Central Securities Depository for Tokenized Securities

A plain-English guide to how a central securities depository works in traditional finance, and what its onchain equivalent looks like for tokenized securities.

Share
Central Securities Depository for Tokenized Securities

A central securities depository (CSD) is the institution that holds securities in book-entry form and settles trades by updating ownership records rather than moving physical certificates. In the United States, that function sits mostly with the Depository Trust Company (DTC) and its parent, DTCC. A central securities depository for tokenized securities is the emerging onchain equivalent: the layer that records who owns a tokenized asset, settles transfers, and keeps corporate-action state accurate. In tokenized markets, blockchains perform part of that recordkeeping natively, but the full institutional stack around them is still being built.

Key takeaways

  • A CSD holds securities as electronic records and settles trades through book-entry, replacing the physical certificates that once had to change hands.
  • In traditional markets, DTC (founded 1973), NSCC (1976), and their merger into DTCC (1999) centralized custody and clearing so trades could settle safely at scale.
  • A blockchain can perform the raw recordkeeping and settlement a CSD does, but it does not automatically provide the legal, custody, and corporate-action functions that a full depository handles.
  • Tokenized securities still need a token security master (chain plus contract address plus corporate-action state) and continuous reconciliation of onchain records against a firm's own books.
  • The onchain equivalent of a depository is not a single finished institution today. It is a set of functions distributed across chains, issuers, custodians, and data layers.

Why this matters now

Tokenized securities have moved from pilot decks into live products. Tokenized US Treasury funds, money market funds, and equity-linked instruments now trade on public and permissioned chains, issued by firms building serious operational infrastructure around them. As those markets grow, the question stops being "can we mint a token" and becomes "who is the authoritative record of ownership, and how does settlement finality actually work."

That is the depository question. In traditional finance, the answer is well understood. DTC holds the securities, NSCC nets and guarantees the trades, and settlement in US equities moved to T+1 in 2024. The system exists because centralizing custody and clearing removed enormous counterparty and operational risk from a market that once drowned in paper certificates during the 1960s paperwork crisis.

Onchain markets promise instant, atomic settlement without a central custodian holding every position. That is a genuine structural change. It also raises new questions that the traditional depository model already solved: legal ownership, dispute resolution, corporate actions, and a reliable single view of who holds what. Understanding the CSD function is how you evaluate whether an onchain design has actually replaced it or merely relocated it. For the broader context, see our complete guide to onchain financial market infrastructure.

How a central securities depository works

The traditional depository model works in a clear sequence, and it helps to see it step by step before mapping it onchain.

  1. Immobilization and dematerialization. Instead of investors holding paper certificates, the CSD holds securities centrally, first by immobilizing physical certificates and later by dematerializing them into pure electronic book-entry records.
  2. Book-entry ownership. Ownership is tracked as entries in the depository's records. A trade settles when the depository debits one account and credits another, no certificate moves.
  3. Clearing and netting. A central counterparty (NSCC in US equities) nets many trades down to a small number of obligations and guarantees settlement, reducing the cash and securities that actually have to move.
  4. Settlement finality. On settlement date (now T+1 for US equities), the transfer becomes final and irrevocable.
  5. Corporate actions and the shareholder register. A transfer agent maintains the official register on behalf of the issuer, processing dividends, splits, and votes. The depository coordinates distributions to the accounts it holds.

Every one of these steps has a legal backbone. SEC Rule 15c3-3, the possession-and-control rule, requires broker-dealers to segregate and control customer securities so they are protected if the firm fails. The depository model is a legal framework for who owns what and what happens when something goes wrong.

What the onchain equivalent looks like

A public blockchain natively performs several functions a CSD provides. A token contract records balances (book-entry ownership). A confirmed transaction settles a transfer (settlement). Atomic settlement can make delivery-versus-payment instantaneous, removing the settlement lag that T+1 still carries. In that narrow sense, the ledger is a depository.

The gap is everything around the ledger. A blockchain does not know the legal identity behind a wallet, cannot by itself run a rights offering, and does not maintain a shareholder register recognized by a corporate registry. Tokenized securities therefore still rely on issuers, transfer agents, and custodians to connect the token to enforceable legal ownership. Our explainer on how onchain stocks work walks through this issuer-and-custodian layer in detail.

Two operational needs stand out. First, a token security master: a definitive reference that ties an asset to its chain, its contract address, and its current corporate-action state. Without a shared identifier standard, the same tokenized security can exist as different contracts on different chains with no automatic way to know they represent the same claim. Our guide to an identifier for tokenized securities covers why this is unresolved. Second, reconciliation: firms must continuously check that onchain balances match their own books, because their accounting, compliance, and reporting all depend on a trusted internal record.

Where the data layer fits

Reading onchain markets reliably is harder than it sounds. Venues are fragmented across many chains, DeFi automated market makers, perpetuals platforms, and tokenized alternative trading systems. There is no single consolidated price tape and no universal asset identifier today, which is exactly the problem the traditional consolidated tape and CUSIP (created 1968) solved for legacy markets.

This is where an onchain data layer becomes part of the depository conversation. Allium provides enriched, normalized, and labeled onchain data that institutions use to read tokenized and onchain markets. It is a read and data layer, not a venue, custodian, clearing house, or transfer agent. Reliable data is what lets a firm reconcile onchain records against its books and understand corporate-action state across chains. You can see how practitioners use this kind of data in our conversation on how Ondo turns onchain activity into market intelligence.

Traditional CSD versus the onchain model

FunctionTraditional CSD (DTCC model)Onchain equivalent for tokenized securities
Ownership recordBook-entry in the depository's ledgerToken balances in a smart contract on one or more chains
SettlementNet settlement on T+1 with central guaranteeAtomic, near-instant delivery-versus-payment onchain
Legal identityKnown accounts and regulated intermediariesWallets, with identity added by issuers and custodians
Corporate actionsTransfer agent maintains the register; CSD distributesHandled off-ledger by issuer or transfer agent, reflected onchain
Single price referenceSIP consolidated tape and NBBOEmerging; no single tape across fragmented venues today
Asset identifierCUSIP and ISINEmerging; chain plus contract address, no universal standard

Concrete benefits, stated as before and after

Faster settlement: in the T+1 model, capital and securities are locked up for a business day waiting to settle. With atomic onchain settlement, delivery and payment clear together, so that capital is not tied up in transit.

Fewer failed trades: settlement fails happen when the securities or cash are not delivered on time in a netted, deferred system. Atomic settlement either completes fully or not at all, removing the partial-fail state.

Continuous auditability: reconciling positions traditionally means requesting and matching statements from intermediaries. With a shared ledger plus reliable onchain data, a firm can verify balances directly and reconcile against its own books on demand.

Programmable corporate actions: a dividend or coupon that once required batch processing through the depository and transfer agent can, over time, be encoded to distribute automatically to holders of the token.

Risks and open questions

The honest status is that a full central securities depository for tokenized securities does not exist as one finished institution. Several questions are genuinely unresolved.

  • Legal finality. A confirmed transaction is technically final, but courts and regulators have not fully settled how onchain settlement interacts with securities law, bankruptcy, and the possession-and-control protections in Rule 15c3-3.
  • Fragmentation. The same asset can exist across multiple chains with no universal identifier, which reintroduces the reconciliation problem that CUSIP and central custody were built to solve.
  • Corporate actions. Rights offerings, voting, and complex distributions still depend on off-ledger legal processes. Encoding them fully and reliably onchain is early work.
  • No consolidated tape. Fragmented venues mean there is no single trusted price reference across the onchain market yet, which matters for valuation, best execution, and reporting.
  • Custody and recovery. Self-custody removes an intermediary but also removes the dispute resolution and error correction that a regulated depository provides. Institutions need clear answers on what happens when keys are lost or transactions are made in error.

These are the same problems the traditional depository model was built to solve, now being re-examined for onchain markets. Firms building institutional trust here lean on independent, verifiable data to answer them, a pattern visible in how Stellar approaches institutional trust. Getting the depository function right, in whatever distributed form it takes, is what will let tokenized securities scale beyond pilots.

Frequently asked questions

What is a central securities depository for tokenized securities?

It is the emerging onchain equivalent of a traditional CSD like DTCC. It refers to the layer that records ownership of a tokenized asset, settles transfers, and keeps corporate-action state accurate. A blockchain performs part of this natively through token balances and confirmed transactions, but the full legal, custody, and corporate-action functions are still handled by issuers, transfer agents, and custodians around the chain.

Does a blockchain replace DTCC?

Not entirely. A blockchain can replicate the book-entry recordkeeping and settlement a depository provides, and it can settle atomically rather than on T+1. It does not by itself provide legal identity, dispute resolution, a recognized shareholder register, or the possession-and-control protections that a regulated depository and transfer agent supply. Those functions currently sit off-ledger.

How are tokenized securities settled?

Onchain, a trade settles when a transaction transferring the token is confirmed. Delivery-versus-payment can be atomic, meaning the asset and payment change hands together or not at all. This differs from the traditional US equity model, which nets trades through a central counterparty and settles on T+1.

Why do tokenized securities need a token security master?

Because the same tokenized security can exist as different contracts on different chains with no automatic link between them. A token security master ties an asset to its chain, contract address, and current corporate-action state, giving firms a definitive reference to reconcile positions and process events correctly.

Is there a universal identifier for tokenized securities like CUSIP?

Not yet. Traditional markets use CUSIP and ISIN as universal identifiers. Onchain, an asset is identified by its chain and contract address, and there is no single accepted standard that maps the same claim across multiple chains. This is an active, unresolved area.

What role does onchain data play in the depository function?

Reliable onchain data lets institutions reconcile onchain balances against their own books, track corporate-action state, and read fragmented markets that have no consolidated price tape. Allium provides enriched, normalized, labeled onchain data as a read layer for this purpose. It is not a venue, custodian, clearing house, or transfer agent.