On July 31 2025, Molecula Founder Yaroslav Shakula, KOLO’s CBDO Dmitry Klim, and PureFi’s CEO Slava Demchuk sat down for an AMA exploring how user-first design, rock-solid compliance, and uncompromising security are reshaping Web3 finance. Below is the full rundown: numbers, quotes, and takeaways included.
Snapshot Numbers
| Metric | KOLO | Molecula |
|---|---|---|
| Users / TVL | 80 000 KYC-verified card holders | $6.7 million TVL two months post-launch |
| Core USP | Cheapest fees; granny-proof UX | Fully on-chain, permissionless yields |
| Security Spend | Tier-1 audits + bug bounty | Tier-1 audits: Halborn & Hashlock |
Why “boring” compliance is suddenly an alpha
AMA participants agreed that the market flipped from “compliance-as-cost” to “compliance-as-competitive-advantage.” Users now pick products that stay clean, because reputation and liquidity flow together. In short, if you want assets, you must prove you’re aligned with global AML and KYC standards.
Two roads to trust infrastructure
| Model | KOLO (custodial) | Molecula (permissionless) |
|---|---|---|
| Legal stack | Companies & registrations “all over the world” so card-holders are legally covered | Operates inside existing frameworks yet keeps contracts non-custodial |
| KYC / AML flow | Sumsub gateway blocks dirty funds; ~80 000 fully-verified users | Wallet-level AML screening, no KYC, preserving decentralisation |
| Compliance focus | KYC AML for DeFi, compliant crypto card | DeFi compliance solution without user docs |
PureFi AML oracle was highlighted as the plug-and-play layer that can give other DeFi dApps the same wallet screening power without sacrificing UX — the missing bridge between TradFi rules and permissionless rails.
What We Learned: Security Engineering Rules
Rule 1: Product-Market Fit Starts with UX
- KOLO built its card after “no properly made crypto cards existed”, and funnelled Telegram virality into real-world usage.
- Molecula’s mantra: if DeFi UI makes users blink nervously, simplify it.
Rule 2: Compliance Is Now a Growth Lever
- Industry sentiment flipped: regulation = reputation. Projects voluntarily over-comply to win deposits.
- KOLO: global licensing, Sumsub KYC; dirty money rejected.
- Molecula: wallet-level AML screening, no KYC, preserving decentralisation.
Rule 3: Security Budgets Are Non-Negotiable
Formal verification ➜ dual independent audits ➜ public bug bounty. Anything less? Funds vanish overnight.
“Don’t trust me—trust the code. Yaroslav Shakula, Molecula“
Both teams treat security as a top budget line, performing:
- Formal verification of every line
- Dual Tier-1 audits plus re-audit after any change
- Bug-bounty programs to crowd-source exploits before hackers do
Smart Contract Audit Checklist
- Dedicated internal security engineer
- Formal verification report
- Two independent audits
- Public bug-bounty program
- Non-upgradable contract address hash on-chain
Use this list when you compare the best audited DeFi platforms.
Key takeaways for founders & users
- Compliance boosts TVL. A clean, reproducible legal stack is now the most straightforward growth hack.
- Security is non-optional. Budget for at least two audits + bounty; brag about it.
- Hybrid models win. Custodial fiat ramps + permissionless yield → broader addressable market.
Next time someone asks, “Why care about licences or audits in crypto?”, send them this recap — it’s the new alpha for 2025.
-1600x900.png)
-1600x1000.png)