Introduction

Islamic finance was built to avoid riba, the Quranic prohibition against interest and usury, one of the most severe prohibitions in Islam, mentioned alongside the gravest sins. The dominant instrument in this industry is murabaha (مرابحة), a cost-plus sale: the seller purchases an asset, discloses the cost to the buyer, and sells it at a fixed markup. The total price is agreed at the point of contract, cannot increase for any reason (including late payment), and the buyer knows their full obligation from day one. Every murabaha has a settlement date. In theory, this is commerce. Murabaha accounts for 85-95% of Islamic banking transactions worldwide and sits at the center of an industry that now exceeds $4.5 trillion in assets, operates across 78 countries through more than 420 institutions, and serves upward of 190 million active accounts.

The industry was built with sincere intention. But over decades of institutional growth, it ended up reproducing the economics of the very thing it was designed to prohibit, with different contracts and different labels. In practice, most murabaha transactions are priced by reverse-engineering the markup from conventional interest rates (SOFR, LIBOR, SAIBOR), producing the same economic outcomes as a conventional loan. By every commercial and institutional metric, the industry is succeeding. Safdar Alam’s argument is that it is succeeding while reproducing the economic substance of riba.

Alam (@safdaralam on X) spent over three decades inside this architecture. He held senior roles at UBS, Crédit Agricole, and JPMorgan, where he served as Global Head of Islamic Structuring. Across those institutions, he structured and executed transactions exceeding $20 billion and advised governments, central banks, and regulators across multiple jurisdictions. He then published a systematic analysis of why everything he helped build works exactly as its incentives dictate, and why that is the problem. His “Critical Frameworks” collection, ten interconnected articles published at safdaralam.com, examines this convergence across ten interlocking dimensions. Each article operates as a different proof of the same theorem: that the failure of Islamic finance is architectural, and that no amount of sincerity, scholarly oversight, or product innovation can fix a system whose governing logic produces riba by design. As he writes in his Core Thesis: “The system is not failing; it is performing exactly as designed.”

I have spent the past several years in crypto-native infrastructure: co-founding a Layer 1 blockchain in the Cosmos ecosystem backed by Bitfinex, UDHC Finance (former MakerDAO executive team), and others; then building Caliber, a crypto-native neobank, through Wintermute’s Construct Accelerator, where we closed production integrations with Stripe/Bridge, Visa, M0 as an Approved Earner on Base for our own Treasury Bill Backed Stablecoin, and many others. Over time, experiences led me to a question I have not been able to put down: what would it look like to build a Shariah-compliant financial system onchain, from first principles?

Alam’s Core Thesis frames the opportunity directly: constraint eliminates familiar solutions and forces exploration into neglected regions of the solution space, where novel structures emerge. That is the space I am working in now, starting with the architecture of what a sound onchain murabaha could look like, with the longer-term goal of building toward a broader Islamic finance ecosystem where the constraints are embedded in the architecture. What follows is a response from someone who read his work and recognized, in structural terms, what he is describing and what decentralized finance might offer in response.

Part I: Alam’s Framework, Condensed

Alam’s ten articles form a layered system. To engage with it seriously, the layers need to be understood as interlocking. Four constructs carry the weight of his argument.

The first is what he calls “Refusal to Collapse Time.” Alam defines riba as a temporal operation: the seizure of the future by converting uncertainty into guaranteed extraction. It compresses what has not yet happened into a fixed present-tense return, regardless of what actually occurs in the underlying economic activity. Any structure that performs this operation, regardless of its contractual label, is functionally riba.

The second is what I will call the Structural Veto, or rather its absence, drawing on Alam’s concept of “systemic veto power” and the institutional capacity to “enforce refusal.” Alam shows that Shariah oversight has been architecturally sequenced to arrive after economic substance is fixed. Scholars validate language. They confirm decisions already made. There is no governance mechanism with the authority to refuse transactions on ethical grounds before the deal is done.

The third is Architectural Evasion. In “The Forbidden Analysis,” Alam names the discourse-level mechanism that prevents structural scrutiny. The industry’s public conversation is organized around topics that are reputationally safe (ESG, fintech, inclusion) while systematically avoiding the question of why the vast majority of its assets replicate the economic substance of debt. Balance sheets are opaque, transaction structures are proprietary, and the aggregate composition of assets is visible only through industry reports that frame everything in growth narratives.

The fourth is Institutional Incentive Drift. Across several articles, Alam traces how the institutional forms of Islamic finance (banks, asset managers, advisory firms) reproduce riba through balance sheet growth targets, benchmark competition, fiduciary pressure to match conventional returns, and career dependence on the system’s continued legitimacy. Individual virtue is structurally neutralized by institutional mechanics. Sincere people operating a system designed for guaranteed extraction produce guaranteed extraction.

These four constructs reinforce each other. Time collapse is the philosophical definition. The absence of a structural veto, an enforceable mechanism to say no before deals are done, is why no one stops it. Architectural evasion is why no one sees it. Institutional incentive drift is why no one inside the system can change it. Together they explain how an entire industry can sincerely pursue Shariah compliance while reproducing the economic substance of what it was built to prohibit. The arc Alam traces across his remaining articles, from the reclassification of finance out of the domain of obligation, to the psychological journey from prohibition to praise, to the geopolitical consequences of debt-based subordination, deepens and extends these four constructs but does not alter them.

Alam calls for an “orthogonal shift,” a “sovereign rail,” and “inviolable mechanics” that are physically, legally, and mathematically incapable of creating riba. He names the design constraints with precision. What the system does not contain is an operational specification for the alternative.

This response attempts to map how decentralized finance and blockchain-based protocol design could serve as the novel solution space his framework calls for.

Part II: Constraint as Search Function

In his Core Thesis, Alam introduces a concept that reframes everything in his Critical Frameworks: constraint as a search function. His argument is that genuine Shariah constraints, taken seriously, force participants out of the “crowded equilibrium” where everyone replicates conventional debt with different labels. Constraint eliminates familiar solutions and pushes exploration into neglected regions of the solution space, where novel structures emerge. “Restricting 90% of conventional options,” he writes, “increases the chance of fundamentally novel structures.”

This is the operating principle behind the architecture described below. Every design decision that follows exists because a constraint was accepted rather than engineered around. No benchmarking against SOFR (the Secured Overnight Financing Rate, the primary benchmark conventional banks use to price debt), because referencing the conventional rate curve imports the very thing the system is supposed to avoid. Mandatory deterministic ibra’ (an early repayment rebate, where unearned markup is forgiven if the borrower repays before term), because discretionary rebates are irrelevant when institutional incentives make them optional. Immutable smart contract enforcement, because policies are only as strong as the institutional incentives surrounding them, and constraints encoded in code are immune to those incentives. Each constraint closed a familiar path and forced the design into territory that conventional Islamic finance structuring desks would not explore because the constraints they operate under are permissive enough to allow conventional replication.

When you describe murabaha to someone for the first time, the immediate reaction is usually: “Isn’t that just a loan with extra steps?” It is a fair question. On its face, a cost-plus sale on deferred payment looks similar to a loan at interest. The differences only become visible when the instrument is built correctly: the seller must genuinely own the asset before selling it, the cost and markup are both disclosed, the total price is fixed at the point of contract, the price cannot increase for any reason including late payment, every contract has a defined settlement date, and ibra’ forgives unearned markup on early repayment. When these conditions are met, the economic outcomes for the borrower are measurably different from a conventional loan. When they are not met, which is most of the time in practice, the instrument is just a loan with extra steps. The design exercise below tests whether an onchain architecture can hold to these conditions under scrutiny.

The DeFi Solution Space

The solution space I am exploring deeply starts as a new onchain murabaha built as a fork of Compound V3 on Arbitrum. To understand what this architecture changes, it helps to see what it replaces. In conventional DeFi lending (Aave, Compound), interest rates are variable and change every block based on pool utilization. Interest compounds, meaning debt grows exponentially over time. There is no price cap, so the borrower’s total obligation is theoretically unbounded. Positions can stay open indefinitely with no settlement date. And there is no concept of an early repayment benefit.

This protocol replaces each of those properties with a murabaha structure. Borrowers post crypto collateral (ETH, WBTC) as rahn (pledge, a concept with Quranic basis and scholarly consensus across all four major schools) and receive USDC at a fixed contract price: principal plus a disclosed cost-plus markup, locked at the moment of borrowing. The markup rate is determined by the protocol’s own supply-and-demand curve, with no external rate benchmark. Markup accrues linearly over a 360-day settlement period. There is no compounding. Ibra’ applies automatically: if the borrower repays early, they pay only the accrued portion and the remainder is forgiven. The total contract price is a ceiling on the lender’s return. Liquidity providers deposit USDC and earn yield continuously from aggregate markup accrual, functioning as mudarabah (profit-sharing) participants with variable returns that are never guaranteed.

What follows tests this architecture against each of the four constructs Alam identifies. For each construct, the progression is the same: what conventional finance does, what Islamic finance was supposed to fix and how it failed, and what the onchain architecture makes possible.

Part III: Testing Against Alam’s Framework

Time Collapse: From Interest to Genuine Sale

In conventional finance, the lender charges interest indexed to a benchmark rate (SOFR, LIBOR). The rate floats. Interest compounds. Debt grows. The lender’s return is derived from the pricing of time itself, calibrated to a rate curve that has nothing to do with any underlying commercial activity.

Islamic finance was supposed to replace this with genuine trade. Murabaha, properly executed, is a sale at a disclosed margin: the seller buys wheat for $100 and sells it for $105. The buyer knows the cost and the profit. This is trade, and it is permitted without controversy. The Quran distinguishes it explicitly: “Allah has permitted trade and has forbidden interest” (2:275). A shopkeeper who tells you a table costs $120 when he bought it for $100 has conducted a sale at a disclosed margin. A bank that tells you its “profit rate” is SOFR + 195bps and calls it murabaha has simply renamed interest.

In practice, Islamic finance ended up pricing murabaha by reverse-engineering the markup from the conventional rate curve. A murabaha at SOFR + 195bps converts the uncertainty of economic activity into the certainty of a rate derived from the conventional debt market. The “profit” has nothing to do with any commercial reality. This is what Alam means by collapsing time.

Alam frames the problem with precision:

“Riba collapses time by seizing the future. It converts uncertainty into certainty, guaranteeing extraction regardless of what actually happens in the underlying activity. Risk is displaced forward while return is fixed in advance.”

The onchain architecture severs this mechanism at the root. The markup rate is determined by the protocol’s own supply and demand dynamics via an internal utilization curve. There is no reference to SOFR, LIBOR, SAIBOR, or any external interest rate. The total contract price is fixed at origination as a genuine sale price. It does not float, does not compound, and does not increase if the borrower takes longer to repay.

This position stands on ground that scholars have already laid. AAOIFI Shariah Standard No. 27 permits using conventional rates as a pricing reference, provided the contract price is fixed and does not vary with further index changes. Taqi Usmani, Chairman of the AAOIFI Shariah Council, confirms this in his Introduction to Islamic Finance: if the murabaha fulfills all conditions, using interest rates as a benchmark for pricing does not render it haram, because the deal itself does not contain interest. But he also calls the practice “not desirable” and acknowledges it makes the transaction resemble interest-based financing. Scholars have consistently said an asset-based or internally determined benchmark is the stronger position. This architecture implements what the scholars themselves have said is preferable.

The honest tension: market forces will likely push effective rates toward similar territory as conventional rates, because both systems operate in the same macroeconomic environment. The mechanism diverges (the rate is internal, the price is fixed, the structure is a genuine sale). Whether the outcome converges is a question this design does not fully resolve, and claiming otherwise would not be honest.

Is there a temporal element to the markup? Yes. A murabaha with a longer duration will have a different contract price than one with a shorter duration, because the capital is committed for longer. But this is true of any deferred-payment sale. If a shopkeeper offers you a table for $100 cash or $105 on 60-day terms, the $5 difference reflects the deferral. The classical scholars examined this exact scenario and permitted it, provided the price is fixed at the point of contract and does not increase with further delay. This architecture enforces exactly that: the contract price is fixed and capped at origination. It does not compound. It does not float. The ibra’ mechanism ensures the actual cost decreases if the borrower repays early. The critique has force against murabaha structures that reverse-engineer their markup from SOFR. It does not carry the same force against a structure where the markup is internally determined, fixed, capped, and subject to mandatory rebate.

Collateral and Guaranteed Extraction: From Insulation to Rahn

In conventional finance, the lender is insulated from reality by sovereign guarantees, credit insurance, and institutional backstops. In conventional Islamic finance, the same insulation persists under different names: purchase undertakings in sukuk that guarantee principal return, contractual obligations in murabaha with floating rates and penalty clauses, sovereign guarantees layered throughout. The lender’s return is the floor, guaranteed regardless of what happens in the underlying activity. This is the “guaranteed extraction” Alam describes.

In conventional DeFi lending, the picture is different but still problematic. Rates are variable and compound, meaning the borrower’s debt grows unpredictably. There is no cap on the total obligation. Liquidation mechanisms protect the lender at the borrower’s expense.

The question for this architecture is direct: does overcollateralized lending with auto-liquidation constitute the same guaranteed extraction Alam indicts?

The honest answer starts with what rahn actually is. Rahn (pledge/collateral) is a well-established concept in Islamic jurisprudence with Quranic basis (2:283), Prophetic precedent (the Prophet, peace be upon him, pledged his iron armor as collateral to a Jewish merchant in Medina when purchasing barley on deferred terms), and scholarly consensus across all four major schools of fiqh. Collateral is designed to protect the creditor, and the Islamic tradition endorses this purpose. The question is whether the collateral mechanism satisfies the specific constraints rahn imposes.

Three principles govern rahn. First, ownership of the pledged asset remains with the borrower throughout the contract. The lender holds it as a trust (amanah). Any appreciation belongs to the borrower. Any income generated belongs to the borrower. The lender has no claim beyond the specific debt owed. Second, the lender must not derive benefit from the collateral. The dominant scholarly position, reflected in AAOIFI’s standards and OIC Fiqh Academy resolutions, holds that any benefit derived from rahn collateral by the creditor is classified as riba. Third, in default, any surplus beyond what is owed must be returned to the borrower.

The onchain architecture maps onto these principles with a fidelity that institutional arrangements cannot match. The borrower’s collateral sits in a smart contract. The lender cannot access it, cannot use it, cannot rehypothecate it, and cannot derive any benefit from it during the life of the contract. This is a mechanical fact enforced by code. In conventional finance, the prohibition on the lender benefiting from rahn collateral depends on institutional discipline and trust. Onchain, it is architecturally guaranteed. When the borrower repays, they reclaim their collateral automatically and immediately. There is no discretion, no delay, no opportunity for the lender to retain what is not theirs. In liquidation, only the amount owed is recovered, and the architecture is designed to return surplus to the borrower.

Does collateral reduce the lender’s risk? Yes. That is the purpose of rahn, and the tradition explicitly endorses it. But three properties distinguish this from the insulation Alam describes. First, the contract price is fixed at origination and cannot increase. Late payment does not add to the obligation. There is no penalty accrual, no compounding, no floating component. The borrower’s maximum cost is known and immutable from day one. This is a sale price that does not grow, which is categorically different from a debt that does. Second, ibra’ means the lender’s actual return is the contract price only if the full 360-day term elapses. The contract price is a ceiling. If the borrower repays early, the unaccrued portion is forgiven deterministically by the smart contract. Unlike conventional Islamic banking where ibra’ is typically at the bank’s discretion, here the borrower has an enforceable, automatic right to the rebate. Third, the lender’s capital is deployed into a smart contract with real protocol risk: smart contract vulnerabilities, oracle failures, and liquidation cascade timing. There is no sovereign guarantee, no purchase undertaking, no institutional backstop.

The deeper treatment of how rahn maps onto DeFi collateral mechanics deserves its own dedicated analysis. For now, the key point is that the collateral in this architecture satisfies the conditions Islamic jurisprudence places on rahn more faithfully than most institutional arrangements, because the constraints are enforced by code rather than by institutional discipline.

The Structural Veto: From Post-Hoc Approval to Pre-Deployment Architecture

In conventional finance, there is no ethical constraint layer. Optimization governs.

In Islamic finance, a constraint layer was supposed to exist. Alam shows that it has been reduced to a formality. Scholars are brought in after the deal has been designed, priced, and structured. By the time they review, refusal would require unwinding work that has already been sold to investors. The system was built so that, as Alam writes, “the moment scale outranks the ability to say no, extraction finds a way in.” Their oversight confirms the deal. It does not govern the process.

Smart contracts invert this sequence by design. In a properly constructed protocol, the constraints are the execution logic of the transaction itself. A Solidity function that enforces a fixed cost-plus price, caps the total contract amount, and cannot be modified after deployment does not arrive at the end of a process to confirm language. It is the process. The compliance layer and the execution layer are the same thing.

Code deployed to an immutable blockchain cannot be sequenced around, diluted by incentive drift, or rendered cosmetic by institutional convenience. When Alam writes that the system needs structures “physically, legally, and mathematically incapable of creating riba,” he is describing a design pattern that smart contracts can operationalize.

In a protocol-based system, the scholar’s role shifts from certifying transactions after the fact to specifying constraints before deployment. The juristic input (ijtihad, juristic reasoning) shapes the protocol’s design constraints before the first line of code is written. After deployment, the protocol enforces those constraints autonomously. The Shariah constraints in this design, the streaming accrual, the price cap, the ibra’ calculation, the murabaha structure, are encoded in smart contract logic through a dedicated helper contract that handles settlement. They cannot be modified after deployment by a board, a structurer, or institutional pressure.

The critique that smart contracts cannot exercise ethical judgment is valid in one sense: immutable code cannot evaluate novel situations the way a human scholar can. But this misunderstands where in the lifecycle the veto operates. Alam’s argument is not that Islamic finance lacks capable scholars. It is that the institutional sequence prevents them from exercising their judgment effectively. The smart contract inverts that sequence. The judgment happens at the design stage. After deployment, the protocol crystallizes it. No board meeting can add SOFR benchmarking because investors are demanding higher returns. No structuring desk can engineer around the ibra’ mechanism because it affects yield.

This does not eliminate the need for ongoing scholarly input. Protocol upgrades, parameter changes, and new feature deployments would still require juristic review. But the baseline constraints, once deployed, are mechanically immune to the institutional pressure Alam identifies. Ethical architecture first, execution second.

Transparency: From Architectural Evasion to Public Auditability

In conventional Islamic finance, balance sheets are opaque, transaction structures are proprietary, and the aggregate composition of assets is visible only through industry reports that frame everything in growth narratives. Alam calls this Architectural Evasion: the discourse is organized to prevent the structural question from being asked.

Onchain protocols eliminate this opacity by default. Every transaction, every balance, every parameter is publicly auditable. You cannot hide that 95% of your protocol’s assets replicate debt when every position is visible on a block explorer. The Architectural Evasion Alam describes depends on information asymmetry. Public blockchains eliminate it.

This does not guarantee ethical outcomes. But it does guarantee that the composition of a system’s activity is publicly legible. The diagnostic Alam performs, examining what the architecture actually produces, becomes something anyone can do in real time.

The Dana Syariah collapse in Indonesia illustrates the stakes. The platform operated as a “Shariah compliant P2P lending platform” running “murabaha based transactions” with a claimed Security Coverage Ratio of 125%. When it collapsed, 99 out of 100 funded projects turned out to be fictitious, with estimated losses reaching $142 million across more than 11,000 lenders. The collateral was fabricated. The Shariah certification was cosmetic. As Alam noted when he covered the case, the wording itself tells the story: every label was correct on paper, and every underlying reality was fraudulent. Onchain, collateral sitting in a smart contract is cryptographically verifiable in real time. Dana Syariah could not have operated as described if its collateral had been architectural rather than claimed.

A Note on Institutional Incentive Drift

Alam identifies institutional incentive drift as one of the core mechanisms reproducing riba: career dependence, benchmark competition, and fiduciary pressure within conventional institutional forms. Protocols eliminate these specific incentives. They do not have careers to protect or boards that prioritize growth over principle. But protocols have governance tokens, and token holders can vote to change parameters. This introduces a different version of the same problem. The mitigation in this architecture is that baseline Shariah constraints are encoded in immutable logic that governance cannot override. Governance can adjust parameters (the rate curve shape, collateral ratios) within the bounds the scholars specified at design. It cannot add SOFR benchmarking or remove ibra’. The boundaries of what governance can and cannot touch are themselves part of the architecture.

The Shopkeeper at Scale

One objection that cuts across all four constructs deserves separate treatment. A shopkeeper selling one table at cost-plus is commerce. A protocol systematically extending murabaha at a fixed markup to any borrower who posts collateral is a lending operation in sale costume. At scale, does the atomic unit stop mattering?

Consider a marketplace where many shopkeepers sell goods on deferred payment at disclosed margins. Each individual transaction is a genuine sale. The fact that the marketplace facilitates thousands of such sales does not retroactively transform each sale into a loan. A bazaar is not a bank, even at scale.

This architecture is closer to the bazaar model than the bank model. Each murabaha is a discrete contract with a fixed price, a defined term, a specific collateral pledge, and an ibra’ mechanism. There is no fractional reserve multiplication. There is no credit creation beyond the deposited capital. The protocol does not extend more than it has received from depositors. Each position is fully funded.

The system-level function is facilitation of genuine cost-plus sales. The atomic unit does matter, because the protocol enforces the integrity of each atomic unit through immutable smart contract logic. This is fundamentally different from a conventional “Islamic” bank where the institutional form (bank) determines the systemic function (credit creation) regardless of what the individual contracts are called.

That said, the skeptic’s instinct points toward a real issue: perception and systemic classification. If regulators, scholars, or users perceive the protocol as a lending facility, the classification challenge is real regardless of the architectural argument. This is a question of framing, communication, and scholarly engagement.

Part IV: The Broader Ecosystem

If the goal is a financial system where capital shares in the outcomes of productive activity, murabaha alone does not achieve this. Musharakah and mudarabah onchain are the instruments that would. And any onchain murabaha operating in USDC remains denominated in a stablecoin pegged to the US dollar, which does not escape the dollar-denominated dependency Alam’s sovereignty article identifies as itself a form of structural subordination. These limitations are real, and they are why the broader ecosystem matters more than any single instrument.

This is where I want to be transparent about my own evolving thinking. Working through this architecture has convinced me that murabaha done correctly onchain is achievable and meaningful. But it has also shown me the contours of something larger: the possibility of a genuine Islamic finance ecosystem onchain that addresses the failures Alam diagnoses across the full spectrum of financial activity.

Consider what becomes possible when the architectural properties of decentralized systems (immutable constraint enforcement, public auditability, disintermediation of institutional incentive drift, pre-deployment ethical specification) are applied beyond murabaha.

Musharakah and mudarabah, the equity and partnership modes Alam identifies as embodying Islamic finance’s actual principles, are historically difficult to scale because they require trust, transparency, and real-time visibility into the performance of the underlying venture. Smart contracts that enforce profit-and-loss sharing ratios, provide real-time venture reporting through oracle integrations, and distribute returns based on actual outcomes could make these structures operationally viable in ways that traditional institutional forms never achieved. The 95% debt dominance Alam cites is partly a function of the fact that equity structures are harder to administer within conventional institutional architecture. Onchain infrastructure could change that ratio.

Sukuk, which Alam’s critique shows are consistently engineered to function as fixed-income debt despite being marketed as asset-backed certificates, could be tokenized onchain with verifiable asset backing, transparent cash flow distribution, and no purchase undertakings that guarantee principal return. Shariah governance itself could move onchain through DAO structures with qualified scholars participating in protocol governance, embedding juristic authority at the design and parameter-setting level. Zakat and waqf infrastructure could be automated, with zakat calculation becoming a protocol function and waqf structures implemented as smart contracts with permanent, non-transferable asset lockups and programmatic distribution.

Perhaps most importantly, transparent balance sheets become the default. If Islamic finance operates on public blockchains, anyone can run the diagnostic Alam runs. Anyone can ask: what percentage of this ecosystem’s assets are debt-based? What percentage represents equity participation? What percentage of returns are benchmarked to conventional rates? The answers are onchain, in real time, for anyone to audit. Architectural Evasion becomes impossible.

None of this exists yet as a complete system, but the architectural properties that would make it possible are already operational. The engineering is achievable, and the juristic frameworks exist (AAOIFI standards, IIFA resolutions). What has been missing is the intersection: people with both the technical capacity to construct these systems and the juristic depth to ensure they are sound.

In closing, Alam’s framework identifies what is broken and names the constraints a real alternative would have to satisfy. The work now is to build the architecture that satisfies them. That starts with murabaha, because it is 95% of the market and because getting it right is a precondition for everything else. But the design space his constraints open up extends to equity, partnership, and asset-backed structures that could shift the ratio from debt replication toward genuine risk sharing. A proper Islamic Finance ecosystem built from first principles.