DvP From Your Perspective
- Sender Custodian
- Receiver Custodian
Your client’s JPYSC0 leaves your custody and the market maker’s USDCx is delivered to the receiver custodian — all in one atomic transaction.
Key guarantee: Legs 1-4 are atomic. Your JPYSC0 only leaves your custody if all four legs succeed. If the market maker fails to deliver USDCx (leg 2), your JPYSC0 is never released (leg 1 rolls back).
How Canton Holdings Differ from EVM Tokens
If you’re used to ERC-20 or UTXO-based custody, the Canton model has some important differences:The key difference: on EVM, you grant an allowance and a smart contract pulls tokens. On Canton, you exercise the Transfer choice directly — there’s no allowance pattern, no approval that could be exploited. You are the sole signatory on your Holding contract.
Asset Movements
Sender Custodian
Receiver Custodian
Assets are not locked or escrowed during the quoting phase. Your client’s JPYSC0 balance remains fully available until the atomic settlement actually executes. This is different from EVM approve patterns where an allowance could be consumed at any time.
Client Balance Updates
After settlement, update your client’s balance records: Sender custodian — debit the sender institution’s account:- Amount:
target_amount(e.g., 100,000 USDCx) - Reference:
intent_id - Timestamp:
settled_at
- Amount:
source_amount_actual(e.g., 11,200,000 USDCx) - Reference:
intent_id - Timestamp:
settled_at
Reconciliation
Match settled orders against your internal records using:Failed Settlement
If any leg of the DvP fails, all four legs roll back atomically:
There is no partial settlement. Your client’s assets remain in your custody in every failure scenario. No “stuck in transit” state to investigate or manually resolve — unlike EVM transactions that can fail mid-execution with gas consumed.