Research

11 min read

Institutional Crypto's Next Phase Is Confidential Settlement

The privacy stack takes shape.

Institutional Crypto's Next Phase Is Confidential Settlement

Published on

May 26, 2026

Introduction

The standard objection to public blockchains for institutional settlement has always been the ledger itself. It sees everything. A bank cannot route a $500 million repo across a network where every counterparty can read the position size, the interest rate, and the underlying asset before the trade clears. In 2026, that objection is being engineered out of the protocol layer.

Global stablecoins now exceed $320 billion in supply and processed roughly $11 trillion in adjusted transaction volume across 2025, nearly rivaling Visa's annual payment volume. The institutional flows behind those numbers are pushing harder against the same constraint: there is no point routing trillions through a ledger that gives every competitor a real-time view of the trade. The piece of the puzzle that has been missing for a decade, a privacy stack that mirrors how traditional finance already works, is finally being built.

Confidentiality vs anonymity: understanding what Wall Street wants

Early crypto sought to obscure the sender. Institutions seek to obscure the trade. Though frequently conflated, they address fundamentally different problems.

Anonymity hides who is sending money, which breaks every AML and KYC rule on the books. Institutional confidentiality hides the terms, sizes, and strategies, while keeping the identity of the parties fully verified and reportable. The closest traditional analog is a wire transfer between two named corporations where the public cannot read the balance. The market the regulator sees is glass-box transparent. The market the competitor sees is shielded.

In practice, this works through selective disclosure. Identities stay KYC-verified at the wallet layer, and view keys give auditors and regulators per-transaction access when supervision requires it. Competitors stay locked out. Compliance is a property the stack needs to be engineered around, rather than a hurdle for regulators to clear.

The recent wave of public-chain privacy upgrades makes more sense in that light. They are an effort to catch up to the workflow protections that Wall Street has used for forty years.

The institutional movement on-chain

Two distinct movements are running in parallel. The first is the broader migration of regulated capital onto on-chain rails, which has already passed the point of pilot. The second is the more recent commitment of that capital specifically to the confidentiality-enabled versions of those rails. Read together, they explain why the privacy layer is the next institutional unlock rather than a niche cryptography topic.

Institutions are already on-chain at scale

Beyond the stablecoin volumes cited above, the tokenization side of TradFi adoption is moving quickly:

  • DTCC's hard-dated roadmap. On May 4, 2026, the DTCC formally advanced its DTC Tokenization Service with a 50-firm working group that includes BlackRock, Bank of America, and Citadel. Initial production trades of tokenized Russell 1000 equities and T-Bills are scheduled for July 2026, with a full commercial launch in October 2026.
  • 150× growth in tokenized funds. Tokenized funds have grown from roughly $0.1 billion in early 2024 to approximately $15 billion today, with BlackRock's BUIDL fund alone surpassing $2.5 billion in AUM by 2025.

As volumes of this size route through public-chain and shared-ledger infrastructure, the transparent ledger stops being a feature and becomes a structural liability. The next logical move was always going to be the privacy layer.

And the confidentiality layer has reached production

That move arrived inside a roughly five-week window in March and April 2026, when three independent pieces of the privacy stack went from research to deployable production:

  • Ethereum introduced ERC-7984 in April 2026, the new confidential token standard whose transaction amounts are hidden by default at the protocol level while remaining verifiable for compliance. It is the building block that lets institutional flow settle on Ethereum without leaking position sizes.
  • T-REX Network and Zama partnered on March 24, 2026 to embed Fully Homomorphic Encryption directly into ERC-3643, the compliance-focused token standard for permissioned tokenized securities. ERC-3643 already secures $32 billion in tokenized real-world assets across regulated venues, and the upgrade hides trade sizes and balances on-chain.
  • Canton Network moved its DTCC U.S. Treasury repo pilot from test to production MVP, with its Global Synchronizer settling trades atomically across institutional ledgers while keeping each party's pre-trade state private.

The volumes already routing through confidentiality-enabled infrastructure tell the rest of the story:

  • $6 trillion across 600+ institutions on Canton. Canton Network manages more than $6 trillion in tokenized real-world assets, with Goldman Sachs, J.P. Morgan, BNY Mellon, BNP Paribas, DTCC, and Circle active in the ecosystem.
  • $350 billion in daily Treasury financing. Broadridge's Distributed Ledger Repo platform, running on Canton, clears an average daily volume of over $350 billion, pushing monthly volumes past $7 trillion.
  • JPM Coin coming to Canton. In January 2026, Kinexys by J.P. Morgan and Digital Asset announced a phased rollout to bring JPM Coin natively to the Canton Network, establishing what will be the primary institutional cash settlement rail for these private flows.
  • APEX Group's $100 billion commitment. APEX Group, which manages $3.5 trillion in assets, has publicly committed to tokenizing $100 billion by June 2027, adopting the newly launched Polygon-powered T-REX Ledger, which operates on the ERC-3643 standard. The commitment is dated, large, and tied specifically to the confidentiality-enabled version of the standard.
  • 400+ enterprise clients on encrypted Ethereum. Zama's integration with the Dfns wallet stack routes more than 400 enterprise clients through encrypted settlement on Ethereum.

For the first time, institutional settlement infrastructure treats confidentiality as a protocol-level guarantee rather than a contractual one. Industry leaders from Chainlink to ANZ to T-REX have publicly named privacy as a prerequisite for institutional on-chain settlement, and the volumes above show why.

The players building the stack

Several distinct design approaches are converging on the same destination. Five players have emerged as the institutional reference points across the stack.

Zama: encryption for public chains

Fully Homomorphic Encryption (FHE) lets a smart contract verify that a trade is compliant and properly funded without ever seeing the dollar value, the asset, or the counterparty. Zama is the leading provider. Its FHEVM v0.9 release deployed alongside 13 independent operators including Ledger, Fireblocks, LayerZero, and OpenZeppelin, plus a 10× improvement in decryption speed. The technology is what makes confidential settlement on Ethereum operationally feasible at production scale.

Canton: synchronized private ledgers for regulated counterparties

Canton Network takes a different route. Each institution keeps its own private ledger, but a shared clock allows two counterparties to settle a trade in the same instant, with each side's positions visible only to itself and its custodian. The model is purpose-built for bilateral institutional flows: Treasury repo, OTC derivatives, and intraday liquidity.

Chainlink's Privacy Standard and CCIP Private Transactions let institutional subnets, including ANZ Bank under Australia's Project Guardian, execute cross-chain trades while keeping the underlying data fully encrypted. Sensitive details are processed off-chain inside secure hardware enclaves, and only a tamper-proof cryptographic fingerprint is anchored to the public ledger.

Fhenix: confidential Layer 2 throughput

Fhenix is the EVM-compatible confidential Layer 2, led by Guy Itzhaki, formerly Intel's FHE lead. Developers write standard Ethereum code while operating on private state. Building on a landmark academic breakthrough that demonstrated a 20,000× acceleration in processing throughput, Fhenix pushed its Threshold FHE Decryption capabilities into active developer rollouts in April 2026. The figure matters because it is the first credible path to running high-frequency institutional trading inside an encrypted Ethereum sandbox.

NEAR Protocol: intent-based cross-chain confidentiality

NEAR tackles privacy through execution abstraction rather than pure on-chain math. After its Nightshade 3.0 upgrade and Calimero Network integration, NEAR launched Confidential Intents: institutions broadcast the desired end-state of a trade rather than route it through a public mempool where MEV bots front-run order flow. Execution runs inside a TEE-based private shard and settles atomically across 35+ public chains, bypassing the zero-knowledge proof overhead that slows legacy privacy chains. Order sizes and execution paths stay dark, with built-in view keys preserving regulatory access.

Together, these five players give institutional users a broad menu of confidentiality options matched to the workflow. Zama and Fhenix handle encrypted settlement on public chains. Canton handles bilateral institutional flows like Treasury repo. Chainlink and NEAR handle cross-chain confidentiality, with NEAR adding intent-based routing that bypasses mempool leakage entirely. The privacy layer is bifurcating along the same lines that already separate exchange-listed and bilateral markets.

What this means for institutional allocators

When pre-trade confidentiality becomes a feature of the protocol rather than a side agreement, the categories of institutional flow that have stayed off public chains begin to migrate. Tokenized real-world assets become viable at the next tranche. Tokenized Treasuries become viable for production repo, with the DTCC's July and October 2026 launch dates serving as hard milestones.

The standard objection to holding tokenized assets, that the workflow leaks information competitors can trade against, is being closed by 2026 deployments rather than long-dated research. Confidentiality has crossed from a compliance objection into a feature of the protocol layer, and the institutional flows that depended on it for the past four decades finally have a credible on-chain destination.

FAQ

What does pre-trade confidentiality mean on a public chain?

The ability to verify a trade is compliant and properly funded without exposing position size, counterparty, or asset to other market participants before settlement.

How is institutional confidentiality different from retail anonymity?

Anonymity hides the sender's identity, which breaks AML and KYC rules. Confidentiality keeps identities fully verified and reportable to regulators while hiding trade terms from competitors.

How does Canton Network differ from FHE-based public chains?

Canton uses synchronized private ledgers to coordinate atomic settlement across institutional counterparties while keeping pre-trade state private. FHE-based chains keep state private inside a single public network.

What are ERC-3643 and ERC-7984?

ERC-3643 is the compliance-focused token standard for permissioned tokenized securities, with identity and transfer rules enforced at the token layer. ERC-7984 is Ethereum's new confidential token standard, which hides transaction amounts at the protocol level while keeping the flow auditable.

How does selective disclosure work?

Trade details are encrypted on-chain, but view keys allow authorized auditors and regulators to decrypt specific transactions or accounts when supervision requires it. Public observers and competing market participants see only the existence of a transaction, not its contents.

About Luganodes

Luganodes is a world-class, non-custodial blockchain infrastructure provider that has rapidly gained recognition in the industry for offering institutional-grade services. It was born out of the Lugano Plan B Program, an initiative driven by Tether and the City of Lugano. Luganodes maintains an exceptional 99.9% uptime with round-the-clock monitoring by SRE experts. With support for 40+ PoS networks and serving 60+ institutional cliens, it ranks among the top validators on Polygon, Polkadot, Sui, and Tron. Luganodes prioritizes security and compliance, holding the distinction of being one of the first staking providers to adhere to all SOC 2 Type II, GDPR, and ISO 27001 standards as well as offering Chainproof insurance to institutional clients.

The information herein is for general informational purposes only and does not constitute legal, business, tax, professional, financial, or investment advice. No warranties are made regarding its accuracy, correctness, completeness, or reliability. Luganodes and its affiliates disclaim all liability for any losses or damages arising from reliance on this information. Luganodes is not obligated to update or amend any content. Use at your own risk. For specific guidance, please consult a qualified professional.

Subscribe and Stay Informed

Product updates, supported networks, research insights, and announcements delivered directly to your inbox.

Your Email

Staker Type

By subscribing, I accept the privacy policy.

Have a question?

Supporting clients across global markets.