Kyber's DTSP defence is a website disclaimer and a two-word distinction

The hinge is two words. Singapore's Digital Token Service Provider regime reaches entities that are locally based and offer digital token services to users abroad ^[5], and Kyber's position is that being incorporated in Singapore is not the same as being operated from it ^[1]. The registration half of that sentence is a state record: Kyber Network Pte. Ltd., UEN 201719741W, incorporated on 13 July 2017, registered address in Singapore ^[3]. The operations half is documented by Kyber, on Kyber's website and in Kyber's FAQ ^[4]. From 30 June 2025 ^[2] the two are being asked to carry the same evidentiary weight, and only one of them was written by somebody other than the party it benefits.

The company had just under eight years of undisturbed Singapore residency before the rule arrived ^[12]. The alternative to the disclaimer is a licence, and Crypto Briefing reports both that MAS has signalled reluctance to grant licences to this class of applicant and that Kyber is unlikely to meet the requirement ^{[6] [9]}. On that reading the disclaimer is not one option among several. It is the only door that does not need MAS to say yes.

What the argument rests on is architecture. KyberSwap holds no user funds and aggregates liquidity across more than thirteen blockchains without a central operator making trading decisions, which Kyber offers as the reason it sits outside the category ^[11]. That describes where the money sits and how orders route. It says nothing about where the people who upgrade the contracts, set the parameters and sign the annual return are sitting, and the source material does not say either. A perimeter drawn around entities rather than around code will be tested on the second set of facts, not the first.

The 2023 exploit is the awkward entry in the file. An attacker drained KyberSwap's liquidity pools through a smart contract vulnerability ^[8], and the material available does not record who answered for it. An architecture that is nobody's to license is also nobody's to hold responsible, which is the trade that frameworks like the DTSP exist to refuse.

Crypto Briefing's own read is that the cumulative volume figure works in both directions: more than $20 billion through the platform since launch ^[7] is evidence of a functioning market, and evidence that the flow the DTSP was drafted to capture is running through a company with a Singapore registration ^[10]. The framework was written precisely for entities that were locally incorporated while serving global users ^[13], which is a description of the corporate record, not of the smart contracts.

The cheapest way to end this argument is to stop being a Singapore company. Kyber has not done that. Until it does, the strongest document in the file is the one it did not write.