How atomic delivery-versus-payment works for a tokenized security
In this article

    Every securities transaction contains two obligations that must be honoured together: the seller must deliver the security, and the buyer must deliver the cash. The whole architecture of modern finance — clearinghouses, custodians, settlement agents, transfer agents, depository institutions — exists largely to manage the gap between those two moments. When both legs happen simultaneously, that gap closes. When they happen in sequence, even with hours separating them, risk accumulates in the interval.

    That gap is not theoretical. The 27th of June 2024 marked 50 years since the collapse of Herstatt Bank demonstrated the drastic consequences of unchecked settlement risk — and half a century later, that risk appears to be rising for financial institutions. Prior to the announcement of the bank's closure, several of Herstatt's counterparties had irrevocably paid Deutsche Marks to the bank that day, anticipating they would receive US dollars later the same day in New York. Upon closure, Herstatt's New York correspondent bank suspended outgoing dollar payments, leaving those counterparties exposed to credit and liquidity risk up to the full value of the Deutsche Marks they had already delivered.

    That is the original sin of sequential settlement: one party goes first and hopes the other follows. For the professionals who structure, close, and administer securities transactions today — settlement agents, OTC desks, closing attorneys, fund administrators, broker-dealers — understanding what "atomic" delivery-versus-payment actually means in the context of tokenized securities is not an academic exercise. It is the foundation of a different way of working.

    What DvP is, and what "atomic" adds

    Delivery versus payment is a common form of settlement for securities. The process involves the simultaneous delivery of all documents necessary to give effect to a transfer of securities in exchange for the receipt of the stipulated payment amount. In practice, that word "simultaneous" has always been approximate. Traditional market plumbing makes truly simultaneous settlement extremely difficult to achieve because the security and the cash travel on different rails, through different institutions, reconciled by different back-office systems.

    Related readHow do you tokenize an asset?19 min

    Atomic settlement is the simultaneous, irreversible exchange of an asset and its corresponding payment in a single transaction with no settlement interval. Delivery and payment happen together or they do not happen at all.

    The word "atomic" is borrowed from database engineering, where an atomic operation is one that either completes entirely or leaves no trace. Applied to finance, it means that counterparty risk is eliminated by guaranteeing that both legs of the transaction execute atomically — either both complete or neither does. There is no in-between state, no window of exposure, no moment at which one party has delivered and is waiting on the other.

    Atomic settlement offers something the traditional system has never quite achieved: the complete elimination of that risk — not its mitigation, but its removal — by making it structurally impossible for one leg of a trade to settle without the other.

    That is the theory. The mechanism that makes it operational in a tokenized security is the smart contract acting as a neutral coordinator.

    The two legs that must meet onchain

    For atomic DvP to work on a blockchain, both the asset and the payment must live on the same ledger, or on ledgers that can be committed to simultaneously. The "delivery" leg is the financial instrument — a stock, bond, or fund share — represented as a tokenized asset. The "payment" leg is the cash used for payment, which must also be onchain, typically as a stablecoin or tokenized deposit. For this mechanism to be trusted, both tokens must have verifiable integrity.

    Related readHow does buying a tokenized fund share actually differ from buying through a traditional broker?16 min

    Stablecoins provide the cash leg on the same rails as the asset, which is what makes true onchain delivery versus payment possible. Without a form of money that lives on the blockchain, the payment side has to settle on a separate system and the transaction cannot be atomic.

    This is why the tokenization of the payment leg — USDC, tokenized bank deposits, regulated stablecoins — matters as much as the tokenization of the security itself.

    The DvP process unfolds in a single, atomic transaction where both parties deposit their assets into the smart contract. The contract verifies that both the asset and payment are present, then instantaneously executes the swap.

    How a tokenized security is built to accept DvP

    Not every token is a security token. A token standard designed for regulated assets must encode compliance logic directly into the transfer mechanism, because a tokenized security cannot be freely sent to any wallet the way a utility token can.

    The ERC-3643 standard can embed identity verification, transfer restrictions, and compliance logic directly into a token, making it ideal for regulated assets like real estate, securities, and private funds.

    ERC-3643 works by incorporating a decentralised validation system, which includes an onchain identity management system and a set of compliance rules. When a transfer of ERC-3643 tokens is initiated, the decentralised validator engages to perform compliance and eligibility checks. If the transfer meets the compliance requirements, the tokens are allowed to be transferred; otherwise, the transfer is rejected.

    This means that a security token, before it can move from seller to buyer, must confirm that the receiving wallet belongs to an eligible investor. The compliance module is a modular set of rules governing which transfers are permitted. Rules can restrict transfers by country, investor type, holding period, maximum holder count, or any custom condition. Rules are composable — stack the ones you need and leave out the rest.

    Related readHow does fractional ownership through tokenization work?19 min

    The practical implication for a settlement agent or fund administrator: the token itself enforces transfer rules that would otherwise require manual checks and sign-offs. Every token is tied to a verified onchain identity, allowing issuers and regulators to track legal ownership across the lifecycle of the asset. ERC-3643 provides the compliance and governance layer that ERC-20 lacks, making it possible for institutions to issue, manage, and trade securities onchain without sacrificing regulatory oversight.

    These compliance checks happen inside the same transaction that moves the token. If the buyer's wallet fails the eligibility check, the entire transaction reverts. The seller's cash does not leave, and the buyer's token does not arrive. This is not a rejection notice followed by a manual reversal — it is a failed atomic operation, with no residual exposure on either side.

    What happens at the moment of settlement: a worked scenario

    Consider a private credit fund issuing tokenised notes with a face value of $5,000,000 (AUD 7,750,000) to a group of qualified investors across two jurisdictions. The issuer has engaged a transfer agent, a fund administrator, and a placement agent. Three investor wallets are confirmed eligible. The payment leg is denominated in USDC.

    Under traditional process, even with digital documentation, the sequence looks something like this: investor wires funds to a collection account, the fund administrator confirms receipt, the transfer agent updates the register, and the notes are then allocated. Each of those steps sits on a different system, runs on a different timeline, and generates a different paper trail. Settlement can take days. During that window, the fund holds investor cash but the investor does not yet hold the security. Or the reverse.

    Related readHow does tokenized private credit work?19 min

    Under atomic DvP, the sequence collapses into a single moment.

    Atomic DvP settlement, in one transactionWorked scenario: tokenised notes paid for in USDC
    1. The contract holds the securityThe smart contract holds the security token on behalf of the seller.
    2. The investor delivers USDCThe investor delivers USDC — the exact negotiated amount — to the contract address.
    3. The contract checksIs the buyer's wallet in the identity registry? Does it carry the required eligibility claims? Is the correct amount of USDC present?
    4. The contract executesOnly when all conditions resolve true does the contract execute: the security token moves to the buyer's wallet, and the USDC moves to the seller's designated address. Both legs must be confirmed for either to execute simultaneously. If either fails, both revert.

    There is no moment at which the investor has paid and does not hold the security. There is no moment at which the fund holds the security and has not received the cash. The transaction either completes as designed, or it does not happen.

    The blockchain becomes the neutral venue where both legs settle simultaneously and trustlessly.

    The multi-party proceeds problem

    Here is where atomic DvP meets the real complexity of securities transactions: the payment is almost never a clean transfer from one party to one counterparty. Closing a tokenized securities deal typically involves distributing proceeds to several parties at once — the selling entity or issuer, the placement agent carrying a commission, a fund administrator fee, legal retainers, and in syndicated structures, multiple co-sellers at pre-negotiated percentages.

    Under traditional settlement, those distributions require a waterfall: funds arrive at a collection point, a settlement agent reviews the closing statement, wires are sent sequentially, and each recipient reconciles independently. The process can take hours or days. Each outbound wire is a separate operation that can fail, be delayed, or arrive in the wrong amount. Reconciliation is manual. Disputes are common.

    The question for onchain settlement is whether the atomic guarantee of DvP can extend to the multi-party distribution that follows — and the answer, with the right routing infrastructure, is yes.

    This is where a tool like shaka.deal becomes directly relevant. Shaka.deal is a non-custodial onchain payment router on Ethereum. When an agreed transaction amount arrives, the router distributes it instantly to every designated party at pre-set shares, within the same transaction. The split is not a subsequent operation — it is simultaneous with receipt. Every party's share lands in the same block, with the same transaction hash as the proof of settlement.

    Related readHow funds are distributed when a tokenized asset transfers20 min

    For a settlement agent coordinating a tokenized note closing, that means the entire proceeds distribution — issuer, placement agent, administrator, any co-issuing entity — can be programmed into the routing layer before the deal closes. When the buyer's USDC arrives, it is not held and then manually distributed. It moves through the router and reaches every party in the same instant that the transaction confirms.

    Onchain-native rails push the primitives into the settlement layer itself. Split payouts become a single transfer with multiple destinations.

    The settlement agent's role in this model is not diminished — it is clarified. The agent defines the split, verifies the wallet addresses, confirms the closing conditions, and signs off on the configuration before execution. The router then executes precisely what was agreed. What is removed is not the agent's authority but the operational lag, the reconciliation burden, and the exposure window between agreement and payment.

    Finality and why it matters for professionals

    Settlement finality — the point at which a transaction is irreversible and legally complete — is a concept that traditional settlement infrastructure handles through a combination of central bank settlement, clearing rules, and contractual netting agreements. It is not instantaneous. T+1 in the United States means that even after a trade executes, there is a full business day during which the position exists in a state of provisional settlement.

    Traditional markets settle T+1 (moving toward T+0 for some asset classes). Tokenized securities can settle in minutes through atomic DvP. This eliminates counterparty risk, reduces capital requirements (no margin needed during the settlement window), and improves capital efficiency for all participants.

    Related readHow income from a tokenized asset reaches holders21 min

    Onchain transactions confirmed on Ethereum achieve deterministic finality. Once the block is finalised, the state change is permanent.

    Deterministic finality means that once the atomic step completes, neither side can claw back.

    For OTC desks handling large block trades in tokenized securities, this finality has direct balance-sheet implications. When settlement takes two days, capital sits idle as collateral against the gap. When counterparties depend on intermediaries to guarantee delivery, they inherit those intermediaries' credit risk. Onchain settlement is being adopted precisely because it targets both problems at once.

    Cross-chain DvP and the interoperability challenge

    The cleanest atomic DvP scenario is single-chain: the security token and the stablecoin both live on Ethereum, the smart contract can atomically swap them, and finality is governed by the same consensus mechanism. That is the scenario described above, and it is increasingly common for new tokenized issuances that are structured with onchain payment in mind from the start.

    The harder problem is cross-chain DvP, where the security token and the payment token exist on different networks. This scenario arises frequently in practice because institutional participants often have infrastructure on different chains, and legacy tokenization programmes may have issued securities on one network while payment infrastructure evolved on another.

    DvP settlements can take place across two separate chains, enabling the asset and cash legs to operate independently while settling atomically, without any counterparty risk. This lock-and-release mechanism ensures settlement is secure, synchronised, and risk-free.

    A concrete proof of concept: Fasanara issued ERC-3643-based security tokens on Polygon using Tokeny's onchain finance platform, while ABN AMRO issued cash tokens on Base. With the compliance infrastructure and this cross-chain setup, the security leg and cash leg were on different blockchains, yet the settlement was near-real-time.

    Related readHow is real world asset tokenization regulated?19 min

    The interoperability layer — the protocol coordinating the lock-and-release across chains — introduces its own operational and counterparty considerations. For the settlement professionals managing these transactions, the important discipline is understanding where in the stack the atomic guarantee actually sits: whether it is enforced at the smart contract level on a single chain, or coordinated across chains by a bridge protocol with its own trust assumptions. These are not equivalent risk profiles, and the choice of infrastructure should be made deliberately, in consultation with legal and compliance counsel.

    The role of the transfer agent in a tokenised DvP world

    The blockchain records token movement, but a party still has to hold the legally recognised register, apply transfer restrictions, run corporate actions, and reconcile the ledger against the issuer's books. In some models the onchain balances are treated as the legal register directly; in others the chain mirrors an offchain authoritative record. Either way, the transfer agent function persists.

    What onchain settlement changes for the transfer agent is the speed and certainty of the register update. Capital is not tied up for a business day or more waiting for a transfer to clear, because token movement and the register update can happen close to atomically. Instead of tracing ownership through layers of intermediaries, the holder position is visible on the ledger, subject to compliance controls on who can hold.

    Programmable corporate actions — distributions and redemptions — can be executed by contract logic against the holder set, reducing manual processing and reconciliation lag. Continuous reconciliation replaces periodic batch checks; a firm can compare onchain state against its books on an ongoing basis, catching discrepancies sooner.

    Related readHow is the NAV of a tokenized fund actually calculated, and who verifies it?16 min

    For fund administrators, this shifts the workflow from reactive reconciliation — catching errors after the fact — to proactive configuration: encoding the correct distribution logic before the transaction executes, then verifying that what happened onchain matches what was agreed.

    Regulatory context in 2026

    Regulatory frameworks around tokenized securities are maturing. Tokenized securities are still securities — the SEC has been explicit on this point, and the onchain representation of a security does not alter the legal obligations that govern its issuance, transfer, and administration. The SEC Division of Corporation Finance, Division of Investment Management, and Division of Trading and Markets issued a statement setting forth a basic taxonomy of tokenized securities, reiterating the principle that securities, however represented, remain securities.

    Structures that function as enhanced recordkeeping and custody mechanisms, such as Nasdaq-style tokenized settlement or DTC tokenized entitlements, can be built within the existing securities law architecture, subject to careful attention to Uniform Commercial Code issues, broker-dealer customer protection rules, and market structure requirements.

    The DTC has also signalled meaningful movement. The SEC Division of Trading and Markets issued a no-action letter stating that it would not recommend enforcement against the Depository Trust Company if DTC operates a tightly scoped, three-year pilot to tokenize DTC-custodied assets on supported blockchains. DTC aims to launch the pilot in the second half of 2026.

    For practitioners, the current moment is one of genuine optionality: the infrastructure to execute atomic DvP on Ethereum exists, the legal frameworks are being specified, and the institutions with the largest stakes in the outcome — clearinghouses, custodians, major asset managers — are actively building and testing in this space. This is why atomic settlement is so central to the institutional interest in tokenisation: the technology delivers, as a native capability, the settlement guarantee that traditional finance has spent decades and fortunes trying to approximate.

    Related readHow payment works when a tokenized asset changes hands19 min

    What this means for the professionals who close these deals

    A tokenized security transaction coordinated by a settlement agent using onchain atomic DvP and onchain payment routing looks operationally different from a traditional closing — but it does not eliminate the need for the professionals who structure and administer it. It changes what they spend their time on.

    Before execution, the work is configuration: wallet eligibility is confirmed, the identity registry is populated, the compliance rules for the security token are reviewed and agreed, the payment routing is programmed with the correct shares for every party, and the closing statement is reconciled against the router parameters. This is still closing coordination. It requires the same legal and financial judgment it always has. The difference is that once the configuration is correct and the parties have confirmed, execution is deterministic.

    After execution, the blockchain provides an immutable record: the transaction hash proves that the security token moved from seller to buyer, that the USDC moved from buyer through the router to every payee simultaneously, that the compliance checks passed, and that all of this occurred in a single confirmed block. The audit trail writes itself.

    For OTC desks, the compressed settlement cycle has direct capital efficiency implications — positions are no longer provisionally open for a business day after a trade confirms. For closing attorneys, the executed transaction hash serves as a timestamped record of exactly what settled and when. For fund administrators, the distribution logic encoded into the routing layer matches, precisely, the closing statement that was agreed before execution.

    Atomic DvP reduces principal and settlement risk by removing partial-settlement outcomes. Onchain settlement can enable near real-time and 24/7 settlement, assuming both legs are onchain and finality is well-defined.

    Shaka.deal handles the payment routing side of that equation: one incoming payment amount, preset shares to every party, simultaneous payout, final settlement — within the same transaction that closes the deal. The router never holds funds. It routes them, with certainty, at the moment of receipt.

    The atomic guarantee — delivery and payment together, or neither — is what makes tokenized securities genuinely different from their traditional equivalents. Not as a marketing claim, but as a structural property of the settlement mechanism. Understanding that property, at the level of mechanics rather than headlines, is what allows settlement professionals to evaluate whether a given tokenization infrastructure actually delivers it, or merely approximates it with new terminology applied to the same sequential process.

    The gap between those two things is where the risk lives.

    Kooky
    Written by
    Kooky

    25+ years shipping on the web, onchain since Bitcoin's early days. Kooky built Shaka so that everyone who closes a deal together gets paid together, the day it closes.

    The story behind Shaka