Settlement risk — the risk that one party in a securities transaction delivers their obligation and the other does not, either because of default or operational failure — has been the most persistent counterparty risk in financial markets since securities trading began. Every T+2 settlement cycle, every margin call that requires multi-day processing, every batch settlement window creates a temporal gap between obligation and fulfillment that exposes financial institutions to losses if a counterparty fails in that window. The most famous historical example is Herstatt risk, named for the 1974 failure of German bank Herstatt, whose simultaneous collapse after European banking hours had received DM payments from counterparties but before US dollar payments were made created losses across the international banking system. Atomic DvP eliminates this risk not by reducing it but by making the gap architecturally impossible.
How Traditional Securities Settlement Creates Risk
In the standard T+2 equity settlement model, a buyer and seller agree to a trade today and the securities and cash actually exchange on day 2. In the intervening period, the buyer is exposed to the risk that the seller will not deliver the securities (seller default after trade but before settlement), and the seller is exposed to the risk that the buyer will not deliver the cash. Central counterparty clearing houses reduce this risk by interposing between buyer and seller — but do not eliminate it: the CCP itself carries concentrated counterparty risk, and clearing fund contributions are what backs the CCP’s guarantee.
Even within the same settlement day, the sequential rather than simultaneous exchange of securities and cash creates exposure. A custodian that releases securities at 10am but does not receive cash until 2pm has four hours of unsecured exposure. The credit losses from the Credit Suisse failure in March 2023 included settlement disruptions from exactly this sequential gap across many counterparties simultaneously.
What Atomic Settlement Means in Practice
Mathematical Simultaneity
In a blockchain-native atomic DvP settlement, both the securities transfer and the payment transfer occur in the same transaction, which executes in a single block. If the block is confirmed, both transfers complete; if the block fails to confirm (due to technical error, out-of-gas, or any other reason), neither transfer completes. The settlement outcome is binary: complete simultaneously or not at all. The ‘H+0’ window — the Herstatt risk gap — is architecturally impossible because there is no window; the gap is zero by construction.
Smart Contract-Mediated DvP
For institutional tokenized securities where both the security token and the payment token (stablecoin or CBDC) exist on the same blockchain, smart contract-mediated DvP is the most operationally practical atomic settlement mechanism. The smart contract acts as a neutral escrow: the seller deposits the security token; the buyer deposits the payment token; when both deposits are confirmed and the conditions of the trade are met, the contract simultaneously releases the payment to the seller and the security to the buyer in a single atomic transaction. Neither party can withdraw their deposit while the other’s is also deposited — the contract enforces the simultaneity mechanically.
Atomic Swaps: The Peer-to-Peer DvP Mechanism
How Hash Time-Lock Contracts Work
Atomic swaps use a cryptographic mechanism called a Hash Time-Lock Contract (HTLC) to enable two parties to exchange different tokens across different blockchains without trusting each other or a common intermediary. The mechanism works as follows: Party A generates a cryptographic secret (a preimage) and locks their token in an HTLC, publishing the hash of the secret but not the secret itself. Party B, seeing the hash, locks their token in a corresponding HTLC that can be unlocked by the same secret, with a time limit. Party A reveals the secret to claim Party B’s tokens; this revelation of the secret simultaneously allows Party B to use the same secret to claim Party A’s tokens from the first HTLC. If either party fails to act within the time limit, both HTLCs expire and both parties recover their original tokens.
The atomic property: either both parties reveal the secret and both swaps complete, or neither reveals and both recover their original assets. There is no state in between where one party has delivered and the other has not.
Cross-Chain Atomic Swaps
HTLCs enable atomic swaps not just within a single blockchain but between different blockchains — a Bitcoin for an Ethereum token exchange, for example, without any bridging or centralised exchange intermediary. For tokenized securities, cross-chain atomic swaps are the peer-to-peer mechanism for enabling institutions to exchange tokenized instruments across different blockchain networks while maintaining the atomic settlement guarantee. The practical limitation is speed and latency: HTLC-based cross-chain atomic swaps require multiple transaction confirmations on potentially different blockchains with different block times, making them slower than same-chain atomic DvP for high-frequency institutional settlement.
DTCC and JPMorgan: Institutional Atomic Settlement Infrastructure
DTCC Collateral AppChain
The DTCC Collateral AppChain (targeting October 2026 production launch) uses Chainlink CCIP to automate collateral movement across both traditional and blockchain-based financial infrastructure. Its specific contribution to DvP is enabling continuous, automated collateral movements in real time rather than within settlement windows — approaching atomic settlement for collateral obligations without requiring the full blockchain-native atomic settlement model.
JPMorgan Kinexys Intraday Repo
JPMorgan Kinexys has been executing tokenized intraday repo with same-day settlement since 2020 — the most direct institutional demonstration of DvP improvement through tokenized settlement. Where traditional intraday repo requires multiple manual instructions and same-day processing through traditional settlement infrastructure, Kinexys enables both the securities and cash legs to settle within the same operational session, approaching the atomic ideal within JPMorgan’s own institutional ecosystem.
The DVP Hierarchy in Institutional Tokenized Markets
| Settlement Model | DvP Quality | Typical Venue | Risk Level |
|---|---|---|---|
| T+2 traditional | Approximate — CCP guarantee covers gap | NYSE, LSE, major exchanges | Low but non-zero; CCP carries concentrated risk |
| T+0 traditional (some equities) | Same-day but not simultaneous | Some equity venues with accelerated settlement | Reduced but gap still exists within the day |
| Smart contract escrow (same chain) | Atomic — mathematically simultaneous | Blockchain-native DvP platforms | Near-zero for on-chain risk; oracle/contract risk remains |
| HTLC cross-chain atomic swap | Atomic — across different blockchains | Peer-to-peer DeFi protocols | Near-zero counterparty risk; timing and liquidity risk in HTLC window |
| DTCC Collateral AppChain | Near-atomic — automated continuous | Institutional collateral markets | Low; automated and near-continuous but not single-block atomic |
Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice. Readers should conduct their own research and consult with qualified professionals before making any investment or business decisions.
Frequently Asked Questions
1. What is settlement risk and how does it arise?
Settlement risk is the risk that one party delivers their obligation in a transaction and the other does not, due to default or operational failure between delivery and receipt. The Herstatt risk (named for 1974 German bank failure) describes the most severe form: when one party receives delivery and the other fails before making payment.
2. What makes atomic DvP different from traditional T+2 settlement?
In atomic DvP, both the securities transfer and the payment transfer occur in the same blockchain transaction. Either both complete or neither completes — there is no state where one party has delivered and the other has not. This makes the settlement risk gap not reduced but architecturally zero.
3. What is an HTLC and how does it enable atomic swaps?
A Hash Time-Lock Contract (HTLC) enables two parties to exchange tokens — on the same or different blockchains — under conditions where both swaps complete atomically or both revert. Party A locks their token, Party B locks their token using the same cryptographic secret hash; when the secret is revealed to claim one side, it automatically enables claiming the other. The time limit ensures that if the exchange does not complete, both parties recover their original assets.
4. How does smart contract escrow DvP work?
A smart contract acts as neutral escrow: the seller deposits the security token, the buyer deposits the payment token, and when both deposits and trade conditions are confirmed, the contract simultaneously releases payment to the seller and security to the buyer in a single atomic transaction. Neither party can withdraw while the other’s deposit is present.
5. When will T+0 atomic DvP be available across major institutional markets?
The DTCC Collateral AppChain (targeting October 2026) and JPMorgan Kinexys provide near-atomic settlement for collateral and tokenized repo respectively. Full T+0 atomic DvP for the full institutional securities universe depends on both instrument and settlement currency being on-chain — which requires either tokenized securities settling in CBDC/stablecoins or traditional securities connected to blockchain settlement via atomic bridges.