Brazil's CSD BR keeps the official fund register while mirroring ownership on the XRP Ledger

Brazil's central securities depository is keeping the official register of fund ownership exactly where it is and publishing a second copy on the XRP Ledger, and the most consequential part of the arrangement is the paperwork it does not touch: CSD BR continues to hold the registration, deposit and settlement records for BTG Pactual's funds. The ledger copy that Ripple and CSD BR describe as live-transaction work suggests the arrangement runs against real fund activity rather than a test environment.

That split sorts tokenization into two camps: in one, the chain becomes the system of record, so the token is the security and the established register either follows it or is retired; in the other, the chain carries a duplicate that makes ownership visible without making it legal. Brazil's depository has chosen the second for BTG Pactual's funds, the first use case.

The three verbs a depository performs — register, hold in deposit, settle — are why the copy is not the main event: a central securities depository is where a market determines who owns a security, and that determination is the one that has to hold when ownership is contested. Under this arrangement none of those functions moves to a blockchain, only a live, readable duplicate of fund ownership for BTG Pactual's funds sitting somewhere other than the depository's own systems.

What the duplicate yields is audit: a second record that updates alongside the first can be read by parties who would otherwise take their turn in a reconciliation cycle, and because it sits on a public ledger it can be queried and programmed without an intermediary assembling a report. Visibility and programmability are the two properties a chain brings to the job; legal finality is the one it has not been asked to supply.

BTG Pactual's funds are the first use case, and the description carries no fund count and no start date, an absence consistent with an infrastructure decision being run before it is marketed and one reason the arrangement is easy to misread. A depository that meant to hand its register to a chain would lead with scale and a migration timeline; what has been described is a mirror attached to records that stay in place.

Depositories will not cede that register for reasons that are not technological: a register is where ownership is decided when it is disputed, and the institution that keeps it carries the obligation that comes with being the answer to an administrator, a court, or a counterparty on the other side of a failed trade. Ledgers are good at making a record visible and programmable; being the place a claim is settled from is a different job with a different liability attached, so keeping the two functions apart is the conservative choice, and it is the one Brazil has made.

Live is the word doing the work in the Ripple and CSD BR description, and it is the only detail that speaks to how the copy behaves rather than where it sits. A record that moves with the activity it mirrors is a different instrument from a snapshot posted after the fact, which matters most to the people whose job is spotting a discrepancy early; how often the copy updates is not part of what has been described, though a live arrangement is the stronger claim.

There is also a difference in who does the extending, because a depository publishing an onchain copy confers a standing on it that a private consortium's mirror would not have: the party whose book is authoritative is the one issuing the copy. That standing is what makes it useful to auditors and allocators, borrowed from a record that already existed.

The opposing design sits with the SEC, where the OKXICE venture has told the agency it plans a 24/7 venue for tokenized U.S. stocks, opening with more than 60 U.S.-listed companies under an exemption that gives issuers 30 days to object and runs five years. In that model the tokenized instrument is what changes hands, and the exemption is what has to make room for the trade. Both architectures put a chain in the middle of securities ownership; they disagree about which system holds the original, and that disagreement determines how much of a market's plumbing has to be rebuilt for either to work.

The exemption's terms do the work: a 30-day window in which issuers can object puts the companies whose shares would be tokenized in a position to slow the experiment, a governance arrangement before it is a technical one, and the five-year term puts a date on it. The venue is being tested on a clock and has to prove itself inside the window rather than assume permanence; Brazil's arrangement, by contrast, adds a copy to records the depository already keeps, a smaller ask of the existing rulebook.

The parallel question in the United States concerns who may hold the asset rather than who may record it: under the SEC's custody proposal, state trust companies would become qualified custodians, and an adviser that wanted to custody digital assets itself would have to demonstrate expertise and the absence of any willing qualified custodian. For advisory firms weighing where to keep client digital assets, the change widens the field by admitting companies already chartered to hold assets for clients, without inventing a new kind of institution to do the holding.

The two moves run in the same direction: Brazil leaves the register at the depository and adds a visible copy, while the custody proposal leaves custody with chartered institutions and adds digital assets to what they may hold. Neither requires an existing system to move, which is why both are likelier to reach production than architectures that do.

Legislation is not arriving on any near timeline: the Senate rejected the Clarity Act 49-50 on Sept. 15, short of the 60 votes needed to advance, which leaves SEC exemptions and the custody proposal as the framework dealmakers are underwriting, while KBW's read is that the crypto M&A trajectory holds regardless. When a statute stalls, architecture gets set by staff-level decisions that are narrower, faster to write and easier to reverse than law, and infrastructure built in that window tends toward the kind that can be unwound.

Illinois has agreed to a six-month delay on a crypto tax pending court approval, with draft rules that would charge customers on asset value rather than gains and reach paid custody, transfers and stablecoin settlement, a design that taxes the movement of an asset instead of the return on it. Circle has urged the European Union to replace bank-deposit mandates for stablecoin reserves and to keep cross-border co-issuance in place, according to The Defiant. Both items turn on where a value sits, what it is called and who keeps the definitive list, which is the question Brazil's depository answered by keeping two.

For wealth managers the relevant half of the Brazil arrangement is verification: an advisory firm that allocates to a fund relies on the manager's report of what the fund holds, and a live onchain copy of ownership would give the allocator something to check against without the manager surrendering the record that makes the holding enforceable. The modest version of that idea, a mirror that improves oversight and touches nothing legal, is the one that gets through a compliance committee.

If the Brazilian model holds, the template it offers other depositories is specific: publish a copy, keep the register, and let the programmability earn its keep on reporting rather than on settlement, which is a smaller prize than the tokenized-securities pitch and, for a depository's own risk committee, an easier one to approve without a change in the law. Whether other markets follow depends on whether the transparency is worth the cost of maintaining a second record, and nothing in the description of the Brazil arrangement puts a number on either side of that trade.

The arrangement as described covers BTG Pactual's funds and leaves CSD BR's registration, deposit and settlement records where they were, so the development to watch is a sign that the onchain record is being relied on for something the depository's own book cannot do, whether that is a transfer, a redemption or a valuation that reads the chain rather than the register. Until that appears, the ledger is doing what a depository can live with: making ownership legible without making it optional.