On Ethereum, separate `FrxUSDCustodian` proxies pair frxUSD with USDC, USTB, BUIDL, WTGXX and USDB. A user deposits the specified asset and receives frxUSD, or burns frxUSD to withdraw that route's asset, after any fee. Each proxy has a mint cap, tracks what it minted and can refuse withdrawal beyond available reserves. BUIDL, USTB and WTGXX also require the receiver to be eligible to hold the underlying fund token. A route being 1:1 does not mean every route is always liquid.
The custodian contract owner can change caps, fees and approved operators. Operators may move excess reserve tokens into RWA strategies subject to a minimum balance. FIP-432 put custodian onboarding, reserve composition, KYC/KYB, attestations and fiat redemption operations under Frax Inc, with the DAO retaining authority to amend or revoke the delegation. This is not the old AMO balance sheet: FIP-430 separated Legacy FRAX and frxUSD and ended the DAO-guaranteed 1:1 migration between them.
The token layer also has compliance control. The Ethereum frxUSD proxy can be upgraded; its current implementation exposes authorized minters, global pause, address freeze/thaw and burns directed by the token-contract administrator. Cross-chain supply additionally depends on mint/burn adapters and messaging routes. These powers support regulated operation, but they mean an ERC-20 transfer is not censorship-resistant in the manner of a fixed, ownerless token.