HSBC has completed a pilot issuing and settling its tokenised deposits on the Canton Network, the public blockchain developed by Digital Asset for regulated institutional finance. The bank’s Global Payments Solutions business simulated the issuance, transfer and atomic settlement of its Tokenised Deposit Service against other digital assets on Canton-enabled applications – the first time HSBC’s TDS has operated on a public blockchain rather than the bank’s own internal ledger.
For an industry that has spent years debating whether tokenisation will move from proof-of-concept to production, the pilot is a credible demonstration that a tier-one global bank can take a live deposit token product and connect it to external shared infrastructure. But for the institutional capital markets audience that follows the operationalisation, interoperability and post-trade architecture questions closely, the more revealing story is what the announcement doesn’t address, and how it fits within a rapidly forming, and still deeply fragmented, competitive landscape.A simulation, not a transaction
The pilot operated as a controlled simulation rather than a live client transaction with real funds, which is standard practice for an initiative of this kind, and consistent with how most institutional tokenisation programmes progress from proof-of-concept through to production. What it demonstrated is that HSBC’s existing deposit token product can technically function on shared public infrastructure and settle atomically against other digital assets. That is a meaningful step. The next questions are commercial ones: what assets were on the other side of those atomic settlements, who issued them, and which Canton applications participated? Those details will matter as the pilot moves toward a production pathway, since the value of atomic settlement depends on the depth and diversity of what is available to settle against.
Similarly, the regulatory dimension is one to watch. Moving tokenised deposits from a bank’s proprietary ledger onto a public blockchain – even one with Canton’s configurable privacy architecture – will inevitably raise questions about prudential treatment, capital charges on DLT-held assets, and cross-jurisdictional data protection compliance. HSBC has shown it intends to maintain regulatory standards, but the specifics of how that translates into production-grade compliance will be an important part of the story as it develops.
The operationalisation gap
What the pilot doesn’t yet address is how a tokenised deposit sitting on Canton connects back to the operational infrastructure that runs a global bank; the risk engines, collateral management systems, regulatory reporting and position management that institutions have spent decades building.
This is precisely the challenge that our recent coverage has explored in detail. The Murex-Quant Network partnership is explicitly designed to address the gap between on-chain token issuance and off-chain operational reality. Murex’s position, articulated by its digital assets product leads, is that a digital bond – or by extension a tokenised deposit – needs to be treated identically to its traditional equivalent for FRTB, position management and collateral purposes, even though the settlement rail and operational workflow differ materially. The integration architecture they have adopted deliberately preserves optionality around custody providers and blockchain networks, reflecting the reality that different jurisdictions will require different solutions.Nasdaq’s positioning of Calypso as the institutional bridge for on-chain/off-chain collateral convergence addresses the same problem from a different angle. Calypso’s blockchain-agnostic digital gateway is designed to connect to whichever networks gain institutional traction, and Nasdaq already ran a proof-of-concept connecting Calypso to Canton last year with two hedge funds managing collateral across digital and mainstream rails. The HSBC pilot now adds a major global bank’s deposit tokens to that same network, raising the question of whether Canton is accumulating sufficient institutional weight to shift the calculus from agnostic optionality toward network-specific commitment.
Where this sits in the post-trade debate
Our recent in-depth examination of post-trade infrastructure modernisation surfaced a genuine architectural disagreement among senior industry practitioners. Some argue firmly for central ledger over distributed ledger in institutional markets, on the grounds that you are not lacking central trust where FMI operators already provide it. Others contend that the industry needs to solve interoperability not at the blockchain protocol level but at the standards layer above it, using open-source frameworks such as the Common Domain Model (CDM) to ensure that smart contracts and tokenised instruments are portable across networks rather than locked into proprietary stacks.
The HSBC-Canton pilot sits across these positions. Canton is a distributed ledger, but one designed to behave more like centralised infrastructure, with sub-transaction privacy, institutional controls, and a synchronisation model where each party maintains its own sub-ledger. It attempts to deliver the atomic settlement benefits of DLT without the transparency and shared-state characteristics that make some institutional participants wary. Whether that architectural compromise satisfies the concerns raised on both sides of the debate remains to be tested in production.
The standards question is equally important. Canton uses Digital Asset’s Daml smart contract language, which brings its own strengths in privacy and composability, but the broader industry challenge of achieving interoperability at both the blockchain and tokenisation layers remains unsolved. As tokenised deposits from multiple banks begin to appear on shared infrastructure, the question of whether those instruments conform to common standards at the smart contract level – and whether they can interact with tokenised assets issued on other networks – will become increasingly central. How HSBC and Canton approach that as the pilot matures could be significant.
Strategic optionality or strategic fragmentation?
Perhaps the most telling detail is where HSBC itself sits in the broader landscape. The bank is simultaneously participating in Hong Kong’s EnsembleTX pilot for real-money interbank tokenised deposit settlement, the UK Finance pilot for tokenised sterling deposits built on Quant Network infrastructure alongside Barclays, Lloyds, NatWest, Nationwide and Santander, and now the Canton Network. It is also expanding TDS to the UAE and adding dirham support.
Running parallel initiatives on multiple networks can be read as prudent hedging in a market where no single infrastructure has yet achieved critical mass. But it also illustrates the fragmentation challenge that multiple parties have identified. If the same bank is demonstrating the same fundamental capability – tokenised deposit issuance and settlement – across three or more separate networks, the industry is not converging on interoperable infrastructure. It is running parallel proofs-of-concept that each demonstrate technical feasibility in isolation.
The middleware and platform vendors – Murex, Nasdaq, Broadridge and others – are positioning themselves as the integration layer that resolves this fragmentation, connecting tokenised assets on whichever networks emerge to the operational, risk and compliance infrastructure that institutions actually run on. That is arguably where the real competitive battle is being fought: not at the blockchain protocol level, but in the plumbing that connects on-chain events to off-chain reality.
HSBC’s Canton pilot is a genuine milestone in demonstrating that tokenised bank deposits can live on public blockchain infrastructure with institutional-grade privacy. But for the capital markets technology practitioners building the systems that will need to process, risk-manage and report on these instruments at scale, the pilot is the beginning of the conversation, not the end of it. The harder questions – about interoperability, standards, regulatory treatment and operational integration – are the ones that will determine whether tokenised deposits become production infrastructure or remain a collection of impressive but disconnected demonstrations.
Subscribe to our newsletter
