CBDC and Financial Stability: Managing Runs, Liquidity, and Systemic Risk

CBDC and financial stability now sits near the top of the policy agenda because a retail central bank digital currency can change how fast money moves in a crisis. That is the useful part and the dangerous part. A CBDC gives households and firms access to digital central bank money. But if the design is careless, it also hands depositors a very fast exit from commercial banks.

The evidence so far is balanced. Research from the BIS, the IMF, the European Central Bank, and the Federal Reserve points in the same direction: CBDC is not automatically destabilizing, but an unconstrained retail CBDC can raise bank run risk. Add holding limits, tiered remuneration, sound liquidity facilities, and serious operational controls, and the risks look manageable at current adoption levels.

Why CBDC Changes the Financial Stability Debate

Cash already offers central bank money to the public. CBDC changes the channel. It is digital, instantly transferable, and easy to hold at scale unless limits are built in. That matters because commercial banks depend on deposits as a relatively stable funding source. If too much of that funding moves into CBDC, banks may need to replace it with wholesale funding, central bank credit, or more expensive liabilities.

Retail CBDC is the main concern. Wholesale CBDC, used for settlement between financial institutions, can affect intraday liquidity and market plumbing, but it does not usually create a new mass-market flight-to-safety asset. Retail CBDC does.

More than 100 countries are exploring CBDCs, according to widely cited BIS and Atlantic Council tracking. Live or pilot systems include the Bahamas Sand Dollar, Nigeria's eNaira, the Eastern Caribbean DCash, China's eCNY trials, and the European Central Bank's digital euro work. This is no longer a whiteboard topic.

The Main Channels: Runs, Liquidity, and Systemic Risk

CBDC touches financial stability through several connected channels. Look at them together, not as separate risks.

• Bank funding: CBDC can substitute for deposits, cutting a cheap source of bank funding.
• Liquidity transformation: banks may shorten asset maturity or hold more liquid assets if they expect deposits to become less sticky.
• Run speed: a depositor can move funds to a CBDC wallet faster than withdrawing cash from a branch.
• Payment resilience: CBDC can provide a public payment rail if private systems fail.
• Operational concentration: the CBDC platform itself becomes critical infrastructure.
• Cross-border spillovers: foreign CBDC access could intensify currency substitution and capital flow volatility in smaller economies.

To be blunt, the same feature cuts both ways. Instant settlement improves payments in normal times. During a panic, instant settlement accelerates outflows.

CBDC and Bank Runs: What the Research Says

Unconstrained CBDC Can Make Runs Faster

Several models find that an attractive, unlimited retail CBDC can raise run probability. ECB work shows that a positively remunerated CBDC can become a better safe asset than cash, which strengthens the incentive to flee bank deposits under stress. BIS research on CBDC and bank disintermediation reaches a similar conclusion: without holding limits, depositors can move large balances quickly, producing what researchers call fast disintermediation.

IMF analysis that draws on calibrated work by Bidder, Jackson, and Rottner reports that introducing a CBDC can raise modelled run probability from about 1.3 percent to roughly 2.5 percent. That sounds small until you remember that banking crises are low-frequency, high-damage events. A percentage point matters.

The risk is highest when three conditions line up together:

1. CBDC pays interest close to or above bank deposit rates.
2. Users face no meaningful holding or transfer limits.
3. Banks lack fast access to central bank liquidity when deposits leave.

Good Design Can Reduce Run Risk

The better finding is that CBDC design tools work. BIS modelling for a digital euro style CBDC estimates that holding limits of around 1,500 to 2,500 euros per person can push run probability below a no-CBDC baseline in some scenarios. ECB analysis has also discussed a 3,000 euro individual holding limit as a way to contain deposit outflows and funding pressure.

Limits are not elegant, but they are practical. If you want CBDC mainly for payments rather than as a large savings vehicle, caps make sense. Tiered remuneration does the same job: small balances earn zero or modest interest, while large balances receive unattractive rates. Some policy papers also discuss conversion fees or temporary restrictions during a crisis, though those tools need careful governance to avoid damaging public trust.

There is a trade-off. Tight caps cut run risk, but they also reduce CBDC usefulness for businesses and high-value payments. That is why wholesale CBDC and tokenized deposit systems may suit large institutional settlement better, while retail CBDC stays capped for households.

Liquidity and Credit Supply: The Bank Balance Sheet Problem

The central question for banks is simple. What replaces the deposits that move into CBDC?

If deposit migration is slow and limited, banks can adjust funding without much disruption. They can use wholesale markets, issue longer-term debt, attract time deposits, or borrow through central bank facilities. IMF portfolio-choice models suggest lending impacts can stay modest when banks have access to alternative funding and central bank credit.

If migration is fast, the story changes. A sudden shift from deposits into CBDC can force banks to sell liquid assets, cut lending, or draw emergency liquidity. That can turn procyclical: weaker banks face higher funding costs, credit tightens, asset prices fall, and depositors get even more nervous.

This is why CBDC should be designed as part of the financial safety net, not as a standalone payment app. Deposit insurance, lender-of-last-resort facilities, resolution planning, and CBDC conversion rules need to fit together. Otherwise one part of the public money system can accidentally weaken another.

Real-World Lessons: eNaira and DCash

Nigeria's eNaira Shows Low Adoption and Low Current Stability Impact

Nigeria's eNaira is often used as an early case study. Research using wallet downloads, transaction volumes, and currency circulation data estimates that eNaira was about 0.38 percent of currency in circulation in late 2023. At that size, it has not created meaningful banking instability.

That does not mean the risk is imaginary. Central Bank of Nigeria and academic studies find that higher CBDC demand can, in principle, reduce bank deposits and tighten liquidity conditions. The practical impact stays small because adoption is shallow. Scale is the missing variable.

DCash Shows Why Operations Matter

The Eastern Caribbean DCash pilot offers a different lesson. In January 2022, DCash suffered an outage linked to an expired certificate in the underlying platform, and service was interrupted for weeks. Balances and data were not lost, but the incident was a warning.

Anyone who has run production financial infrastructure knows this kind of failure is not theoretical. Certificate expiry, key rotation, disaster recovery drills, third-party dependency mapping: these boring details decide whether a CBDC is trustworthy when people need it. A CBDC ledger can have elegant monetary design and still fail the public if operations are weak.

Policy Tools That Matter Most

For CBDC and financial stability, some controls matter more than others. If you are evaluating a CBDC proposal, start with these questions.

• Holding limits: Is there a cap per person or business, and can it be adjusted as adoption grows?
• Remuneration: Does CBDC pay interest, and are large balances discouraged through tiering?
• Conversion controls: Can authorities slow extreme deposit-to-CBDC flows during stress without arbitrary intervention?
• Liquidity backstops: Can banks obtain central bank liquidity quickly if deposits migrate?
• Two-tier distribution: Are banks and payment providers involved in onboarding, KYC, and customer service?
• Operational resilience: Are there tested recovery procedures, offline options, cyber controls, and third-party risk checks?
• Data governance: Can transaction data support supervision while preserving privacy and legal protections?

My view: an unlimited, interest-bearing retail CBDC is the wrong starting point for most economies. It gives policymakers a neat digital instrument, but it asks banks and depositors to absorb too much uncertainty. A capped, non-interest or tiered retail CBDC is the safer default.

What This Means for Banks, Developers, and Risk Teams

If you work in a bank, watch CBDC as a funding risk, not only as a payment innovation. Track which deposits are most likely to move: uninsured corporate balances, payment-heavy transaction accounts, and digitally active retail users. Stress tests should include fast conversion assumptions, not just gradual deposit decay.

If you are a developer or architect, treat CBDC infrastructure like critical financial market infrastructure. Identity, wallet recovery, hardware security modules, certificate management, observability, and incident response are not optional. Keep the DCash outage as the case study on your desk.

If you are in policy or compliance, focus on calibration. A 3,000 euro cap may be sensible in one jurisdiction and too high or too low in another. The right number depends on deposit structure, bank liquidity, payment habits, and the strength of existing safety nets.

Where Blockchain and Digital Asset Professionals Should Focus Next

CBDC work sits at the intersection of digital assets, monetary policy, cybersecurity, and regulated infrastructure. Professionals who want to build credible expertise should understand both token architecture and bank balance-sheet mechanics.

For a structured learning path, connect this topic with the Certified Blockchain Expert™ certification for distributed ledger fundamentals, Certified Blockchain Developer™ for implementation skills, and Certified Cryptocurrency Expert™ for broader digital asset market structure. If your role touches controls, incident response, or payment infrastructure, pair that with cybersecurity training rather than treating CBDC as only a blockchain topic.

The practical next step: build a CBDC risk checklist for one real jurisdiction. Include holding limits, remuneration, bank funding exposure, liquidity facilities, privacy rules, and operational recovery. If you can explain how each item changes run risk, you understand CBDC and financial stability better than most headline commentary.