Clearing & Settlement

DTCC Tokenization on Canton

DTCC's blockchain pilot with Digital Asset — Canton Network privacy + atomic DvP eliminates fails.

Vendors

DTCC · Digital Asset · Canton Network

Compliance Center

Canton privacy at Transport + atomic DvP eliminates fails at Facilitation

PT2 — DTCC tokenization on Canton · Rails: post-trade · Protocols: Canton Network, Daml · Origin: United States — Federal
CTR (USD 10,000+)TRAVEL-RULE (USD 3,000+)ENHANCED-DUE-DILIGENCE (USD 50,000+)
PT2 — DTCC TOKENIZATION ON CANTONYOU ARE HERE● Trade CapturePOLICY⬣ Canton Privacy …CODE≡ Atomic DvP Sett…CODE● Participant Pos…POLICY● Regulatory Repo…POLICYIntentIdentityDiscoveryNegotiationTransportAuthorizationFacilitationFinalitySTEP 1STEP 2STEP 3STEP 4STEP 5ETHEREUMVisual system: StablecoinAtlas.com · Steps mapped to 8 STP Stages
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L5 APPLICATIONWallet UX, consent, policy engineBank customer channel / issuer app

Step 1 · Trade Capture (Post-Trade Handoff)Policy-EnforcedBlockchain-Native

The trade arriving from the securities rail's execution venue into Canton's post-trade processing.

Cross-rail reference: Stages 1-4 fired on the Securities Trading rail. The executed trade enters Canton Network's post-trade layer via DTCC's submission gateway. L5 lit only — handoff is a recordkeeping event.

⚠ ENHANCED-DUE-DILIGENCE triggered at USD 50,000 — 31 CFR § 1010.312 — Enhanced Due Diligence (United States — Federal)
Counterparty
DTCC submission gateway
Latency
Instant
Finality
N/A — post-trade begins
Vendors
EOA / ERC-4337 · MetaMask / Fireblocks
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L3 EXECUTIONSmart contracts, swap / bridge logicClearing & matching engine
L2 CONSENSUSValidator ordering, block productionRTGS settlement engine
L1 NETWORKP2P, finality, data availabilityMessaging rail (SWIFT / Fedwire)
◆ Enforcement Line — code-enforced below, policy-enforced above

Step 2 · Canton Privacy & Workflow OrchestrationCode-EnforcedBlockchain-Native

A Chinese Wall inside a multi-party transaction — each participant sees only the data they're entitled to, yet the transaction settles atomically across all parties.

Canton's sub-transaction privacy model ensures each participant sees only their slice of the settlement. This is compliance by architecture — data minimization (D15, GDPR alignment) is built into the protocol, not layered on top. Daml smart contracts orchestrate the multi-party workflow. L1+L2+L3 lit — privacy enforcement runs at every layer below the enforcement line. Unlike public blockchains where all data is visible, Canton reveals nothing beyond what each party needs.

Counterparty
Canton Network (Digital Asset)
Latency
<1s · Canton consensus
Finality
Workflow orchestrated · settlement pending
Vendors
Circle CCTP v2 · Ethereum P2P + EIP-4844 · Ethereum PoS Validators · Uniswap v4 · Chainalysis OFAC Oracle
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L3 EXECUTIONSmart contracts, swap / bridge logicClearing & matching engine
L2 CONSENSUSValidator ordering, block productionRTGS settlement engine
◆ Enforcement Line — code-enforced below, policy-enforced above

Step 3 · Atomic DvP SettlementCode-EnforcedBlockchain-Native

The holy grail of post-trade: true atomic DvP where the security and the payment move in the same transaction. No fails, no partial settlements, no Herstatt risk.

Securities and payment settle atomically on Canton — both legs execute in the same transaction or neither does. This eliminates the settlement fail problem entirely. No need for NSCC's fail management, no SEC Rule 204 close-outs, no buy-in notices. L2+L3 lit: consensus and execution enforce atomicity. D9 (prudential) applies — the CCP's role shifts from fail management to atomic settlement coordination. The compliance innovation: replacing process with architecture.

⚠ CTR triggered at USD 10,000 — 31 CFR § 1010.311 — Currency Transaction Report (United States — Federal)
⚠ TRAVEL-RULE triggered at USD 3,000 — 31 CFR § 1010.410(f) — Funds Transfer Recordkeeping (United States — Federal)
Counterparty
Canton atomic DvP engine
Latency
<1s · atomic
Finality
Final · atomic — both legs or neither
Vendors
Circle CCTP v2 · EOA / ERC-4337 · Ethereum PoS Validators · Uniswap v4 · Chainalysis OFAC Oracle
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L5 APPLICATIONWallet UX, consent, policy engineBank customer channel / issuer app
L4 ACCOUNTBalances, addresses, signing keysCore banking ledger / DDA

Step 4 · Participant Position UpdatePolicy-EnforcedBlockchain-Native

The custodian bank updating the client's position — securities credited, cash debited, the settlement is reflected in the books.

Each participant's position updates on their private Canton sub-ledger. Because of Canton's privacy model, each participant sees only their own updated position — not the counterparty's. L4+L5 lit: position updates are policy-enforced at the application layer. Custodians and broker-dealers reconcile against their internal books, but reconciliation is trivial because the atomic settlement is the authoritative record.

Active Compliance Checkpoints
C2 OFAC SDN/SSI list screening — OFAC 50 USC § 1702 (United States — Federal) · GENIUS §6
C7 Notabene IVMS101 or Chainalysis Connect — FATF Rec. 16; 31 CFR 1010.410(f) (United States — Federal) · GENIUS §7, §8
⚠ CTR triggered at USD 10,000 — 31 CFR § 1010.311 — Currency Transaction Report (United States — Federal)
Counterparty
Participant custody/prime broker
Latency
Instant on atomic settlement
Finality
Position updated · books reconciled
Vendors
MetaMask / Fireblocks · EOA / ERC-4337
L5 APPLICATIONL4 ACCOUNTL3 EXECUTIONL2 CONSENSUSL1 NETWORKETHEREUM
L5 APPLICATIONWallet UX, consent, policy engineBank customer channel / issuer app

Step 5 · Regulatory ReportingPolicy-EnforcedBlockchain-Native

Filing the trade report — but because settlement was atomic, there are no fails to report, no amendments to file, no reconciliation breaks to resolve.

Regulatory reporting captures the full lifecycle. Because settlement is atomic and Canton provides privacy, the reporting layer extracts only the data each regulator is entitled to — FINRA gets trade data, the SEC gets position data, tax authorities get PnL. L5 Application lit only. Structural note: Canton's architecture means post-trade reporting is cleaner than traditional DTCC — no fails, no amendments, no reconciliation exceptions. The complexity that drives most post-trade compliance costs simply doesn't exist.

Active Compliance Checkpoints
C11 SAR/CTR filing via BSA E-Filing — 31 CFR § 1010.320 (United States — Federal) · GENIUS §9
Counterparty
FINRA / SEC / tax authorities
Latency
Batch · end of day
Finality
Final · atomic settlement leaves no loose ends
Vendors
EOA / ERC-4337 · MetaMask / Fireblocks

Resolved 5 steps across 1 chain(s). 3 threshold(s) triggered. Frameworks: Bank Secrecy Act, GENIUS Act, OFAC Sanctions Program, FATF Recommendation 16 (Travel Rule), Common Reporting Standard / FATCA.