Atomic settlement is a method of completing a trade where both sides of the exchange — the asset and the payment — move together as a single indivisible event on a distributed ledger, so either both transfers happen or neither does. Traditional U.S. securities markets run on a T+1 cycle, finalizing trades one business day after execution, which leaves a window in which one side can fail to deliver. Atomic settlement closes that window by collapsing delivery and payment into one operation, so neither party is ever exposed to the other mid-transaction.
What Atomic Settlement Eliminates
The risk atomic settlement is built to kill is principal risk: the chance that you deliver an asset and never receive payment, or pay and never receive the asset. The textbook case happened in 1974. German regulators shut Bankhaus Herstatt at 3:30 p.m. Central European Time on June 26 after its counterparties had already made irrevocable Deutsche mark payments to the bank. U.S. markets had just opened, so Herstatt’s dollar payments were still outstanding. Its New York correspondent froze outgoing transfers, leaving counterparties exposed for the full value of their trades.1Bank for International Settlements. Settlement Risk in Foreign Exchange Markets and CLS Bank The failure cascaded through payment systems and gave the problem its name: Herstatt risk.
Atomic settlement answers this through two linked mechanisms. Delivery versus Payment (DvP) ties the transfer of a security to its payment leg. Payment versus Payment (PvP) ties the two currency legs of an FX trade together.2Bank for International Settlements. Facilitating Increased Adoption of Payment Versus Payment (PvP) The ledger itself enforces the all-or-nothing rule programmatically. There is no intermediary holding assets in escrow while messages pass back and forth between institutions.
U.S. securities moved from T+3 to T+2 in 2017, then to T+1 on May 28, 2024 under amendments to Exchange Act Rule 15c6-1(a).3Financial Industry Regulatory Authority. Final Reminder – T+1 Settlement Atomic settlement is the endpoint of that trajectory: T+0, or more precisely, T+instant. Mainstream securities markets are not there yet, but the technology is already in production use across digital asset markets.
How an Atomic Swap Actually Works
The standard tool for executing an atomic settlement across different blockchains is a Hashed Timelock Contract, or HTLC. An HTLC combines a hash lock, which requires a cryptographic secret to unlock the funds, with a time lock, which refunds the sender automatically if the trade is not completed before a deadline.4Bitcoin Optech. Hash Time Locked Contract (HTLC) Both components also require a digital signature matching the intended recipient’s public key.
The sequence runs in four stages. First, setup: both parties agree on terms and share public addresses on their respective ledgers, and the initiator generates a random secret and computes its hash. Second, lock: the initiator creates an HTLC on their ledger using the hash and a time-bound expiration, and the counterparty creates a matching HTLC on their own ledger using the same hash. Third, claim: the initiator reveals the secret to claim the counterparty’s locked assets, which exposes the secret on-chain and lets the counterparty claim the initiator’s assets. Fourth, refund: if neither party acts before the time lock expires, both contracts automatically return the assets to their original owners.
Completion on well-functioning networks takes seconds to minutes, depending on each chain’s confirmation times and current congestion. Before initiating, participants need to confirm that each smart contract has enough allocated transaction fees (often called gas) to be processed, that the hash in the contract matches the initiator’s secret, and that the assets involved are not otherwise encumbered or committed elsewhere.
Liquidity and Pre-Funding
Atomic settlement requires that both parties actually have the assets available at the moment of execution. There is no grace period to source funds. Institutional implementations handle this through earmarking, where assets are reserved for a specific transaction without physically moving to an escrow account.5Bank for International Settlements. Project Meridian FX – Exploring Synchronised Settlement in FX The reservation reduces available liquidity for the duration of the settlement window.
This is one of the biggest operational differences from traditional settlement. In a T+1 system, you have a full business day to arrange funding. In atomic settlement, the funds must be there before the transaction begins. Platforms address this through queuing mechanisms that hold transactions for a configured window while the system finds an optimal ordering, and through netting, which combines offsetting obligations between the same parties to reduce total liquidity needed. If a reservation fails, the system either requeues the transaction or marks it failed.
Technical Risks That Remain
Solving principal risk does not eliminate every risk. Several friction points are specific to the atomic model.
- The free option problem. One party has to commit assets to an HTLC before the other. The second party can watch market prices move; if the move favors them, they complete the swap, and if it goes against them, they let the time lock expire and walk away. The first party’s assets were locked up for nothing. Shorter time locks reduce this exposure but increase the chance that legitimate trades fail due to network delays.
- Confirmation latency. On-chain swaps depend on both blockchains’ block times. A swap between a chain with 10-second blocks and one with 10-minute blocks leaves the faster chain’s participant locked up for the duration of the slower chain’s confirmation.
- Liquidity fragmentation. Each blockchain is an isolated ledger with its own consensus and asset pool. Moving value between them fragments liquidity and adds friction compared to trading inside a single centralized venue.
- Operational complexity. Managing cryptographic secrets, hash locks, time locks, and wallets across multiple chains is a steep learning curve compared to clicking “trade” on a centralized exchange.
Off-chain variants settle through payment channel networks rather than directly on the blockchain, reducing some of these issues at the cost of requiring active nodes and more complex infrastructure.
Legal Finality on a Distributed Ledger
Settlement finality is the moment a transfer becomes irrevocable and unconditional under the law. The Bank for International Settlements defines it as “the irrevocable and unconditional transfer of an asset or financial instrument, or the discharge of an obligation by the FMI or its participants in accordance with the terms of the underlying contract.”6Bank for International Settlements. Principles for Financial Market Infrastructures The moment finality attaches depends on the legal regime governing the system and the system’s own rules. For atomic settlement, the open question is whether an on-chain confirmation event counts as legal finality.
UCC Article 8
In the United States, Article 8 of the Uniform Commercial Code governs how a person acquires an interest in a security. Under UCC 8-501, a person acquires a security entitlement when a securities intermediary indicates by book entry that a financial asset has been credited to their account, receives or acquires the asset and accepts it for credit, or becomes obligated under other law to credit it.7Cornell Law Institute. UCC 8-501 – Securities Account; Acquisition of Security Entitlement UCC 8-503 provides that the entitlement holder’s property interest is not treated as property of the intermediary and is shielded from the intermediary’s creditors.8Cornell Law Institute. UCC 8-503 – Property Interest of Entitlement Holder in Financial Asset Held by Securities Intermediary For tokenized securities on a distributed ledger, the critical question is whether a ledger entry qualifies as the kind of book entry or credit Article 8 recognizes.
The Bankruptcy Safe Harbor
One of the strongest U.S. protections for settlement finality is 11 U.S.C. § 546(e), which prevents a bankruptcy trustee from clawing back settlement payments and margin payments made to or through brokers, clearing organizations, financial institutions, and securities clearing agencies in connection with securities contracts, commodity contracts, or forward contracts.9Office of the Law Revision Counsel. 11 USC 546 – Limitations on Avoiding Powers Congress enacted it in 1982 to prevent cascading market disruptions from unwinding completed securities transactions in a major bankruptcy.
The safe harbor is not absolute. It does not protect transfers made with actual intent to defraud creditors. Whether it reaches settlements on decentralized ledgers that lack traditional intermediaries is unsettled. If an atomic swap occurs directly between two wallets with no broker, clearing organization, or financial institution in the chain, the statutory language may not cover it. Institutional participants should structure transactions through entities that clearly fall within the defined categories.
MLETR for Cross-Border Recognition
The UNCITRAL Model Law on Electronic Transferable Records (MLETR) establishes that an electronic record cannot be denied legal effect, validity, or enforceability solely because it is in electronic form.10United Nations Commission on International Trade Law (UNCITRAL). UNCITRAL Model Law on Electronic Transferable Records It was designed primarily for electronic bills of lading and promissory notes, but its principle of functional equivalence between paper and electronic records supports treating a confirmed ledger entry as having the same standing as a traditional paper-based transfer. Countries that adopt the MLETR provide a legal foundation for that recognition.
Tax Treatment of Atomic Swaps
Instant settlement does not change the tax consequence. The IRS treats digital assets as property, and every disposition is a taxable event.11Internal Revenue Service. Frequently Asked Questions on Digital Asset Transactions An atomic swap of one digital asset for another is both a sale of the first and a purchase of the second. You recognize gain or loss equal to the difference between your adjusted basis in what you gave up and the fair market value of what you received.12Office of the Law Revision Counsel. 26 USC 1001 – Determination of Amount of and Recognition of Gain or Loss
The IRS uses a dominion and control standard rather than the older constructive receipt framing for digital asset income. You have dominion and control when you can transfer, sell, exchange, or otherwise dispose of the asset.11Internal Revenue Service. Frequently Asked Questions on Digital Asset Transactions For an atomic settlement, that is the moment the transaction is recorded on the ledger and the assets appear in your wallet. The gain or loss belongs on your federal return for the year the transaction occurred, whether or not you receive a Form 1099.
Form 1099-DA Starts in 2026
Beginning with sales effected on or after January 1, 2026, brokers facilitating digital asset transactions must file Form 1099-DA reporting gross proceeds to the IRS. For digital assets that qualify as covered securities — generally those acquired after 2025 through a broker providing custodial services — brokers must also report cost basis.13Internal Revenue Service. Instructions for Form 1099-DA (2026) Assets acquired before 2026, or those where the broker did not provide custody at acquisition, are noncovered securities, and basis reporting is optional.
The broker definition is broad. It reaches anyone who, in the ordinary course of business, stands ready to facilitate sales of digital assets for others, including custodial platforms, payment processors handling digital assets, and operators of digital asset kiosks. Two de minimis thresholds apply: payment processors do not need to report customer sales totaling $600 or less for the year, and qualifying stablecoin transactions under $10,000 in aggregate annual gross proceeds can use a simplified optional reporting method.
When Operating an Atomic Settlement Platform Triggers BSA Rules
Whether an entity facilitating atomic swaps must register as a money transmitter under the Bank Secrecy Act depends on its role. FinCEN has drawn a clear line: developing or distributing software is not money transmission, even if the software’s purpose is facilitating value transfers.14Financial Crimes Enforcement Network. Application of FinCEN’s Regulations to Virtual Currency Software Development and Certain Investment Activity Building a decentralized application for atomic swaps, by itself, does not create BSA obligations.
The line shifts when the developer or operator also uses the software to accept and transmit value as a business. At that point they become a money transmitter and must register with FinCEN, run an anti-money laundering program, file suspicious activity reports, and comply with recordkeeping requirements.15Financial Crimes Enforcement Network. Application of FinCEN’s Regulations to Certain Business Models Involving Convertible Virtual Currencies The same guidance applies to multi-signature wallet providers. If they only create wallets requiring multiple keys to authorize transactions, they are tool providers; if they maintain independent control over the funds or combine wallet creation with hosted custody, they are money transmitters.
For institutional platforms, a protocol that merely matches and executes pre-agreed swaps between counterparties who keep their own custody may stay outside money transmitter status. A platform that takes temporary custody of assets during settlement likely cannot.
Liability When Something Goes Wrong
The all-or-nothing design stops partial execution, but it does not stop code bugs, oracle failures, or fraud. Once a blockchain transaction confirms, it cannot be reversed. There is no central authority to call, no chargeback, no undo. If you send assets to the wrong address or a smart contract executes incorrectly, the loss is permanent unless the other party cooperates.
No unified legal framework governs liability for smart contract failures. Existing contract and tort law applies, but outcomes are fact-specific. A few practical points stand out:
- The burden of proof flips. In a traditional dispute, the claimant must prove their case to get paid. When a smart contract pays automatically, the party claiming the payment was mistaken has to prove the error and seek repayment, which is a harder position, especially against an insolvent counterparty.
- Open-source developer liability is often impractical. Developers may be anonymous, in any jurisdiction, or without the resources to satisfy a judgment.
- Contractual allocation is the most reliable protection. A separate off-chain agreement between the parties, addressing who bears the risk of coding errors, network failures, and incorrect execution, does the work the on-chain code cannot. Without it, you are relying on whichever jurisdiction’s default rules happen to apply.
Whether a smart contract failure qualifies as a force majeure event, excusing one party from performance, depends on the jurisdiction and any governing agreement. Some legal scholars have recommended that lawmakers address whether cyberattacks, data source failures, and software bugs should fall within force majeure, but most jurisdictions have not done so.