Solana’s DvP Settlement Protocol Requires Full Upfront Funding for Every Trade

The published design for Solana’s new institutional delivery-versus-payment (DvP) settlement program requires the full cash and asset legs of a trade to be available before execution.

While the program’s atomic transaction structure prevents a buyer from paying without receiving the corresponding asset, it does not supply the cash or financing needed to reach that settlement point.

Announced on Oct. 6 by the Solana Foundation as an open-source standard, the DvP protocol places each side’s tokens into a separate escrow before moving both agreed amounts simultaneously. The design explicitly excludes netting, meaning institutions cannot offset obligations across trades before calculating the remaining balance. Instead, participants must source the full amount for every individual trade they submit.

Under the published program limits, a single trade record covers an exchange between two parties, with both legs requiring token accounts on Solana. Partial fills are not permitted, and bank-account payments on other rails fall outside this atomic exchange. The settlement code verifies that each escrow balance meets the agreed amount before initiating the transfer. If one side is underfunded, the settlement fails, and any excess tokens are returned to the original party rather than distributed to the counterparty.

Economic responsibility remains entirely with the participants and their financiers. While a lender could finance either position through a separate arrangement, such financing would remain external to the DvP program. Funding itself is conducted via a standard checked token transfer, allowing custody or treasury systems to supply tokens without a special funding call. Both balances must meet the agreed amounts at settlement, and a designated settlement authority—a third address named in the trade record—must sign the exchange instruction.

If a required transfer cannot complete, the settlement transaction reverses, leaving the earlier funding transfers as separate, independent transactions.

Gross funding dictates how much capital must be available for a trade, while funding duration determines how long that capital remains unavailable for other uses. Solana DvP’s bilateral design requires full amounts at settlement but does not mandate that institutions keep those balances idle permanently. A participant who receives usable cash or assets sooner may be able to deploy them into subsequent trades sooner, potentially reducing the duration of external financing or the amount of liquidity held against a sequence of obligations. However, the actual benefit depends heavily on the timing of funding requirements and the usability of proceeds.

Because Solana DvP does not perform netting calculations across trades, institutions requiring offsetting arrangements or credit lines must establish those functions externally before deciding how much to send to their escrows.

The protection offered by the atomic exchange is principal delivery risk within the token exchange: neither side hands over its agreed leg without the other leg also moving. However, the broader financial relationship still depends on the specific instruments being exchanged. A cash token carries its issuer’s credit and redemption risks, and regulated asset tokens can retain controls that affect transfers, such as freeze, pause, or permanent-delegate powers, which remain relevant while tokens sit in escrow.

The unwind instructions allow either party to reclaim its own leg while leaving the trade open, or to reject the trade and refund both legs. The settlement authority can cancel the trade, and a separate recovery instruction handles deposits arriving after closure, subject to the token’s transfer rules. These powers do not override an issuer that freezes an escrow or blocks transfers; a fully funded trade can still fail to complete, and refunds may depend on issuer cooperation. Additionally, the authorized settlement signer must be available. Under the trade-creation terms, refunds and reclaims return to the named party’s token account, even if a custodian supplied the original deposit. While agreed settlement destinations can receive proceeds, the refund route may differ from the funding route.

The program’s operational behavior can be summarized across three core functions:

• Exchange: Both agreed token legs move atomically, requiring full balances and a valid authority-signed settlement.
• Funding: Separate escrows hold the agreed amounts, while participants arrange tokens, financing, and any netting.
• Recovery: Parties can reclaim or reject, and the authority can cancel, but issuer and token transfer controls still apply.

The documentation instructs operators to recognize settlement when the transaction reaches Solana’s finalized commitment. Whether this constitutes legally final settlement depends on the parties’ agreements and applicable regulatory regimes.

The Foundation’s documentation lists an upgradeable program on mainnet-beta and devnet, with an upgrade authority capable of changing the deployed program. Institutions relying on the protocol must monitor its governance and settlement rules. The client documentation points to a specific public source revision, with the latest dated Sept. 30. Security reviewer Cantina’s audit, conducted from May 21-28, covered an earlier repository and specific fixes, marking four medium findings as fixed, while acknowledging three low-risk and six informational findings. The Foundation states the program is ready for real funds, currently inviting design partners and early participants ahead of production release.

JPMorgan’s role in the development was limited to providing securities-settlement-practice input, with the announcement explicitly disclaiming any role in the program’s design, development, operation, approval, endorsement, or guarantee.

For institutions, the next critical evidence will need to connect actual settlement use with the amount and duration of funding, financing costs, and whether proceeds become spendable sooner. Solana DvP offers a defined atomic exchange, but turning that exchange into a capital-saving service still depends on the cash, assets, and financing surrounding it.

Source link