Live on Avalanche Fuji · ERC-3643 · Chainlink

Beyond T+2.
Securities Finance, settled in one block.

DeSecFi extends institutional Securities Finance platforms — Sec Lending and REPO — with a programmable settlement layer. Book, mark, adjust, settle — every state transition recorded on-chain, every asset move delivery-vs-payment in a single transaction.

Treasuries · equities · bonds · stablecoins · money market funds · wrapped BTC · RWAs — the full Securities Financing Transactions (SFT) collateral universe, priced by Chainlink, gated by ERC-3643 compliance. Same building blocks as DTCC's Collateral AppChain (Hyperledger Besu + Chainlink) — interop-ready by design.

See capabilities
Settlement
< 2s
atomic DvP
Per tx cost
$0.001
Avalanche C-Chain
Asset classes
7
DTC-aligned
Compliance
ERC-3643
cryptographic
Capabilities

What an institutional Securities Finance chain has to do.

DTCC's Collateral AppChain (Hyperledger Besu + Chainlink) defines the institutional bar. DeSecFi runs on the same building blocks (EVM + Chainlink + ERC-3643) and adds the lifecycle layer on top — for both Sec Lending and REPO, as independent modules.

Automated eligibility & haircuts

live

CollateralRegistry per-asset acceptance, haircut bps, and Chainlink price feeds. valueUSD returns risk-adjusted exposure on demand.

Instant atomic settlement

live

SettlementCoordinator pulls collateral, transfers the ERC-3643 security, records escrow, marks the loan ACTIVE — all in one block. No T+2.

Dynamic valuation & MTM

live

Chainlink Functions fetches live prices off-chain; gateway pushes daily marks. Shortfalls auto-flag margin calls.

Compliance at the token layer

live

ERC-3643 identity registry gates transfers. Non-verified counterparties revert at the token level — compliance is cryptographic, not procedural.

Hierarchical margin distribution

live

CCP → clearing member → buy-side. Role-gated state machines distribute margin calls down the chain in one transaction.

Real-time cross-chain reallocation

planned

Chainlink CCIP for collateral moves between vaults across chains. Architecture in place; cross-chain wiring lands with the L2 gateway.

How it works

From book to close. Three steps.

The Securities Finance lifecycle compresses into three on-chain transitions — powered by six purpose-built workflow contracts (see Architecture below). The trading platform stays the brain — risk, pricing, matching — while the chain handles atomicity and compliance. Sec Lending and REPO ship as independent modules — pick one or both.

1
Book

Sec Lending: locate → loan opens atomically. REPO: cash provider funds, repo provider pledges collateral. ERC-3643 enforces compliance at the token layer in either case.

2
Atomic DvP

One transaction: collateral pulls into vault, the security (or cash leg for REPO) moves between counterparty wallets, escrow records state, locate burns. No T+2, no half-state.

3
Lifecycle

Daily marks via Chainlink Functions. Bilateral rate change · recall + return (Sec Lending) · roll + settle (REPO) · default. All on-chain state transitions, all auditable, all settlement-final.

Wallet & custody support

DTCC-aligned, provider-agnostic.

DTCC's Day-1 Wallet Rules are provider-agnostic: firms don't need a special “DTCC wallet.” The 57-firm Industry Working Group has named the institutional custody platforms below as confirmed Day-1 participants — actively testing interoperability with the DTCC ledger ahead of launch. DeSecFi integrates one connector per vendor; every customer of that vendor can transact with no further onboarding.

Fireblocks
in progress
DTCC Day-1 Working Group
MPC workspaces actively testing interoperability with the DTCC ledger for Day-1 launch.
Anchorage Digital
planned
DTCC Day-1 Working Group
OCC-chartered federal digital asset bank. Confirmed interop participant.
BitGo
planned
DTCC Day-1 Working Group
Qualified custodian with MPC signing. Confirmed interop participant.
Ripple Prime
planned
DTCC Day-1 Working Group
Prime services + custody for institutional digital asset operations.

Additional DTCC-aligned and bank custody platforms (BNY Mellon, State Street, Fidelity, JPM Kinexys, Citi, Northern Trust, Goldman DAP, Anchorage Digital Bank, Coinbase Custody, Komainu, Ceffu, Hex Trust, Copper, Zodia, Safe multisig, Ledger Enterprise) follow the same one-connector-per-vendor pattern and are on the integration roadmap.

Collateral coverage

Every asset class institutions actually post.

Aligned with the DTCC Collateral AppChain eligibility list. Each class plugs into the same CollateralRegistry with its own haircut and Chainlink price feed.

Cash
Stablecoins
USDC, USDT
Cash equiv.
Money market funds
BUIDL, USYC
Govt
Treasuries
T-bills, notes, bonds
Equity
Tokenized equities
Russell 1000, ETFs
Credit
Tokenized bonds
Corporate, muni
Digital
Wrapped digital
wBTC, third-party ledger
RWA
Real-world assets
Private credit, funds, real estate
Security
Generic ERC-3643
Catch-all
Architecture

Six workflow contracts. Both products.

Each module is intentionally thin — state, events, role-gated transitions. The same six contracts handle Sec Lending and REPO via field remapping (cash provider/taker for REPO maps to lender/borrower under the hood); the UI surfaces them as independent product modules. Pricing and risk logic lives off-chain in the institutional platform; on-chain we record canonical state.

LocateReservation

Sec Lending only — pre-trade inventory hold. Lender approves a quantity for a specific borrower with an expiration; consumed atomically when the loan settles. (REPO doesn't use locates.)

deployed
LoanRegistry

Lifecycle state machine. Proposed → Active → Recall/Roll → Returning → Closed. Same struct handles Sec Lending loans AND REPO contracts via field remapping (REPO's cash leg maps to the loan's security field, FI collateral to the collateral field). Records rate, term, counterparties.

deployed
CollateralVault

Multi-asset escrow. Holds stablecoin, tokenized cash, or tokenized securities; tracks required vs posted USD per loan.

deployed
SecuritiesEscrow

Records the loaned-out state of ERC-3643 securities (Sec Lending) or the cash leg recipient (REPO). Tracks counterparty, quantity, return lifecycle for audit and reporting.

deployed
SettlementCoordinator

The only contract that moves assets. Performs atomic delivery-vs-payment in one transaction. Sec Lending: security flows lender → borrower, collateral into vault. REPO: cash flows cash provider → repo provider, collateral pledged. Same contract, both products.

deployed
CollateralRegistry

Accepted-collateral configuration. Per-token haircut, Chainlink price feed, minimum posting size. Pluggable list maintained by the agent role.

deployed
Deployment architecture

The full institutional stack

Identity, compliance, settlement and orchestration — every layer live on Avalanche Fuji. This is institutional-grade programmable finance.

ONCHAINID live

Self-sovereign identity (ERC-734/735). Verifiable KYC/AML claims attached per wallet.

IdentityRegistry live

On-chain KYC gate. Every token transfer checks verified-holder status before it can settle.

ERC-3643 security tokens live

Compliance-aware tokens (T-REX). Transfers to a non-verified wallet revert on-chain.

DeSecFi workflow contracts live

Locate · Loan · Collateral · Escrow · Settlement. Atomic delivery-versus-payment.

Chainlink servicesFunctions live

Functions (mark-to-market) · CCIP (cross-chain collateral) · Data Streams (pricing).

CRE workflowsplanned

Programmable orchestration: matching, batch MTM, full lifecycle automation.

Institutional controls

Controls enforced on-chain, not in the UI.

Entitlements, identity, and settlement policy live in the contracts — so they can't be clicked around. Permissioning by counterparty and role, privileged actions behind role-based access control, and settlement automation set per firm.

Permissioned access

  • Every counterparty entitled per product (Sec Lending / REPO) and per role on-chain — ProductRegistry, not a UI flag.
  • Privileged actions sit behind role-based access control (AGENT_ROLE); the admin grants and revokes agents.
  • A firm can be a lender on one desk and a borrower on another — roles are product-specific.

Compliance-native tokens

  • Securities are ERC-3643 (T-REX): every transfer checks identity + compliance rules.
  • A transfer to a non-verified wallet reverts at the token layer — compliance is cryptographic, not procedural.
  • Built on ONCHAINID (ERC-734/735) for verifiable KYC / jurisdiction claims.

Configurable automation

  • Settlement policy set per counterparty at onboarding — e.g. auto-settle under $10M notional, human sign-off above.
  • Per-product policy + counterparty allow-lists — auto-settle GC, manual on REPO, your call.
  • Same contracts support fully-manual, fully-automated, or threshold-based — no redeploy.
StandardsERC-3643·ONCHAINID (ERC-734/735)·ERC-20Roadmap:EIP-2612 (gasless approvals)·ERC-4337 (account abstraction)·EIP-1271 (smart-account signing)
Institutional, not DeFi

Built for regulated brokers, prime services, and asset managers. Not a permissionless money market.

Compliance is cryptographic

ERC-3643 identity registries enforce KYC/jurisdiction at the token level. Non-verified transfers revert, not warn.

Chainlink is the data layer

Price feeds for valuation, CCIP for cross-chain, Functions for off-chain compute, Data Streams for high-frequency MTM. Same primitives DTCC's Collateral AppChain (Hyperledger Besu + Chainlink) uses — we're EVM-native, ready to interop.

Run the institutional workspace

Connect a wallet on Avalanche Fuji. Drive a full Sec Lending or REPO lifecycle end-to-end in under a minute — book, mark, adjust, settle. Every step verifiable on snowtrace.