Canton Network is the permissioned interoperability layer for institutional tokenisation, sponsored and operated by Digital Asset and governed through the Canton Foundation, where DTCC and Euroclear took co-chair seats in late 2025. The network's design point is that participating institutions can run their own application "domains" with their own privacy and operating constraints while still settling against shared assets across domains, with a Global Synchronizer providing the shared ordering and finality layer. By late 2025, around USD 6 trillion of tokenised assets had been issued or processed on Canton, with Super Validators handling roughly 700,000 daily transactions and USD 9 trillion in monthly volume (scale figures via Canton documentation). For an institutional tokenisation operator, Canton has become the default permissioned bank-grade rail for tokenised-collateral, repo, fund-tokenisation, and CSD-anchored asset programmes, with the bank-and-CSD governance set giving it credibility that competing permissioned ledgers have not matched.
What it is
Canton is a permissioned interoperability network built on DAML smart contracts running across application-specific sub-networks (Canton calls them domains), each holding its own sub-ledger. A decentralised Global Synchronizer routes encrypted messages between domains and orders transactions via 2/3 BFT (Byzantine fault tolerant) consensus, so Super Validators see ordering metadata but never raw contract state. Privacy is enforced at the protocol level: counterparties exchange encrypted payloads peer-to-peer, with the synchroniser handling sequencing and finality only.
The network is permissioned at the application level (no retail access, validators by invitation), and the participant set is concentrated in institutional financial counterparties: GSIBs, asset managers, market-infrastructure operators, and tokenisation-platform vendors. The named participating set published by the network includes Goldman Sachs, BNY, DTCC, BNP Paribas, Cboe Global Markets, S&P Global, HSBC, Euroclear, Nomura, Mizuho, JSCC, Broadridge, BlackRock, Fidelity, Federated Hermes, and Citadel Securities, among others.
The Canton Coin is the native unit of account for Super Validator economics, with the validator-incentive design intended to align participation costs and rewards across the operator set. The coin is not a payment stablecoin in the GENIUS Act or MiCA sense; it is a network-economics primitive that sits inside the Canton governance perimeter. The coin's broader market behaviour and any exchange listings should be checked against current Canton Foundation disclosure rather than assumed from this entry.
Operating model
Each sub-network on Canton operates under the licence of its operator. DTC custody rules apply to the DTCC-operated tokenised Treasuries domain; the JFSA Book-Entry Transfer Act applies to the Japanese tokenised JGB collateral pilot domain operated by Nomura, Mizuho, and JSCC; the relevant bank licence applies to a bank-operated tokenised-deposit domain. The chain inherits whichever wrapper applies off-chain. The Global Synchronizer sits under Canton Foundation governance, with DTCC and Euroclear co-chairing and Super Validators voting on changes via on-chain BFT.
The network's operational primitive on the cross-domain side is that two counterparties operating in different domains can settle atomically across domains by passing through the Global Synchronizer, which orders the cross-domain transaction without seeing the underlying contract state. That is the structural feature that lets Canton run tokenised collateral in one domain settling against tokenised cash in another without either domain seeing the full economic picture of the counterparty in the other. The privacy partitioning is therefore both the strength (bank-grade confidentiality) and the constraint (liquidity is fragmented across domains, and atomic flows across domains rely on the Global Synchronizer as the only shared ordering layer).
Production deployments span several asset-class threads. Tokenised collateral and repo: Broadridge's DLR (Distributed Ledger Repo) platform settles via Canton, with USD 339 billion in average daily repo volume during September 2025. Tokenised MMFs (money-market funds): the BNY plus Goldman Sachs tokenised MMF solution wired BNY's LiquidityDirect to GS DAP on Canton in July 2025 to issue mirrored tokens of MMF shares from BlackRock, Fidelity, Federated, Goldman, and BNY (source). Tokenised JGBs: the April 2026 Nomura, Mizuho, JSCC, and Digital Asset trial settling tokenised JGB collateral 24/7 on Canton (Ledger Insights). Tokenised US Treasuries: the December 2025 DTCC commitment to mint a subset of DTC-custodied Treasuries on Canton with a controlled-production MVP targeted for H1 2026 (DTCC). Tokenised funds: Franklin Templeton extended the Benji platform to Canton in November 2025, targeting institutional collateral and liquidity venues that prefer privacy-preserving rails (CoinDesk). JPMorgan deposit token: Digital Asset and Kinexys announced in March 2026 the intent to bring JPMD natively to Canton for institutional clients (PR Newswire).
Why it matters
Three structural reasons. First, the institutional-grade governance combination. The Canton Foundation co-chair seats with DTCC and Euroclear position Canton as the only permissioned bank-grade ledger with both the largest US CSD and the largest EU CSD on the governance body. Competing permissioned ledgers (Hyperledger Fabric deployments, R3 Corda networks, the bank-internal permissioned EVM stacks) do not have comparable cross-jurisdictional CSD governance backing. Second, the asset-class breadth in production. Canton is running tokenised repo (Broadridge DLR), tokenised MMFs (BNY + Goldman), tokenised JGBs (Nomura + Mizuho + JSCC pilot), tokenised US Treasuries (DTCC MVP in H1 2026), tokenised funds (Franklin Benji), and prospective tokenised deposits (JPMD). No other permissioned ledger has demonstrated comparable asset-class diversity in production. Third, the privacy-partitioning architecture is a deliberate design choice that maps to the operational reality of bank-grade institutional flows. Public-chain architectures with full state visibility do not work for institutional counterparties whose competitive intelligence sits in their flow data; Canton's domain-level privacy with cross-domain settlement is the structural pattern that institutional tokenisation has converged on.
The competitive map is partly the bank-internal permissioned EVM stacks (Kinexys, GS DAP, the various single-bank rails), partly the Quorum-derived multi-bank stacks (Partior), partly the public-chain RWA programmes (Centrifuge, the public-chain BUIDL and FOBXX deployments), and partly the Hyperledger Fabric and Corda deployments. Canton's positioning as a multi-counterparty privacy-partitioned network with bank-and-CSD governance is structurally distinct from any of these.
Recent moves
- April 2026. Nomura, Mizuho, JSCC and Digital Asset announced the JFSA-supported tokenised JGB collateral trial running through September 2026 (Ledger Insights).
- March 2026. Digital Asset and Kinexys announced intent to bring JPMD natively to Canton for institutional clients (PR Newswire).
- December 2025. DTCC announced the tokenisation of DTC-custodied US Treasuries on Canton with a controlled-production MVP targeted for H1 2026, taking a co-chair seat on the Canton Foundation alongside Euroclear (DTCC).
- November 2025. Franklin Templeton extended the Benji platform to Canton (CoinDesk).
- July 2025. BNY plus Goldman Sachs tokenised MMF solution went live, wiring BNY's LiquidityDirect to GS DAP on Canton (source).
- April 2024. Canton Network launched as a permissioned interoperability network with a public consortium announcement.
Open questions
- The cash-leg architecture on the JSCC tokenised JGB collateral trial: whether Canton is used as the asset ledger only or also as the cash leg ledger (and if cash is tokenised, whether it is Progmat trust-issued, JPMD, or otherwise).
- The asset-class scope on the DTCC Treasury MVP. Public coverage frames this as a "subset" of DTC-custodied Treasuries; size and selection criteria are not in current public coverage.
- Whether the JPMD-on-Canton route is a parallel issuance to JPMD-on-Base or the institutional-grade replacement.
- The current consolidated production count of Canton-based pilots vs production deployments. Aggregate volume figures circulate; the per-deployment status map is not consistently disclosed.
- How the DAML authorisation model constrains the kinds of open-ended programmability common on EVM chains, and whether that constraint matters for any agentic-commerce use cases on Canton.