ECB Launches Pontes: How Europe Is Settling Tokenized Securities in Wholesale Central Bank Money

The Eurosystem launched Pontes, connecting market distributed ledger platforms to TARGET Services so wholesale tokenized asset transactions can settle in central bank money, with ECB President Christine Lagarde announcing the go-live and describing it as a digital euro made available for banks. Settlement runs on a dual model, letting participants use cash tokens on a Eurosystem DLT platform or complete the cash leg in T2, the real-time gross settlement system, with legal finality currently achieved once the T2 transaction completes. Delivery-versus-payment is coordinated by Hash-Link, a cryptographic hash-lock protocol developed by Banca d'Italia that enforces all-or-none settlement across two separate ledgers. Thirteen market participants completed onboarding at launch, including Deutsche Bank, Santander, Société Générale, the European Investment Bank and KfW, alongside four DLT operators in Axiology, Cashlink, Clearstream and SWIAT, with Deutsche Bundesbank onboarded as a market participant.

 

 

Every tokenized bond issued in Europe over the past three years has had the same unresolved problem sitting underneath it. The security could live on a distributed ledger, but the cash paying for it had to come from somewhere, and that somewhere was a commercial bank deposit or a private stablecoin, both of which carry the credit risk of whoever issued them. A central bank liability carries none.

The Eurosystem recently closed that gap by launching Pontes, a settlement layer connecting market DLT platforms to TARGET Services so wholesale tokenized transactions can settle in central bank money. Piero Cipollone of the ECB Executive Board framed the purpose as bringing the stability and trust of central bank money to European tokenised finance, and Lagarde's shorthand at the Eurogroup was a digital euro made available for banks, meaning institutions transacting among themselves on DLT. Thirteen banks and four DLT operators were connected on day one, and the ECB announced alongside the launch that it has begun preparing to invest its own funds in tokenized securities settled on the platform.

 

The ECB and the euro area's national central banks launched Pontes as the first live component of the Eurosystem's strategic programme to make central bank money fit for a tokenized future. It consolidates three interoperability solutions explored separately during earlier work into a single Eurosystem offering, and it links market DLT platforms to TARGET Services so the cash leg of a tokenized trade can settle in the safest available form of money.

The foundation entails a substantial body of testing; The Eurosystem's 2024 exploratory work ran more than 50 trials with 64 public and private sector participants, and the three components that emerged from those trials are now the architecture. Pontes provides the cash leg for DLT-based wholesale transactions, and the tokenized assets themselves continue to live on the market platforms where they were issued. This launch is just the beginning, Pontes starts with a core set of functions and restricted operating hours, with enhanced features to be introduced progressively, hours extending toward 22.5 per business day, and immediate settlement finality on the Eurosystem DLT arriving later. Full implementation is targeted for 2028.

 

Three components built by three national central banks do the work, and each solves a different part of the problem. The Trigger Component, developed by the Bundesbank, connects to T2 and initiates the movement of funds between participants' existing TARGET accounts. The Cash-Token Platform, from Banque de France, is a permissioned Eurosystem DLT where participants hold wallets funded with central bank money represented as tokens for on-ledger settlement. The Hash-Link protocol, built by Banca d'Italia, cryptographically ties the asset transfer on a commercial DLT platform to the payment transaction inside Eurosystem infrastructure.

That produces a dual settlement model. Under the trigger model, funds move directly between participants' T2 accounts. Under the cash-token model, a participant pre-funds a wallet on the Eurosystem DLT and transacts with tokenized central bank money. Legal finality for the cash leg is currently achieved once the corresponding transaction completes in T2, which is the detail behind the ECB's footnote that immediate finality on the Eurosystem DLT comes in a later phase.

Hash-Link is a cryptographic hash-lock escrow construct adapted from hash time-locked contract patterns familiar from earlier blockchain work. It enforces all-or-none settlement, so either the securities leg on the market DLT platform and the cash leg in TARGET both complete, or neither does. The asset and the money never need to sit on the same ledger, and the protocol makes the two transfers behave as a single exchange. Settlement risk in a securities trade has always been the gap where one side has delivered and the other has not yet paid, and this closes that gap.

 

Thirteen market participants completed onboarding and were ready to transact immediately. They are ABANCA, BayernLB, Caisse des Dépôts et Consignations, Cecabank, Deutsche Bank, DekaBank, DZ Bank, the European Investment Bank, KfW, Memo Bank, NRW.BANK, Santander and Société Générale. Deutsche Bundesbank also onboarded in a market-participant capacity, and four DLT operators are connected in Axiology, Cashlink, Clearstream and SWIAT.

The German weighting in that list is hard to miss, with Clearstream, DekaBank, DZ Bank, KfW, NRW.BANK, BayernLB, SWIAT, Cashlink and the Bundesbank all present. Germany has run the most active tokenized securities market in the euro area under its Electronic Securities Act, and the institutions that built issuance capacity there are the ones with something to settle.

Eligibility extends beyond that initial group. The Eurosystem has opened access to any entity with T2 access under the TARGET Guideline, operators of a DLT settlement system or a DLT trading and settlement system authorised under the DLT Pilot Regime Regulation, operators of EU or EEA payment systems subject to oversight by a competent authority, and central counterparties authorised under EMIR. More participants have committed to connecting over the coming months.

 

Alongside the launch, the ECB said it has started preparatory work to invest a small portion of its own funds in tokenized securities, with those transactions settling through Pontes. The initial focus is euro-denominated securities issued by euro area central and regional governments, agencies and European supranational institutions. The Executive Board will set operational details and timing once preparatory work concludes, and the central bank has not announced the size of the allocation or a schedule for purchases. The stated purpose is building first-hand experience across trade execution, settlement, technology systems and portfolio management.

A central bank operating settlement infrastructure while also buying assets that settle on it is an unusual combination. An infrastructure provider that uses its own rails encounters the operational friction its participants encounter which is a different position from designing a system and watching others run on it. The allocation is described as small and the securities are the safest category available in euro markets.

 

The Eurosystem is running three separate projects, each with its own scope, participants and timetable. Pontes is the wholesale settlement solution that went live on September 21, available to eligible financial institutions and market infrastructure providers. Appia is the second track of the same strategic programme, a longer-term initiative developing the architecture for tokenized European wholesale markets, with the Eurosystem and Danmarks Nationalbank working alongside public and private sector participants. A blueprint is expected by 2028; Pontes supplies the cash leg while Appia addresses the wider ecosystem around it. The digital euro is a separate undertaking, a form of central bank money for consumers and businesses. A one-year pilot is scheduled to begin in the second half of 2027, with possible issuance in 2029, contingent on EU legislation. Lagarde described Pontes as a digital euro made available for banks, which names its function for institutions transacting among themselves on distributed ledgers.

 

Institutions settling tokenized trades in Europe previously chose between commercial bank deposits and private stablecoins for the cash leg, and each carries risk the other side has to accept. Commercial bank money carries the credit risk of the bank holding the funds. A stablecoin depends on the issuer's reserves, redemption process and legal structure. Central bank money is a direct liability of the central bank, so using it removes commercial credit risk from the final cash leg, though operational, legal and market risks remain.

Pontes is available to eligible institutions with access to Eurosystem infrastructure, which excludes crypto-native platforms operating outside that perimeter, and it runs with limited hours and a limited service set until the build completes in 2028. What it changes is the option set for regulated participants, who now have a risk-free settlement asset available for the specific transactions Pontes supports. The policy intent behind it is unambiguous; The ECB has been explicit about keeping central bank money at the centre of European wholesale finance as assets move onto distributed ledgers, and the institution has been active on the other side of the same question, with Lagarde reportedly intervening over Binance's attempt to secure an EU-wide MiCA licence through Greece on grounds that included the potential dominance of dollar-backed stablecoins in Europe.

 

Pontes is a distributed ledger settlement solution launched by the Eurosystem on September 21, 2026, connecting market DLT platforms to the Eurosystem's TARGET Services so wholesale transactions in tokenized assets can settle in central bank money. It is available to eligible financial institutions and market infrastructure providers, and it consolidates three interoperability solutions explored during the Eurosystem's 2024 trials into a single offering.

Through a dual model. Participants can settle using cash tokens on a permissioned Eurosystem DLT platform built by Banque de France, or complete the cash leg in T2, the real-time gross settlement system, via a trigger component built by the Bundesbank. Legal finality is currently achieved once the T2 transaction completes. Delivery-versus-payment uses Hash-Link, a cryptographic hash-lock protocol from Banca d'Italia that enforces all-or-none settlement so the securities leg and the cash leg either both complete or neither does.

Thirteen market participants completed onboarding at launch: ABANCA, BayernLB, Caisse des Dépôts et Consignations, Cecabank, Deutsche Bank, DekaBank, DZ Bank, the European Investment Bank, KfW, Memo Bank, NRW.BANK, Santander and Société Générale. Deutsche Bundesbank onboarded as a market participant, and four DLT operators are connected in Axiology, Cashlink, Clearstream and SWIAT, with more committed to join.

It provides an alternative for eligible institutions instead of removing stablecoins from the market. Central bank money is a direct liability of the central bank, so it carries no issuer credit risk, while a stablecoin depends on its issuer's reserves and legal structure. Pontes is limited to participants with access to Eurosystem infrastructure and currently operates with restricted hours and a core service set.

Appia is the second track of the same Eurosystem programme, focused on the longer-term architecture of tokenized European wholesale markets, developed with Danmarks Nationalbank alongside public and private sector participants. A blueprint is expected by 2028. Pontes provides the cash leg while Appia addresses the broader ecosystem.

It has begun preparatory work to invest a small portion of its own funds in tokenized securities settled through Pontes, focusing initially on euro-denominated securities issued by euro area central and regional governments, agencies and European supranational institutions. The Executive Board will determine operational details and timing, and no allocation size or purchase schedule has been announced.

Pontes is live now with a core set of functions and restricted operating hours. Enhanced features will be added progressively, with operating hours extending toward 22.5 per business day and immediate settlement finality on the Eurosystem DLT arriving in a later phase. Full implementation is targeted for 2028.