> ## Content Index > Fetch the complete content index at: https://stablecoininsider.org/llms.txt > Use this file to discover other available public pages before exploring further. # Atomic DvP Settlement for Tokenized Assets: Public-Chain Options Compared (2026) - URL: https://stablecoininsider.org/atomic-dvp-settlement-tokenized-assets/ - Published: 2026-10-14T06:01:00.000Z - Updated: 2026-10-14T06:31:01.000Z - Description: Compare atomic DvP settlement options for tokenized assets on public and hybrid rails: Solana DvP, single-ledger smart contracts (Santander/EIB), HTLC cross-chain, and Canton, focused on the stablecoin cash leg. - Author: Alexandra - Tags: Fintech, Stablecoins Tokenized bonds, fund shares, and commercial paper only clear institutional desks when the asset and the cash change hands together. That condition is delivery versus payment, and when both legs move in one indivisible step it is **atomic DvP settlement**. Stablecoin Insider compares four live design families for atomic DvP settlement of tokenized assets: the open Solana DvP program, single-ledger smart-contract DvP as used in the Santander and EIB digital bonds on public Ethereum, hashed-timelock cross-chain swaps as studied in Project Stella phase 2, and permissioned or hybrid ledgers such as Canton. The cash-leg angle throughout is stablecoins (especially USDC), with notes on tokenized deposits and wholesale CBDC where the sources discuss them. For why Solana's open standard matters and what J.P. Morgan did and did not contribute, start with Stablecoin Insider's [report on the Solana DvP atomic settlement standard](https://stablecoininsider.org/solana-dvp-atomic-settlement-standard/). For the USDC settlement walkthrough on that program, see [how to settle a tokenized asset for USDC with the Solana DvP program](https://stablecoininsider.org/how-to-settle-tokenized-asset-usdc-solana-dvp/). ### Key Takeaways - Atomic DvP means both legs settle or neither does, removing principal risk between the parties. - Single-ledger designs (Solana DvP program, Santander/EIB-style contracts) get atomicity from one transaction. - HTLC cross-chain DvP works without a ledger link but can reintroduce principal risk if a leg times out wrong. - Hybrid ledgers such as Canton lock allocations, then execute all legs in one Daml transaction. - For a stablecoin cash leg on a public chain today, Solana's escrow program is the most operationally ready option. 🧭 What this piece is: an evergreen, sourced comparison of atomic DvP settlement options for tokenized assets, written against Solana Foundation docs and the solana-foundation/dvp repository, the Federal Reserve Board's April 2024 FEDS Note on the Santander and EIB Ethereum bonds, the ECB/BoJ Project Stella phase 2 report, BIS work on the future of securities settlement, and Canton Network token-standard docs. Stablecoin Insider did not execute a live trade and does not recommend any asset. [Solana Publishes an Open Settlement Standard That Settles in USDCStablecoin Insider's report on the Solana DvP release: what it does, the J.P. Morgan role, and why the payment leg is a stablecoin.![](https://stablecoininsider.org/favicon.ico)Stablecoin Insider](https://stablecoininsider.org/solana-dvp-atomic-settlement-standard/) ## What atomic DvP settlement means According to the [ECB and Bank of Japan Project Stella phase 2 report](https://www.ecb.europa.eu/pub/pdf/other/stella%5Fproject%5Freport%5Fmarch%5F2018.pdf) (March 2018), delivery versus payment links two obligations so that the transfer of one asset occurs if and only if the transfer of the other also occurs. The outcome is that both parties exchange the assets, or no transfer takes place. In computer science that property is called atomicity. The [Bank for International Settlements overview of the future of securities settlement](https://www.bis.org/publications/future-securities-settlement) draws the same line: when securities and cash sit on one ledger, a single-ledger transfer can achieve DvP model 1 (gross, simultaneous settlement) through atomic settlement. Across separate ledgers the design space widens, and so do the failure modes. Here is the problem for tokenized assets: the cash leg is often a different instrument from the security, and sometimes on a different chain. Stablecoins such as USDC are already the practical cash token on several public networks. Tokenized deposits and wholesale CBDC appear in pilots. The settlement design has to say which cash instrument it accepts, who can sign settlement, and what happens when a leg fails. ## Option 1: Solana DvP program (public-chain escrow) The [Solana DvP program](https://solana.com/docs/defi/dvp-program), maintained by the Solana Foundation and audited by Cantina, is the open standard for delivery versus payment on Solana. Two parties agree on a trade off-ledger. Each funds its leg into a program-owned escrow with an ordinary TransferChecked. A named settlement authority settles both legs in one SettleDvp transaction, so either both move or neither does. Program ID on mainnet-beta and devnet: **dvp34bdbcEm4f4FCUjGV4mDAkDshaQR4LkK8fdcsyZq**. Source, IDL, and clients live in [github.com/solana-foundation/dvp](https://github.com/solana-foundation/dvp). Creating a record is permissionless, so parties must verify stored terms before funding. Until settlement, either party can reclaim its own leg or reject the trade. Proceeds destinations are fixed at creation, so the settlement authority cannot redirect money. Cash-leg fit: USDC on Solana is a legacy SPL Token mint (**EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v**), so the cash leg uses the Tokenkeg program. The program accepts mixed SPL Token and Token-2022 legs. It rejects TransferFee, InterestBearing, ScaledUiAmount, and NonTransferable extensions. For the full CreateDvp through SettleDvp path with USDC, see Stablecoin Insider's [Solana DvP program USDC settlement guide](https://stablecoininsider.org/how-to-settle-tokenized-asset-usdc-solana-dvp/). Finality: the docs tell operators to treat a trade as settled when SettleDvp reaches finalized commitment. Legal finality still depends on the parties' agreements and the regimes that apply. ## Option 2: Single-ledger smart-contract DvP (Santander and EIB bonds) A Federal Reserve Board [FEDS Note published 3 April 2024](https://www.federalreserve.gov/econres/notes/feds-notes/tokenized-assets-on-public-blockchains-how-transparent-is-the-blockchain-20240403.html) studied two tokenized bonds on public Ethereum: Santander's September 2019 one-year, $20 million bond, and the European Investment Bank's April 2021 100 million euro two-year digital bond. Both used an ERC-20 bond token and a cash token on the same chain. On the Santander bond, after the investor wired cash to the custodian off-chain, cash tokens and bond tokens were minted on-chain. A function in the cash-token smart contract then executed delivery versus payment in a single transaction: bond tokens moved to the investor wallet and cash tokens moved to the issuer wallet. Delivery was contingent on payment on-chain. Santander's own [press release on the end-to-end blockchain bond](https://www.santander.com/en/press-room/press-releases/santander-launches-the-first-end-to-end-blockchain-bond) describes the issuance roles (issuer, tokenization agent, custodian, dealer). The EIB bond, arranged with Société Générale Forge as registrar, fiscal agent, and settlement agent, used a permissioned CAST framework with Issuer, Registrar, and Settler roles. According to [SG-Forge's announcement](https://www.sgforge.com/european-investment-bank-eib-issues-its-first-ever-digital-bond-on-a-public-blockchain/) and the Fed note, settlement confirmation was a Settler role function, and KYC/AML controls sat in front of smart-contract approvals. Traditional payment rails still moved fiat between participants; the on-chain cash token modeled settlement rather than replacing every off-chain wire. What this family shows: atomicity comes from one EVM transaction that moves both tokens. Settlement authority is whoever holds the privileged Settler (or cash-token) role. Cross-chain support is none inside the same contract. Failure and unwind depend on how the contract is written and who can call reclaim or cancel functions. The New York Fed's [staff report on zero settlement risk token systems](https://www.newyorkfed.org/medialibrary/media/research/staff%5Freports/sr1120.pdf) argues that properly constrained token programs can go beyond classic DvP and guarantee that any on-system trade settles when the program is submitted. ## Option 3: HTLC cross-chain atomic swaps Project Stella phase 2 tested DvP when securities and cash sit on separate ledgers. Besides single-ledger DvP, the [Stella phase 2 report](https://www.ecb.europa.eu/pub/pdf/other/stella%5Fproject%5Freport%5Fmarch%5F2018.pdf) describes cross-ledger DvP without a connection between ledgers, using cross-chain atomic swaps built on digital signatures and hashed timelock contracts (HTLCs). Assets are locked on each ledger against a shared hash; release uses the preimage; timeouts return assets if settlement fails. The [Bank of Japan summary of Stella phase 2](https://www.boj.or.jp/en/paym/fintech/data/rel180327a2.pdf) stresses that this cross-ledger path without an institutional link did not exist in classical FMI design. Prototypes ran on Corda, Elements, and Fabric. The catch, which the [BIS future-of-settlement note](https://www.bis.org/publications/future-securities-settlement) also flags: Stella found that cross-ledger DvP can expose participants to principal risk if one leg delivers and the other does not, and that an arbitrator may be needed to resolve disputes. Single-ledger atomic settlement, by contrast, leaves replacement-cost risk but not principal risk when validation fails. Cash-leg fit today: HTLC-style bridges and swaps are common for moving crypto-assets across chains, but institutional tokenized-bond DvP rarely settles production cash that way. If the cash token is USDC on one chain and the security is on another, operators more often bridge first (see Stablecoin Insider's [Ethereum to Solana USDC bridge guide](https://stablecoininsider.org/how-to-bridge-usdc-from-ethereum-to-solana-step-by-step-2026/) and [cross-chain bridges comparison](https://stablecoininsider.org/best-crypto-cross-chain-bridges-in-2026/)), then settle both legs on one ledger, rather than running a raw HTLC DvP against the security. ## Option 4: Permissioned and hybrid ledgers (Canton) Permissioned and public-permissioned networks keep validator KYC, privacy, and deterministic finality closer to bank FMI expectations. The competitor playbook at [Asset Tokenization on public vs private blockchains for RWAs](https://www.assettokenization.com/resources/public-vs-private-blockchains-for-real-world-assets) frames the choice among public, private, and hybrid rails for capital treatment and liquidity. Stablecoin Insider's focus here is narrower: how atomic DvP itself is implemented. On Canton Network, the [CIP-0056 token standard](https://docs.canton.network/overview/reference/cip-0056) defines Allocations for multi-leg DvP. Each sender locks holdings into an Allocation for a settlement leg. Once every required allocation exists, the settlement executor submits one Daml transaction that executes all transfers, so either every leg settles or none does. Allocations expire at a deadline, unlocking holdings if settlement never runs. When cash and securities live on different synchronizers, Canton's [cross-synchronizer DvP example](https://docs.canton.network/overview/reference/cross-sync-dvp-example) first reassigns both contracts to a shared settlement synchronizer, then settles atomically there. Reassignment itself is not atomic; value only changes in the final settlement transaction. In August 2025, Digital Asset and partners [announced an on-chain U.S. Treasury financing against USDC on Canton](https://www.canton.network/canton-network-press-releases/digital-asset-complete-on-chain-us-treasury-financing), settling tokenized Treasuries for USDC outside traditional market hours. Cash-leg fit: Canton can settle against USDC, Canton Coin, and other registry instruments that implement the token standard. Settlement authority is the executor party named in the settlement specification, jointly controlling allocations with senders and receivers. Cross-synchronizer support is first-class; true public-chain HTLC-style openness is not the point. ## Stablecoin Insider's atomic DvP comparison table The table below is Stablecoin Insider's own synthesis of the sources cited in this article. It compares finality, who holds settlement authority, cash-leg type, cross-chain support, and the failure or unwind path. It is not a vendor ranking and does not score legal finality under any jurisdiction. | Dimension | Solana DvP program | Single-ledger smart contract (Santander/EIB style) | HTLC cross-chain | Canton / hybrid | | -------------------- | ------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------- | ----------------------------------------------------------------------- | ----------------------------------------------------------------------------------------- | | Finality model | Atomic inside one Solana transaction; treat as settled at finalized commitment | Atomic inside one EVM transaction when both tokens move together | Atomic only if both preimage releases succeed before timeouts | Atomic inside one Daml settlement transaction after allocations | | Settlement authority | Third address named at CreateDvp; cannot redirect proceeds | Privileged Settler or cash-token function caller | No central authority; each party reveals or times out | Executor party on the settlement specification | | Cash leg type | Any supported SPL/Token-2022 mint; USDC as legacy SPL Token is the common case | On-chain cash token; fiat often still wired off-chain | Whatever asset sits on each ledger; timeouts return locks | USDC, Canton Coin, other CIP-0056 instruments; tokenized deposits possible via registries | | Cross-chain support | Both legs must be on Solana; bridge USDC first if needed | Both legs on the same EVM chain | Designed for separate ledgers with no institutional link | Cross-synchronizer via reassignment, then atomic settle | | Failure / unwind | Reclaim own leg; Reject or Cancel refunds both; Recover after close | Depends on contract reclaim/cancel roles; Fed note shows early redemption paths on-chain | Timeout unlocks; Stella warns principal risk if one leg completes alone | Allocation deadlines unlock; executor never runs incomplete set of legs | Sources informing the rows: [Solana DvP program docs](https://solana.com/docs/defi/dvp-program), [Fed FEDS Note on Santander and EIB bonds](https://www.federalreserve.gov/econres/notes/feds-notes/tokenized-assets-on-public-blockchains-how-transparent-is-the-blockchain-20240403.html), [Stella phase 2](https://www.ecb.europa.eu/pub/pdf/other/stella%5Fproject%5Freport%5Fmarch%5F2018.pdf), [BIS on securities settlement](https://www.bis.org/publications/future-securities-settlement), [Canton CIP-0056](https://docs.canton.network/overview/reference/cip-0056), and [Canton cross-synchronizer DvP](https://docs.canton.network/overview/reference/cross-sync-dvp-example). 💡 Stablecoin Insider's take: if your cash leg is already a public-chain stablecoin and both instruments can live on one public chain, prefer a single-ledger escrow program with fixed proceeds (Solana DvP today) over an HTLC that reopens principal risk. Use Canton-style hybrid rails when validator KYC, privacy, and synchronizer governance matter more than open liquidity. Treat single-deal EVM bond contracts as templates to learn from, not as a reusable product unless you re-audit and own the Settler keys. ## The cash leg: USDC, tokenized deposits, and wholesale CBDC Atomic DvP only works if the cash instrument is on the same settlement design as the security, or if a carefully engineered cross-ledger protocol connects them. Three cash forms show up in the sources: - **Public stablecoins (USDC).** Already issued on Solana, Ethereum, and other chains (see [Circle's USDC contract addresses](https://developers.circle.com/stablecoins/usdc-contract-addresses)). They are the fastest path to a programmable cash leg on public rails. Freeze and issuer risk remain. - **On-chain cash tokens backed by off-chain fiat.** The Santander and EIB cases used ERC-20 cash tokens while wires still moved fiat to custodians. Atomicity covered the tokens, not necessarily the bank wire. - **Tokenized deposits and wholesale CBDC.** Stella, BIS, and later FMI pilots treat central-bank or commercial-bank money tokens as the end-state cash leg for regulated securities. Those legs usually sit on permissioned or hybrid ledgers rather than open public chains. For how much stablecoin liquidity is available to serve cash legs in 2026, read Stablecoin Insider's [Q3 2026 stablecoin report](https://stablecoininsider.org/q3-2026-stablecoin-report-main-insights/). If the asset is on Solana and the USDC is still on Ethereum, settle only after a bridge: [Circle Bridge Kit](https://stablecoininsider.org/how-to-transfer-usdc-with-circle-bridge-kit/), [paying Bridge Kit fees on the source chain](https://stablecoininsider.org/how-to-pay-circle-bridge-kit-fees-on-source/), and the [cross-chain aggregators comparison](https://stablecoininsider.org/best-cross-chain-aggregators-for-2026/) cover the routing layer. ## How to choose an atomic DvP design Start with where the cash already lives, then ask who must be able to force settlement and who must be able to walk away. - **Both legs can be Solana tokens, cash is USDC.** Use the Solana DvP program. Verify the record, fund with TransferChecked, settle at finalized. See the [USDC settlement how-to](https://stablecoininsider.org/how-to-settle-tokenized-asset-usdc-solana-dvp/). - **One-off public Ethereum bond with a custom cash token.** A single-ledger smart contract can work, but you own Settler-key risk, audit cost, and off-chain fiat reconciliation, as the Fed note shows for Santander and EIB. - **Security and cash on unconnected ledgers with no shared FMI.** HTLC is the Stella answer on paper; in production, most teams bridge the cash first or use a synchronizer that can reassign both contracts. - **Institutions need privacy, validator KYC, and multi-registry instruments.** Canton allocations plus an executor are the documented pattern, including USDC against tokenized Treasuries. ⚠️ Budget and ops rule: atomicity is cheap only when both legs already share a ledger. Bridging USDC, running HTLC timeouts, or reassigning Canton contracts all add operational steps before the atomic settle. Price those steps before you claim T+0. ## What none of these designs remove - Issuer credit and redemption risk on the cash token or the security token. - Freeze, pause, or permanent-delegate powers that a mint authority can still exercise on escrowed tokens. - Legal settlement finality: network commitment is not the same as finality under a given securities law. - Matching, netting, and CCP risk management: bilateral atomic DvP is not a clearinghouse. - Basel and capital treatment of permissionless rails, which the competitor RWA playbook discusses at length and which sit outside this settlement comparison. ## Conclusion Atomic DvP settlement for tokenized assets is no longer a single pattern. Public-chain escrow programs, single-ledger EVM bond contracts, HTLC cross-chain swaps, and hybrid ledgers such as Canton all claim atomicity, but they disagree on who signs, which cash instruments they accept, and how failures unwind. For teams whose cash leg is a stablecoin on a public chain, the Solana DvP program is the clearest, audited, USDC-ready path Stablecoin Insider has reviewed in 2026. Return to Stablecoin Insider's [Solana DvP atomic settlement standard report](https://stablecoininsider.org/solana-dvp-atomic-settlement-standard/) for the release context, and to the [USDC settlement how-to](https://stablecoininsider.org/how-to-settle-tokenized-asset-usdc-solana-dvp/) for the CreateDvp through SettleDvp steps. For market-size context on the cash side, keep the [Q3 2026 stablecoin report](https://stablecoininsider.org/q3-2026-stablecoin-report-main-insights/) bookmarked. --- [Read the Solana DvP program docs](https://solana.com/docs/defi/dvp-program) New to the Solana standard itself? Start with Stablecoin Insider's news report on the release and the stablecoin cash leg. [Read the Solana DvP standard report ](https://stablecoininsider.org/solana-dvp-atomic-settlement-standard/) [Solana DvP Program USDC Settlement: How to Settle a Tokenized Asset (2026)Stablecoin Insider's step-by-step CreateDvp, fund, SettleDvp, and unwind guide for a USDC cash leg.![](https://stablecoininsider.org/favicon.ico)Stablecoin Insider](https://stablecoininsider.org/how-to-settle-tokenized-asset-usdc-solana-dvp/) [Q3 2026 Stablecoin Report: Main InsightsStablecoin Insider's evergreen data hub on stablecoin market size and corridors for cash-leg context.![](https://stablecoininsider.org/favicon.ico)Stablecoin Insider](https://stablecoininsider.org/q3-2026-stablecoin-report-main-insights/) ## FAQ #### What is atomic DvP settlement? Atomic delivery versus payment means the asset leg and the cash leg both transfer, or neither does, so neither party carries principal risk while the other leg is in flight. Project Stella phase 2 equates that property with computer-science atomicity. #### How does the Solana DvP program achieve atomic settlement? Both escrowed legs move inside one SettleDvp transaction signed by the named settlement authority. Solana transactions either commit fully or not at all, so the asset and the USDC cannot partially settle. #### Did the Santander and EIB bonds settle atomically on Ethereum? The Fed FEDS Note describes Santander's cash-token contract moving bond tokens and cash tokens in a single on-chain transaction. The EIB bond used role-gated Settler confirmation on Ethereum while fiat still moved on traditional rails. #### Are HTLC cross-chain swaps safe for institutional DvP? Stella showed they can link unconnected ledgers without an institutional bridge, but also that a mistimed unlock can leave principal risk. Many production teams bridge the cash token first, then settle both legs on one ledger. #### How does Canton Network handle atomic DvP? Parties lock holdings into Allocations under CIP-0056\. An executor then runs one Daml transaction that executes every transfer leg. Cross-synchronizer trades reassign contracts to a shared synchronizer before that atomic step. #### Should the cash leg be USDC or a wholesale CBDC? USDC is the practical public-chain cash leg today for open programs such as Solana DvP. Wholesale CBDC and tokenized deposits dominate permissioned FMI pilots. The choice follows where counterparties already hold cash and which supervisors apply. #### Does atomic DvP remove all settlement risk? No. It removes principal risk between the two legs when the design holds. It does not remove issuer risk, mint-authority powers, replacement-cost risk on failed trades, or legal finality questions. --- This content is provided for informational and educational purposes only and does not constitute financial, investment, legal, or tax advice; it is not financial advice, and no material herein should be interpreted as a recommendation, endorsement, or solicitation to buy or sell any asset or token.