Learn how cryptocurrency works, from blockchains and wallets to private keys, custody, and secure transactions, with practical security tips. for confident use.
Most people still associate crypto with price charts: when $BTC moves 10% in a day, it becomes the headline. When nothing dramatic happens, the industry tends to disappear from mainstream conversations.
The funny thing is that some of crypto’s biggest developments happen when nobody is paying attention.
Crypto Is Quietly Becoming Infrastructure
Ten years ago, crypto products existed almost entirely within the crypto industry. Today, millions of people interact with blockchain technology without necessarily knowing it.
Stablecoins are being used for international payments, financial institutions are experimenting with tokenized assets, and fintech companies are integrating crypto services directly into their products. For many businesses, blockchain is slowly becoming infrastructure rather than a standalone industry.
The companies benefiting the most from this shift may not even describe themselves as crypto companies in the future.
User Experience Is Finally Winning
For years, crypto products were built primarily for crypto-native users. Setting up wallets, understanding seed phrases, and moving assets across networks became almost a rite of passage.
That approach is changing. The conversation has shifted from “How decentralized is this?” to “Can someone use this without reading a 20-minute tutorial?”
The products that simplify complexity are often the ones that achieve mainstream adoption. Most users don’t care which blockchain powers an application. They care whether it solves a problem quickly and safely.
The Next Wave of Adoption Will Look Different
The next stage of crypto adoption probably won’t look like the previous one. It won’t necessarily be driven by retail investors opening exchange accounts for the first time.
Instead, adoption is increasingly coming from businesses, financial institutions, and consumer applications quietly integrating crypto functionality into products people already use.
The most interesting question in crypto today isn’t whether blockchain technology will survive. It’s how invisible it will become once it succeeds.
Ironically, crypto may finally become mainstream when people stop talking about crypto altogether.
The next generation of exchanges will not win by chasing volume. They will win by rebuilding confidence.
For years, the crypto exchange industry has been measured by one simple metric:
Trading volume.
The bigger the volume, the stronger the exchange.
More users.
More liquidity.
More market share.
But the crypto market has changed.
Today, users are asking a different question:
“Can I trust this platform with my assets?”
This shift may become the most important change in the future of crypto trading.
The Era of “Growth at Any Cost” Is Ending
During the previous crypto cycles, many exchanges focused heavily on rapid expansion.
They competed through:
Aggressive marketing campaigns
Token incentives
Trading competitions
High leverage products
Global user acquisition
Growth was the priority.
But the industry also learned some painful lessons.
When trust disappears, years of growth can disappear overnight.
Users no longer evaluate exchanges only by:
“How many trading pairs do you have?”
or
“How high is your daily volume?”
They ask:
How are customer assets protected?
Is the platform transparent?
Can withdrawals work during extreme market conditions?
Does the company have sustainable operations?
The definition of a successful exchange is changing.
Liquidity Is Important, But Trust Comes First
Liquidity has always been the foundation of trading platforms.
A market without liquidity cannot function.
However, liquidity alone cannot create long-term loyalty.
Imagine two exchanges:
Exchange A offers thousands of trading pairs and massive promotions.
Exchange B provides fewer products but focuses on transparency, security, and reliable execution.
For professional traders and institutions, the second option may become more attractive.
Because capital follows confidence.
The Future Exchange Will Look More Like a Financial Institution
Traditional financial institutions spent decades building trust.
Banks developed:
Compliance systems
Risk management frameworks
Customer protection mechanisms
Operational standards
Crypto exchanges are now moving toward a similar direction.
The future winners will likely be platforms that combine:
1. Strong Technology
Fast execution.
Reliable infrastructure.
Scalable architecture.
2. Security-First Operations
Asset protection.
Risk monitoring.
Advanced security mechanisms.
3. Regulatory Awareness
Clear operational standards.
Transparent processes.
Long-term commitment.
Technology creates possibility.
Trust creates adoption.
The Biggest Opportunity: Making Crypto Feel Normal
The next wave of crypto users will not necessarily be crypto experts.
They will be:
Investors
Businesses
Institutions
Everyday consumers
They don’t want complicated systems.
They want financial products that simply work.
The future of crypto is not about making users understand blockchain.
It is about creating experiences where blockchain works quietly in the background.
Just like people use online banking without understanding banking infrastructure.
AI Will Change How Users Interact With Exchanges
Another major transformation is coming from artificial intelligence.
Today, users still need to manually:
Analyze markets
Set trading parameters
Understand indicators
Manage risk
But AI-powered financial platforms may change this experience.
Imagine a user saying:
“Help me create a balanced crypto portfolio based on my risk preference.”
or:
“Execute this strategy while controlling my downside risk.”
The exchange of the future may become less like a trading terminal and more like a personal financial assistant.
The Next Competition Will Be About User Confidence
The crypto industry has spent years proving that decentralized technology works.
The next challenge is proving that users can confidently use it.
The winners of the next decade will not only be companies that build powerful platforms.
They will be companies that understand one simple truth:
In finance, trust is the ultimate technology.
Final Thoughts
Crypto exchanges are entering a new chapter.
The first generation competed for attention.
The next generation will compete for confidence.
The future belongs to platforms that can combine:
Technology
Security
Compliance
User experience
Transparency
Because the biggest asset in financial markets has never been volume.
It has always been trust.
At SoonTech, we believe the future of digital finance will be built around secure, scalable, and user-focused technology that helps businesses create the next generation of Web3 financial platforms.
Recording artist, DJ and entrepreneur Diplo invested in Copper. Photo via BusinessWire
Seattle’s Copper has landed a high-profile new backer as it looks to accelerate growth of its consumer rewards platform, announcing Tuesday that Grammy-winning artist, DJ and entrepreneur Diplo has invested in the company.
Financial terms of the investment were not disclosed.
“I’m always looking for things that actually make sense for people,” Diplo said in a statement. “Copper’s one of those — you’re already on your phone, you’re already spending money, and this gives something back. That’s real.”
Copper says more than 4 million members use its platform to earn money through mobile games, cash-back offers and purchases.
Copper CEO Eddie Behringer, who previously co-founded Snap! Raise, said the company is building an alternative to consumer apps that monetize users’ attention.
“Most consumer apps are designed to take more from the user — more time, more money, more attention,” Behringer said in a LinkedIn post. “At Copper, we’re building the opposite.”
Founded in 2019, Copper originally launched as a banking app for teenagers. GeekWire covered the startup in 2022 after it raised $29 million in funding to expand into investing products, at a time when the company had nearly 1 million users.
The startup has since evolved into a broader consumer rewards platform. Copper has raised $42 million to date and recently ranked No. 2 among the Pacific Northwest’s fastest-growing companies in Deloitte’s Technology Fast 500 rankings, based on three-year revenue growth.
Diplo, whose real name is Thomas Wesley Pentz, has built a business portfolio that extends beyond music, investing in technology and consumer startups while launching ventures such as Diplo’s Run Club, a series of 5K races paired with music festivals.
He’s a three-time Grammy winner, and has collaborated with artists like Labrinth and Sia as part of the musical group LSD and worked with musician Mark Ronson on Silk City. He’s also the founder of record label Mad Decent.
In 2024, Copper discontinued its banking services following the collapse of fintech infrastructure provider Synapse, forcing the startup to pivot away from its original business. “Despite our prior planning, this event has forced us to close banking accounts much sooner than anticipated,” Behringer wrote at the time.
The company has since rebuilt around its rewards platform, which it says now serves millions of users.
Behringer said that the company’s mission was always about helping families improve their financial lives.
“As household costs rose, we saw an even bigger opportunity to help the person making everyday spending decisions earn more from the things they were already doing—from buying groceries to shopping in-store and spending time on their phone,” Behringer tells GeekWire via email. “Diplo’s investment is meaningful validation of how far that evolution has come.”
Salesforce was built for phone numbers and credit cards. Your users show up as wallet addresses. No wonder support tickets feel like chaos.
I’ve watched enough crypto teams wrestle with their CRM to notice a pattern: everyone eventually hits the same wall. The software works fine for a normal company. Then someone from support pulls up a customer record and it’s just… a name. Maybe an email. Nothing about the three failed swaps, the pending withdrawal, or the fact this person messaged support on Telegram, Discord, and email about the same issue and got three different answers.
ChatGPT Generated Image
That’s not a support problem. That’s a tooling problem.
Traditional CRMs assume a customer looks a certain way, a name, a phone number, a card on file, a predictable path from lead to sale to renewal. Crypto users rarely fit that mold. Someone might interact with your project entirely through a wallet address and a Discord handle, never once giving you anything resembling a “real” identity. Add KYC checks, jurisdiction-specific compliance rules, and a support inbox that spikes tenfold the moment a token price moves, and it becomes obvious why off-the-shelf software buckles.
Where the Old Model Breaks Down
Legacy CRMs are built around a straight line: lead comes in, sales team works it, deal closes, support takes over from there. Crypto companies exchanges, wallets, DeFi platforms, whatever the flavor, don’t get that straight line. What they actually deal with looks more like this:
Users without names. A wallet address is often the only identifier you’ll ever get.
Conversations scattered everywhere. Telegram, Discord, X, email, in-app chat, often all at once, about the same issue.
Compliance that follows the person, not the company. KYC status and AML flags need tracking per user, and rules shift by jurisdiction.
Support volume that has nothing to do with your product. A market crash or a network outage can flood your inbox overnight.
Wildly different customer types. A retail trader, an institutional desk, and a liquidity provider need almost nothing in common from your support team.
Most teams respond by stitching together five separate tools. It sort of works, right up until nobody can see the whole picture anymore.
What Actually Fixes This
A CRM built for crypto stops treating the wallet as an afterthought and puts it front and center. A few things separate the tools that actually help from the ones that just add another tab to check:
Wallet identity as the anchor, not an add-on. Instead of forcing everything through a name field, on-chain activity, holdings, transaction history, staking behavior, sits right in the profile. No hopping between tools to piece together who someone is.
Compliance that runs in the background. KYC and AML status should update automatically as verification happens, visible at a glance, not buried in a spreadsheet someone checks once a week.
One thread, not five. When Telegram, Discord, and email all collapse into a single conversation history per user, agents stop answering the same question three times because nobody told them it had already been asked.
Live transaction context during support. An agent responding to a panicked user mid-crash needs to see recent transactions and pending withdrawals immediately, not five minutes later after checking a block explorer separately.
Segments based on behavior, not guesswork. Trading volume, staking duration, token holdings, these tell you far more about a user than any demographic field ever could.
How Teams Are Actually Handling This
From what I’ve seen, companies tend to land in one of three places:
They bolt customization onto Hub Spot or Salesforce, pulling in wallet data through APIs. Workable, but it needs constant engineering attention to keep from breaking.
They switch to a Web3-native CRM built around wallet identity and on-chain data from day one increasingly the path of least resistance.
They build something in-house, wiring it directly into their own blockchain infrastructure. Total control, but a real maintenance burden long-term.
None of these is objectively right. It comes down to company size, how much regulatory exposure you’re carrying, and how deep the on-chain integration actually needs to go.
A Few Questions Worth Asking Before You Commit
Before signing anything, it’s worth pressure-testing a shortlist against these:
Does it handle wallet-based identity without a workaround?
Will it plug into your KYC provider without a developer sprint?
Does it actually merge Telegram, Discord, and email into one history?
Can it surface live on-chain data inside the customer record?
Can you segment by behavior instead of static fields that don’t apply here?
If more than one answer is “not really,” that tool is going to slow you down eventually, even if it looks fine today.
Why This Actually Matters
Crypto companies win or lose on trust and a CRM, at its core, is a trust tool. When support has full context, compliance runs itself, and community managers can actually see engagement across channels, the whole customer experience gets noticeably better.
The CRM layer is quietly becoming just as important as the wallet infrastructure sitting underneath it. Get it right, and you’re not just running things more smoothly, you’re building the kind of trust that outlasts whatever the market does next.
Lately, I’ve been researching how traditional financial apps handle changing user demand. Across several payment reports and fintech conversations, one consistent pattern kept popping up: nearly 88% of merchants say they receive regular inquiries about digital asset payments, yet only 39% can actually process them.
That gap is massive. Hundreds of thousands of active accounts use their primary payment provider for daily fiat transfers, but millions of dollars end up quietly flowing out to external exchanges the moment users want to touch crypto.
The Infrastructure Trap
The obvious reaction might be: “Why not just build native crypto features in-house?”
But looking closely at the engineering and compliance side reveals why so few teams pull it off.
Adding digital asset capabilities isn’t just about setting up a few APIs.
It requires building multi-chain security, designing vault-grade custody architectures, and spending months navigating strict regulatory frameworks like MiCA.
For a typical Electronic Money Institution (EMI), attempting to build all of this from scratch takes years, costs millions, and steals resources away from the core roadmap.
How Crypto-as-a-Service Bridges the Gap
Looking at how the industry is adapting, the most efficient workaround isn’t building a second company — it’s integration.
Through Crypto-as-a-Service, institutions plug into existing liquidity, custody, and licensing frameworks to roll out white-label crypto features under their own brand.
Here is how three notable players approach this infrastructure model:
WhiteBIT CaaS strikes a clean balance between extensive asset coverage and straightforward integration. By connecting to WhiteBIT’s CaaS infrastructure, institutions can gain access to 340+ digital assets across 80+ networks while offloading the backend VASP licensing and automated KYC/AML checks.
Coinbase CaaS focuses on high-touch institutional execution, deep liquidity, and subcustody tailored for banks and enterprise brokers. Their infrastructure covers everything from USDC settlement rails to Base L2 integration for higher-throughput applications.
BitGo emphasizes federal oversight, multi-signature wallet security, and institutional insurance. Through plug-and-play APIs, fintechs can embed trading, staking, and wallet transfers directly into their app while leveraging BitGo’s licensing posture.
What This Could Mean for a Business
Faster time-to-market: integrating an existing framework could cut deployment timelines from years down to weeks, allowing teams to test new offerings without scaling up engineering headcount.
Simplified compliance overhead: partnering with specialized infrastructure providers might help offload complex licensing, custody management, and AML/KYC obligations to an external entity.
Better capital retention: offering native digital asset functionality could help keep user balances and daily transaction volume within your own ecosystem instead of watching funds flow out to third-party exchanges.
New potential monetization channels: unlocking crypto capabilities opens up potential new revenue streams through trading spreads, custody fees, or integrated yield products.
From what I can see,
the financial platforms that scale fastest over the next few years won’t be the ones trying to build every complex piece of tech in-house. They’ll be the ones that double down on their core user experience and integrate for everything else.
If your customers are already moving funds out to interact with crypto, the real question isn’t whether to follow them — it’s how fast you can bridge that gap without taking on overwhelming operational overhead.
How ISO 20022 is turning old, cryptic bank messages into rich, structured data and why that changes everything
For fifty years, the language banks used to talk to each other was built for speed, not meaning. A cross-border payment traveling through SWIFT looked like a jumble of abbreviated fields, cramped codes, truncated names, unstructured addresses stuffed into a single line.
It worked, barely, in a world of manual reconciliation and paper trails. It does not work in a world of instant payments, real-time fraud screening, and automated compliance.
ChatGPT Generated Image
That’s the gap ISO 20022 was built to close. It isn’t a new payment rail, it’s a global messaging standard that replaces those old, flat “MT” messages with structured, XML-based “MX” messages carrying far richer data. Think of it as swapping a fax machine for a searchable database. The same payment now arrives with clearly labelled fields for remitter, beneficiary, purpose, and reference data that machines, not just humans, can read and act on.
From Coexistence to Cutover
The migration has been years in the making, and 2025–2026 marked its most consequential stretch:
March 2023
SWIFT’s Cross-Border Payments and Reporting Plus (CBPR+) program went live, opening a “coexistence” window where both old MT and new MX messages could travel side by side.
November 22, 2025
Coexistence officially ended. Core payment instruction messages, including the workhorse MT103 and MT202, were retired for cross-border flows. Institutions still sending them now face contingency processing, with SWIFT charging extra fees for that fallback starting January 2026.
November 2026
The next hard deadline. Unstructured postal addresses will be rejected outright; only structured or “hybrid” addresses (town and country coded, with limited free text) will be accepted. SWIFT will also begin phasing in Case Management 2.0 for handling payment exceptions and investigations.
2027–2028
Reporting and statement messages (the MT9xx family), direct debits, and remaining exception-handling flows are expected to complete their move to the camt.* message family, though this phase depends more on bilateral agreement between institutions than on a hard network cutoff.
In other words: the header-grabbing deadline has passed, but the migration is far from finished. Many banks are still leaning on SWIFT’s translation services to convert between formats behind the scenes a workable bridge, but one that quietly strips out the very data richness ISO 20022 was designed to deliver.
Why This Isn’t Just an IT Upgrade
It’s tempting to file ISO 20022 under “back-office plumbing.” That undersells it. The standard touches nearly every function that depends on payment data:
Compliance and AML screening: Structured fields mean sanctions and anti-money-laundering checks can run against clean, unambiguous data instead of guessing at truncated names crammed into a 35-character line. Poor data quality under the new regime doesn’t just look sloppy, it can get a legitimate payment blocked or delayed.
Straight-through processing: Richer data means fewer payments kicked out for manual repair, which has historically been one of the biggest cost centers in correspondent banking.
Customer experience: More remittance detail travels with the payment itself, so recipients see who paid them and why, without a follow-up phone call.
Fraud detection: A unique end-to-end transaction reference (UETR) rides with every payment, making it far easier to trace a transaction across multiple banks in a chain.
Interoperability: Because ISO 20022 is being adopted not just by SWIFT but by real-time payment systems, central bank settlement systems, and card networks around the world, it’s becoming the common language across previously siloed payment rails.
That last point is the strategic one. This isn’t a SWIFT-only project. Fedwire, real-time gross settlement systems, and instant payment schemes across multiple regions have adopted or are adopting the same standard, which means a bank’s ISO 20022 investment pays off well beyond cross-border wires.
Where the Risk Actually Lives
The institutions struggling most right now aren’t the ones behind on the technology, they’re the ones treating this as a one-time compliance checkbox rather than an ongoing data discipline. A few recurring pain points:
Translation dependency. Relying indefinitely on SWIFT’s in-flow conversion between MT and MX avoids short-term pain but now comes with a running bill and a data ceiling.
Address data quality. With the November 2026 structured-address deadline approaching, banks that haven’t audited how addresses actually flow through their systems are likely to see a spike in rejected payments.
Underestimating scope. Payment instructions were only the first wave. Statements, direct debits, and investigations messages are still migrating, each on its own timeline, each requiring separate testing and counterparty coordination.
The Bigger Picture
ISO 20022 won’t make headlines the way a new instant-payments app does. But it’s the foundation underneath nearly every modernization initiative in banking right now from real-time fraud engines to AI-driven compliance tools to seamless cross-border remittances. Systems can only be as smart as the data feeding them, and for the first time, global payments are getting data worth being smart about.
For treasurers, compliance officers, and product teams building on top of payment rails, the practical takeaway is simple: audit your address data now, stop treating translation services as a permanent solution, and start planning for the 2027 - 2028 reporting migration before it becomes the next scramble. The banks that treated November 2025 as a finish line are already behind. The ones treating it as a starting gun are quietly pulling ahead.
One unified margin account. Real performance. Global rails. July 2026 Update.
In a DeFi world still plagued by fragmented liquidity, slow execution, and clunky UX, Hotstuff delivers something refreshingly different: a purpose-built DeFi-native Layer 1 where your capital finally has one home.
No more bridging between perps and spot. No more separate accounts for crypto, equities, or RWAs. Just open one margin account, fund it once, and trade, invest, earn, and bank 24/7 — optimized for non-US retail users who actually move capital.
Why Build a Dedicated L1? (The Technical Foundation)
Most trading apps live on general-purpose chains or rollups that weren’t designed for high-frequency order books, precise margining, or confidential finance. Hotstuff Labs started on Arbitrum Orbit but quickly realized the limitations. They rebuilt as a standalone Layer 1 powered by DracoBFT — their custom consensus protocol from the HotStuff family, heavily tuned for financial workloads.
Performance highlights:
200,000+ TPS
~75ms block time
~150ms finality
What truly sets it apart are the validators as financial service providers. Beyond consensus, they run side-loops for liquidity routing, fiat orchestration, zkTLS proofs, compliance, and last-mile payments. This architecture turns the chain into active financial infrastructure rather than a passive settlement layer.
The result is sub-second, deterministic execution with strong confidentiality (TEE-powered validator execution and encrypted states).
The Unified Experience: Trade • Invest • Earn • Bank
Perpetual Futures — 22+ markets with up to 50x leverage across crypto, US equities, commodities, FX, and indices. All from one collateral pool, 24/7.
Tokenized Spot Markets — 24/7 trading of real 1:1 backed US stocks and ETFs (Tesla, NVIDIA, Meta, S&P 500, etc.) targeting the $147 trillion global equity market. Launched in May 2026 and already a major growth driver.
Yield & Liquidity — Idle capital earns in protocol vaults (e.g., HLV), while supporting on-chain liquidity and liquidation flows.
Neobanking Rails — Instant fiat on/off-ramps across 190+ countries (USD ACH/Fedwire, EUR SEPA, PIX, SPEI, FPS, etc.). Virtual US accounts and FX swaps make it feel like a borderless trading bank.
Recent Product Wins:
WhatsApp login via Privy (no seed phrases).
AI Agents powered by Claude — autonomous trading, rebalancing, and banking directly on your account.
Traction & Momentum (Mid-2026)
Since private mainnet launch in early February 2026, Hotstuff has shipped aggressively:
Crossed $1B+ in trading volume in the first 90 days.
Top 25 DeFi platform globally and top 10 in RWA futures.
Thousands of active traders online around the clock.
The Points Program remains one of the cleanest in the space: hard-capped weekly distributions (currently ~500k points/week to 3,300+ users), no token sales, and purely activity-based. As of July 14, 2026, we are in Week 19, with the program on track to conclude in Q3 ahead of a potential TGE.
FIFA 2026 Volume Cup: The Standout Campaign
Running from June 30 to July 19 (final week right now), this 19-day competition perfectly captures Hotstuff’s gamified approach:
Prize pool: Up to $12,000 USDC (scales with total platform volume, from $4k at $200M to $12k at $600M) + official FIFA merch for 5 lucky winners.
Leaderboard: Based on Effective Volume = Maker (1×) + Taker (2×).
Super Cards & Power Cards: Unlock football-themed multipliers (1.5× to 10×+) by hitting volume tiers. Activate them strategically before big trades. Random Power Cards can deliver up to 25× temporary boosts.
Boosted markets (3–5× points) on RWAs, majors, and equities make farming efficient.
This isn’t just another volume grind — it’s engaging, skill-based, and levels the field for consistent traders.
Who Should Use Hotstuff?
Macro traders who want one account for crypto, equities, commodities, and FX.
RWA enthusiasts seeking 24/7 tokenized stocks with tight spreads and maker rebates.
AI-native users experimenting with autonomous agents.
Volume farmers & builders positioning before points program ends.
Backed by Delphi Ventures, Dialectic, Stake Capital, and DeFi OGs (1inch, Safe, etc.), the project continues to prioritize product velocity and organic growth over hype.
Final Thoughts
Hotstuff isn’t trying to be everything to everyone. It’s laser-focused on becoming the financial OS for global retail traders — fast, capital-efficient, confidential, and actually usable.
While the token isn’t live yet, the signals are strong: own L1, capped points, real revenue-generating activity, and rapid iteration. For those willing to engage early, Week 19 of the points program and the final stretch of the FIFA Volume Cup represent one of the more compelling setups in DeFi right now.
If that’s true, then a natural follow-up question emerges: What should authorization look like when mistakes can’t be taken back?
That’s the question this piece attempts to answer.
An agent can be wrong. The cause varies — stale data, retrieval error, faulty integration, flawed reasoning — and you won’t anticipate each and every failure mode. What matters is not the cause. What matters is that the error survives long enough to reach an irreversible rail, where it stops being a recoverable mistake and becomes a permanent loss.
The pattern I want to describe doesn’t prevent those mistakes. It makes them survivable. Here are two ways the failure happens, on two different rails.
Failure 1: The Right Address on the Wrong Chain
An agent runs USDC payouts to creators, workers, and vendors. It pulls the recipient’s wallet address from its records, selects a chain, signs the transfer, and submits. All standard checks pass: amount is normal, recipient is on the allowlist, address format is valid, transaction simulates cleanly.
Yet the funds end up inaccessible to the recipient.
The agent sent to the right address on the wrong chain.
In many institutional and contract-based setups, a wallet address by itself is not sufficient identity. Exchange deposit addresses, custody contracts, Safe multisigs, and other smart-contract systems are chain-specific. A contract deployed at address X on Ethereum may not exist — or may not be controlled the same way — at X on Base.
The agent validated the address string successfully while still sending funds somewhere the recipient cannot access on that chain.
A similar failure could occur with the wrong asset representation. The recipient expects native USDC on a given network, while the agent sends a bridged variant (USDC.e being the classic example) that their infrastructure doesn’t support.
Either way, the result is a payment that is syntactically correct but operationally wrong.
This is the trap.
The agent treated “address X” (plus some chosen chain) as the recipient’s full identity. In practice, stablecoin payouts often require a richer destination specification: at minimum [address X + chain Y + token Z]. Address validation alone does not guarantee the payment will reach the intended recipient in a usable form.
This risk becomes more pronounced in institutional, custody, and smart-contract-based environments (Safe multisigs, exchange deposit systems, custody platforms, etc.), where the recipient’s identity often extends beyond a wallet address alone.
Basic retail wallet-to-wallet transfers are typically more forgiving, but as agentic payment volume shifts toward professional counterparties, treating an address as sufficient identity becomes increasingly risky.
How existing guardrails evaluated it:
Policy & amount limits — Pass. Focused on who and how much, not destination chain.
Address allowlist — Pass. Validated the wallet address string, not the chain where it is live.
Capability guards — Pass. Confirmed permission to send payouts, nothing about semantic correctness.
Simulation / dry-run — Pass. Checked whether the transaction will succeed, not whether success is what was intended.
Evaluation layer — No flag. The transaction is well-formed and the decision looks reasonable. It checks output shape and internal consistency, not whether the chain (or token) is correct for this recipient.
Audit trail — Logged, but too late. The payment is already irreversible.
Simulation deserves a closer look. It might work perfectly for mechanical failures (e.g., attempting a time-locked withdrawal before unlock, which I’ve seen firsthand in an earlier on-chain experiment). Even sophisticated fork-based or multi-step simulations can catch some semantic issues if they accurately replay external state.
But they have a hard limit: they validate whether a transaction succeeds, not whether success matches the intended outcome. A wrong-chain transfer or bridged token still succeeds on-chain.
Catching “Will this revert?” and “Is this the right thing?” are different problems.
The Missing Axis
Look again at that list of guardrails. Every check is asking a real question.
Policy asks: Is this allowed?
Capability guards ask: Can the agent do this?
Simulation asks: Will this transaction succeed?
Evaluation asks: Is the output well-formed?
Audit trail asks, after the fact: What happened?
None of these guardrails treats reversibility as an explicit authorization input.
In other words: if this is wrong, can we take it back?
That’s the missing axis.
Existing frameworks primarily evaluate permission, policy, and confidence. Some use informal risk tiers or human approval for high-value actions — but reversibility is rarely an explicit, first-class input in the authorization decision itself.
On final-settlement payment rails, that omission is especially costly.
I’ll call authorization that treats reversibility as a first-class input Reversibility-Aware Authorization.
On top of the usual permission, policy, limits, and confidence checks, it asks one more:
And — crucially — are the consequences of being wrong reversible, at acceptable cost and speed?
The same permission checks still apply. The difference is that reversibility becomes part of the decision itself.
That’s the framework. The behavior that implements it is Progressive Commitment.
Figure 1: Reversibility-Aware Authorization in practice. Progressive Commitment replaces one large irreversible commitment with a sequence of smaller, cheaper, low-stakes steps — each generating evidence that raises confidence before the full, irreversible action.
Progressive Commitment: Operationalizing Caution
If you can’t undo an action, don’t commit to it all at once.
Progressive Commitment means taking a smaller, cheaper, more reversible, or lower-stakes step first, then generating new evidence from that step and using it to update confidence. The cycle repeats until confidence exceeds a predefined risk threshold, at which point the agent advances to a higher level of commitment.
The value comes from information and context gain, not merely smaller size.
A dust-sized test transfer before the full payout. A probe before a large purchase. A temporary hold before releasing funds.
This doesn’t improve the model’s raw reasoning. It changes what the model gets to reason over. Each low-stakes step produces fresh information that wasn’t available before. Authorization decisions are therefore informed by evidence generated through interaction with the world rather than relying solely on the agent’s initial prediction.
The key shift is from prediction alone to prediction plus evidence. Instead of asking the model to be perfectly right upfront, the system generates new information through low-stakes actions before authorizing greater commitment.
In the payout example, instead of acting solely on the model’s prediction that an address-chain-token triplet is correct, the system first generates additional evidence through a cheaper, more reversible or low-stakes action.
A small test transfer is one example. If acknowledged by the intended recipient through a trusted out-of-band channel, that new evidence can increase confidence enough to justify the next level of commitment.
This pattern isn’t new — careful treasury teams already do versions of it manually.
Progressive Commitment simply encodes that caution into the authorization layer, so authorization decisions are informed by evidence gathered incrementally through cheap, reversible, or low-stakes actions.
Spend a trivial sum to avoid a catastrophic loss.
But what if confidence never clears the bar?
If the evidence fails to raise confidence past the threshold — the test transfer goes unconfirmed, the probe comes back wrong — the agent doesn’t advance.
It abstains.
That’s the other half of acting safely on irreversible rails: not just committing carefully, but knowing when not to commit at all.
Reversibility isn’t binary. It depends on how likely recovery is, how long it takes, and how much cost or effort it requires.
Card payments can be charged back (slowly, not guaranteed). Wires can sometimes be recalled (difficult in practice). On-chain settlements, once confirmed, are typically final.
The goal isn’t perfect classification. It’s recognizing that “we can probably recover” and “we probably cannot” are fundamentally different risk categories — and should be authorized differently.
A practical spectrum can look roughly like this:
Highly reversible: Card chargebacks, some ACH returns (days to months, but possible)
Medium: Bank wires (recall possible but difficult), certain escrow setups
Low / Irreversible: Most on-chain settlements once final, instant rails with no clawback
The less recoverable the action, the higher the bar for further commitment.
Failure 2: Death by a Thousand Micropayments
The first failure was one catastrophic transaction. The second is the opposite — many tiny ones — and it shows the same pattern holds on newer rails.
An agent pays other agents (or agent-accessible services) for data, compute, or answers over emerging pay-per-use rails (e.g., HTTP 402-style challenges).
It finds a service, gets back a 402 challenge with a price, signs a USDC micro-payment, and gets served. Each payment is tiny. The loop is fast and autonomous.
The failure isn’t one wrong transaction. It’s the pattern — and it lives in the payments that succeed.
Sometimes the agent can catch a bad result on its own: pay for a number, get back “purple,” the reasoning rejects it. But agents pay external services precisely for things they can’t produce or verify themselves — a real-time price, a fact they don’t independently know, a result they have no ground truth for. A stale price looks identical to a fresh one. The payment clears, the result looks plausible, and the agent has no basis to reject it.
Multiply that across an autonomous loop and the bleed is structural: successful, irreversible payments for results that look fine and aren’t, no single transaction ever looking wrong enough to trip a limit.
This isn’t a widespread problem today — agent-to-agent payment volume is still tiny — but it is exactly the kind of failure the model invites as these systems scale.
How existing guardrails evaluated it:
Per-transaction cap — Pass. Each micropayment is under the limit. The cap is per-action; the harm is cumulative.
Capability guards — Pass. The agent is allowed to make 402 payments. Not whether it should pay this specific endpoint.
Allowlists — Pass. In an open agent economy, services are discovered on the fly. Often there may be nothing to check against.
Evaluation layer — No flag. The payment is well-formed; the judgment that this endpoint was relevant is what’s wrong.
The micropayment model’s greatest strengths — frictionless, autonomous, tiny — are precisely what strip away every natural circuit-breaker.
Progressive Commitment applies directly here too. Because commitment compounds with every successive micropayment, the discipline is to validate before continuing the loop: confirm that the previous payment actually delivered useful results before issuing the next one.
Gate on cumulative spend and observed delivery quality, not just per-transaction caps. An endpoint that keeps getting paid without delivering gets cut off automatically. Earn confidence from real outcomes, not merely settlement — because a payment that clears for a useless result is still a failure.
In short: “Keep paying for results it never checks” becomes “Validate each result before paying again, and increase commitment only as confidence is earned.”
“We already budget for fraud. We’ll budget for this.”
This is the first objection a finance leader usually raises, and it deserves a real answer — because it’s half right.
Businesses absorb losses all the time: fraud, write-offs, operational errors, and disputed transactions.
They price expected loss into the cost of doing business rather than demanding zero-defect systems. So why should agentic loss be any different? Set a tolerance, budget for it, and let the agents run.
Here’s the half that’s missing.
Budgeting works best when losses are distributed across many independent events that average out to a reasonably predictable rate. Fraud, chargebacks, and operational errors are often manageable because no single incident determines the outcome.
The challenge with agentic systems is correlation.
A misjudging agent may not fail just once — it can repeat the same mistake at scale, rapidly, before anyone notices.
It might pay the wrong endpoint a thousand times. It could resolve one incorrect address and propagate that error across every subsequent payout.
The risk is not necessarily a higher overall error rate.
The risk is that a single root error can propagate across thousands of actions in a short time.
And there’s a deeper point: deciding how much loss to tolerate is an authorization decision. “We’ll accept $X in agentic losses” and “We’ll let agents auto-execute irreversible actions once confidence exceeds threshold Y” are the same policy, expressed in different languages.
The CFO who says “just budget for it” hasn’t escaped the design question. They’ve simply stated it in accounting terms.
So yes — budget for agentic loss.
Reversibility-Aware Authorization is how you keep that loss inside the budget. High-blast-radius irreversible actions should clear a higher bar, while cheap, reversible or low-stakes actions could run more freely.
It’s not an argument against accepting loss.
It’s the mechanism that helps keep loss bounded when mistakes can scale faster than humans can react.
What Both Failures Have in Common
Two different rails, one underlying shape: The failure is policy-conformant but semantically wrong — exactly the class of error that existing guardrails are not designed to catch. On an irreversible rail, that uncaught semantic error has no rollback.
One reliable defense is to stop committing the irreversible step until confidence has been earned through cheap, reversible or low-stakes actions.
Progressive Commitment doesn’t make the agent less fallible. It makes its fallibility survivable.
Where This Framework Won’t Save You
Three honest limits, because the pattern isn’t magic.
1. It depends on correctly classifying what’s reversible.
Mislabel an irreversible action as reversible, and the protection evaporates. Drawing that line — the reversibility spectrum from earlier — is the hard, unsolved part.
2. The probe is only as good as your ability to design it.
Progressive Commitment assumes the cheap test faithfully predicts the expensive action — and designing a test that actually does is the hard, situational part.
A probe that passes while the real action would fail produces false confidence, which is worse than no probe at all.
It can’t be solved once and reused; it has to be built per action type and kept current as the context and the threat landscape change.
3. The thresholds are product and risk decisions, not math.
Where you set the bar trades safety against throughput, and nothing about the pattern resolves that trade for you. It just gives you a place to make it on purpose, instead of by default.
Next, I plan to explore the practical implications of Reversibility-Aware Authorization in more depth — from how systems decide that enough evidence has been gathered, to building a prototype that tests the pattern in code.
Subscribe / follow along as this theory meets reality.
Update: The next piece is now live — Who Sets the Bar? — and it picks up exactly where this one ends: Who decides when the evidence is enough?
Payments, AI, and financial infrastructure through the lens of first principles and second-order effects. This is Base Layer.
Why Europe’s best fintechs are being judged less by growth and more by trust, regulation, and resilience
Trust, regulation, and the future of money.
Five years ago, fintech was rewarded for moving fast.
Today, that is no longer enough.
The market has matured. The companies winning now are not simply the ones acquiring users the fastest. They are the ones that can scale money movement, survive scrutiny, and earn trust from users, regulators, and partners at the same time. That is the shift I keep coming back to when I look at Europe’s neobanks, payments platforms, and crypto-banking models.
Revolut, Monzo, and Deblock each point to the same conclusion from different angles: trust is no longer a soft brand attribute. It is an operating advantage.
The market has changed
The old fintech playbook was simple.
Build quickly. Grow fast. Add compliance later.
That playbook still created some remarkable companies. But it is no longer the full story. In the current environment, profitability matters because it signals discipline. Regulation matters because it shapes what products can safely become. And trust matters because money is not software in the abstract; it is an expectation that has to hold under pressure.
That is why the strongest fintech companies today are increasingly being judged less like apps and more like infrastructure. Users want speed, yes. But they also want reliability. Partners want clarity. Regulators want accountability. Those demands now sit at the centre of the business model.
What the leaders reveal
Revolut is the clearest example of scale and trust compounding together. In 2025, it reported £4.5 billion in revenue and £1.7 billion in profit before tax, and the company said it had delivered its fifth consecutive year of net profitability. Revolut described the year as “another year of breaking barriers,” with “sustainable growth, new banking licenses, and record profitability”. That is not just strong performance. It is a signal that the company has moved from disruption to institution-building.
Monzo tells a different but equally important story. Its FY2025 results showed £1.2 billion in revenue and £113.9 million in adjusted profit before tax, while 2.4 million new customers joined during the year. Monzo’s own framing was simple: “2.4m new customers” and “£113.9m adjusted profit before tax”. The important point is not only the numbers. It is the fact that customer confidence has become repeatable economics.
Deblock is the most interesting case because it sits at the intersection of fiat banking and crypto-native control. Deblock says it combines “the ease of a modern neobank with the power of a crypto wallet,” and that users can “hold and move both fiat and crypto from the same interface” while keeping the wallet self-custodial. It also holds an EMI license and was the first financial institution in France to obtain a MiCA license. That makes it a useful lens on where the market may be heading next: regulated, hybrid, and built around user control.
Why Deblock matters
Deblock is not a copy of Revolut or Monzo.
It is a different answer to a different problem.
Traditional neobanks solved convenience. Crypto-native products solved ownership. Deblock is trying to combine both: everyday banking usability with self-custody and on-chain access. That matters because the next phase of digital finance will likely reward products that reduce the gap between regulated finance and crypto-native behaviour.
The strategic significance is bigger than the product itself. Deblock shows that compliance is no longer a constraint sitting outside the product. In regulated finance, compliance is part of the product experience. In crypto, that is even more true. A great interface without regulatory credibility is fragile. A regulated structure without user value is irrelevant. The durable model has to do both.
Trust as a moat
The phrase “trust is the new fintech moat” is not just a nice line.
It is a practical operating thesis.
Trust is what allows a company to onboard faster without creating risk. It is what lets a product expand across markets without losing coherence. It is what turns a one-time user into a long-term relationship. And in fintech and crypto, where the stakes involve money, identity, and compliance, trust is also what determines whether a business can survive its own growth.
This is why the next winners will not simply be the fastest companies. They will be the ones that can build credible systems around speed. That means stable compliance, transparent operating models, clear customer value, and an ability to earn legitimacy from multiple constituencies at once.
For founders, that is a harder game than growth hacking.
For regulators, it is a more useful one.
And for customers, it is the difference between a clever product and something they will actually trust with their money.
The broader lesson
If there is one lesson in this market moment, it is this: fintech has entered its maturity phase.
That does not mean innovation is slowing down. It means innovation is being filtered through trust. The companies that win will be the ones that understand this early and design for it intentionally. That is true for neobanks, payments platforms, and hybrid crypto-banking models alike.
Revolut shows what scale looks like when trust compounds. Monzo shows what profitability looks like when trust deepens. Deblock shows what the next frontier looks like when trust meets self-custody and regulation. Taken together, they point to the same conclusion: the future of fintech will not be defined by speed alone.
It will be defined by trust that can scale.
If you publish in fintech or crypto today, the market is no longer asking whether your product is clever.
It is asking whether it is credible.
That is the real moat.
About the Author
Joseph Zammit is a CMO and CSO in fintech and crypto, with 25+ years at the intersection of marketing, strategy, and regulation. He helped design Malta’s pioneering DLT framework, launched the country’s first Neobank, and led the global expansion of crypto and Web3 platforms, turning complex regulatory and market conditions into clear go‑to‑market decisions. He is a member of the Crypto Valley Association.
Trust Is the New Fintech Moat was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.
Five years ago, stablecoins were still easy to dismiss. They looked like a niche product for traders, a bridge asset for crypto markets, or a temporary workaround for a financial system that was still deciding what digital money should look like.
US stablecoin lead and Europe’s catch-up challenge.
That framing no longer works.
Today, stablecoins sit at the intersection of payments, settlement, regulation, and monetary power. They are no longer just a crypto instrument. They are becoming part of the financial infrastructure that moves value across borders, between institutions, and increasingly between business models.
And if you look at the market honestly, one conclusion stands out: the United States pulled ahead because it allowed dollar stablecoins to become the default digital money layer. Europe, meanwhile, built a stronger rulebook than many expected, but has not yet translated that into market scale.
That gap matters far beyond crypto.
It matters for fintech. It matters for banks. It matters for payment providers. It matters for policymakers.
And it matters for anyone who still believes that monetary influence in the digital economy is going to be shared evenly by default.
A five-year shift
Stablecoins have grown from a specialist tool into a major digital liquidity layer.
ECB analysis places stablecoin market capitalisation at roughly $300 billion in early 2026. That number alone tells part of the story. The more important part is how quickly stablecoins have moved from the margins of crypto into the architecture of digital finance.
But the real divide is not the size of the market. It is the currency that dominates it.
According to ECB analysis, more than 99.7% of stablecoins are USD-denominated. Euro-denominated stablecoins remain in the low hundreds of millions of euros. That is not a minor imbalance. It is a structural outcome.
It means that when the market needed a digital settlement asset, it chose the dollar.
That choice has consequences.
The US: digital dollar dominance by market design
The United States did not need to announce a grand strategy to win the stablecoin market. In practice, it allowed one to emerge.
The result is a digital dollar ecosystem that now sits inside crypto trading, cross-border transfers, wallets, treasury flows, and emerging fintech products. Stablecoins have become a programmable extension of dollar liquidity.
That gives the US three advantages.
First, it extends the reach of the dollar into digital markets. A stablecoin can move quickly, settle quickly, and function across time zones in a way that legacy rails still struggle to match.
Second, it reinforces demand for dollar-linked reserve assets. Stablecoin issuers hold backing assets, and those reserves tend to support the centrality of US safe assets in the digital economy.
Third, it creates network effects. Once businesses, traders, and platforms standardise on dollar stablecoins, the system begins to reinforce itself. Liquidity attracts liquidity. Trust attracts adoption. Adoption attracts infrastructure.
This is why the stablecoin story is bigger than crypto.
The ECB has warned that USD stablecoins can amplify the international transmission of US monetary policy. Put more plainly, the dollar is gaining another distribution channel.
That is a strategic gain for the US. Whether it intended to or not, it now has a digital version of dollar dominance that reaches far beyond traditional banking rails.
The UK: pragmatic, not passive
The UK has taken a more practical approach than many in Europe.
The Bank of England has moved toward a framework for systemic stablecoins that tries to balance innovation with financial stability. That matters because it shows a willingness to treat stablecoins as part of the payments system rather than as a purely speculative object.
For fintech and payments leaders, that distinction is critical.
A market can debate stablecoins endlessly, or it can build a usable regime around them. The UK appears to be choosing the second path.
The commercial significance is not that the UK has solved every issue. It has not. The significance is that it has created a path where regulated stablecoin models may actually get to scale.
That is where the UK becomes interesting: not as a winner-takes-all market, but as a bridge between traditional finance and digital finance.
Switzerland: testing before scaling
Switzerland is following a different logic.
Rather than trying to dominate immediately, it is using controlled experimentation.
The CHF stablecoin sandbox involving six banks and Swiss Stablecoin AG is important because it shows that stablecoins are no longer only a crypto-native idea. Banks are willing to test them too, provided the structure is credible and the use case is clear.
That makes Switzerland a serious laboratory for regulated digital money.
Its strength is not scale. Its strength is institutional trust.
That combination matters because the future of stablecoins will not be determined only by the loudest crypto projects. It will also be shaped by whether banks, regulators, and infrastructure providers can agree on models that are both technically useful and politically acceptable.
Switzerland is testing that proposition in a measured way.
Europe: a strong rulebook, but not yet enough market power
Europe deserves real credit for MiCA.
In a market that often moves faster than policy can follow, Europe built one of the most comprehensive digital asset frameworks in the world. That is a genuine achievement.
But regulation is not the same as market leadership.
That is where the stablecoin conversation becomes uncomfortable for Europe.
The ECB has remained cautious on euro stablecoins, and the market has responded accordingly. Euro-denominated stablecoins remain tiny compared with USD stablecoins. The implication is hard to avoid: Europe may have the better rulebook, but it does not yet have the same economic gravity.
This is not a failure of talent or technology. Europe has both.
It is a failure of conversion.
The policy foundation exists. The market size does not.
And in financial infrastructure, that matters more than many people want to admit.
If the euro does not secure a meaningful role in stablecoin issuance and usage, then Europe risks becoming a region that regulates a market whose default operating layer is still defined elsewhere.
That is a subtle form of dependence. It is also a strategic one.
Qivalis and the case for more European action
Qivalis is a useful sign that Europe has not given up on scale.
The bank-led consortium has grown to 37 financial institutions across 15 countries. That is not a symbolic number. It shows that major European institutions understand the issue and are trying to respond.
That is exactly why projects like Qivalis matter.
Europe does not need more commentary about stablecoins. It needs more attempts to build them in a compliant, bank-grade, euro-native way.
If the ECB and the European Commission want to strengthen Europe’s position, this is the kind of initiative they should encourage. The market will not be rebuilt by regulation alone. It will be rebuilt by regulation plus execution.
That is the missing combination.
What this means for payments
For payments, stablecoins are becoming a direct challenge to friction.
They can move value quickly. They can operate across borders. They can be programmed into workflows in ways legacy payment systems were not designed to handle.
That is why payment companies, fintechs, and enterprise treasury teams are watching this market closely.
The question is no longer whether stablecoins can move money. They can.
The question is whether they can become the preferred settlement layer for more of the global economy.
Right now, USD stablecoins have the lead.
They have more liquidity, more usage, and more network effect.
Europe’s challenge is that payment systems are not won by legal clarity alone. They are won by usability, interoperability, and scale.
What this means for settlement
Settlement is where the institutional case for stablecoins becomes strongest.
If value can settle faster and with fewer intermediaries, the economics of finance begin to change. That is why banks, market infrastructure firms, and regulated fintechs are paying attention.
The UK and Switzerland are both showing that institutional stablecoin models can be tested in regulated environments. Europe, through MiCA and through projects like Qivalis, has the ingredients to do the same.
But testing is not the same as winning.
Scale still decides whether a pilot becomes a standard.
What this means for monetary power
This is where the stablecoin story becomes strategic.
If the dominant stablecoin remains dollar-based, the US does not just dominate a product category. It strengthens the reach of its currency inside the digital economy.
That is not theoretical. It is already happening.
The ECB has acknowledged the risk that USD stablecoins could amplify the international transmission of US monetary policy. That should be read as a signal, not a footnote.
Europe’s challenge is therefore not only commercial. It is monetary.
If the euro does not matter inside stablecoin infrastructure, then Europe’s currency influence in the digital economy will remain weaker than its regulatory ambition.
That is an uncomfortable trade-off.
Being the strictest market is not the same as being the most influential one.
What this means for geopolitics
Stablecoins may look technical, but they are becoming part of economic statecraft.
A dollar stablecoin ecosystem expands the digital footprint of the US. A weak euro stablecoin ecosystem limits Europe’s ability to project financial influence in a tokenised, always-on global market.
That is why this debate matters outside crypto.
It matters to central banks.
It matters to finance ministries.
It matters to payment companies.
It matters to banks trying to modernise.
And it matters to any founder building in regulated digital finance.
If digital money becomes infrastructure, then the currency that dominates digital money becomes strategically important.
At the moment, that currency is still overwhelmingly the dollar.
Europe is not out of the race
Europe should not be written off.
It has MiCA. It has capable institutions. It has the credibility to lead on trust. It has bank groups willing to test the model. It has projects like Qivalis that show market intent.
What it does not yet have is enough scale.
That is why the next phase matters so much.
Europe can still catch up if it moves quickly enough and if it accepts that good regulation is only the starting point.
The real test is whether policy strength can be converted into market strength.
If it can, Europe still has a path.
If it cannot, then the stablecoin gap will become harder to close with every year that passes.
And by then, the market will already have chosen its default rails.
The question Europe should ask now
The question is not whether stablecoins matter.
They already do.
The question is whether Europe wants to remain a rule-maker in a market whose operating layer is set elsewhere or whether it wants to build enough scale to shape that layer itself.
That is the real stablecoin gap.
And it is still open.
About the Author
Joseph Zammit is a CMO and CSO in fintech and crypto, with 25+ years at the intersection of marketing, strategy, and regulation. He helped design Malta’s pioneering DLT framework, launched the country’s first Neobank, and led the global expansion of crypto and Web3 platforms, turning complex regulatory and market conditions into clear go‑to‑market decisions. He is a member of the Crypto Valley Association.
One margin account to trade global markets, invest in tokenized real-world assets, and move money across 190+ countries — while Wall Street sleeps.
Every cycle, a handful of projects stop competing on features and start competing on architecture. Hotstuff is one of them. Instead of shipping yet another perpetuals exchange, its team asked a harder question: what if a single blockchain could settle a leveraged Bitcoin trade, a tokenized Nvidia share, and a cross-border payment — from the same balance, in the same second?
That question is the whole thesis. And after digging through its docs, testnet, funding history, and the way its community actually talks about it, I think Hotstuff is one of the more quietly ambitious infrastructure plays in DeFi right now. Here’s the expert breakdown.
What is Hotstuff, exactly?
Hotstuff is a DeFi-native Layer 1 blockchain designed around a deceptively simple promise: “Trade. Invest. Bank.” — from one unified margin account, built for retail users outside the United States.
Open a single account, fund it once, and that same balance works across:
Perpetual futures on crypto, equities, indices, FX, and commodities
Spot markets and tokenized real-world assets (RWAs) like stocks and ETFs
Stablecoins, cards, and local payment rails for actual money movement
Most chains treat trading, custody, and payments as separate worlds bolted together with bridges and third-party apps. Hotstuff collapses them into one settlement fabric. The tagline says it best: home for all capital that actually trades and invests — open while Wall Street sleeps.
Worth noting for clarity: the name “HotStuff” also refers to a well-known 2018 academic BFT consensus protocol. This article is about Hotstuff the trading L1 (hotstuff.trade), which borrows from that lineage but is a distinct product.
The engine room: DracoBFT and “validators as service providers”
Under the hood, Hotstuff runs on DracoBFT, a custom consensus mechanism built on the Fast-HotStuff family of Byzantine fault-tolerant protocols and tuned specifically for low-latency financial applications.
The headline performance numbers the project publishes:
Metric Hotstuff L1 Throughput 200,000+ TPS Block time ~75 ms Finality ~150 ms
But the more interesting design choice isn’t raw speed — it’s what the validators do. On most chains, validators just produce blocks. On Hotstuff, they also coordinate trade execution, route liquidity, provide fiat access, run compliance workflows, and handle last-mile money movement.
Co-founder and CEO Vyom Sharma describes it as “the Uber for financial validators, routing every flow to the right provider.” A trader in Asia, a remittance corridor in LATAM, and a card issuer in Europe can settle on the same rail. That reframes the chain from a passive settlement layer into active financial infrastructure — which is the part that’s genuinely hard to copy.
The four pillars: Trade, Invest, Earn, Bank
1. Trade — perps across every market that matters
Hotstuff’s flagship is a high-performance, fully on-chain perpetuals venue. From one margin account you get 22+ markets with up to 50x leverage, running 24/7/365:
Crypto: BTC and ETH (50x), SOL, HYPE, BNB (25x), XRP (20x), and more
Equities (the Mag7): Apple, Nvidia, Tesla, Microsoft, Amazon, Meta, and Google perps — trade earnings season at 3 a.m. if you want to
Indices: USA500 and USA100 with up to 50x leverage
Commodities: WTI oil, Brent oil, and natural gas
FX: EURUSD and USDJPY with up to 50x leverage
The pitch to traders is simple: no fragmented accounts, no legacy market hours, one balance as collateral across everything.
2. Invest — 24/7 tokenized stocks and ETFs
In a major 2026 expansion, Hotstuff launched Hotstuff Invest: 24/7 spot trading for tokenized stocks, ETFs, and crypto assets, powered by xStocks — tokens backed 1:1 by the underlying equity and redeemable for cash value.
The framing here is huge: the company is explicitly targeting the $147 trillion global equity market, with 200+ listed tokenized RWAs on the roadmap. For a user in a country with limited access to U.S. brokerages, buying tokenized Netflix, Google, or an S&P 500 ETF on a Sunday night is a genuinely new capability, not a marketing line.
3. Earn — put idle capital to work
Instead of letting stablecoin balances sit dead, users can deposit idle cash into vaults and earn APY. The centerpiece is the Hotstuff Liquidity Vault (HLV) — a protocol-owned, community-owned liquidity pool that acts as the primary counterparty for perpetual trading on the network.
HLV runs a hedge-mode, market-neutral strategy, sourcing yield through multi-venue execution across Hotstuff, Hyperliquid, and select CEX liquidity. The signal to watch: the initial $500K pre-deposit cap filled in ~12 hours from 988 depositors, and the team pointedly noted “no paid KOL, no paid hype — just community-led DeFi in motion.”
4. Bank — neobanking and global fiat rails
This is the pillar that separates Hotstuff from a pure perp DEX. It’s building neobanking infrastructure directly into the chain:
US virtual accounts with ACH + Fedwire — fund in USD as if you had a U.S. bank account
EUR IBANs for SEPA, CLABE for Mexico’s SPEI, BR codes for Brazil’s PIX, FPS for the UK, and Bre-B for Colombia
Withdrawals to 190+ countries, plus FX stablecoin↔fiat and fiat↔fiat swaps
Crucially, the interface is self-custodial — you connect a non-custodial wallet, sign your own transactions, and the company never holds your funds. That’s the DeFi guarantee wrapped around a neobank experience.
Built for builders, too
Hotstuff isn’t just a consumer app. It ships a compact TypeScript SDK, real-time WebSocket streams with deterministic event payloads, sandbox environments, a public API reference, and an open GitHub org (hotstuff-labs). Desks, bots, and fintechs can integrate trading, market data, and account actions directly — a deliberate move to turn the L1 into a platform others build on.
From Syndr to Hotstuff: the backstory
Hotstuff didn’t appear overnight. It’s the evolution of Syndr Protocol, a derivatives project that first launched on Arbitrum Orbit and raised a ~$500K pre-seed back in January 2022. Over time the team concluded that a general-purpose rollup couldn’t deliver exchange-grade performance for order books, margining, and custody — so they rebuilt it as a standalone, purpose-built L1.
The rebrand to Hotstuff went public with a launch on December 5, 2025, alongside the opening of the public testnet. The project is run by Hotstuff Labs (based in Singapore) and is backed by a notable roster of DeFi VCs and founders, including Delphi Ventures, Dialectic, Stake Capital, 1inch, Gnosis, Socket, Biconomy, Tykhe Ventures, and CoinDCX Ventures.
Traction and momentum in 2026
What impressed me most is the shipping cadence. In roughly six months, Hotstuff went from testnet to a rapidly expanding market list:
Dec 2025 — Public testnet goes live for traders, quants, builders, and validators
Jan 2026 — HLV pre-deposit vault fills its $500K cap in ~12 hours
Feb 2026 — Points program launches; 1.4M points distributed retroactively to 1,800+ early users
Spring 2026 — FX, commodities, US index (USA500/USA100), and Mag7 equity perps go live in quick succession, plus trading competitions with up to $20,000 in rewards
May 2026 — Hotstuff Invest launches 24/7 tokenized equity spot trading via xStocks
The community narrative on X has followed the product: creators repeatedly describe it as “quietly building one of the most interesting perp-native L1s,” and the recurring theme is organic, community-led growth rather than mercenary marketing.
The elephant in the room: a Hotstuff airdrop?
Let’s be direct, because it’s the first thing most readers want to know. Hotstuff has not announced a token, but the ingredients are all there: a Layer 1 that will need a native gas and staking asset, a live points program with weekly distributions, testnet Expeditions, tiers, collectible Cards, and referral rewards of up to 50%.
Because it’s an L1, a native token is widely considered highly probable — which is exactly why airdrop hunters have flagged it as an “anti-FOMO” early play. If you want to position yourself, meaningful, sustained participation is what historically matters: consistent trading volume, HLV/vault interaction, referrals, and genuine community engagement. Farming one transaction and leaving rarely ages well.
Nothing here is financial advice. A token isn’t guaranteed, points aren’t a promise, and leverage cuts both ways. Do your own research.
Hotstuff vs. Hyperliquid: how to think about it
The inevitable comparison is Hyperliquid, and it’s a fair reference point — both are trading-first L1s with sub-second finality and a fully on-chain order book. The difference is scope. Hyperliquid is laser-focused on being the best perp DEX. Hotstuff is trying to be the perp DEX and the tokenized-equity broker and the neobank — a single account that spans on-chain trading and real-world fiat rails.
That broader surface area is both the bull case and the risk. If Hotstuff executes across all four pillars, it becomes something no single-purpose competitor can match. If it spreads too thin, focus becomes the challenge. So far, the shipping speed suggests they can walk and chew gum.
The bottom line
Hotstuff is making a big, coherent bet: that the future of finance isn’t a dozen disconnected apps, but one account where your capital can trade, invest, and bank without ever leaving the chain. The DracoBFT engine gives it the speed, the validator-as-service-provider model gives it the reach, and the Trade/Invest/Earn/Bank stack gives it a reason to exist beyond speculation.
It’s still early — testnet-stage, token-less, and unproven at full scale. But between the architecture, the backers, and a shipping cadence most teams would envy, Hotstuff has earned a spot on the watchlist of anyone serious about where on-chain finance goes next.
Disclosure: This article is for informational and educational purposes only and is not financial, investment, or legal advice. Cryptocurrency trading, leverage, and testnet participation carry significant risk. Always do your own research.
How autonomous AI agents are learning to trade, invest, and move money on-chain — and the kind of infrastructure they actually need to be trusted with a balance.
For most of crypto’s history, the human has been the runtime. You watch the chart. You size the position. You sign the transaction. You bridge the funds, chase the yield, and wake up at 3 a.m. because a market that never closes doesn’t care that you need to sleep.
That model is quietly breaking. A new class of software — call them agents — is starting to sit between you and the market, holding a mandate instead of your private keys, and acting on your behalf inside rules you define. This is what people mean when they say agentic finance. And like most infrastructure shifts, it looks like a toy right up until it looks inevitable.
This piece is a plain-language map of what agentic finance is, why today’s blockchains struggle to support it, and what a chain built specifically for autonomous money would need to look like. We’ll use Hotstuff, a DeFi-native Layer 1, as a running case study — not because it’s the only answer, but because its architecture makes the design tradeoffs unusually easy to see.
First, what “agentic” actually means
An agent is not a chatbot with a wallet glued on. The useful definition is narrower: an agent is a piece of software that can perceive a situation, decide on an action against a goal, and execute that action — repeatedly, without a human clicking the button each time.
In finance, that loop maps onto things people already do by hand:
Perceive: read prices, funding rates, portfolio drift, an incoming payment, a payroll date.
Decide: “funding is negative and my target allocation slipped 4% — rebalance.”
Execute: place the orders, settle the transfer, log the result.
The leap from a trading bot to a financial agent is scope. A bot runs one strategy on one venue. An agent is trusted with a mandate — “keep me market-neutral,” “dollar-cost-average this paycheck,” “never let this position exceed 3x” — and figures out the steps. The 2018 academic HotStuff consensus paper and the current wave of AI agents share nothing technically, but they rhyme on one idea: systems get powerful when you can hand off decisions safely.
The trust problem nobody can skip
Here’s the uncomfortable part. The moment you let software move money on its own, you’ve created the most attackable object in finance: an automated thing with spending power. Every serious conversation about agentic finance eventually collapses into one question — how do you give an agent enough authority to be useful without giving it enough to ruin you?
There are four hard requirements underneath that question, and most existing rails satisfy maybe two.
1. Scoped authority, not custody
The naive approach — hand the agent your keys, or deposit into a black-box account it controls — recreates every custodial risk crypto was supposed to kill. The better pattern is delegation with a leash: the agent gets a scoped permission to do specific things (open and close positions, say) while being cryptographically blocked from others (withdraw, transfer out).
On EVM systems this increasingly looks like signature-based delegation — a user signs a typed message (the EIP-712 standard) that authorizes an “agent” address to act within limits, and can revoke it at any time. The funds never leave the user’s control; only a narrow slice of behavior is licensed. Any agent you’d trust with real size should be non-custodial by construction, not by promise.
2. Speed that’s actually deterministic
Agents act in loops, and loops compound latency. If every decision has to wait 12 seconds for probabilistic finality and then pray for no reorg, an agent managing risk across volatile markets is flying blind between blocks. Autonomous strategies need fast, final, and predictable settlement — not “fast on average.” A rebalance that might land now or might land in three blocks isn’t a strategy, it’s a gamble.
3. Verifiable contact with the real world
Most money that matters lives off-chain: bank balances, equities, FX, payroll, invoices. An agent that can only touch native tokens is a very expensive way to trade memecoins. To manage real money it needs trustworthy bridges to real-world data and rails — and “trustworthy” has to mean provable, not “a middleman swore it was true.”
4. Compliance that doesn’t leak your life
If agents are going to move fiat across borders, someone has to answer for KYC, sanctions screening, and qualified-investor checks. Doing that on a public ledger naively would broadcast your financial identity to the world. The requirement is compliance that is verifiable but private — proven, not published.
Hold those four in mind, because they’re the lens for the rest of this article.
A case study in building for agents: the Hotstuff L1
Hotstuff is a Layer 1 with an unusually blunt pitch: trade, invest, and bank from one account. One margin balance spans perpetual futures, spot markets, tokenized real-world assets, vaults, cards, and local fiat rails — aimed at retail users outside the US. Underneath that consumer promise is a set of architectural choices that read, in hindsight, like a checklist for the four requirements above.[1]
The consensus layer: DracoBFT
Hotstuff runs on a custom consensus engine called DracoBFT. It borrows the backbone of the well-known HotStuff BFT family — stake-weighted leader selection, pipelined block production, two-round deterministic finality, and Byzantine tolerance under partial synchrony (the classic n = 3f + 1). The published numbers are aggressive: ~200,000+ TPS, 75ms block times, and 150ms finality.[2]
The word that matters there is deterministic. There’s no probabilistic tail, no 12-second voting window, no “wait for confirmations.” For a human, sub-second finality is a nicety. For an agent running a tight control loop, it’s the difference between managing risk and hallucinating about it. That’s requirement #2, handled at the base layer.
One clever efficiency: instead of recomputing a giant global state root every block, DracoBFT uses Chained Change-Log Commitments — it only hashes the keys that actually changed. Less redundant work per block is part of how you keep finality tight while throughput stays high.[2]
The real-world layer: validators as service providers
The most interesting idea in the design is what Hotstuff calls side-loops. Normally a validator’s whole job is producing blocks. DracoBFT gives validators auxiliary execution domains where they perform real-world work in parallel to consensus — without slowing block production. When a side-loop task finishes, the validator submits the result back to the main chain.[2]
What kind of work?
zkTLS verification: validators cryptographically prove that an API response genuinely came from a specific server — Chase, Coinbase, Plaid, wherever — rather than “we asked 20 nodes and trusted the median.”
Cross-chain state verification: verifying state proofs from other chains as a native validator duty instead of trusting a bridge operator.
Private computation: compliance checks, identity verification, credit scoring, and qualified-investor gating done off the main chain but cryptographically bound to it.
Payment orchestration: validators route payments and operate fiat on/off-ramps directly — and get paid for it.[2]
Stack that against the requirements. Verifiable contact with the real world (#3) becomes a validator duty backed by proofs, not a trusted middleman. Compliance that stays private (#4) runs in private computation bound to the chain. Hotstuff Labs has described the result as an “Uber-style routing layer,” where validators act as last-mile gateways to trading, payments, and fiat — earning fees for services, not just block rewards.[3]
Why the “one account” model matters for agents
The unified margin account isn’t just a UX flex. Fragmentation is an agent’s enemy: capital stranded across chains, venues, and wrappers means an agent spends its intelligence on plumbing instead of strategy. When perps, tokenized equities, vault yield, and fiat all settle against a single balance, an agent can reason about one portfolio and act across all of it. Hotstuff currently spans 22+ perpetual markets with up to 50x leverage, 200+ tokenized real-world assets including names like the S&P 500 and Nasdaq-100 ETFs, and fiat rails covering USD, EUR, GBP, BRL, MXN and more across 190+ countries.[4]
Context for the skeptics: this isn’t a whitepaper-only project. Hotstuff evolved out of Syndr, ran a public testnet in late 2025, surpassed $1 billion in derivative trading volume, extended into 24/7 tokenized-equity spot trading in 2026, and is backed by DeFi-native investors including Delphi Ventures, Dialectic, Stake Capital, 1inch, and Gnosis.[4]
From “a chain with features” to an Agentic Finance OS
Put the pieces together and a bigger idea emerges — one Hotstuff itself has started to articulate: the goal isn’t a faster exchange, it’s an operating system for autonomous money.
Think about what an OS actually does. It manages resources, enforces permissions, and exposes a clean interface so applications don’t each have to reinvent the hardware. Map that onto finance:
Permissions → scoped, revocable delegation so agents act within a mandate (requirement #1).
Scheduler → deterministic sub-second settlement so agent loops run on a reliable clock (requirement #2).
Drivers → validator side-loops that turn messy real-world rails into verifiable system calls (requirements #3 and #4).
Filesystem → one unified account as the single source of truth an agent reads and writes.
An “Agentic Finance OS” is what you get when those primitives are native rather than bolted on. Developers stop building agents that fight the chain and start building agents that call it like an API. It’s worth saying plainly: this is a thesis, not a finished reality. But it’s a coherent one, and the architecture lines up behind it.
What builders can actually do with this
The practical test of any platform is whether independent developers can build on it without permission. A few concrete shapes of agentic app become possible on rails like these:
Autonomous portfolio managers that hold a scoped mandate — target allocations, risk limits — and rebalance across perps, spot, and RWAs without ever gaining withdrawal rights.
Strategy engines running DCA, TWAP, and grid logic non-custodially, using signature-delegated agent wallets so the user keeps custody while the agent keeps working. (Early community projects such as Ember, a non-custodial trading terminal built on the Hotstuff broker system, are a preview of exactly this pattern.)
Payment agents that watch for an incoming stablecoin settlement and auto-route it into yield, or convert to local fiat across SEPA/PIX/SPEI rails.
Treasury agents for on-chain businesses that keep idle balances in vaults and pull liquidity only when needed.
None of these require the user to surrender custody. That single property — useful without being dangerous — is the whole game.
The honest caveats
Education means covering the downside, so here’s the part the hype cycle skips.
Delegation is only as safe as its scope. A poorly written permission is a poorly locked door. The security burden moves to how tightly authority is bounded and how easily it’s revoked.
Agents fail in new ways. A buggy strategy at machine speed can lose money faster than any human. Circuit breakers, position caps, and kill switches aren’t optional.
Throughput claims deserve scrutiny. Numbers like 200k TPS and 150ms finality are impressive on paper; the real test is sustained performance under adversarial mainnet load, which any reader should verify over time rather than take on faith.
Regulation is unsettled. Autonomous agents moving fiat across borders is exactly the kind of thing regulators will eventually have opinions about. “Non-US retail” is a design decision with a compliance shadow.
Agentic finance is promising precisely because it’s hard. The projects worth watching are the ones treating custody, determinism, and compliance as first-class problems instead of marketing bullet points.
Where this leaves us
The first era of DeFi asked, can we rebuild finance without intermediaries? The answer turned out to be yes — but it left a human doing all the work. The next era asks a different question: can we hand that work to software we don’t have to trust blindly?
That only becomes possible when the chain underneath does four things at once — leash the agent’s authority, settle its actions instantly and finally, prove its contact with the real world, and keep its compliance private. Hotstuff is one concrete attempt to make all four native, and its “Agentic Finance OS” framing is a useful way to think about where on-chain finance is heading, whoever ends up building it.
The agent economy won’t arrive because someone shipped a smarter model. It’ll arrive when the rails are safe enough that giving software a mandate feels less reckless than doing everything yourself. That’s an infrastructure problem. And infrastructure, unlike hype, either works or it doesn’t.
🔎Author’s note / disclosure: I write about ecosystem protocols and build tools in this space. This article is intended as an educational overview of agentic finance; it is not investment advice. Leveraged trading carries substantial risk of loss. Always do your own research.
While the headlines chase memecoins and retail rulebooks, the serious money is quietly moving the machinery of capital markets onto blockchains. In this contest — unlike the noisy retail one — Britain is not following. It is out in front.
By Arthur Wilson,Leading UK Market Specialist | Independent Economist & Journalist | Identifying the Best in Fintech.
There are two crypto stories, and almost all the attention goes to the wrong one.
The loud story is the one you already know: the price of Bitcoin, the collapse of some exchange, the regulator racing to fence in retail speculation. It is dramatic, it is human, and it sells. I have written about it myself, and I have argued that Britain, post-Brexit, has taken a notably cautious, slow road on the retail side — deliberately declining to switch on its new consumer crypto regime until late 2027.
The quiet story is the one that will matter more in a decade, and it is almost the mirror image. Away from the noise, the serious institutional money — sovereign wealth funds, the largest asset managers on earth, the banks that spent years insisting public blockchains were a toy — has been steadily moving the actual machinery of capital markets onto shared ledgers. Government bonds. Money-market funds. Private credit. The settlement rails underneath all of it. This is not the casino. It is the plumbing. And in this contest, unlike the retail one, Britain is not a laggard. It is, on any honest reading, one of the front-runners in the Western world.
That inversion — cautious on the casino, bold on the plumbing — is the most interesting thing happening in British finance right now, and it is going almost entirely unremarked. Let me try to correct that.
The number that should make you look twice
Start with the market, because the scale has quietly become serious. The value of tokenized real-world assets sitting on public blockchains — everything except stablecoins — has grown from roughly six billion dollars in early 2025 to somewhere in the low-to-mid thirty billions by the middle of 2026. Different trackers give slightly different totals depending on what they count, but they converge on the same order of magnitude and the same shape: a fivefold increase in about eighteen months. Crucially, the buyers driving that growth are not retail punters chasing the next hundred-times token. They are institutions looking for something far more prosaic — yield, faster settlement, and better collateral.
What is actually being tokenized tells you everything about why this wave is different from the last. The single largest category is tokenized US Treasuries, at something on the order of thirteen to fifteen billion dollars, anchored by BlackRock’s BUIDL fund — issued through Securitize and now live across multiple blockchains — which alone holds well over two billion dollars. Behind Treasuries sits tokenized private credit, at roughly eight billion, and then a long tail of tokenized money-market funds, gold and commodities, listed equities, and fractional real estate. Ethereum hosts the majority of this activity. And the holder base has crossed seven hundred thousand distinct wallets.
Notice what all of that has in common: it is boring. Treasuries, money-market funds, gold, investment-grade credit — these are not assets anyone tokenizes to make them exciting. They are already in enormous demand. The pitch for putting them on a blockchain is entirely operational, and the International Monetary Fund set it out cleanly this year: atomic delivery-versus-payment settlement, so the asset and the cash change hands simultaneously and counterparty risk largely disappears; programmable distribution of yield; the ability to move and use a holding twenty-four hours a day; fractional ownership; and automated compliance and corporate actions. In other words, tokenization is not trying to reinvent the asset. It is trying to upgrade the machinery around it. Boring is not a bug here. Boring is the entire point.
The honest caveat: a sixty-billion-dollar waiting room
I am not in the business of writing brochures, so before we get to the British part of the story, a large dose of realism is required — because the tokenization world is not short of hype, and a lot of the headline growth is more fragile than it looks.
The most sobering data point I have seen this year came from a July report, covered in Forbes, which put the broader tokenized-asset market at around sixty billion dollars across roughly seven thousand products — and then noted that some thirty-three billion of that, spread across more than nine hundred assets, had recorded zero transfer activity in a given week. The authors described the market, aptly, as a “waiting room.” The active, genuinely liquid market is far smaller and highly concentrated, and the only category the report was willing to call production-grade was tokenized Treasuries. Everything else is, to varying degrees, still in the lab.
There are good reasons for that inertia. Many of these tokens are permissioned by design — restricted to whitelisted, qualified investors — so they were never meant to trade freely in the first place. Secondary-market depth for most tokenized instruments is thin; order books are a fraction of their conventional equivalents. And distribution is siloed: a tokenized asset tends to live inside one platform rather than being embedded in the venues investors already use, which is precisely the friction that does not exist for, say, a municipal bond.
The numbers themselves also demand care. You will see figures suggesting hundreds of billions in tokenized value, but that usually refers to “represented” value — the total notional of assets referenced on-chain — which is a very different measure from the “distributed” value actually issued and live, which sits nearer twenty-seven billion. Mixing the two, as excitable coverage routinely does, is how a serious trend gets oversold. And the long-range forecasts are all over the map: McKinsey has pointed to roughly two trillion dollars of tokenized assets by 2030 excluding stablecoins; Boston Consulting Group’s numbers imply something much larger; Standard Chartered has floated thirty trillion by 2034. When credible institutions’ estimates diverge by an order of magnitude, the honest word for them is not “forecasts.” It is “scenarios.”
So the picture is: real, institution-led, growing fast — and still early, still thin, and still mostly a re-plumbing of existing markets rather than the birth of entirely new ones. Hold both halves of that in your head, because they are both true, and the interesting question is which way the balance tips. That is exactly the question Britain has decided to place a bet on.
Britain’s wholesale-first bet
Here is what almost nobody outside the City has noticed: over the past two years the United Kingdom has quietly assembled the most credible institutional tokenization stack in the Western world. Not the loudest, not the most retail-friendly — the most credible. Five pieces fit together, and it is only when you see them side by side that the strategy comes into focus.
The foundation is the Digital Securities Sandbox, a joint venture between the Bank of England and the Financial Conduct Authority that launched in 2024 and runs until January 2029. This is not a toy sandbox for slide decks; it lets firms stand up genuine, live trading venues and settlement systems for tokenized securities — equities, corporate and government bonds, and investment funds — inside a real regulatory perimeter, with issuance limits set high enough to allow meaningful activity but capped to protect stability. As of this year, sixteen firms are preparing to launch through it from late 2026, and the names are not fringe start-ups. They include Euroclear, one of the world’s central settlement houses; HSBC; and the London Stock Exchange Group itself.
The most striking single move is DIGIT, the Digital Gilt Instrument. With it, the UK became the first G7 nation to issue sovereign debt using blockchain technology — a genuinely significant milestone dropped into a gilt market worth more than two trillion pounds, the bedrock beneath British pension funds, insurers and global fixed-income portfolios. The Treasury selected HSBC’s Orion platform to run it; the Chancellor announced the pilot at Mansion House as part of the government’s financial-services growth and competitiveness strategy; and the instrument keeps the full faith and credit of the UK government and its status as a regulated security. For now it is deliberately restricted to institutional participants inside the sandbox. But the symbolism is hard to overstate: the state itself has put its own debt on-chain.
Around that core, the London Stock Exchange Group has gone conspicuously all-in — not merely listing tokens but rebuilding settlement infrastructure. It is standing up a digital securities depository and a platform, DiSH, that provides programmable commercial-bank money as a real cash leg for on-chain settlement, allowing money to move instantly, around the clock, across currencies. That matters more than it sounds, and I will come back to why.
The banks have moved from talk to transactions. In January, Lloyds completed what is billed as the UK’s first purchase of a tokenized gilt settled with tokenized deposits, issued on a public blockchain, buying the gilt from Archax, an FCA-regulated digital-asset exchange. Separately, six of the largest UK banks — Barclays, HSBC, Lloyds, NatWest, Nationwide and Santander — are running a Great British Tokenised Deposits pilot, building the tokenized-sterling layer that any of this ultimately has to settle against.
And, unusually, the central bank is not merely tolerating all this but championing it. In a City Week speech this spring, the Bank of England’s deputy governor for financial stability, Sarah Breeden, laid out a vision of a “multi-money” future in which tokenized bank deposits, regulated stablecoins and potentially a retail digital pound circulate alongside ordinary deposits. The Bank is running a “Synchronisation Lab” to test atomic settlement between its next-generation real-time gross settlement system and external digital-asset platforms, alongside eighteen firms including Swift and the exchange group. It is extending its core settlement operating hours toward something close to round-the-clock. And — this is the part I would underline in red — it is actively weighing whether tokenized assets should be eligible as collateral in the Sterling Monetary Framework, the machinery through which it lends against assets. Taken together, this is not a regulator reacting to an industry. It is a public authority trying to lead one.
Why this is the shrewder bet than chasing the casino
Now the argument, because a pile of pilots is not a strategy until you can say why it is the right one. My contention is that Britain’s wholesale-first, infrastructure-led approach is a genuinely clever bet, for three reasons that have nothing to do with hype and everything to do with economics.
First, it plays to the City’s actual strengths rather than its aspirational ones. The UK is the world’s largest net exporter of financial services. Its comparative advantage has never been in consumer app downloads or retail trading gimmicks; it is in institutional plumbing, in law, in market infrastructure, in being the place where the world’s capital is intermediated, cleared and settled. Tokenizing gilts, fund units and settlement systems leverages precisely the thing London already dominates. Trying instead to win the retail-crypto race — competing for the same users as a hundred offshore exchanges — would have meant fighting on ground where Britain has no natural edge. Choosing to compete on wholesale infrastructure is choosing to fight where you are strong.
Second, and less obviously, the cash leg is the hard part of tokenization, and Britain is unusually far along in solving it. A tokenized bond is close to useless if you cannot settle it against tokenized money on the same ledger at the same instant; without that, you have simply created a second, isolated record of an asset and reintroduced all the settlement friction you were trying to remove. The genuine bottleneck in this whole field is not tokenizing securities — that part is relatively easy — but building safe, credible on-chain cash to settle them against. And that is exactly where the UK has concentrated its effort: tokenized commercial-bank deposits, the settlement-system upgrade, established tokenized-cash networks with an account at the central bank, and a forthcoming regime for systemic sterling stablecoins. Britain has, in effect, gone to work on the part of the problem everyone else finds most awkward.
Third, and most powerfully, is collateral. Ask what would move the institutional demand for tokenized assets from a trickle to a flood, and the honest answer is a single regulatory decision: the moment a major central bank formally accepts tokenized Treasuries or fund shares as eligible collateral in its liquidity operations, the calculus changes overnight, because a tokenized asset that a central bank will lend against is no longer a novelty — it is money-good. The Bank of England has said, in the open, that it is considering exactly this. No amount of retail enthusiasm can manufacture that kind of tailwind. It is a lever available only to a serious sovereign with a serious central bank, and the UK is holding it.
The risks I would flag before anyone gets carried away
None of that makes the bet a sure thing, and I would be doing my readers a disservice if I pretended otherwise. There are at least four ways this could underwhelm, and they deserve to be named.
The first is the eternal gap between the pilot and the product. Sandboxes, labs and first transactions generate headlines; they do not generate liquidity. The “waiting room” problem is entirely capable of following tokenized gilts onto British soil. A digital gilt that settles beautifully but that almost nobody actually trades is a science project, not a market — impressive, and largely beside the point. The test is not whether the UK can issue a tokenized instrument. It plainly can. The test is whether real volume flows through the sandbox and out the other side into permanent, at-scale operation.
The second risk is self-inflicted fragmentation. Count the “cash legs” now under construction in Britain alone: the exchange group’s programmable money, the banks’ Great British Tokenised Deposits, the older tokenized-cash networks, a forthcoming systemic-stablecoin regime, and potentially a retail digital pound. Each is sensible on its own. Collectively, they risk recreating precisely the fragmentation tokenization was supposed to abolish — a patchwork of incompatible ledgers requiring bridges and translation, which is how you reintroduce cost and risk through the back door. Interoperability is the least glamorous word in this entire field and quite possibly the decisive one.
The third is that the core efficiency case, while plausible, is still largely unproven in live public markets. The theory is attractive — settlement risk collapses, issuance costs fall from the traditional five-to-eight percent toward one-to-three, liquidity improves. But whether those savings materialise at scale, or whether tokenization mostly relocates costs from one part of the value chain to another while the intermediaries quietly reconstitute themselves, is a question the data has not yet answered. I would want to see it proven, not asserted.
The fourth is a choice Britain has not fully confronted. DIGIT is restricted to institutions even as retail demand for ordinary gilts has been strong. That caution is defensible for a first pilot. But it exposes an unresolved tension: is tokenization, in the UK’s hands, a wholesale efficiency play for the professionals, or a genuine democratization of access to assets? Right now it is emphatically the former, whatever the rhetoric about fractional ownership suggests. That is a legitimate strategy — but the country should be honest that it has, for now, chosen efficiency over inclusion.
And looming over all of it is scale. The UK leads on strategy and coherence. It does not lead on the size of the underlying pool. The dominant tokenized asset on the planet is the US Treasury, and the United States has the deepest capital markets, a new federal framework for digital money, and every incentive to keep that dominance on-chain as much as off it. London can architect the smartest system in the room. It cannot conjure a two-trillion-pound gilt market into a twenty-eight-trillion-dollar Treasury market. Strategic leadership and market gravity are not the same thing, and Britain has more of the first than the second.
The verdict
My reading, then, is this. The tokenization of real-world assets is the most underrated financial story in Britain, and it is the one where the country’s positioning is genuinely, unusually strong. The UK has made a coherent and rather characteristic bet — cautious with the retail casino, bold with the wholesale plumbing — and it has assembled a stack of infrastructure, from the sandbox to the digital gilt to the central bank’s own settlement machinery, that no other major Western economy has quite matched for seriousness.
Whether it pays turns entirely on execution over the next two years, and on three questions in particular. Can real trading volume be pushed through the Digital Securities Sandbox and into permanent operation, or do the pilots stay pilots? Can the cash-leg and interoperability problems be solved so the ledgers actually talk to one another? And will the collateral question — can tokenized assets sit in the central bank’s own liquidity framework — be answered with a yes? Get those right and the City will have quietly re-tooled the machinery of global capital markets and kept itself indispensable for another generation. Get them wrong and this becomes another entry in the long, distinguished catalogue of financial innovations that were always, permanently, about five years away.
I would not bet against the City on this one — it is playing to its strengths, for once, rather than chasing someone else’s game. But I would keep my eyes fixed on the gilt market, and specifically on the day a tokenized gilt trades in real size rather than in a controlled experiment. That will be the tell. Because when a two-trillion-pound market moves on-chain for real — not as a press release, not as a pilot, but as a place where money actually changes hands — that is not a buzzword. That is the future arriving, quietly, through the plumbing, the way it usually does.
Arthur Wilson is an independent economist and journalist covering UK markets and fintech.
Banks have handed life-changing decisions to machines. Now the hard part: figuring out who’s accountable when those machines get it wrong
A few years ago, a loan officer would sit across from you, ask a few questions, maybe raise an eyebrow at your spending habits, and make a call. You could argue with that person. You could explain the rough patch on your credit report. Today, that officer is often a model, software trained on millions of past decisions, quietly deciding whether you’re worth the risk. You can’t argue with it. Most of the time, you don’t even know it exists.
ChatGPT Generated Image
That’s the backdrop to a conversation building steam across boardrooms and regulators alike: how do you govern something that decides faster than any human can review it, at a scale nobody can fully audit?
Finance Isn’t Like Other Industries
Plenty of sectors are wrestling with AI oversight right now. But finance carries a particular kind of risk, because money doesn’t stay in one place. It moves, it connects, it cascades. A recommendation algorithm messing up on a shopping app is annoying. A risk model messing up inside a major bank can spread through markets before anyone notices the source.
A few things make finance especially tricky:
Institutions are deeply interconnected, so one bad model at one firm can ripple outward fast.
Customers rarely get a real explanation when they’re denied a loan or flagged for fraud, which makes it hard to hold anyone accountable.
Trading and underwriting now happen at speeds no human reviewer can realistically keep pace with.
Regulators clearly see this coming. The EU’s AI Act, fresh guidance from the Federal Reserve and OCC, and ongoing work from bodies like the Financial Stability Board are all starting to treat AI as its own category of risk, not an IT upgrade, but something that belongs alongside credit risk and market risk.
So What Does Governance Actually Involve?
It’s not one policy or checklist. It’s closer to a set of habits a bank builds into how it treats every model, from the day it’s built to the day it’s retired. Institutions doing this well tend to focus on a handful of things:
Keeping a real inventory of every model in production, what it does, who owns it, and what it’s allowed to decide.
Making sure there’s a human-readable reason behind a rejected loan or a flagged transaction, not just a score nobody can explain.
Running regular audits to check whether a model is quietly discriminating against certain groups, even unintentionally.
Keeping humans in the loop for decisions with real legal or reputational weight.
Watching models after launch, since a system accurate on day one can drift as behavior and markets change.
None of this sounds exciting. It’s closer to fire codes than innovation. But that’s kind of the point, the boring stuff is usually what stops a small glitch from becoming a front-page problem.
The Part Nobody Really Talks About
The trickier issue might not be technical at all. It’s cultural. Data science teams are rewarded for accuracy and speed. Risk teams are trained to ask what could go wrong. For a long time, these were basically two departments that rarely spoke the same language. Good AI governance forces them into the same room, and that’s where things get uncomfortable.
Deployment slows down. A fraud model that looked ready to ship might sit in review for months while someone stress-tests it against every weird scenario they can think of. It’s frustrating short-term. But banks that lean into that friction, instead of fighting it, tend to end up ahead, not behind.
A few examples make it concrete:
A bank that can prove its lending model treats people fairly builds real trust with regulators and customers.
A trading firm that can walk an auditor through its algorithm’s decisions avoids a longer, costlier investigation later.
An insurer upfront about a model’s blind spots is in better shape if a claim ends up in court.
Seen this way, governance isn’t fighting innovation. It’s the scaffolding that keeps innovation from collapsing on itself.
Where This Goes Next
A few things seem likely to shape the next stretch of this story.
Different countries are writing their own AI rules, and global banks will push for common ground so they’re not juggling a dozen conflicting rule-books.
Banks are leaning more on outside vendors and foundation models, so governance can’t stop at the bank’s own walls anymore, it has to stretch across the whole chain of tools involved.
Generative AI is creeping from drafting memos into shaping investment advice, blurring the line between “helpful tool” and “thing making real decisions” in ways current rules weren’t built for.
None of this gets solved with one law or one audit. It gets solved the slow, unglamorous way most financial infrastructure gets built, through mistakes, corrections, and repetition.
Where This Leaves Us
AI in finance isn’t going anywhere, and neither is the risk that comes with it. The banks that come out ahead won’t be the ones shipping the flashiest models first. They’ll be the ones that can explain what their models did, defend those decisions, and fix them fast when something goes sideways. Governance isn’t slowing this industry down, it’s the seat-belt that lets it move fast without everything falling apart.
The rules are still being figured out, in real time, by people who don’t have all the answers yet. But the institutions taking this seriously now will probably be the ones still standing the next time something breaks.
Login
