not investment advice, not a solicitation to buy or sell $M, mUSD, MGUSD, PYUSD, or any token built on M0, and not a recommendation of any yield, vault, or credit product named here. Readers should consult a qualified financial adviser, and where needed a licensed legal or tax professional, before acting on anything in this piece. Figures, partner statuses, and yields reflect the cited company posts, protocol docs, and launch notices as of the dates given and can change without notice.