A figure in a long robe stands on a reflective observatory floor facing a vast planet above a sea of clouds, beside a glowing holographic panel of orbital charts

The Onchain Operating Model: How Traditional Businesses Move Settlement, Custody and Rules onto Blockchains

Scope. What established businesses move onchain and why, who holds what once they do, how it is built and migrated, the risks, and where zero-knowledge proofs fit. Nothing here is investment, legal or tax advice.

Sources. Claims rest on regulators' orders and filings, central-bank research, company disclosures, peer-reviewed economics and, where noted, the press, all cited in the references. Market figures marked “at the time of writing” come from live trackers and will drift; the framework is meant to outlast them.

For as long as businesses have traded with each other, each party has kept its own copy of the deal. A share is a line in a registrar's database, a payment is a pair of messages between banks that settle later, and a shipment lives in a dozen documents re-keyed into a dozen systems. Computers made each copy faster without changing the arrangement: many private ledgers, brought back into agreement after the fact.

Onchain operation changes the arrangement itself. The asset becomes an entry on a ledger the parties share, moving it is the settlement, and rules that lived in contracts and back offices run as code every party can inspect. The Bank for International Settlements, the central banks' own bank and a pointed sceptic of stablecoins, calls tokenisation “the next logical progression in the evolution of the monetary and financial system”.[1] The institutions acting on that judgement are not start-ups. BlackRock, Franklin Templeton and J.P. Morgan run Treasury and money-market funds with shares tokenized on public blockchains.[2][3][4] The US central securities depository, custodian of $114 trillion in securities, has turned stocks, ETFs and Treasuries into tokens and used them in live trades, and the SEC has approved trading tokenized shares on the same Nasdaq order book as conventional ones.[5][6] Visa piloted stablecoin settlement with card issuers and acquirers on nine blockchains in 2026, and Stripe pays out stablecoins on a chain it co-incubated.[7][8]

  • 1.5–2%of intermediated assets: the annual cost of US finance, about as high as in 1900[9]
  • $114 trillionin securities held at the US central depository, which began converting them to tokens in 2026[5]
  • ~$8 trillionof repo settled on one shared ledger in a single month of 2026[10]
  • $300B+in stablecoins in circulation by 2026, from about $4 billion at the start of 2020[11]
  • 6.5%average cost of sending $200 abroad in 2025, more than double the G20 and UN goal of 3%[12][13]
  • ~1 week → one proofthe challenge window of the largest optimistic rollups, which a validity proof replaces (§9)

This article treats the movement as a change of operating model, comparable to the move from paper certificates to electronic book entry, rather than as a new asset class.

§1 · The shiftFrom private books to a shared state

The arrangement has a precise anatomy. Copies are kept in agreement by messages, end-of-day statements and teams whose job is to find where they disagree. Settlement, the moment an obligation is discharged, is a separate step run later by the intermediaries that keep the master copies: the depository, the clearing house, the correspondent bank. The Bank for International Settlements puts it in three clauses: money and other claims “reside in siloed proprietary databases”; those databases “must be connected through third-party messaging systems”; and so “transactions need to be reconciled separately before eventually being settled with finality”.[14]

Private books, messages between themmessage = instruction · settlement = later, elsewhereOne shared state, rules in codetoken = asset · contract = rule · transfer = settlementreconcileBuyerown ledgerSellerown ledgerBankown ledgerRegistrarown ledgermessagesinstructionsSettlement intermediariesclearing house · depository · correspondent bankslaterbusiness hours4 ledgers kept in agreement by messages; each new party adds anotherSharedledgernow · 24/7Buyerkeys onlySellerkeys onlyBankkeys onlyRegistrarkeys onlyread · signwhat tokens representLegal anchorsissuers · custodians · registrars · regulators · courts1 state to verify; a new party connects once
Figure 1. Two ways to keep the books. Left: each party records the same facts in its own database, exchanges messages about them and settles later through intermediaries, restoring agreement by reconciliation. Right: parties hold keys to one shared ledger, where the asset is a token, its transfer is the settlement and the rules run as code. Issuers, custodians, registrars, regulators and courts still answer for what each token represents.

The onchain model rearranges the same parties around one record, each holding keys instead of a private ledger, with rules checked at the moment of transfer: who may hold the asset, when it may move, what must happen in the same step. In the BIS's words, tokenisation integrates “messaging, reconciliation and asset transfer into a single, seamless operation”.[1] Larry Fink, BlackRock's chief executive, used a plainer image: “If SWIFT is the postal service, tokenization is email itself.”[15] Six shifts follow from that one change, and together they are the operating model this article is about.

  1. One record instead of many

    BeforeEach party keeps its own ledger and reconciles it with the others.
    OnchainAll parties read one state; ownership is the same fact for everyone.

    Reconciliation exists because copies diverge. One copy has nothing to diverge from.

  2. The asset moves, not a message about it

    BeforeMessages instruct intermediaries to update their books.
    OnchainThe token moves between holders; the transfer is the settlement.

    Under the DTC’s tokenization design, holders transfer tokens wallet to wallet without instructing the depository.[16]

  3. Continuous, not batched

    BeforeCut-off times, business days, settlement cycles such as T+1.
    OnchainSettlement at the ledger's finality, any hour of any day.
  4. Rules execute at the moment of transfer

    BeforeEligibility and conditions are checked by staff, breaches found later.
    OnchainTransfer restrictions and conditions are checked in the same transaction.
  5. Composable by default

    BeforeEvery new counterparty or product needs its own integration project.
    OnchainAny permitted program can hold, pledge or swap the token as issued.

    Several actions can be “bundled into one executable package”, across firms that never integrated with each other.[14]

  6. Assurance as it happens

    BeforePeriodic statements, attestations and audits after the fact.
    OnchainHoldings and flows are verifiable continuously by whoever is entitled to see them.

    A BIS paper calls it embedded supervision: compliance “automatically monitored by reading the market's ledger”.[17]

What does not shift

A token is a record of a claim, and the claim is only as good as the law and the institution behind it. A tokenized share still needs an issuer that honours it, a fund token a custodian that holds the Treasury bills, a stablecoin reserves that exist. Securities law, anti-money-laundering rules, tax and accounting apply to tokens as they apply to anything else. Hester Peirce, the SEC commissioner who has led its crypto task force since 2025, put it in five words: “Tokenized securities are still securities.”[18] The onchain model moves the record, the settlement and the enforcement of rules. It relocates trust; it does not abolish it. §4 maps where it goes.

§2 · The evidenceWho is moving, industry by industry

The first corporate blockchain projects, in the years after 2015, were mostly private consortia built to share documents, and many of them closed (the box at the end of this section explains why). What reached production afterwards is different in kind. It is the core instruments of commerce and finance (cash, collateral, short-term funds, government and corporate debt, listed shares), run by the institutions that already run them, on ledgers their counterparties share. Outside finance the shift is younger and narrower, but the same logic has reached messaging platforms, diamond provenance, freight invoicing and land title.

Built: deployments by established institutionsAllowed: laws and regulatory approvals2021Franklin Templetonfund shares on StellarBroadridge repoon a shared ledgerGermany: electronicsecurities law2022DTCC runs a ledgerin parallel productionUS: UCC Article 12for digital assets2023Siemens bond ona public chainHong Kong issuesa tokenized green bondEU: DLT PilotRegime applies2024BlackRock launchesBUIDLSiemens bond settlesin central bank moneyEU: MiCA rules forstablecoinsUS: T+1settlement2025Robinhood issuesstock tokens in the EUJPM Coin on Base,a public layer 2US: GENIUS Actfor stablecoinsSEC staff relief forDTC tokenization2026DTCC live trades intokenized securitiesRobinhood ChainmainnetECB launches Pontes,central bank moneySEC approves Nasdaqtokenized tradingSEC exemption fortokenized-stock venues
Figure 2. Built and allowed, year by year. Deployments by established institutions (above) and the laws and regulatory approvals that made them possible (below). Each entry is cited where it appears in the text.

Two of the largest blocks of onchain value are not speculative instruments. One is dollars: payment stablecoins, whose supply grew from about $4 billion at the start of 2020 to more than $300 billion by 2026.[11] The other is repurchase agreements, the overnight and intraday lending that funds banks' balance sheets: Broadridge's ledger-based repo platform settled $8 trillion in a single month of 2026.[10] Money and collateral moved first, as the economics in §3 would predict: they are where reconciliation and settlement delay cost the most.

$0$100B$200B$300B2020202120222023202420252026Terra collapse, 2022EU MiCA stablecoin rules, 2024US GENIUS Act, 2025$312B
Data table
MonthTotal stablecoin supply
2020-01$4.2B
2020-07$11.4B
2021-01$27.4B
2021-07$110B
2022-01$163B
2022-07$153B
2023-01$138B
2023-07$128B
2024-01$130B
2024-07$161B
2025-01$205B
2025-07$253B
2026-01$307B
2026-07$310B
2026-10$312B
Figure 3. Total stablecoin supply, 2020 to the time of writing. Monthly, all pegs, in US dollars. Hover or tap for a month. Source: DefiLlama stablecoin dashboard, read October 2026.[11]

Tokenized money-market and Treasury funds show who is doing the moving. At the time of writing, seven of the nine largest are run by established asset managers, among them BlackRock, Franklin Templeton, WisdomTree, J.P. Morgan and Invesco.[19]

$0$1B$2B$3BEstablished asset managerCrypto-native issuerFranklin Templeton$2.5BBENJI, iBENJICircle$2.4BUSYCOndo Finance$2.3BUSDYBlackRock$2.2BBUIDLWisdomTree$1.2BWTGXXJ.P. Morgan Asset Management$738MJLTXXInvesco$600MUSTBChina Asset Management$554MCUMIUJanus Henderson$345MJTRSY
Data table
SponsorFund token(s)ValueType
Franklin TempletonBENJI, iBENJI$2.5BEstablished asset manager
CircleUSYC$2.4BCrypto-native issuer
Ondo FinanceUSDY$2.3BCrypto-native issuer
BlackRockBUIDL$2.2BEstablished asset manager
WisdomTreeWTGXX$1.2BEstablished asset manager
J.P. Morgan Asset ManagementJLTXX$738MEstablished asset manager
InvescoUSTB$600MEstablished asset manager
China Asset ManagementCUMIU$554MEstablished asset manager
Janus HendersonJTRSY$345MEstablished asset manager
Figure 4. The largest tokenized Treasury and money-market funds, by sponsor. Value of fund tokens on public chains at the time of writing (October 2026); figures move daily. Source: rwa.xyz.[19]

As Rob Goldstein and I wrote late last year, we believe that tokenization today may be roughly where the internet was in 1996. It won’t replace the existing financial system overnight. Instead, picture a bridge being built from both sides of a river, converging in the middle.

Larry Fink, chairman and chief executive of BlackRock, annual letter to investors, 2026[20]

Across industries, the same pattern repeats: a leading incumbent in a sector moves one high-friction process, usually a payment, a register or a settlement, onto a shared ledger, and keeps the rest of its operation where it was.

Market infrastructuredepositories, exchanges, repo

  • DTCC turned stocks, ETFs and Treasuries into tokens for live trades with more than 30 firms in 2026, under SEC staff relief.[5][16]
  • Nasdaq won approval to trade tokenized shares on its main order book, and plans issuer-sponsored equity tokens.[6][21]
  • NYSE’s owner, ICE, is building a 24/7 tokenized platform and co-owns a venue filed to run on public-chain liquidity pools.[22][23]

ReplacesChains of messages between depository, clearing house and custodians.

Asset managementmoney-market and private funds

  • BlackRock’s tokenized fund runs on nine chains and is accepted as collateral by major crypto exchanges.[24][25]
  • Since 2021 Franklin Templeton’s US-registered fund has used public blockchains in its share record.[3]
  • BNY and Goldman Sachs mirror money-market fund shares from five managers as tokens.[26]

ReplacesFund shares idle outside business hours.

Banking and treasurydeposits, payments, custody

  • J.P. Morgan’s blockchain unit moved over $7 billion a day in 2026; the bank issues a deposit token on a public layer 2.[27][28]
  • Citi and HSBC run round-the-clock payments on tokenized deposits across Asia, Europe and North America.[29][30]
  • Société Générale and DWS-backed AllUnity issue euro stablecoins under MiCA.[31][32]
  • Zelle’s operator, owned by seven large US banks, unveiled its own dollar stablecoin for cross-border payments.[33]

ReplacesPayments that stop at cut-off times and hop between correspondent banks.

Payments and commercecards, payouts, merchants

  • Visa piloted stablecoin settlement with card issuers and acquirers on nine chains in 2026.[7]
  • Mastercard bought the stablecoin infrastructure firm BVNK for up to $1.8 billion.[34]
  • PayPal issues a dollar stablecoin, PYUSD, through a federally chartered trust company.[35]
  • Stripe offers stablecoin accounts in 101 countries and pays out over Tempo.[36][8]

ReplacesBatch card settlement and payouts that wait on bank transfers.

Corporate and sovereign issuersbonds and shares

  • Siemens issued bonds directly onto a ledger under German law; its second settled in central bank money within minutes.[37][38]
  • Hong Kong’s government sold HK$0.8 billion of tokenized green bonds in 2023 and about HK$20 billion in a single 2026 offering.[39]

ReplacesPaper global notes, depository chains and multi-day issuance.

Brokerage and tradingbrokers and exchanges

  • Robinhood launched stock tokens for more than 120 countries in 2026 on its own Ethereum layer 2, Robinhood Chain.[40]
  • The London Stock Exchange plans to support trading in tokenized versions of the top 100 London-listed shares.[41]
  • Nasdaq agreed to invest $100 million in Kraken’s parent, whose xStocks traded $35 billion in their first year.[42][43]

ReplacesAccounts closed at weekends; transfers between brokers that take days.

Consumer platformsmessaging, media, devices

  • Telegram has required since 2025 that its mini-apps issue tokens and collectibles only on one public chain, TON.[44]
  • LINE runs mini-apps on Kaia, a chain formed from LINE’s and Kakao’s networks; users get wallets from their LINE accounts.[45]
  • Sony, through a joint venture, runs Soneium, a public Ethereum layer 2 for fan engagement around its brands.[46]

ReplacesCredits and collectibles locked inside one company’s database.

Goods, trade and propertyprovenance, freight, title

  • De Beers’ Tracr platform has registered more than five million rough diamonds individually.[47]
  • Walmart Canada’s 70-carrier freight ledger cut disputed invoices from over 70% to under 1%, its builders say.[48]
  • Dubai’s land registry piloted tokenized title deeds on a public ledger in 2025, projecting up to 7% of the market tokenized by 2033.[49]

ReplacesPaper certificates, re-keyed invoices, provenance checked after the fact.

What did not work, and why

The record includes expensive failures, and each removed an assumption that later deployments no longer make.

  • TradeLensMaersk and IBM, 2018–2023Built “as an open and neutral industry platform” for shipping documents, it closed because “the need for full global industry collaboration has not been achieved”.[50]
  • we.trade, Marco Polo, Contourbank consortia, closed 2022–2023Bank-backed trade-finance networks; each shut when its funding ran out.[51]
  • B3iinsurers’ consortium, 2016–2022Entered insolvency after failing to raise new capital.[52]
  • CHESS replacementASX, 2016–2022A ledger-based replacement of Australia’s settlement system was paused with A$245–255 million written off; its successor is being delivered in stages.[53]
  • Odyssey and RTFKTStarbucks and Nike, 2022–2025Collectible-token programmes attached to loyalty and marketing were wound down.[54]

Read against this section’s deployments, each failure lacked at least one of three conditions most survivors meet: a ledger open to all, or one that needs no rivals to join; a token that carries the core instrument, money or a security, rather than sitting beside the business; and a legal foundation that makes the record mean something. Replacing a whole system at once is the fourth lesson; §6 is built around it.

§3 · The economicsWhy one shared record is cheaper than many private ones

Thomas Philippon's measurement of American finance over 130 years found that intermediation costs about 1.5 to 2 percent of the assets it intermediates each year, and that the unit cost is about as high today as it was at the turn of the twentieth century. “Improvements in information technologies do not appear to have led to a significant decrease in the unit cost of intermediation,” he wrote.[9] One reading, consistent with the BIS diagnosis in §1, is that computers made each institution's books faster but left the arrangement between institutions untouched, and reconciliations, settlement chains, capital in transit and the margins of the keepers of master copies belong to the arrangement.

Christian Catalini and Joshua Gans name the two costs a shared ledger attacks. The cost of verification is the cost of establishing “information about past transactions and their attributes, and current ownership in a native digital asset”; the cost of networking is the cost “to bootstrap and operate a marketplace without assigning control to a centralized intermediary”.[55] The first is what reconciliation, audit and provenance checks spend money on; the second is what a business pays, in fees and dependence, to a platform that owns its market. The authors add that decentralized arrangements “also introduce new types of inefficiencies and governance challenges”, so each advantage below is listed with its mechanism, an institution that accepts it, a deployment that exhibits it and its catch.

The defensible advantages

Eight advantages, each with its mechanism, its institutional support, its production evidence and its catch
AdvantageMechanismWho accepts itIn productionThe catch
Fewer reconciliationsOne shared record replaces copies kept in agreement by messages.BIS: removes “the traditional separation of messaging, clearing and settlement”.[14]Broadridge's repo platform settled about $365 billion a day on its ledger in 2026.[10]Events that happen off the ledger still need a trusted party to record them.
No principal riskDelivery and payment in one atomic transaction.BIS: “atomic settlement, in which two assets are exchanged simultaneously”.[14]Treasury repo and equity delivery-versus-payment in DTCC's production trades.[5]Both legs must be funded in advance; nothing nets.
Collateral that moves on timeTokens transfer at any hour between permitted holders.The CFTC’s collateral guidance covers “tokenized real world assets, including U.S. Treasury securities and money market funds”.[56]Tokenized assets posted as margin at CME Group; a Treasury repo with a USDC cash leg executed on a Saturday.[5][57]Clearing houses must accept the token, and the pledge must hold up in insolvency.
Continuous operationThe ledger has no opening hours.NYSE is building a platform for 24/7 trading with settlement in tokenized capital.[22]Stablecoins, fund tokens and offshore stock tokens trade at weekends.[40]Thin liquidity off-hours; the case for circuit breakers.[58]
Cheaper cross-border paymentA stablecoin transfer replaces a chain of correspondent banks.Even the BIS grants that stablecoins “can potentially offer lower costs and faster transaction speed, especially for cross-border payments”.[1]Visa’s stablecoin settlement pilot reached a $7 billion annual run rate in 2026; Stripe could pay out stablecoins to 160 countries by 2026.[7][59]The BIS calls the evidence “anecdotal” and warns of “high fees for validation”; ramps and compliance add more.
Programmable lifecycleDividends, interest, eligibility and conditions execute in code.BIS: “contingent performance of actions through smart contracts”.[14]BlackRock’s fund pays daily-accrued dividends as new tokens; stock tokens apply corporate actions through an onchain multiplier.[2][40]Bugs become losses; legal events still originate off-chain.
Distribution without integrationAny permitted program can hold, trade or pledge the token as issued.The SEC's exemption lets tokenized stocks trade directly against payment stablecoins and tokenized money-market funds.[60]BlackRock’s fund accepted as trading collateral by crypto exchanges; xStocks on seven chains.[25][43]Reuse creates new paths for contagion.[61]
Assurance as it happensSupply and transfers are visible continuously to those entitled to see them.From 2027, US payment-token issuers must publish reserves monthly, examined by accountants.[62]DTC must report chains, wallets and token volumes to SEC staff quarterly; USDC’s reserve holdings are disclosed weekly.[16][63]Public ledgers expose positions unless privacy is designed in (§9).
A US equity trade todaysettles T+1Tradeexchange matchesbuyer and sellerTClearNSCC guaranteesand nets tradesTSettleDTC moves shares,banks move cashT+1Recordbrokers, custodiansupdate own booksT+1Reconcileeach party checksits own recordsT+1 onwardexposure until settlement: covered by margin and the clearing fundThe same trade on a shared ledgersettles at finality: seconds to minutesMatchorder matched,on or off chainTT + seconds–minutesOne atomic transactionboth legs settle, or neither doestransfer rules checked in the same stepsecurity tokenbuyercash tokensellerDonethe ledger isthe recordsame stepno principal exposure; the trade-off is pre-funding, since nothing nets
Figure 5. Settlement as a chain, and as one step. Top: a US equity trade since T+1 (May 2024). The clearing house (NSCC) guarantees and nets trades, the depository (DTC) moves securities by book entry and cash moves between banks, each reconciling its own records. Bottom: delivery-versus-payment on a shared ledger, one transaction moving both legs or neither: no principal risk, but no netting either, so both legs are funded beforehand.[64][14]

Two of these deserve a closer look because they are where the money is. The first is principal risk, the risk that one side delivers and the other does not. When German authorities closed Bankhaus Herstatt in 1974, counterparties who had paid it Deutsche marks did not receive the dollars due in New York. The industry’s answer, CLS, launched in 2002, settles foreign exchange payment-versus-payment. Half a century on, only 36% of the more than $14 trillion of foreign exchange settled on an average day uses such protection, and the BIS counts $1.4 trillion “still at risk every day”.[65] Delivery versus payment on one ledger removes the risk by construction. Its cost is the loss of netting: a clearing house needs only net amounts, while atomic settlement needs every gross leg funded in advance. The BIS counts “retaining large holdings of pre-funded accounts” among arrangements that at modern volumes “would be recipes for payment system gridlock”, which is why its blueprint puts central bank money and credit on the shared ledger.[1] Broadridge’s repo ledger, which moves tokenized collateral within the day, sits where timing matters more than netting.[10]

The second is collateral mobility. A bank that must post margin on a Sunday cannot move a Treasury bill or a fund share until the systems open, so it keeps extra collateral parked where it might be needed. Tokenized collateral moves when it is needed: in the DTCC's first live production trades, J.P. Morgan tokenized shares of an exchange-traded fund and posted tokenized assets as margin at CME Group.[5] Nasdaq estimates that the largest institutions could together earn up to $340 million a year in additional interest by reducing excess collateral, an interested party's estimate of a cost every treasurer recognises.[58]

The case against, taken seriously

The strongest criticism comes from central banks, and it is specific. The BIS judges that stablecoins, as a monetary mainstay, “perform poorly” on three tests: singleness, the guarantee that every form of a dollar trades at par with every other; elasticity, the ability to supply liquidity when payments need it; and integrity, resistance to financial crime.[1] The Financial Stability Board adds that many of tokenisation’s benefits “have yet to be proven, may not be uniquely achievable through tokenisation, and may involve trade-offs that might negate the benefits”. It warns of run risk when a token promises more liquidity than the assets behind it, and that composability creates “interconnectedness that may be hidden or hard to track”.[61] The IMF adds that in a run, fire sales of reserve assets “could spill over into bank deposits and government bond and repo markets”.[66] Transparency cuts both ways: Lin William Cong and Zhiguo He show that smart contracts can improve welfare through “enhanced entry and competition”, yet the information shared in reaching consensus “may encourage greater collusion”.[67] Issuers object when third parties tokenize their shares without consent; the SEC's exemption for tokenized-stock venues gives them thirty days to say no.[60] And no ledger improves a bad asset. As Commissioner Peirce put it, blockchain technology “does not have magical abilities to transform the nature of the underlying asset”.[18]

The FSB also named what had kept tokenization small: “unclear investor demand”, a “lack of interoperability” with existing infrastructure, “the unavailability of money settlement assets” and divergent legal frameworks.[61] Most have since been attacked directly. The missing settlement asset now has statutes: the EU’s MiCA has governed stablecoins since 2024, and the US GENIUS Act of 2025 takes effect in 2027.[68][62] The US depository and exchanges designed tokenized versions of existing securities with the same rights, on the same order books.[16][6] Few argue for keeping the old arrangement unchanged. The BIS's own remedy is “tokenised central bank reserves, tokenised commercial bank money and tokenised government bonds, all residing on a unified ledger”[1]. The Eurosystem, which sees potential for “greater automation, faster settlement, lower processing costs and more efficient use of liquidity and collateral”, launched Pontes in 2026 to settle tokenised assets in central bank money, because those gains “will only materialise fully if tokenised markets have access to a safe and scalable settlement asset”.[69][70] In the BIS’s Project Agorá prototype, seven central banks and more than forty firms found atomic settlement of wholesale cross-border payments “achievable securely and with finality across currencies and jurisdictions”.[71] Among central banks that have acted, the open question is how tokenised assets settle in central bank money, not whether they will exist. For a business deciding whether to prepare, that is the decisive point.

§4 · The mental modelWho holds what, and who answers for it

The question a newcomer asks about an onchain product is a sound one: what is actually standing behind this? In a conventional business the answer is spread across contracts, statements and reputations. Onchain it comes apart into three guarantees, and any product can be read by asking who provides each one.

  • The ledgerguarantees the record: that a transfer happened, that it is final, and that it followed the rules written into the token's code. Its providers are the network's validators and the cryptography they run.
  • The lawguarantees what the record means: that holding the token is owning the asset, or a defined claim on it, enforceable in court and in insolvency. Its providers are statutes, contracts and regulators.
  • The institutionguarantees what stands behind the record: that the reserves, shares, bonds or goods exist and will be delivered. Its providers are issuers, custodians, auditors and supervisors.

A native coin such as bitcoin needs only the first guarantee, because there is nothing behind the record. Every tokenized real-world asset needs all three, and a holder's risk sits in whichever is weakest. The explorer below applies the test to seven kinds of onchain claim in production, following each from the holder's wallet down to the asset.

Claim explorer: seven kinds of onchain claim

Example: bitcoin, ether. A balance on the ledger itself: no issuer, nothing to redeem, no one behind the record. Only the ledger guarantee applies.

  1. HolderWallet keysheld directly or by a custodian
  2. RecordBalance on the ledgerthe asset itself, not a claim on anything
  3. GuaranteeNetwork consensusvalidators or miners, by protocol rules
Counterparty
None.
Register
The network.
Can freeze
No one at the protocol level; a custodian can freeze accounts it operates.
Law
Property law for digital assets, where enacted.[72]
Main risks
Price; lost or stolen keys; failure of a custodian holding it.

Example: USDC. A transferable claim on a licensed issuer that promises to redeem it at par, backed one for one by cash and short-dated Treasuries held apart from the issuer's own assets.[63][73]

  1. HolderWalletany address the issuer has not blocked
  2. RecordToken balanceon each chain where the issuer mints it
  3. CounterpartyIssuerCircle; in the EU, its French e-money firm
  4. BackingReservesmostly a government money fund run by BlackRock
Counterparty
The issuer, for holders with a redemption account; other holders exit by selling.[73]
Custodian
BNY, primary custodian of the reserves.[74]
Can freeze
The issuer, by blocking addresses on chain; US law requires the capability.[62]
Law
In the US, the GENIUS Act, in force from January 2027: one-for-one reserves, monthly reports examined by accountants, no yield from issuers, and first claim on the reserves if the issuer fails. In the EU, MiCA, with redemption at par at any time.[68][75]
Main risks
The safety of the reserves and access to them in a crisis (§7).

Example: J.P. Morgan's JPM Coin (JPMD). A bank deposit that moves as a token: the claim is on the bank's balance sheet, not on a separate pool of reserves; the bank calls it “a bank-issued deposit token—not a cryptocurrency or a stablecoin”.[28]

  1. HolderVetted client wallet
  2. RecordDeposit token on Basean Ethereum layer 2
  3. AccountBlockchain Deposit Accountconverts token and deposit
  4. CounterpartyThe bankcapital, supervision, deposit regulation
Can freeze
Not disclosed; only vetted counterparties transact.
Law
Banking and deposit law; J.P. Morgan describes the token as “benefiting from existing regulatory deposit frameworks”.
Redeem
Back to dollars in the client's account at any time.
Main risks
The bank's credit; reach limited to its own clients.

Example: BlackRock's BUIDL. A share in a fund of cash, Treasury bills and repo, recorded as a token only pre-approved investors can hold. The fund, not BlackRock and not the chain, is the counterparty.[2]

  1. HolderPre-approved wallet$5 million launch minimum
  2. RecordFund share tokenon nine chains
  3. RegisterSecuritize, transfer agent
  4. CounterpartyThe funda British Virgin Islands company
  5. BackingBNY as custodiancash, Treasury bills, repo
Can freeze
Securitize’s token standard allows lock, pause, freeze and seize.[76]
Law
US private-placement rules (Rule 506(c), Section 3(c)(7)) and British Virgin Islands fund law.
Exit
Redemption through the fund, or a sale to Circle for USDC at any hour through a dedicated contract.[77]
Main risks
The fund's assets; operational and contract risk.

Examples: Galaxy Digital's shares; Siemens' digital bonds. The issuer puts its own security on the ledger, so a transfer of the token is a transfer of the security: “when tokens change hands, the registered shareholder list of Galaxy updates in real-time”.[78]

  1. HolderAllowlisted wallet
  2. RecordThe security itselfnot a claim on one
  3. RegisterTransfer agent or registrarSEC-registered, or licensed under German law
  4. CounterpartyThe issuerwith the usual rights
Can freeze
The transfer agent, which can freeze, burn and reissue.[79][80]
Law
Securities law of the issuer's market; the SEC's staff calls this the issuer-sponsored model.[81]
Main risks
The issuer's own credit; thin trading in the token form.

Example: tokens from the DTC's tokenization service. A security entitlement, the same legal interest a brokerage account conveys, recorded on a ledger. The share never moves: it stays registered to the depository's nominee, Cede & Co., and the token records who is entitled to it.[16]

  1. HolderRegistered walletof a DTC participant
  2. RecordTokenized entitlementmoves only between registered wallets
  3. RegisterDTCLedgerScan is the official books
  4. Registered ownerCede & Co.unchanged
  5. IssuerThe companysame rights as a conventional share
Counterparty
The depository for the entitlement; the issuer for the security.
Can freeze
DTC, through a root wallet on each chain that can convert, transfer, mint or burn any token.
Law
Article 8 of the Uniform Commercial Code, as for any securities account.
Main risks
Operational and chain risk; at first, no collateral value in DTC's own risk systems.

Examples: Kraken's xStocks; Robinhood's stock tokens. A debt instrument of a special-purpose issuer that tracks a share's price. The issuer may hold the shares as collateral, but the holder owns a claim on the issuer, not the share.[82][83]

  1. HolderWalletoutside the US
  2. RecordTracker certificate token
  3. CounterpartySpecial-purpose issuerBacked Assets (JE) Limited
  4. BackingShares at a brokerpledged for holders through a security agent
Counterparty
The issuer, secured on the collateral; not the company whose shares are tracked.
Rights
No shareholder rights by default; dividends reinvested through a multiplier. Proxy voting for some xStocks holders was announced in 2026.[84][85]
Law
Swiss-law tokenization under an EU prospectus; not offered to US persons.
Main risks
The issuer's structure and collateral; legal characterization (§5).

The cast, old and new

Most roles in the onchain model are familiar ones doing a different job; a few are new.

Role map: who does what in the onchain model
Role todayOnchain counterpartWhat changesExample
Issuer and underwritersUnchangedThe issuer still owes the obligation; underwriting banks still buy and place the issue, now paying for it on the ledger.The EIB's first digital bond, whose lead managers settled the underwriting in central bank digital currency[86]
Registrar, transfer agentOperator of the token's registerMints and burns, keeps the allowlist, and can freeze or force a transfer when a court or rule requires it.Securitize for BlackRock's BUIDL; Franklin Templeton for its own fund[2][87]
Asset custodianUnchanged for anything off-chainStill holds whatever the token represents; the claim still bottoms out there.Securities behind DTC tokens stay registered to its nominee, Cede & Co.[16]
New: key custodianHolder of the signing keysWhoever controls a key controls the asset; banks and trust companies hold keys in hardware or split across parties.BNY’s digital asset custody; national trust banks chartered for it, such as Circle’s[88][89]
Clearing houseNeeded for netting, or where clearing is mandatedAtomic settlement removes principal risk but not the value of netting; central counterparties persist where netting matters.Tokenized assets posted as margin at CME Group[5]
Settlement bankIssuer of the onchain cash legStablecoin issuers and banks with tokenized deposits supply money on the same ledger as the asset.Regulated stablecoins; bank deposit tokens[62][28]
New: validatorsOperators who order and confirm transactionsTheir neutrality and uptime become part of the settlement guarantee; on rollups, one sequencer may order everything.Ethereum's validator set; rollup sequencers[90]
New: oraclesCarriers of off-chain factsPrices, fund values and reserve balances enter contracts through them; their integrity bounds the contract's.Price and reserve feeds read by lending and fund contracts[91]
New: bridgesMovers between ledgersMove tokens across chains, ideally by burning on one and issuing on the other through the issuer itself.Circle's burn-and-mint transfer protocol[92]

How deep the migration goes

“Onchain” describes a range, not a state. The analytics firm rwa.xyz separates tokens that use a blockchain as a distribution layer, held and transferred by investors in their own wallets, from tokens that use it as a recordkeeping layer for reconciliation without onchain transfer.[93] Extending that distinction at both ends gives a six-level ladder, each level moving one more function onto the ledger. The top rung is what this site calls blockchain-native: economic activity whose settlement, custody and rules are onchain by construction, rather than a conventional business with a token attached to the side of it.

  1. Level 0

    Private books

    Records, settlement and rules all off-chain. Parties keep copies and reconcile them.

    Most businesses today.
  2. Level 1

    Anchored

    Records stay off-chain; fingerprints or events go on a ledger, so later tampering shows.

    Georgia’s land registry, which anchors record hashes in Bitcoin; food traceability trails.[94][95]
  3. Level 2

    Represented

    The ledger keeps a shared register among participants. Holders cannot take tokens off the platform.

    Intraday repo on Broadridge's ledger.[10][93]
  4. Level 3

    Distributed

    Tokens move between holders' own wallets under eligibility rules. Issuer, register and custodian still anchor them off-chain.

    Stablecoins; tokenized money-market funds; DTC tokenized shares.[2][16]
  5. Level 4

    Native record

    The onchain register is the legal record. Title is issued and transferred on the ledger itself.

    Crypto securities under Germany’s electronic securities law, such as Siemens’ 2023 bond; Franklin Templeton’s chain-integrated register.[3][37]
  6. Level 5

    Blockchain-native

    Settlement, custody and rules onchain by construction: cash on the same ledger, lifecycle in code, distribution through any compatible program.

    Onchain exchanges and lending markets; funds subscribed in stablecoins and pledged as collateral.
Figure 6. Six levels of onchain migration. Levels 2 and 3 follow rwa.xyz's distinction between represented and distributed assets; level 5 is what this site calls blockchain-native. A business can sit at different levels for different processes.

The ladder is not a ranking of virtue. A provenance registry may need nothing beyond level 1, and a government bond may sit at level 4 for decades. It is a map for asking, process by process, which function would gain from moving. The gains in §3 arrive unevenly along it: reconciliation savings from level 2, settlement and collateral gains from level 3, issuance savings at level 4, and composability, the least predictable gain, only at level 5.

§5 · The architectureThe reference stack, and how the majors built it

An onchain application is not a smart contract with a website in front of it. In every production system examined here, the contract is one layer of nine, and most of the engineering sits around it: the legal wrapper that gives the token meaning, key custody, the cash leg, identity checks in the transfer path, oracles and bridges at the boundary, and the systems that turn chain state back into books and records. Each layer of the stack below answers a question that a counterparty, an auditor or a regulator will eventually ask, and the hardest are rarely about the ledger: Larry Fink expects tokenized funds to become as familiar as ETFs “provided we crack one critical problem: identity verification”.[15]

8
DistributionWho can reach the asset?

Venues, wallets and programs that hold, trade or pledge the token without bespoke integration.

  • broker and exchange venues
  • institutional and retail wallets
  • collateral and lending programs
  • other chains via the issuer
7
Systems of recordHow do the books stay right?

Indexers turn chain state into registers, subledgers, tax forms and regulatory reports.

  • indexer as official books
  • fund administration
  • general ledger
  • tax reporting
  • supervisory reports
6
Data and connectivityWhat crosses the boundary?

Oracles bring prices and reserve data in; gateways reach existing networks; bridges move tokens between ledgers.

  • price and NAV feeds
  • proof of reserve
  • burn-and-mint transfer
  • bank-network gateways
5
Identity and policyWho may hold it?

Eligibility checked in the transfer path itself.

  • identity registry
  • allowlisted wallets
  • sanctions screening
  • travel rule
4
Asset contractWhat can the token do?

The standard and its privileged functions, each with a named key and a delay.

  • ERC-20
  • ERC-3643
  • ERC-4626 / 7540 vaults
  • Solana Token-2022
  • Stellar asset flags
  • Daml contracts
3
Settlement assetWhat pays for it?

Money on the same ledger, or reachable from it, so both legs settle together.

  • regulated stablecoins
  • tokenized deposits
  • tokenized money-market funds
  • central-bank-money bridges
2
Keys and custodyWho can sign?

Whoever controls a key controls the asset.

  • HSM
  • MPC
  • multisig
  • qualified custodians
  • smart accounts
  • passkeys
1
LedgerWho orders and confirms?

The shared record and whoever orders and confirms it (four families, below).

  • Ethereum
  • Solana
  • Stellar
  • rollups (Arbitrum, OP Stack, ZK Stack)
  • Canton
  • Besu networks
0
Legal foundationWhat does the record mean?

The entity, the instrument, the law that makes the record a property right, and finality and insolvency rules.

  • issuer and SPV structures
  • UCC Articles 8 and 12
  • eWpG, Swiss DLT Act
  • EU DLT Pilot Regime
  • GENIUS Act, MiCA
Figure 7. The reference stack. Read from the legal foundation up. The chips name components in common use, not endorsements.[80][96][16]

Choosing the ledger

Four ledger families are in production use, and the major deployments are spread across all of them. They differ less in speed than in who orders transactions and controls upgrades, who can see them and how many counterparties can already reach them.

Four ledger families in production use
Public chainShared rollupApplication-specific chainInstitutional network
Who orders transactionsAn open set of validators.The rollup's sequencer, posting batches to a public chain.The business or its partners, as a rollup or a chain of its own.Known institutions.
FinalityEthereum: two epochs of 32 twelve-second slots, about 13 minutes.[97]Seconds from the sequencer; final on the base chain once posted and, for optimistic rollups, after the challenge window.As designed: Tempo’s blocks are final in about half a second.[8]Seconds, by the operators' consensus.
PrivacyEverything visible by default.Visible by default.Configurable, up to private data with public proofs (§9).Need-to-know; on Canton each party sees only its part of a transaction.[98]
Who controls upgradesThe protocol's community, by rough consensus.The rollup's governance and upgrade keys, at very different levels of decentralization.[90]The business.The operator or consortium.
ReachThe largest pool of wallets, assets and programs.The base chain's assets, through bridges.Must bring liquidity in.Connected participants, unless bridged.
In productionBlackRock's fund on several public chains; Franklin Templeton's registered fund primarily on Stellar[24][3]J.P. Morgan's deposit token on Base; Robinhood's first stock tokens on Arbitrum[28][99]Robinhood Chain; Sony’s Soneium; Tempo, incubated by Stripe[40][46][8]Broadridge's repo platform; DTCC's private Besu network[10][5]

Two patterns stand out. Issuers seeking the widest distribution put the asset on several public chains and keep the register themselves. Institutions that need confidentiality or control run a permissioned network and connect it to public ones through the issuer, as the DTCC does with its private network and Canton, and plans to with Stellar.[5][100] Either choice is reversible only if the exit was designed in: burning on one chain and reissuing on another is the clean way to move, and it requires the issuer to control minting on both.

How the majors built it

The systems below, live at the time of writing except DTC’s (tested in 2026 production trades before launch) and the last, are taken apart along the same lines: who holds the register, what the token legally is, which ledger it lives on, which controls it carries and how it settles. Together they show that the ledger is the least distinctive part of each design; the legal form and the controls do most of the work.

DTC Tokenization Service

Market infrastructure · custodial entitlement
  1. HolderParticipant's registered wallet
  2. TokenTokenized entitlement
  3. BooksDTC: LedgerScan, omnibus account
  4. Registered ownerCede & Co.
  5. IssuerListed company or Treasury
What it is
A depository-run service that records security entitlements on approved ledgers; the legal claim is unchanged (§4, “Custodial entitlement”).[16]
Ledgers
Chosen against published criteria, including that DTC “must have the ability to observe all transfers”. The first production trades ran on DTCC's private Hyperledger Besu network and on Canton; Stellar is planned.[5][100]
Controls
Registered wallets only; compliance-aware token protocols “such as ERC 3643”; a DTC root wallet on every chain.
Scope
Russell 1000 stocks, major index ETFs and Treasuries; the first trades covered collateral, securities lending, repo, equity delivery-versus-payment and clearing-house margin.
Replaces
Nothing yet. Designed to run beside book-entry settlement, convertible both ways.

BlackRock USD Institutional Digital Liquidity Fund (BUIDL)

Asset manager · tokenized fund
  1. HolderPre-approved investor wallet
  2. TokenFund share on nine chains
  3. Transfer agentSecuritize
  4. FundBVI company, managed by BlackRock
  5. CustodianBNY: cash, T-bills, repo
Service providers
At launch: BlackRock as manager, BNY as custodian and administrator, PwC as auditor, Securitize as transfer agent and placement agent; sold privately to qualified purchasers.[2][101]
Ledgers
Ethereum at launch in 2024, then Aptos, Arbitrum, Avalanche, OP Mainnet, Polygon, Solana, BNB Chain and Tempo, with cross-chain transfers through Wormhole.[24]
Cash and yield
Aims at $1 per token; dividends accrue daily and arrive monthly as new tokens. A Circle contract lets holders sell shares to Circle for USDC at any hour, a secondary sale rather than a fund redemption.[2][77]
Composability
Accepted as trading collateral by Crypto.com, Deribit and Binance, and over 90% of a stablecoin’s reserves at its 2024 launch.[25]

J.P. Morgan Kinexys: JPM Coin and tokenized funds

Bank · deposit token · tokenized funds
  1. HolderVetted client wallet
  2. TokenJPM Coin (JPMD) on Base
  3. AccountBlockchain Deposit Account
  4. CounterpartyJ.P. Morgan deposits
Scale
Kinexys, the bank's blockchain unit, had processed more than $4 trillion, and over $7 billion a day, by mid-2026.[27]
Public chain
Since November 2025 institutional clients can hold JPM Coin on Base, an Ethereum layer 2, with “the credit risk profile and balance sheet certainty of commercial bank money”.[28]
Golden record
Its tokenized money fund (JLTXX, 2026) keeps the official record in a book-entry “Investor Register”; the Ethereum token mirrors it and can be clawed back if the two diverge. Franklin Templeton’s register integrates the chain instead.[4][3]
Interoperability
A 2025 cross-chain delivery-versus-payment test with Chainlink and Ondo marked the first time its payments rail settled transactions beyond private or permissioned chains.[102]

Stripe: stablecoin accounts on a payments chain

Payments company · payment stablecoins · own chain
  1. HolderBusiness account at Stripe
  2. TokenUSDC or Bridge's USDB
  3. LedgerTempo, final in about 0.5 s
  4. IssuerCircle or Bridge, against reserves
Assembled from
Bridge, a stablecoin platform acquired in 2025; Privy, a wallet-infrastructure provider; and Tempo, a payments chain incubated with Paradigm and live since March 2026.[103][104][8]
For businesses
Stablecoin balances in 101 countries since 2025, funded over crypto or bank rails; payouts on Tempo settle “in under a second at a fixed cost of $0.001”.[36][8]
Ledger
Validators include Stripe, Visa and Standard Chartered’s Zodia Custody; fees are paid in stablecoins rather than a native token.
Controls
Issuers can pause transfers and freeze or burn tokens at blacklisted addresses; transfers can carry memos with invoice references, ISO 20022 data or travel-rule messages.
Why a new chain
Existing chains were “designed for trading and DeFi”; a memecoin frenzy once “delayed payouts for one Bridge user by over 12 hours”.[104]

Robinhood Stock Tokens and Robinhood Chain

Broker · synthetic tracker · own chain
  1. HolderSelf-custody wallet
  2. TokenERC-20 stock token
  3. IssuerRobinhood Assets (Jersey) Ltd
  4. ReferenceA US-listed share's price
Legal form
“Tokenised debt securities” without “any legal or beneficial rights” in the shares; not offered to US persons.[83]
Ledger
Robinhood Chain, “a permissionless, Ethereum-compatible Layer 2 blockchain built for financial services and tokenized real-world assets”, live since July 2026; earlier EU derivative tokens ran on Arbitrum One.[99][40]
Lesson
The construction is fast to ship and contested by issuers. The tracking form, not the ledger, drew OpenAI's 2025 statement and AMC's 2026 objections.[83][58]

OKXICE Tokenized Securities Venue

Exchange group · venue on a public chain
  1. ParticipantWallet with soulbound pass
  2. VenueUniswap v4 pool on XLayer
  3. PairStock token vs USDC, USDG or USDT
  4. TokenizerBroker-dealer holding shares 1:1
Operator
OKXICE LLC, owned equally by OKX and the NYSE’s owner, Intercontinental Exchange; filed under the SEC's 2026 exemption for tokenized-securities venues, which runs to 2031.[23][60]
Design
Permissioned pools on a public layer 2: a hook admits only wallets holding a non-transferable credential issued after identity checks. Prices follow the constant-product formula, with no oracles.
Settlement
Atomic, fully funded and continuous: “There is no clearing agency, central counterparty or netting.” Each token is a security entitlement to one share held by the tokenizer's broker-dealer.
Control
Upgrades and new pools need a multisig of OKX Technology and the venue itself; pausing and allowlist changes sit with one OKX key. Issuers can object before trading starts; four did within days.

§6 · The pipelineMigrating one process at a time

The projects that tried to replace a whole system at once are prominent among the failures in §2. The ones that worked moved a slice, ran it beside the old system and only then let the new record count. The DTCC ran a ledger-based settlement platform “in a parallel production environment”, with its classic systems “remaining the authoritative record”[105], and its tokenization service designates an off-chain system that reads the chains, LedgerScan, as the official books.[16] Software engineers call the pattern the strangler fig: the new system “begins with small additions” beside the legacy one and takes over piece by piece, so that “investment and returns occur gradually and visibly”.[106]

  1. Phase 1MirrorPublish the register on a ledger as a read-only copy, reconciled daily.
  2. Phase 2Parallel runTokens move for real among a few permitted parties; the old books still rule.
  3. Phase 3Switch the recordThe ledger, read through an indexer, becomes the official books.
  4. Phase 4Cash and rules onchainA tokenized cash leg settles against the asset; lifecycle events run as code.
  5. Phase 5Open distributionOther venues, custodians and programs use the asset without a bespoke integration.

Each phase can stop where the economics stop. Broadridge’s repo platform settles trillions of dollars a month without ever making the positions freely transferable[10]; a fund that wants to serve as collateral elsewhere needs phase 5. The ten steps below are the work inside the phases, in dependency order, each ending in the evidence that should exist before the next begins.

  1. Choose a process, not a technology

    Start where copies of the same facts are most expensive to keep in agreement: the most reconciliation breaks, the longest settlement delay, the most capital in transit. §8 lists the signs.

    GateA measured baseline: cost per transaction, time to settle, breaks per thousand, capital tied up.
  2. Decide what the token legally is

    Native record, entitlement, fund share, deposit, payment token or tracker: each brings a different issuer, licence and counterparty (§4), and constrains every later choice.

    GateA legal opinion on what the holder owns, which law governs, when a transfer is final and what happens in the issuer's insolvency.
  3. Choose the ledger

    Weigh the four families in §5 on finality, privacy, control of ordering and upgrades, and where the counterparties already are.

    GateAn architecture decision record that includes the exit: how the asset moves to another ledger, and what happens if this one halts.
  4. Design the token and its controls

    Pick a standard that carries the needed restrictions, then enumerate every privileged action (mint, burn, pause, freeze, forced transfer, upgrade) and who may perform it, behind which delay.

    GateAn independent audit, and a written map from each privileged function to the key that controls it.
  5. Bind identity to wallets

    Eligibility moves into the transfer path: identity registries, allowlisted wallets, sanctions screening and the travel rule for payments.

    GateA test suite proving that no transfer can reach an unverified or sanctioned address.
  6. Decide who holds which keys

    Issuer, operational and client keys need different custody: hardware modules, multi-party computation, qualified custodians, recovery procedures and several approvers per action.

    GateA documented key ceremony, a tested recovery, and separation of duties for every privileged key.
  7. Bring the cash leg

    Settlement is only atomic if the money is on the same ledger or reachable from it: a regulated stablecoin, a tokenized deposit or a bridge to central-bank money. Siemens learned the difference in two issues. Its first digital bond, paid through ordinary bank accounts, took two days to settle; its second settled “within minutes and in central bank money” through a Bundesbank bridge, with settlement risk “almost fully eliminated”.[37][38]

    GateEnd-to-end delivery-versus-payment tested with every failure case, including one leg missing at the moment of settlement.
  8. Wire data in and out

    Oracles bring prices, net asset values and reserve attestations in; indexers feed the books and records, the accounting subledger, tax reporting and regulatory returns out.

    GateA replay test: the books can be rebuilt from chain data alone and match.
  9. Run in parallel, then switch

    Operate both systems for an agreed number of cycles, reconcile every day, and define in advance the break that stops the migration.

    GateNo unexplained breaks over the window; regulators and auditors informed before the golden record changes.
  10. Operate, then open

    Monitoring, incident playbooks and a process for the chain's own upgrades come first; distribution to other venues, chains and collateral programs follows, one permitted counterparty at a time.

    GateAn incident drill completed, and each external integration recorded as a known counterparty.

§7 · The risksWhat can go wrong, and who bears it

Onchain operation does not remove risk. It moves it, and the record of losses shows where to. More than $3.4 billion was stolen across the industry in 2025, $1.5 billion of it in a single attack on the exchange Bybit, and the analytics firm Chainalysis traces the largest losses to “sophisticated attacks on private key infrastructure and signing processes” at well-resourced, centralized services.[107] The Bybit attack broke no blockchain. Malicious code planted in a wallet interface altered “what Bybit's signers saw” when they approved a routine transfer.[108] The most instructive stress event began at a bank. When Circle could not withdraw $3.3 billion of USDC's reserves from the failed Silicon Valley Bank in 2023, the token fell to 86 cents, the stress spread through code to three other stablecoins, and it ended only when US authorities protected the bank's depositors.[109]

Risk register, mapped to the layers of the reference stack in §5
RiskWhere it sitsWho bears itMitigations in useReference case
Keys and signingLayer 2Signing keys, devices and the software that shows what is being signedHolder or custodianHardware or split keys; several approvers; verifying each transaction outside the interface that requested itBybit, 2025: about $1.5 billion[110][108]
Issuer and reservesLayers 0 and 3The off-chain assets behind a tokenHoldersSegregated reserves of short, safe assets; monthly disclosure; bankruptcy-remote vehicles; statutory priority for holdersUSDC, 2023: $3.3 billion of reserves stuck at a failed bank; the token fell to 86 cents[109]
ContagionLayer 8Programs that accept one token as collateral or reserve for anotherEveryone downstreamConcentration limits; circuit breakers; supervisors reading the ledger2023: Dai, then USDP and GUSD, lost their pegs through Dai’s swap modules[109]
BridgesLayer 6Contracts and signers that move tokens between chainsHolders of bridged tokensIssuer-run burn-and-mint transfer; proof-based verification (§9)Ronin bridge, 2022: almost $620 million, withdrawn with five of nine validator keys and found six days later[111]
Contract defectsLayer 4Token, vault and protocol codeHolders, sometimes the issuerIndependent audits; formal verification; timelocked upgrades; pause functionsWormhole, 2022: a signature-check bug let an attacker mint 120,000 unbacked wrapped ether[112]
ComminglingLayer 2Intermediaries holding customers' assetsCustomersSegregation rules; qualified custodians; independent attestationFTX, 2022: over $8 billion of customer money taken, by the US Justice Department’s account[113]
Legal formLayer 0What the token legally isHolders and distributorsIssuer participation; a clear instrument; a prospectusOpenAI's 2025 statement on tokens tracking it; issuer objections to tokenized-stock venues in 2026[83][23]
Oracle manipulationLayer 6Prices and data entering contractsUsers of the contractSeveral independent sources; time-averaged prices; position limitsMango Markets, 2022: over $100 million withdrawn against a pushed-up price; the convictions were vacated in 2025 and appealed[114]
Ledger or sequencer failureLayer 1The chain or rollup itselfEveryone on itMature chains; issuance on several chains with a tested exit; decentralized sequencingSolana, 2021–2024: six reported outages, one 17 hours offline, each ended by a coordinated restart[115]
Runs and mismatchLayer 3Tokens that trade around the clock, backed by assets that do notHolders and issuersRedemption terms; liquidity buffers; trading halts tied to the underlying marketFlagged by the FSB; the SEC's venue exemption requires halts with the primary market[61][60]

Read down the register and a pattern appears. On the major public chains, losses have come from the layers around the ledger rather than from the ledger itself: keys, bridges, intermediaries and the assets behind tokens. These are the layers where custody, segregation, disclosure and supervision apply most directly, which is why regulated institutions, not start-ups alone, now operate them, and why the newest risk to emerge is the oldest one in finance: a run on an issuer whose assets cannot be sold as fast as its liabilities can be redeemed.

§8 · The precedentThe cost of waiting

The securities industry has changed its operating model once before, and it did not get to choose the moment. Between 1965 and 1968, daily volume on the New York Stock Exchange rose from five million shares to twelve million, and a back office that “relied heavily on paper and pen” could not keep up. Firms bought computers and, in the words of the historian Wyatt Wells, “many companies botched the process”.[116] At one point US markets “actually stopped trading one day a week so that firms could catch up on their paperwork”.[117] By the end of 1970 the crisis had “forced nearly a sixth of the nation's brokerage firms out of business”, and it opened the way for the large, integrated firms that dominated the industry by the 1990s.[116] The fix was to stop moving paper: the Depository Trust Company, created in 1973, built a book-entry system so that ownership moved as ledger entries instead of certificates carried between firms.[118] Half a century later, the same depository is turning those entries into tokens.

Shipping offers the closest analogy outside finance. The container did not make ships faster; it standardized the interface between ships, cranes, trucks and trains. In Britain and Western Europe, dock labour productivity rose from 1.7 to 30 tons an hour between 1965 and the early 1970s. The economists who measured the effect on trade among developed economies put it at about 700 percent over twenty years, “much larger than the effects of free trade agreements or the GATT”. They also record who lost: “the ports of London and Liverpool, which handled most of the British trade for centuries, lost their dominant position to the emerging container ports of Tilbury and Felixstowe.”[119] Marc Levinson's history of the container says the same of New York.[120]

The question for an incumbent is rarely whether its infrastructure still works. It is whether the trade will keep using it once a shared standard exists elsewhere.

Both episodes follow the economics of networks. Michael Katz and Carl Shapiro analysed goods whose value to each user rises with the number of other users; Joseph Farrell and Garth Saloner showed that, with incomplete information, a shared standard can “trap” an industry “in an obsolete or inferior standard when there is a better alternative available”.[121][122] Inertia protects an old standard only until enough large participants move; after that, late adopters inherit terms they did not write. The terms for tokenized markets are being written now. The DTC's criteria name compliance-aware token protocols such as ERC-3643; the SEC's exemption for tokenized-stock venues requires their contracts to be public and deployed on a public, permissionless ledger; and Nasdaq and the London Stock Exchange have each partnered with Kraken's parent on tokenized equities.[16][60][42][41]

For a business outside finance the cost of waiting is less dramatic and more certain. Working capital stays parked, payouts keep crossing borders through correspondent chains, partners keep integrating one at a time, and the operating knowledge that parallel runs build, which no vendor can sell, accumulates at competitors. None of this requires a view on the price of any token. It requires knowing which processes are reconciliations in disguise.

Diagnostic

Which of these describe a process you run?

Each item on the list is a place where several parties keep copies of the same facts and settle later. That is the condition the onchain operating model removes, and it is the condition under which the incumbents in §2 moved first.

§9 · The next layerProof, not replay: where zkVMs fit

Every layer of the stack in §5 rests on one assumption: that the ledger's state transitions are correct. On a public chain that assumption is earned by brute force, with every validator re-executing every transaction. Brute force does not scale, so execution moved onto rollups, which run transactions elsewhere and post the results to Ethereum. How does the base ledger learn that work done elsewhere was done correctly?

There are two answers. An optimistic rollup assumes its results are correct and leaves a window, about a week on the largest ones, in which anyone can challenge them with a fraud proof; a withdrawal is final only when the window closes. A validity rollup attaches a succinct proof, loosely called zero-knowledge, certifying that the computation was executed exactly as specified, and the base ledger verifies the proof instead of the computation. Once the proof is verified, the result is final.[90]

01 day2 days3 days4 days5 days6 days7 daysOptimisticfraud proofschallenge window: anyone may disputefinal on L1Validity (zk)validity proofsfinal on L1 after about an hourreal-time proving pulls this toward one Ethereum block (12 s)
Figure 8. When a rollup withdrawal is final on Ethereum. Linear scale. Optimistic rollups are final after the challenge window, about a week on Arbitrum One and OP Mainnet; validity rollups once a proof is verified on Ethereum, plus any safety delay. Validity durations are illustrative.[90]
Optimistic and validity rollups, compared on what a migrating business needs
PropertyOptimistic (fraud proofs)Validity (zero-knowledge proofs)
What makes a result correctAt least one honest party watches and challenges a wrong result in time.A proof that the base ledger checks; no watcher required.
Final on the base ledgerAfter the challenge window, about a week on the largest chains.[90]When the proof is verified. Some operators add a safety delay (a day on ZKsync Era at the time of writing), a choice rather than a limit of the proof.[123]
Capital cost of exitsFunds are locked for the window, or a liquidity provider is paid to front them.None beyond proving time and any safety delay.
Moving between chainsWaits on the window, or trusts an intermediary to bridge sooner.A proof of one chain's state can be checked by another.

For years the trade-off favoured optimism, because proofs were slow and expensive. General-purpose zkVMs changed that: virtual machines that prove the execution of ordinary programs compiled to a standard instruction set, usually RISC-V, so that code written in Rust or C++ can be proven without being rewritten as a circuit. In 2025 the Ethereum Foundation set a public bar for “realtime” proving (a block in ten seconds or less, on hardware costing at most $100,000) and announced that Ethereum is “going all in on ZK”: its validators are to be able to “statelessly verify” proofs “rather than re-executing” each block.[124] By December it reported latency down “from 16 minutes to 16 seconds”, costs down 45-fold, and zkVMs that “now prove 99% of all Ethereum blocks in under 10 seconds on target hardware”.[125] The optimistic stacks are moving the same way. Mantle, an OP Stack chain, switched to validity proofs in 2025 for one-hour finality and six-hour withdrawals, by its prover’s account, and Offchain Labs’ venture arm signed a one-year exclusive deal to bring zero-knowledge proving to Arbitrum chains.[126][127]

For a business migrating onchain, the zkVM changes what can be moved. The logic that already runs a firm, its pricing, eligibility checks, netting and accounting rules, can be compiled and proven, and the proof checked by anyone who needs assurance without seeing the inputs. Five uses follow from the pipeline in §6.

  • An application-specific chain with fast finality. A business can run its own rollup, tuned to its one application, and settle to Ethereum without a challenge window. This is the thesis this site develops at length: one rollup per economic application, with a validity proof as the only instrument that retires the window without adding a party to trust.
  • Privacy that can still be checked. Transaction data can stay with the business and its regulator while a proof establishes that every transition followed the rules. The DTC's criteria for approved ledgers already admit “privacy protecting technologies, such as zero knowledge proofs”, provided the depository can “observe all transfers”. Deutsche Bank’s fund-servicing chain runs on ZKsync’s Prividium, which sends proofs rather than transaction data to Ethereum; Cari, a deposit network of five US regional banks, chose it in 2026.[16][128][129]
  • Compliance without disclosure. A holder can prove eligibility, residence or accreditation without handing identity documents to every counterparty. Google has open-sourced the zero-knowledge libraries behind its age-assurance work, with which a website visitor “can verifiably prove he or she is over 18, without sharing anything else at all”.[130]
  • Reserves and solvency, proven. An exchange can prove that customer balances are covered by its onchain assets without publishing each balance, a design Vitalik Buterin set out after the failures of 2022.[131]
  • Bridges without committees. A chain can verify a proof of another chain's state instead of trusting a bridge’s own signers, the weak point behind several of the largest losses in §7. The bridge Across already reads Ethereum this way on several chains.[132]

The economics are as concrete as the engineering. A challenge window locks capital: whoever needs funds sooner pays a liquidity provider to front them. Every trust assumption added to shorten the window, a committee, a multisig, a hardware enclave, is a risk that counterparties price. And a proof is an audit artifact of an unusual kind: a certificate, checkable by anyone in milliseconds, that a defined computation ran exactly as written. In the language of §3, validity proofs push the cost of verification toward the cost of checking a certificate.

Seen against the history of shared ledgers, the step is the natural next one. Proof of work and then proof of stake secured the order of events, first with energy and then with capital; neither checked the events themselves, which every participant still had to re-execute. A validity proof checks them. Energy, then capital, then mathematics: for the onchain operating model, that last step is what turns a shared ledger from a record everyone must replay into a record everyone can simply verify.

References

Web pages, filings and reports were read on or before October 9, 2026; dated sources carry their publication date. Figures marked “at the time of writing” come from live trackers and will drift.

  1. Bank for International Settlements, “The next-generation monetary and financial system,” Annual Economic Report 2025, Chapter III, 29 June 2025 — bis.org/publ/arpdf/ar2025e3.htm: tokenisation as “the next logical progression”; the singleness, elasticity and integrity tests; stablecoins “perform poorly” as the mainstay of the monetary system; the tokenised reserves, deposits and government bonds on a unified ledger.
  2. BlackRock, “BlackRock Launches Its First Tokenized Fund, BUIDL, on the Ethereum Network,” 20 March 2024 — nasdaq.com/press-release/blackrock-launches-its-first-tokenized-fund-buidl-…: Rule 506(c) and Section 3(c)(7); BNY as custodian and administrator; PwC as auditor; Securitize as transfer agent and tokenization platform; $5 million minimum; daily dividends paid monthly as new tokens; transfers 24/7/365 to pre-approved investors.
  3. Franklin Templeton Trust, Form 485BPOS for the Franklin OnChain U.S. Government Money Fund, filed 3 January 2025 — sec.gov/Archives/edgar/data/1786958/000174177325000031/c485bpos.htm: the transfer agent “maintains the official record of share ownership via a proprietary blockchain-integrated system that utilizes features of traditional book-entry form and one or more public blockchain networks”; whitelisted wallets; the transfer agent’s ability to correct errors and limit transferability; investors “will not be required to purchase any native digital asset”; effective 6 April 2021.
  4. JPMorgan Trust IV, JPMorgan OnChain Liquidity-Token Money Market Fund, prospectus of 13 May 2026 as supplemented 17 August 2026 (Form 497) — sec.gov/Archives/edgar/data/0001659326/000119312526353379/d127628d497.htm: the book-entry “Investor Register” as the official record; allow list; claw-back when token balances and the register diverge; Ethereum as the only available chain; shares intended as stablecoin reserve assets.
  5. DTCC, “DTCC Turns Tokenization into Reality,” 15 July 2026 — dtcc.com/news/2026/july/15/dtcc-turns-tokenization-into-reality (more than 30 firms; collateral pledge, securities lending, Treasury repo DvP, equity DvP and DvD, CCP margin; conversions on DTCC’s private Besu network and on Canton; US$114 trillion in custody in 2025); event page — dtcc.com/digital-assets/tokenization/live-production-trades: J.P. Morgan tokenized Invesco QQQ shares and posted tokenized assets to meet CCP margin at CME Group.
  6. SEC, Order Approving a Proposed Rule Change … to Enable the Trading of Securities on the Exchange in Tokenized Form (SR-NASDAQ-2025-072), Release No. 34-105047, 18 March 2026 — sec.gov/files/rules/sro/nasdaq/2026/34-105047.pdf: tokenized shares trade on the same order book, with the same priority, CUSIP, symbol and rights; tokenization is elected post-trade and settled by DTC at T+1.
  7. Visa press releases: launch of USDC settlement in the United States, 16 December 2025 — usa.visa.com/…/press-releases.releaseId.21951.html; the stablecoin settlement pilot on nine blockchains at “a $7 billion annualized stablecoin settlement run rate”, 29 April 2026 — usa.visa.com/…/press-releases.releaseId.22336.html.
  8. Tempo blog: “Introducing Tempo, the payments-first blockchain,” 4 September 2025 — tempo.xyz/blog/introducing-tempo (incubated by Stripe and Paradigm); testnet, 9 December 2025 — tempo.xyz/blog/testnet (“Blocks are finalized every ~0.5 seconds”); “Tempo Mainnet is live,” 18 March 2026 — tempo.xyz/blog/mainnet; Stripe, Visa and Zodia Custody by Standard Chartered as validators, 14 April 2026 — tempo.xyz/blog/stripe-visa-zodia-join-as-validators; “Stripe and Tempo: stablecoin settlement for global money movement,” 21 April 2026 — tempo.xyz/blog/stripe-and-tempo-stablecoin-settlement-… (payouts settle “in under a second at a fixed cost of $0.001”; fees in stablecoins; memo fields “compatible with ISO 20022”); compliance controls, 19 February 2026 — tempo.xyz/blog/compliance-controls (TIP-20 pause, unpause and burn; issuer blacklists; memos that can reference “IVMS101 or SWIFT messages”).
  9. T. Philippon, “Has the US Finance Industry Become Less Efficient? On the Theory and Measurement of Financial Intermediation,” American Economic Review 105(4), 1408–1438, 2015 — doi.org/10.1257/aer.20120578: an annual cost of 1.5–2% of intermediated assets over 130 years; author’s version: “Improvements in information technologies do not appear to have led to a significant decrease in the unit cost of intermediation” — pages.stern.nyu.edu/~tphilipp/papers/Finance_Efficiency.pdf.
  10. Broadridge, Distributed Ledger Repo monthly volume releases: December 2025 (average daily volume $384 billion; “the world’s largest institutional platform for settling tokenized real assets”) — broadridge.com/press-release/2026/broadridge-distributed-ledger-repo-platform-december; July 2026 ($8.0 trillion in the month, $365 billion a day) — broadridge.com/press-release/2026/broadridges-distributed-ledger-repo-processes-8-trillion-in-july.
  11. DefiLlama, stablecoin circulating supply, all pegs, monthly series read 9 October 2026 — defillama.com/stablecoins (data: stablecoins.llama.fi/stablecoincharts/all). The series undercounts the earliest years, so the chart starts in 2020.
  12. Financial Stability Board, “G20 Roadmap for Enhancing Cross-border Payments: Consolidated progress report for 2025,” 9 October 2025 — fsb.org/uploads/P091025-1.pdf: improvements “unlikely” in line with the 2027 timetable; global average cost of a $200 remittance 6.5% (2025), 6.4% (2024), 6.3% (2023).
  13. Financial Stability Board, “Targets for Addressing the Four Challenges of Cross-Border Payments: Final Report,” 13 October 2021 — fsb.org/uploads/P131021-2.pdf: retail payments at no more than 1% average cost and 75% credited within one hour by end-2027; $200 remittances at no more than 3% by 2030.
  14. Bank for International Settlements, “Blueprint for the future monetary system: improving the old, enabling the new,” Annual Economic Report 2023, Chapter III, 25 June 2023 — bis.org/publ/arpdf/ar2023e3.htm: siloed databases connected by messaging, separate reconciliation before settlement; the unified ledger; composability and “contingent performance”; atomic settlement.
  15. L. Fink, 2025 Annual Chairman’s Letter to Investors, BlackRock, March 2025 — blackrock.com/corporate/investor-relations/2025-larry-fink-annual-chairmans-letter.
  16. SEC Division of Trading and Markets, no-action letter to The Depository Trust Company regarding DTCC Tokenization Services, 11 December 2025, with DTC’s request — sec.gov/files/tm/no-action/dtc-nal-121125.pdf: tokenized security entitlements; registration unchanged in the name of Cede & Co.; the Digital Omnibus Account and Factory mint/burn; LedgerScan as official books and records; registered wallets only; compliance-aware protocols “such as ERC 3643”; a DTC root wallet on each chain; eligible Russell 1000 stocks, index ETFs and Treasuries; relief for three years from launch.
  17. R. Auer, “Embedded supervision: how to build regulation into decentralised finance,” BIS Working Papers No. 811, 16 September 2019 — bis.org/publ/work811.htm: compliance “automatically monitored by reading the market’s ledger”, provided consensus is strong enough to guarantee the finality of transactions.
  18. H. M. Peirce, “Enchanting, but Not Magical: A Statement on the Tokenization of Securities,” SEC, 9 July 2025 — sec.gov/newsroom/speeches-statements/peirce-statement-tokenized-securities-070925.
  19. rwa.xyz, tokenized asset dashboard (distributed and represented asset values, league tables by asset class, network, manager and platform), read 9 October 2026 — app.rwa.xyz. Values change daily.
  20. L. Fink, 2026 Annual Chairman’s Letter to Investors, BlackRock, March 2026 — blackrock.com/corporate/investor-relations/larry-fink-annual-chairmans-letter: tokenization “may be roughly where the internet was in 1996”; $65 billion of stablecoin reserves under management.
  21. Nasdaq, “Nasdaq to Launch Equity Token Design, Putting Issuers at the Center of Tokenization,” 9 March 2026 — nasdaq.com/press-release/nasdaq-launch-equity-token-design-…: “A transfer of the token will represent a transfer of the underlying security itself”; partner Payward (Kraken, xStocks).
  22. Intercontinental Exchange, “The New York Stock Exchange Develops Tokenized Securities Platform,” 19 January 2026 — ir.theice.com/press/news-details/2026/The-New-York-Stock-Exchange-Develops-Tokenized-Securities-Platform/: 24x7 trading, settlement via tokenized capital and stablecoin funding, pending approvals; work with BNY and Citi on tokenized deposits across ICE clearinghouses.
  23. OKXICE LLC, Tokenized Securities Venue notices under SEC Release 34-106402, 4 and 8 October 2026 — okx.com/okxicetsv: Uniswap v4 pools on XLayer with a permissioning hook and soulbound access tokens; pairs against USDC, USDG or USDT; atomic settlement with “no clearing agency, central counterparty or netting”; 24/7 operation; issuer objections.
  24. BUIDL share classes: Aptos, Arbitrum, Avalanche, OP Mainnet and Polygon (November 2024) — marketsmedia.com/blackrock-extends-tokenized-fund-across-multiple-blockchains; Solana with Wormhole interoperability (25 March 2025) — wormhole.com/blog/blackrock-and-securitize-debut-new-buidl-share-class-on-solana-…; BNB Chain (14 November 2025) — wormhole.com/blog/blackrock-and-securitize-expand-buidl-to-bnb-chain-…; Tempo (29 July 2026) — tempo.xyz/blog/tempo-expands-onchain-yield-offering-with-blackrocks-buidl-fund/.
  25. BUIDL as collateral: Crypto.com and Deribit, Cointelegraph, 18 June 2025 — cointelegraph.com/news/deribit-crypto-com-accepting-blackrock-buidl-collateral; Binance off-exchange collateral, Securitize and Binance release, 14 November 2025 — aap.com.au/aapreleases/cision20251114ae21339; Ethena’s USDtb with BUIDL as “over 90% of reserves”, The Block, 16 December 2024 — theblock.co/post/331013/….
  26. BNY, “BNY and Goldman Sachs launch tokenized money market funds solution,” 23 July 2025 — bny.com/…/bny-and-goldman-sachs-launch-tokenized-money-market-funds-solution.html: mirrored tokenization on GS DAP for funds from BlackRock, BNY Investments Dreyfus, Federated Hermes, Fidelity Investments and Goldman Sachs Asset Management; BNY keeps the official books and records.
  27. J.P. Morgan, “Introducing Kinexys,” 6 November 2024 — jpmorgan.com/insights/payments/blockchain-digital-assets/introducing-kinexys; Kinexys Blockchain Deposit Accounts in Asia-Pacific currencies, 29 June 2026 (over $4 trillion processed since inception; more than $7 billion a day) — jpmorgan.com/payments/newsroom/kinexys-apac-blockchain-deposit-accounts.
  28. J.P. Morgan, JPM Coin (JPMD) available to institutional clients on Base, 12 November 2025 — jpmorgan.com/payments/newsroom/jpm-coin-usd-deposit-token-institutional-clients; product page and FAQ — jpmorgan.com/kinexys/jpm-coin (read 9 October 2026): “a bank-issued deposit token—not a cryptocurrency or a stablecoin”; redemption through the Blockchain Deposit Account.
  29. Citi, “Citi Token Services Marks New Milestone,” 10 October 2024 — citigroup.com/global/news/press-release/2024/citi-token-services-marks-new-milestone (24/7 cross-border liquidity on a private, permissioned blockchain); expansion to Japan and the UAE, 28 September 2026 — citigroup.com/global/news/press-release/2026/citi-token-services-expands-global-footprint-….
  30. HSBC, “Introducing the HSBC Gold Token to retail customers in Hong Kong” — about.hsbc.com.hk/-/media/hong-kong/en/news-and-media/240412-introducing-hsbc-gold-token-en.pdf; HSBC cross-border Tokenised Deposit Service, 18 September 2025 (as reprinted by Treasury Today) — treasurytoday.com/press-releases/press-release-hsbc-launches-new-cross-border-tokenised-deposit-service/.
  31. SG-FORGE, USD CoinVertible on Ethereum and Solana with BNY as reserve custodian; EUR CoinVertible since April 2023; both MiCA electronic-money tokens, 10 June 2025 — sgforge.com/usd-stablecoin-bny-custodian/.
  32. AllUnity (DWS, Flow Traders, Galaxy), “AllUnity launches EURAU, Germany’s first fully reserved MiCAR-compliant euro stablecoin,” 31 July 2025 — allunity.com/news/allunity-launches-eurau-….
  33. Early Warning Services, “Zelle® Heads to India, Unveils ZelleUSD Stablecoin For Other Markets,” 11 June 2026 — earlywarning.com/press-release/zelle-heads-india-unveils-zelleusd-stablecoin-other-markets: Early Warning, operator of Zelle, “is owned by seven of the nation’s leading financial institutions including Bank of America, Capital One, JPMorgan Chase, PNC Bank, Truist, U.S. Bank, and Wells Fargo”.
  34. Mastercard, agreement to acquire BVNK “for up to $1.8 billion, including $300 million in contingent payments,” 17 March 2026, and completion, 3 August 2026, as published by BVNK — bvnk.com/press/mastercard-to-acquire-bvnk-…; bvnk.com/press/mastercard-completes-acquisition-of-bvnk-….
  35. PayPal, launch of PayPal USD (PYUSD), issued by Paxos Trust Company, 7 August 2023 — newsroom.paypal-corp.com/2023-08-07-PayPal-Launches-U-S-Dollar-Stablecoin; Paxos converted its New York trust charter to “a national trust charter overseen by the U.S. Office of the Comptroller of the Currency (OCC) on December 12, 2025” — paxos.com/newsroom/occ-approves-paxos-application-….
  36. Stripe, Sessions 2025 announcements, 7 May 2025 — stripe.com/newsroom/news/sessions-2025: stablecoin-powered financial accounts “accessible to businesses in 101 countries”, receiving on crypto and fiat rails, starting with USDC and Bridge’s USDB.
  37. Siemens, “Siemens issues first digital bond on blockchain,” 14 February 2023 — press.siemens.com/global/en/pressrelease/siemens-issues-first-digital-bond-blockchain: €60 million, one year, under Germany’s Electronic Securities Act (eWpG); sold directly to investors without a central securities depository; classic payment by bank account; completed within two days; Hauck Aufhäuser Lampe as registrar.
  38. Siemens, digital bond of €300 million settled on SWIAT with the Bundesbank Trigger Solution, 4 September 2024 — assets.new.siemens.com/…/HQCOPR202409026988EN.pdf: settled “within minutes and in central bank money”; settlement risk “almost fully eliminated”.
  39. Hong Kong Monetary Authority press releases on Government digital green bonds: HK$800 million tokenised green bond, 16 February 2023 — hkma.gov.hk/…/2023/02/20230216-3/; around HK$6 billion multi-currency, 7 February 2024 — hkma.gov.hk/…/2024/02/20240207-6/; around HK$10 billion with e-CNY and e-HKD settlement, 11 November 2025 — hkma.gov.hk/…/2025/11/20251111-6/; around HK$20 billion with tokenised deposits for the HKD tranche, 29 September 2026 — hkma.gov.hk/…/2026/09/20260929-6/.
  40. Robinhood, Robinhood Chain mainnet and Stock Tokens, 1 July 2026 — robinhood.com/newsroom/robinhood-accelerates-global-expansion-…; Stock Token documentation (ERC-20, onchain multiplier for corporate actions, authorised participants) — docs.robinhood.com/chain/stock-tokens/.
  41. Payward, “Payward and LSEG … tokenization partnership,” 1 September 2026 — payward.com/press-release/payward-lseg-tokenization-partnership: the top 100 London-listed equities as xStocks; trading on LSE 24 subject to approval; not for UK or US residents.
  42. Payward, “Nasdaq Ventures to invest $100 million in Payward,” 10 September 2026 — payward.com/press-release/payward-nasdaq-tokenized-equities: Nasdaq Equity Tokens expected in the second quarter of 2027, connected to the xStocks ecosystem.
  43. Payward, “xStocks at one year,” 2 July 2026 — payward.com/press-release/xstocks-one-year: $35 billion total volume, $12.5 billion onchain, nearly 200,000 holders; Kraken’s acquisition of Backed announced 2 December 2025 — payward.com/press-release/kraken-acquires-backed-xstocks-expansion.
  44. Telegram, blockchain guidelines for mini apps, rules dated 21 January 2025, read 9 October 2026 — core.telegram.org/bots/blockchain-guidelines: an implementation must use “the TON Blockchain for the creation and distribution of cryptocurrency tokens or blockchain assets” exclusively; mini apps on other chains had to move by 21 February 2025.
  45. Kaia, “About,” read 9 October 2026 — kaia.io/about: “Kaia was forged through the merger of the Klaytn and Finschia blockchains, bringing together the ecosystems of Kakao and LINE”; Mini Dapps launch in LINE Messenger, 22 January 2025 — blog.kaia.io/mini-dapps-and-dapp-portal-are-now-live-in-line-messenger: users “create a keyless MPC wallet using just their LINE account”.
  46. Soneium, mainnet launch, 14 January 2025 — soneium.org/en/blog/soneium-mainnet-is-live: “Soneium is a public blockchain” built on the OP Stack by Sony Block Solutions Labs, a joint venture of Sony Group and Startale; fan-marketing NFTs for Sony brands.
  47. De Beers Group, release on its 2025 sustainability report, 22 September 2026 — debeersgroup.com/news-insights/latest-group-news/2026/…: “five million rough diamonds being individually registered on the blockchain-backed diamond traceability platform”, Tracr.
  48. K. Vitasek, J. Bayliss, L. Owen and N. Srivastava, “How Walmart Canada Uses Blockchain to Solve Supply-Chain Challenges,” Harvard Business Review, 5 January 2022 — hbr.org/2022/01/how-walmart-canada-uses-blockchain-to-solve-supply-chain-challenges: “Prior to DL Freight over 70% of invoices were disputed. Today less than 1% of invoices have discrepancies”; rolled out to 70 carriers by March 2021 on a private Hyperledger Fabric network. Two of the authors lead DLT Labs, which built the system.
  49. Dubai Land Department, launch of the tokenized real estate project on the Prypco Mint platform, 25 May 2025 — dubailand.gov.ae/en/news-media/dld-launches-the-mena-s-first-tokenized-real-estate-project-…: a “pilot phase”; tokenized assets “projected to represent up to 7% of Dubai’s real estate market by 2033”. Ripple, 15 July 2025 — ripple.com/ripple-press/ripple-expands-global-custody-footprint-into-middle-east-with-ctrl-alt: title deeds “being issued on the XRP Ledger (XRPL)”.
  50. A.P. Moller – Maersk, “A.P. Moller – Maersk and IBM to discontinue TradeLens, a blockchain-enabled global trade platform,” 29 November 2022 — maersk.com/news/articles/2022/11/29/maersk-and-ibm-to-discontinue-tradelens.
  51. Global Trade Review: “we.trade calls it quits after running out of cash” (June 2022) — gtreview.com/news/fintech/we-trade-calls-it-quits-after-running-out-of-cash/; “Marco Polo brings in liquidators as funds run dry” (February 2023) — gtreview.com/news/fintech/marco-polo-brings-in-liquidators-as-funds-run-dry/; “Contour to shut down as bank shareholders pull funding” (October 2023) — gtreview.com/news/fintech/exclusive-contour-to-shut-down-as-bank-shareholders-pull-funding/.
  52. “B3i fails to raise new capital, enters insolvency,” Reinsurance News, July 2022 — reinsurancene.ws/b3i-fails-to-raise-new-capital-enters-insolvency/.
  53. Australian Securities and Investments Commission, media release 26-119MR, “ASX admits misleading conduct relating to CHESS replacement project,” 2026 — asic.gov.au/…/26-119mr-asx-admits-misleading-conduct-relating-to-chess-replacement-project: project begun 2016–17, paused 17 November 2022 with A$245–255 million of costs derecognised; a staged successor, Release 1 live 20 April 2026.
  54. “Starbucks shutting down Odyssey Beta NFT program,” The Block, 16 March 2024 — theblock.co/news/business/2024-03-16-starbucks-odyssey-beta-nft-closure-282934; “Nike-owned NFT wearables startup RTFKT is winding down,” The Block, December 2024 — theblock.co/post/329097/nike-owned-nft-wearables-startup-rtfkt-is-winding-down.
  55. C. Catalini and J. S. Gans, “Some Simple Economics of the Blockchain,” NBER Working Paper 22952, 2016 (revised 2019); Communications of the ACM 63(7), 80–90, 2020 — nber.org/papers/w22952: the cost of verification and the cost of networking.
  56. Commodity Futures Trading Commission, Release 9146-25, “Acting Chairman Pham Announces Launch of Digital Assets Pilot Program for Tokenized Collateral in Derivatives Markets,” 8 December 2025 (Staff Letter 25-39: “CFTC regulations are technology-neutral”) — cftc.gov/PressRoom/PressReleases/9146-25; Release 9130-25, the tokenized collateral and stablecoins initiative, 23 September 2025 — cftc.gov/PressRoom/PressReleases/9130-25.
  57. Digital Asset, “… complete on-chain US Treasury financing” on the Canton Network, 12 August 2025 — canton.network/canton-network-press-releases/digital-asset-complete-on-chain-us-treasury-financing: tokenized Treasuries as collateral, USDC as the cash leg, executed on a Saturday.
  58. J. Light, “The Biggest Change to Stock Trading in Decades Is Coming to Wall Street,” Barron’s, 9 October 2026 — barrons.com/articles/wall-street-tokenized-stock-trading-e808866d (read via MSN syndication): DTCC’s planned launch, the SEC exemption, Nasdaq’s estimate of up to $340 million a year in additional interest from reducing excess collateral, and issuer objections.
  59. Stripe, Sessions 2026 announcements, 29 April 2026 — stripe.com/newsroom/news/sessions-2026: payouts “in 100 countries with fiat, 160 with stablecoins”.
  60. SEC, Order Granting Exemptions to Facilitate Trading of Tokenized NMS Stock, Release No. 34-106402, 17 September 2026 — sec.gov/files/rules/exorders/2026/34-106402.pdf (effective to 17 September 2031; permissioned AMM pools on public permissionless ledgers; same-rights condition; 30-day issuer objection window; size caps); press release 2026-90 — sec.gov/newsroom/press-releases/2026-90-….
  61. Financial Stability Board, “The Financial Stability Implications of Tokenisation,” 22 October 2024 — fsb.org/uploads/P221024-2.pdf: benefits that “have yet to be proven”; obstacles to scale; vulnerabilities in liquidity and maturity mismatch, leverage, asset quality, interconnectedness and operational fragility; no material risk to financial stability “mostly due to its small scale”.
  62. Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act, Public Law 119-27, 139 Stat. 419, 18 July 2025 — govinfo.gov/content/pkg/PLAW-119publ27/html/PLAW-119publ27.htm: permitted issuers only; reserves “on an at least 1 to 1 basis” in cash, deposits, Treasuries maturing within 93 days, overnight repo and government money funds; the monthly composition of reserves published and examined by a registered public accounting firm; no interest or yield to holders; the technical capability to block and freeze; holder priority over the reserves in insolvency. The US Treasury expects the Act to take effect on 18 January 2027 (91 FR 61688, 30 September 2026) — federalregister.gov/documents/2026/09/30/2026-19966/….
  63. Circle, USDC transparency page, read 9 October 2026 — circle.com/transparency: most of the reserve in the Circle Reserve Fund (USDXX), “an SEC-registered 2a-7 government money market fund” managed by BlackRock; the remainder in cash, “mostly among a handful of the world’s largest banks”; holdings disclosed weekly; monthly third-party assurance by a Big Four accounting firm.
  64. SEC, “SEC Finalizes Rules to Reduce Risks in Clearance and Settlement,” press release 2023-29, 15 February 2023 — sec.gov/newsroom/press-releases/2023-29: standard settlement shortened from T+2 to T+1; compliance date 28 May 2024.
  65. M. Drehmann, P. McGuire, T. Shirakami, M. Conway and N. Lovell, “Uncovering FX settlement risk: new measures from the 2025 BIS Triennial Survey,” BIS Quarterly Review, 15 June 2026 — bis.org/publ/qtrpdf/r_qt2606c.htm: the Herstatt closure of 26 June 1974; CLS from 2002; in April 2025, 36% of more than $14 trillion settled daily via PvP and $1.4 trillion settled gross bilaterally, fully exposed.
  66. International Monetary Fund, Global Financial Stability Report, October 2025, Chapter 1 — imf.org/-/media/files/publications/gfsr/2025/october/english/ch1.pdf: “fire sales of stablecoins’ reserve assets—such as bank cash deposits and government securities—could spill over into bank deposits and government bond and repo markets”.
  67. L. W. Cong and Z. He, “Blockchain Disruption and Smart Contracts,” Review of Financial Studies 32(5), 1754–1797, 2019 — nber.org/papers/w24399 (NBER Working Paper 24399).
  68. Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA), 31 May 2023 — eur-lex.europa.eu/eli/reg/2023/1114/oj: the titles on asset-referenced and e-money tokens apply from 30 June 2024, the rest from 30 December 2024; holders of e-money tokens can redeem “at any time and at par value”.
  69. P. Cipollone, “Money in the digital age: digital euro, tokenisation and the role of central banks,” speech, European Central Bank, 6 October 2026 — ecb.europa.eu/press/key/date/2026/html/ecb.sp261006~0da978f159.en.html: the benefits “will only materialise fully if tokenised markets have access to a safe and scalable settlement asset”; Pontes launched on 21 September 2026, with full implementation, including a 24/7 service, expected by mid-2028.
  70. European Central Bank, “ECB commits to distributed ledger technology settlement plans with dual-track strategy,” 1 July 2025 — ecb.europa.eu/press/pr/date/2025/html/ecb.pr250701~f4a98dd9dc.en.html; release of 21 September 2026 on Pontes, “the Eurosystem’s solution for settling tokenised assets in central bank money, which was launched today” — ecb.europa.eu/press/pr/date/2026/html/ecb.pr260921_1~5a011ecbea.en.html.
  71. Bank for International Settlements, “Project Agorá shows how tokenisation can improve wholesale cross-border payments …,” 27 May 2026 — bis.org/media-releases/20260527-project-agora-…; participants: Bank of England, Federal Reserve Bank of New York, Banque de France for the Eurosystem, Bank of Japan, Bank of Korea, Banco de México, Swiss National Bank and more than 40 private firms — bis.org/project/agora.
  72. Uniform Law Commission, 2022 amendments to the Uniform Commercial Code, enactment kit — uniformlaws.org/viewdocument/enactment-kit-76: Article 12 covers “controllable electronic records”, and a qualifying purchaser takes its interest “free from competing property claims”; the ULC’s 2026 list of enactments names Alaska, New York, Ohio, Tennessee and Utah. UK: Property (Digital Assets etc) Act 2025, Royal Assent 2 December 2025 — legislation.gov.uk/ukpga/2025/29/enacted.
  73. Circle, USDC Terms, last updated 12 December 2025 — circle.com/legal/usdc-terms: issued by Circle Internet Financial, LLC under money transmission law, with Circle Internet Financial Europe SAS as a second issuer; backing held “in segregated accounts apart from Circle’s corporate funds”; Circle may “block the transfer of USDC to and from an address on chain”; a holder without a Circle Mint account “is not entitled to redeem USDC with Circle”.
  74. Circle, second-quarter 2026 results, 5 August 2026 — circle.com/pressroom/circle-reports-second-quarter-2026-results: $73.3 billion of USDC in circulation at quarter end; “BNY’s existing role as primary custodian of USDC reserves”.
  75. Circle, release on its licence under MiCA, 1 July 2024 — circle.com/pressroom/circle-is-first-global-stablecoin-issuer-to-comply-with-mica-…: an electronic money institution licence from France’s ACPR; holders of e-money tokens “have the right of redemption against the issuer at any time and at par value”.
  76. Securitize, DS Protocol reference implementation (DSToken) — github.com/securitize-io/dstoken: an ERC-20-compliant token using registry and compliance services so tokens “can only reside in EVM wallets owned by authorized investors”; burning, seizing, locking, trade pausing; a transfer-agent role that can freeze. Read 9 October 2026.
  77. Circle, “Circle Announces USDC Smart Contract for Transfers by BlackRock’s BUIDL Fund Investors,” 11 April 2024 — circle.com/pressroom/circle-announces-usdc-smart-contract-for-transfers-by-blackrocks-buidl-….
  78. Galaxy Digital, Form 8-K Exhibit 99.1, launch of tokenized GLXY shares with Superstate, 3 September 2025 — sec.gov/Archives/edgar/data/0001859392/000185939225000052/….
  79. Superstate, “Opening Bell” issuer documentation, read 9 October 2026 — docs.superstate.com/issuers/opening-bell: digital transfer agent; allowlisted addresses; freeze, burn and reissue.
  80. Gesetz über elektronische Wertpapiere (eWpG), in force 10 June 2021 — gesetze-im-internet.de/ewpg/BJNR142310021.html: securities issued by entry in an electronic register, including crypto securities registers kept on a tamper-proof, time-sequenced recording system.
  81. SEC Divisions of Corporation Finance, Investment Management, and Trading and Markets, “Statement on Tokenized Securities,” 28 January 2026 — sec.gov/newsroom/speeches-statements/corp-fin-statement-tokenized-securities-012826-…: issuer-sponsored, third-party custodial and third-party synthetic tokenized securities; “The format in which a security is issued or the methods by which holders are recorded does not affect application of the federal securities laws.”
  82. Backed Assets (JE) Limited, Registration Document, 8 May 2025 (approved by the Financial Market Authority Liechtenstein) — mfsa.mt/wp-content/uploads/2025/06/Backed-Assets-JE-Limited-Registration-Document-….pdf: tracker certificates in token form, tokenized under Swiss law, secured on collateral.
  83. Robinhood Markets, Form 10-Q for the quarter ended 30 June 2026 — sec.gov/Archives/edgar/data/0001783879/000178387926000114/hood-20260630.htm: Stock Tokens as “tokenised debt securities issued by Robinhood Assets (Jersey) Limited” without legal or beneficial rights in the underlying; Robinhood Chain as “a permissionless, Ethereum-compatible Layer 2 blockchain built for financial services and tokenized real-world assets”; OpenAI’s statement that the promotion’s tokens “are not OpenAI equity”.
  84. Kraken, xStocks FAQ, read 9 October 2026 — support.kraken.com/articles/xstocks-faq: custodian Alpaca Securities with InCore Bank; reinvested dividends; chains; excluded jurisdictions.
  85. Broadridge, “Broadridge and Payward Empower xStocks Holders …,” 5 August 2026 — broadridge.com/press-release/2026/broadridge-and-payward-empower-xstocks-holders.
  86. European Investment Bank, “EIB issues its first ever digital bond on a public blockchain,” April 2021 — eib.org/en/press/all/2021-141-…: €100 million on Ethereum, the underwriting settled with central bank digital currency from the Banque de France; Project Venus, 29 November 2022 — eib.org/en/press/all/2022-448-….
  87. Franklin Templeton, Franklin OnChain U.S. Government Money Fund on Polygon, 26 April 2023 (release as reprinted by Polygon) — polygon.technology/blog/franklin-templeton-money-market-fund-launches-on-polygon-blockchain: “the first U.S.-registered mutual fund to use a public blockchain to process transactions and record share ownership”.
  88. BNY Mellon, launch of its digital asset custody platform, 11 October 2022 — bny.com/…/bny-mellon-launches-new-digital-asset-custody-platform-130305.html.
  89. Circle, final approval from the OCC to establish First National Digital Currency Bank, N.A. (Circle National Trust), 10 July 2026 — circle.com/pressroom/circle-receives-final-occ-approval-to-establish-national-trust-bank: “Upon opening, Circle National Trust will offer fiduciary digital asset custody services for Circle and its affiliates”.
  90. L2BEAT, Stages framework, read 9 October 2026 — l2beat.com/stages: “Stage 0 represents a project who is fully controlled by few entities, Stage 2 represents a project that is fully controlled by code, and Stage 1 as something in between”; project pages list Arbitrum One, OP Mainnet and Base at Stage 1, with Arbitrum One’s challenge period “currently set to 6d 8h” — l2beat.com/scaling/projects/arbitrum.
  91. Chainlink, SmartData feeds documentation (Proof of Reserve, NAVLink and SmartAUM feeds), read 9 October 2026 — docs.chain.link/data-feeds/smartdata: “essential real-world data such as reserves, Net Asset Value (NAV), and Assets Under Management (AUM) data” delivered onchain for tokenized assets.
  92. Circle, mainnet launch of the Cross-Chain Transfer Protocol, 26 April 2023 — circle.com/pressroom/circle-delivers-usdc-interoperability-across-ecosystems-…: USDC is burned on the source chain and minted on the destination against a signed attestation from Circle.
  93. B. Choe, “A New Framework for Tokenized Assets: Distributed & Represented,” rwa.xyz, 21 November 2025 — rwa.xyz/blog/a-new-framework-for-tokenized-assets-distributed-and-represented.
  94. National Agency of Public Registry of Georgia, blockchain verification service (in Georgian), read 9 October 2026 — naprweb.reestri.gov.ge/bchain: hashes of registry extracts are recorded in Bitcoin transactions (OP_RETURN) so that any extract can be checked later.
  95. Walmart, release on blockchain traceability for leafy greens, 24 September 2018 — corporate.walmart.com/news/2018/09/24/…: suppliers required to trace leafy greens on the IBM Food Trust network from 2019; Linux Foundation Decentralized Trust case study — lfdecentralizedtrust.org/case-studies/walmart-case-study: tracing mangoes went “from 7 days to… 2.2 seconds”.
  96. Regulation (EU) 2022/858 on a pilot regime for market infrastructures based on distributed ledger technology, applicable from 23 March 2023; ESMA, “ESMA suggests amendments to the DLT Pilot Regime to make it permanent,” 25 June 2025 — esma.europa.eu/press-news/esma-news/esma-suggests-amendments-dlt-pilot-regime-make-it-permanent.
  97. ethereum.org, “Proof-of-stake (PoS),” read 9 October 2026 — ethereum.org/en/developers/docs/consensus-mechanisms/pos: “slots (12 seconds) and epochs (32 slots)”; a block is finalized once two epoch checkpoints are linked by a supermajority of staked ether, which works out to about 12.8 minutes.
  98. Canton Network, “How Canton Network delivers institutional-grade privacy,” 14 August 2025 — canton.network/blog/how-canton-network-delivers-institutional-grade-privacy.
  99. Robinhood, “Robinhood Launches Stock Tokens, Reveals Layer 2 Blockchain …,” 30 June 2025 — robinhood.com/us/en/newsroom/robinhood-launches-stock-tokens-….
  100. DTCC, “DTCC Advances Development of New Tokenization Service, Convenes 50+ Firms,” 4 May 2026 — dtcc.com/news/2026/may/04/dtcc-advances-development-of-new-tokenization-service; Stellar connection planned for the first half of 2027 — dtcc.com/news/2026/may/27/….
  101. SEC Form D, BlackRock USD Institutional Digital Liquidity Fund Ltd. (British Virgin Islands), filed 18 March 2024 — sec.gov/Archives/edgar/data/2013810/000201439024000001/….
  102. J.P. Morgan, Kinexys, Chainlink and Ondo cross-chain DvP test, May 2025 — jpmorgan.com/payments/newsroom/kinexys-chainlink-ondo-tokenized-asset-test.
  103. Stripe, completion of its acquisition of Bridge, 4 February 2025 — stripe.com/newsroom/news/stripe-completes-bridge-acquisition.
  104. P. Collison and J. Collison, Stripe annual letter for 2025, February 2026 — stripe.com/annual-updates/2025: Privy “powers more than 110 million programmable wallets”; “Today’s blockchains have been designed for trading and DeFi”; a memecoin trading frenzy “delayed payouts for one Bridge user by over 12 hours”.
  105. DTCC, “Project Ion” — dtcc.com/news/2022/july/27/project-ion: a DLT settlement platform on R3 Corda run “in a parallel production environment” with DTC’s classic systems “remaining the authoritative record”; over 100,000 bilateral equity transactions a day.
  106. M. Fowler, “Strangler Fig,” martinfowler.com, 22 August 2024 — martinfowler.com/bliki/StranglerFigApplication.html.
  107. Chainalysis, “2025 Crypto Theft Reaches $3.4 Billion,” 18 December 2025 — chainalysis.com/blog/crypto-hacking-stolen-funds-2026/: over $3.4 billion stolen from January to early December 2025, $1.5 billion of it from Bybit; centralized services’ losses from attacks on “private key infrastructure and signing processes”.
  108. M. Rivas, R. Santos and J. Sanz, “In-depth Technical Analysis of the Bybit Hack,” NCC Group, 10 March 2025 — nccgroup.com/research/in-depth-technical-analysis-of-the-bybit-hack/: malicious JavaScript in the Safe{Wallet} interface, injected through a compromised developer machine, “altering what Bybit’s signers saw”.
  109. C. Du, R. Sonawane and C. Watsky, “In the Shadow of Bank Runs: Lessons from the Silicon Valley Bank Failure and Its Impact on Stablecoins,” FEDS Notes, Board of Governors of the Federal Reserve System, 17 December 2025 — federalreserve.gov/econres/notes/feds-notes/in-the-shadow-of-bank-run-…: $3.3 billion of USDC reserves (about 8%) unavailable; a trough of 86 cents; contagion to Dai, USDP and GUSD through peg stability modules.
  110. FBI, Public Service Announcement I-022625-PSA, “North Korea Responsible for $1.5 Billion Bybit Hack,” 26 February 2025 — ic3.gov/PSA/2025/PSA250226.
  111. Ronin Network, “Community Alert: Ronin Validators Compromised,” 29 March 2022 (archived copy) — web.archive.org/…/roninblockchain.substack.com/p/community-alert-ronin-validators: “173,600 Ethereum and 25.5M USDC drained”; “five out of the nine validator signatures are needed”; discovered six days later, after a user could not withdraw. US Treasury, 6 May 2022 — home.treasury.gov/news/press-releases/jy0768: a heist “worth almost $620 million”.
  112. Wormhole, “Wormhole Incident Report — 02/02/22,” 4 February 2022 — wormholecrypto.medium.com/wormhole-incident-report-02-02-22-ad9b8f21eec6: a “signature verification vulnerability” used “to mint 120k Wormhole-wrapped Ether on Solana”; “Jump Crypto has recapitalized the contract”.
  113. US Attorney’s Office, Southern District of New York, “Samuel Bankman-Fried Sentenced To 25 Years In Prison,” 28 March 2024 — justice.gov/usao-sdny/pr/samuel-bankman-fried-sentenced-25-years-prison: “stealing over $8 billion of his customers’ money”; customer deposits channelled from FTX to Alameda.
  114. SEC, press release 2023-13 on Avraham Eisenberg and Mango Markets, 20 January 2023 — sec.gov/newsroom/press-releases/2023-13; United States v. Eisenberg, No. 23-cr-10 (S.D.N.Y.), opinion of 23 May 2025 — storage.courtlistener.com/recap/gov.uscourts.nysd.592130/…220.0.pdf: Eisenberg “borrowed and then quickly withdrew over $100 million in cryptocurrency from Mango Markets”; the convictions were vacated on venue and falsity grounds, and the government appealed in July 2025.
  115. Solana outage reports, 2021–2024 — solana.com/news/9-14-network-outage-initial-overview (“offline for 17 hours”, September 2021) to solana.com/news/02-06-24-solana-mainnet-beta-outage-report (about five hours, February 2024); six reports in all, each ended by a coordinated validator restart.
  116. W. Wells, “Certificates and Computers: The Remaking of Wall Street, 1967 to 1971,” Business History Review 74(2), 193–235, 2000 — doi.org/10.2307/3116692: volume from five to twelve million shares a day (1965–1968); nearly a sixth of brokerage firms out of business by the end of 1970.
  117. Rep. K. Castor, remarks on DTCC’s 50th anniversary, Congressional Record, 11 May 2023, reproduced by DTCC — dtcc.com/dtcc-connection/articles/2023/may/15/congresswoman-kathy-castor-….
  118. DTCC, “DTCC Celebrates 50th Anniversary,” 9 May 2023 — dtcc.com/news/2023/may/09/dtcc-celebrates-50th-anniversary: “Born out of the paperwork crisis”; the creation of “a book entry system for the U.S. securities marketplace”; $114 trillion in custody in 2025.
  119. D. M. Bernhofen, Z. El-Sahli and R. Kneller, “Estimating the effects of the container revolution on world trade,” Journal of International Economics 98, 36–50, 2016 — doi.org/10.1016/j.jinteco.2015.09.001. Figures and quotations from the working-paper version, GEP Research Paper 2013/02 — nottingham.ac.uk/gep/documents/papers/2013/2013-02.pdf: a cumulative effect of about 700% over 20 years on trade among developed economies; Table 1 (from McKinsey, 1972) on dock productivity, port concentration and transit capital; London and Liverpool versus Tilbury and Felixstowe.
  120. M. Levinson, The Box: How the Shipping Container Made the World Smaller and the World Economy Bigger, Princeton University Press, 2006 (2nd ed. 2016) — press.princeton.edu/books/paperback/9780691170817/the-box.
  121. M. L. Katz and C. Shapiro, “Network Externalities, Competition, and Compatibility,” American Economic Review 75(3), 424–440, 1985 — jstor.org/stable/1814809.
  122. J. Farrell and G. Saloner, “Standardization, Compatibility, and Innovation,” RAND Journal of Economics 16(1), 70–83, 1985 — ideas.repec.org/p/mit/worpap/345.html (working paper abstract): whether standardization benefits can “trap” an industry in an inferior standard; excess inertia under incomplete information.
  123. L2BEAT, ZKsync Era project page, read 9 October 2026 — l2beat.com/scaling/projects/zksync-era: execution delay increased “from 3 hours to 1 day (following governance proposal ZIP-17)”.
  124. S. Gold, “Shipping an L1 zkEVM #1: Realtime Proving,” Ethereum Foundation blog, 10 July 2025 — blog.ethereum.org/2025/07/10/realtime-proving: latency ≤ 10 s for P99 of mainnet blocks, on-prem capital cost ≤ $100,000, power ≤ 10 kW, fully open source, ≥ 128-bit security, proofs ≤ 300 KiB without trusted setups; validators that verify proofs rather than re-execute.
  125. G. Kadianakis, “Shipping an L1 zkEVM #2: The Security Foundations,” Ethereum Foundation blog, 18 December 2025 — blog.ethereum.org/2025/12/18/zkevm-security-foundations: latency from 16 minutes to 16 seconds, costs down 45×, 99% of blocks proven in under 10 seconds; 128-bit provable security targeted by the end of 2026.
  126. J. Guibas, “Mantle Upgrades to OP Succinct on Mainnet …,” Succinct, 16 September 2025 — blog.succinct.xyz/mantle/: “one-hour finality and six-hour withdrawals” against “seven-day exits” (the prover’s own account).
  127. J. Guibas, “Succinct Inks One-Year Exclusive with Tandem by Offchain Labs, Unlocking ZK for the Arbitrum ecosystem,” Succinct, 26 August 2025 — blog.succinct.xyz/arbitrum/.
  128. Deutsche Bank, “DAMA 2 litepaper: institutional blueprint for asset tokenisation and servicing on Ethereum Layer 2,” 18 June 2025 — db.com/news/detail/20250618-dama-2-litepaper-…: a “privacy-enabled Layer 2 smart contract environment, built by Memento Blockchain with zkSync’s ZK Chain technology”.
  129. ZKsync, “Introducing ZKsync Prividium: Private Blockchain Infra Built for Institutions,” 27 May 2025 — zksync.io/blog/introducing-zksync-prividium-private-blockchain-infra: “The first in-production deployment of Prividium is Memento ZK Chain, a compliance-focused chain built on ZKsync in collaboration with Deutsche Bank”; the Cari Network of US regional banks, including Huntington, First Horizon, M&T, KeyCorp and Old National, building tokenized deposits on Prividium, 17 March 2026 — zksync.io/blog/cari-selects-zksyncs-prividium (vendor announcements).
  130. A. Stapelberg, “Opening up ‘Zero-Knowledge Proof’ technology to promote privacy in age assurance,” Google, 3 July 2025 — blog.google/technology/safety-security/opening-up-zero-knowledge-proof-technology-…; code: github.com/google/longfellow-zk.
  131. V. Buterin, “Having a safe CEX: proof of solvency and beyond,” 19 November 2022 — vitalik.eth.limo/general/2022/11/19/proof_of_solvency.html.
  132. Across Protocol, Universal_SpokePool contract, read 9 October 2026 — github.com/across-protocol/contracts/…/Universal_SpokePool.sol: “Spoke pool capable of executing calldata stored in L1 state via storage proof + Helios light client”; Succinct, SP1 Helios — github.com/succinctlabs/sp1-helios: “verifies the consensus of a source chain in the execution environment of a destination chain”.