Wake up call, do you have the right chain for securities?

Polymath is the latest of the Ethereum fan club that has woken up to the fact that Ethereum isn’t the right blockchain platform for financial securities. The reasons include the permissionless and unverified participants, gas fees, unpredictable settlement, poor performance, and lack of scalability.

Vitalik himself was the first to point this out way back on May 9, 2016 (3.5 years ago—a lifetime in crypto-space) in a blog post on Settlement Finality: “This concept of finality is particularly important in the financial industry, where institutions need to maximally quickly have certainty over whether or not the certain assets are, in a legal sense, “theirs”, and if their assets are deemed to be theirs, then it should not be possible for a random blockchain glitch to suddenly decide that the operation that made those assets theirs is now reverted and so their ownership claim over those assets is lost.”

Independently, we (KoreConX) too came to the same conclusion when we first started looking for a good platform for our digital securities and our all-in-one applications that serve the market. This does not detract from the engineering prowess of the Ethereum team, who have taken on a monumental task in trying to create an open blockchain platform that is everything to everyone.

The real problem in the financial markets is that of investor safety. No amount of cryptography can guarantee the validity of participants and of transactions precisely because verification and validity is not in the technical domain. Rather, it’s in the social, economic, and regulatory domain. Blockchain will immutably commit all data regardless of its business validity, as long as it’s cryptographically valid. It is up to the blockchain applications and smart contracts to ensure business validity. This too is not a technical issue but a legal issue. Securities contracts should be authored by securities attorneys, not programmers. Indeed, smart contracts as conceived in Bitcoin and Ethereum are neither smart nor contracts. The word ‘contract’ is an obfuscation of ‘interface specification’ that is commonly referred to as a ‘contract’ between two applications in the software world. Unfortunately, 

To their credit, the thought-leaders of Ethereum were under no illusions about the supposed prowess of smart contracts, as defined within Ethereum. Vitalik Buterin, for example, tweeted back on October 13, 2018, “To be clear, at this point I quite regret adopting the term ‘smart contracts’. I should have called them something more boring and technical, perhaps something like ‘persistent scripts’.” Another Ethereum, Vlad Zamfir, preferred the term ‘stored procedures’.

The most important thing that the open blockchain community missed is that except for currency, financial securities are not bearer instruments. Creating fraudulent securities through shell companies is ridiculously easy with bearer instruments, which is why they are banned in responsible economies.

Besides the fact that securities are not bearer instruments, the public blockchain advocates seem to be coming to the realization that when securities are exchanged between two parties, independent and unverified miners have no business validating the transaction. Parties who have no fiduciary responsibilities, no regulatory mandate, or any skin in the game cannot perform business validation. Would you ask a stranger in New Zealand to approve the transfer of your shares in a private company to your friend when you, your friend, and the private company are all in the USA? As Polymath’s Dossa observers, “How ethereum settles transactions through mining also came into consideration for Polymath, Dossa said. Since miners, who process and sign-off on transactions for a fee, can operate anywhere in the world, institutions could face government scrutiny if fees are traced back to a sanctioned country.” More to the point, securities law does not recognize approvals from parties who are not associated with securities transactions.

Even as the public blockchain community tried to disintermediate regulators, when their assets were stolen from their wallets and exchanges, or the companies vanished outright, investors turned to those same regulators for recourse and recovery.

The other problematic aspect of Ethereum was the nature of finality, which in Ethereum, is statistical. This will not do in legal agreements. As we pointed out early last year in one of our KoreBriefings when evaluating Ethereum, “Finality [in Ethereum] if probabilistic and not guaranteed.” Would you sign an employment agreement where the fine print says there’s a one-in-ten chance that you would not be paid every two weeks. As Adam Dossa, Polymath’s head of blockchain, rightly observed, “At the center of contention is ethereum’s consensus mechanism, proof-of-work (PoW), which only offers a statistical guarantee of transaction finality.”

Incentives often have unintended consequences. We see this happen often with children and pets. Public blockchains are all about decentralization, but in fact miners’ incentives have all but centralized the blockchains. In contrast, consider that within KoreChain we have not left the question of decentralization to the vagaries of unknown miners. Instead, the KoreChain is engineered for decentralization. It is an implementation of the Infrastructure of Trust that currently runs in production in twenty-three countries; in barebones minimal cruising mode, it is capable of handling approximately 10 billion transactions per year (~318 tps) with consensus on business validity. KoreChain’s architecture also makes it massively scalable with very little effect on performance. However, as Vitalik rightly points out, finality can never be 100% even if the technology can achieve absolute finality, since the ultimate arbiter of finality is the legal system. For this reason, KoreChain includes KoreNodes independently are owned and operated independently by regulated entities and regulators worldwide..

If you hold fast to the idea that your powerful car is the only way to cross the ocean, you will be in for a continual hack of trying to make your car float on water. It is much better to recognize that a good ship is the right vehicle for the ocean. Many of the challenges of building a compliant securities application on Ethereum are actually unnecessary. Securities regulation in any one country is complicated enough. Multi-jurisdictional capital markets transactions compound that complexity by several orders of magnitude. Application designers should not be distracted by trying to create their own chains; instead, the real achievement lies in making securities transactions fully compliant in all jurisdictions, promoting innovation in financial markets, enabling flexibility, minimizing process costs, and providing an Infrastructure of Trust to which all regulated entities are welcome. 

The world’s capital markets are too dispersed, complex, and huge for any one participant to dominate. Revolutionizing the capital markets is only possible through collaboration. 

www.InfrastructureofTrust.com

Finality, Settlement, and Validation: The Place to Start

One of the most important concepts in capital market transactions is settlement and finality. Even though the payment infrastructure gets the majority of airtime, settlement finality is just as, if not even more, important in the securities markets. In the public markets, the structure of securities and the clearance and settlement process is quite standardized. In the private markets, a segment that is three orders of magnitude larger than the public markets, standardization does not exist. Rather than an issue, this is the strength of the private markets, since both private companies and their investors need flexibility in securities contracts. Regardless of all this, settlement finality is equally important in both markets.

The issue of settlement finality actually applies to all legal contracts in the sense that terms and conditions cannot be stated in probabilistic terms. Would you sign an employment agreement where the fine print says there is a one-in-ten chance that you would not be paid every two weeks?

In justifying Polymath’s latest move to abandon Ethereum as their platform of choice for security tokens, Adam Dossa, Polymath’s head of blockchain, rightly observed, “At the center of contention is ethereum’s consensus mechanism, proof-of-work (PoW), which only offers a statistical guarantee of transaction finality.” As we pointed out early last year in one of our KoreBriefings where we evaluated Ethereum, “Finality [in Ethereum] is probabilistic and not guaranteed.” Probabilistic or even statistical finality in legal agreements just will not do.

In “Principles of Market Infrastructure,” a publication of the Bank of International Settlements, Principle 8 (Settlement Finality) requires that “An FMI [Financial Markets Infrastructure] should provide clear and certain final settlement, at a minimum by the end of the value date. Where necessary or preferable, an FMI should provide  final settlement intraday or in real-time.”

Note the definitive language of “clear and certain final settlement.” This excludes probabilistic or statistical finality. Melvin Eisenberg, Professor of Law at the University of California, Berkeley, says, “The classical law approach to the certainty principle reflects the binary nature of classical contract law. Indeed, this approach is often referred to as the all-or-nothing rule.”1  Prof. Eisenberg goes on to provide examples of the “rejection of a probabilistic analysis.” While much of that treatment is related to damages due to non-performance of contracts, the concept of certain finality is quite relevant for securities transactions. This is a serious issue that has lately garnered a lot of attention.

Settlement finality is a statutory, regulatory, and contractual construct.2  Settlement is actually a two-step process: first is the operational settlement, which consists of all the steps using technology or otherwise to complete the process of trade, transfer, or corporate action. The second step is the legal settlement that happens when the regulatory framework provides the final approval, at which point a transaction is deemed to be fully settled. The problems due to the uncertain nature of operational settlement in Ethereum are well-known, even if generally ignored. The concept of legal settlement, on the other hand, simply does not even exist in the security token protocols based on Ethereum.

Blockchain technology must first achieve operational finality before the regulatory framework can certify legal finality. Public blockchains can only specify probabilistic and statistical finality. Smart contracts have to also provide for legal settlement. A permissioned blockchain such as Hyperledger Fabric is designed for guaranteed finality. The KoreProtocol of KoreChain, a blockchain application built on Fabric for managing the entire lifecycle of private securities, is designed to ensure legal finality also. One example of legal finality is that directors’ approval of private securities trades under certain conditions, as set forth in the shareholder agreement, is necessary before such trades are deemed to be final. The KoreProtocol is designed to capture this requirement and the KoreChain is designed to implement it.

While Polymath is the latest of the Ethereum advocates that has woken up to the fact that Ethereum isn’t the right blockchain platform for financial securities, they have not been the first. Several private companies, their securities attorneys, broker-dealers, and many other participants have noticed this deficiency and chosen to go with permissioned chains such as the KoreChain.

More significantly, Vitalik himself was the first to point this out way back in May of 2016 (over three years ago—a lifetime in crypto-space) in a blog post on Settlement Finality: “This concept of finality is particularly important in the financial industry, where institutions need to maximally quickly have certainty over whether or not the certain assets are, in a legal sense, “theirs”, and if their assets are deemed to be theirs, then it should not be possible for a random blockchain glitch to suddenly decide that the operation that made those assets theirs is now reverted and so their ownership claim over those assets is lost.”

Advocates of public blockchain also seem to be coming to the realization that when financial securities are exchanged between two parties, independent and unverified miners have no legal authority for validating the transaction. Parties who have no fiduciary responsibilities, no regulatory mandate, or any skin in the game cannot perform business validations. Would you ask a stranger in New Zealand to approve the transfer of your shares in a private company to your friend when you, your friend, and the private company are all domiciled in the USA? As Polymath’s Dossa observers, “How ethereum settles transactions through mining also came into consideration for Polymath. Since miners, who process and sign-off on transactions for a fee, can operate anywhere in the world, institutions could face government scrutiny if fees are traced back to a sanctioned country.” More to the point, securities law does not recognize approvals of securities transactions from parties who are not associated with or have any fiduciary responsibility for securities transactions.

Principles of settlement finality and authoritative validation of transactions remain some of the most important cornerstones of establishing trust in the financial markets infrastructure. It is up to the blockchain application designers to understand the spirit and intent of these principles and select technologies that facilitate the implementation of such principles rather than hinder them. It is up to the business participants (company management, securities attorneys, and broker-dealers) to recognize the importance of these principles and the limitations of some blockchain platforms.

Incentives often have unintended consequences. We see this happen often with children and pets. Public blockchains are all about decentralization, but in fact miners’ incentives have all but centralized the blockchains. In contrast, consider that within KoreChain we have not left the question of decentralization to the vagaries of unknown miners. Instead, the KoreChain is engineered for decentralization. It is an implementation of the Infrastructure of Trust that currently runs in production in twenty-three countries; in barebones minimal cruising mode, it is capable of handling approximately 10 billion transactions per year (~318 tps) with consensus on business validity. KoreChain’s architecture also makes it massively scalable with very little effect on performance. However, as Vitalik rightly points out, finality can never be 100% even if the technology can achieve absolute finality since the ultimate arbiter of finality is the legal system. For this reason, KoreChain includes KoreNodes that are owned and operated independently by regulated entities and regulators worldwide.

If you hold fast to the idea that your powerful car is the only way to cross the ocean, you will be in for a continual hack of trying to make your car float on water. It is much better to recognize that a good ship is the right vehicle for the ocean. Many of the challenges of building a compliant securities application on Ethereum are actually unnecessary. Securities regulation in any one country is complicated enough. Multi-jurisdictional capital markets transactions compound that complexity by several orders of magnitude. Application designers should not be distracted by trying to create their own chains; instead, the real achievement lies in making securities transactions fully compliant in all jurisdictions, promoting innovation in financial markets, enabling flexibility, minimizing process costs, and providing an Infrastructure of Trust to which all regulated entities are welcome. 

1 Foundational Principles of Contract Law, Melvin A. Eisenberg
2 http://yalejreg.com/nc/on-settlement-finality-and-distributed-ledger-technology-by-nancy-liao/

The world’s capital markets are too dispersed, complex, and huge for any one participant to dominate. Revolutionizing the capital markets is only possible through collaboration. 

www.InfrastructureofTrust.com

A Security Token for Full Lifecycle Compliance

ICOs suffer from disapproval from not only the SEC but also several media that have banned ICO advertising. This disapproval seems justified, since many of the ICOs had no business plans, no product, no service, no credible team, and no roadmap for generating value. Of the remaining well-intentioned ones, the problem of passing regulatory scrutiny for a utility token is insurmountable since it is a utility in name while a security in intent and form. The only way out is to re-classify it correctly as a security token.

The Responsible Approach of the KoreToken Security Protocol

The ERC-20 protocol and the concept of smart contracts are steps in the right direction for many use cases and great for many applications. However, for the financial markets, we need a protocol that can meet all regulatory requirements. We have taken an approach that originates solidly from securities law. We recognize the paramount need for safety, security, and risk management. We know all parties in a securities transaction must be protected at all times – these are the investors, issuers, directors, officers, lawyers, broker-dealers, transfer agents, secondary exchanges, and secondary token holders. There must be complete traceability and auditability.

Blockchain, in creating an immutable record, guarantees validity and (perhaps eventual) finality. However, this validity is technical validity and finality is the committing of the block to the chain. In the securities world, validity and finality means a lot more. Technical validity is necessary but not sufficient. Validity should include contractual validity and legal validity. Similarly, finality is achieved only upon authorized approval of transactions. KoreChain, our implementation of blockchain using Hyperledger Fabric, addresses this broader and more comprehensive definition of validity and finality. The KoreToken protocol and specification includes modular methods to implement various aspects of business validity and finality.

A Comprehensive Specification and Implementation

The KoreToken’s specification and protocol address the requirements for data and methods for the complete lifecycle of a security token. KoreConX will itself use this specification and protocol to create its own security token as well create security tokens for its issuers. The protocol includes data and methods that fall into three broad categories: public interface layer, business layer, and governance layer. The methods themselves can be invoked by participants in various transactions.

The execution of security transactions, from issuance to corporate actions to exit, cannot happen in a vacuum. Registered entities are accountable for knowing where these securities are, who are their holders, and the state of their compliance. More than issuing a protocol, KoreConX has taken the unique approach of providing a full operational platform as well as partnerships with other participants in the ecosystem such as broker-dealers and secondary market operators. KoreConX itself is an SEC-registered transfer agent, meaning that we can offer full custodianship services for securities.

The KoreToken architecture is modular, allowing security token designers to compose entire securities transactions and implement various use cases. The heavy lifting of blockchain functionality as well as business-related functionality such as event management, transaction management and process management are handled by the KoreChain.

Please see the following Executive KoreBriefing on The KoreToken Specification and Protocol.

We will release the detailed technical whitepaper shortly.

 

Introducing the KoreChain

The KoreChain is the first blockchain on a serious industrial-strength infrastructure that is focused exclusively on the complex world of global financial securities. The KoreChain is a permissioned Hyperledger Fabric blockchain. This gives it the native advantage of Fabric, a blockchain platform that has been engineered from the ground up for handling enterprise-class applications. KoreChain is implemented on IBM’s hosting platform since it provides the highest level of security as define by the US National Institute for Standards and Technology.

In electing Hyperledger Fabric to be the foundational blockchain infrastructure for KoreChain rather than Ethereum, we made a clear commitment to good engineering, enterprise-class architecture, and implementation with well-established tools rather than new and untested programming environments.

Hyperledger Fabric Strengthens KoreChain

The following benefits of Fabric come to us practically out of the box:

  1. Membership and access-rights management: The securities world has many complicated rules about data privacy, KYC, AML, need-to-know, etc. Some of these vary by region or by exemption rules. In addition to regulatory constraints, the platform also has to accommodate privacy conditions of participants in various transactions. Fabric provides this flexibility through channels.
  1. High levels of performance and scalability: Securities transactions are more complicated than point-of-sale authentication and authorization. While all securities transactions don’t require response and completion within seconds (as, for example, in trading), the sheer volume of multiple transactions and subsidiary events in capital markets requires a robust infrastructure that can stand up to spikes and also support secondary trading.
  2. Security and safety: The combination of Hyperledger Fabric and the hosting infrastructure at IBM provide a protected environment that includes end-to-end cryptography and the highest level of security defined by the US National Institute of Standards and Technology (NIST), the level 4 of FIPS 140-2, that includes, for example, Hardware Security Modules.

KoreChain’s Specialized Capabilities

In addition to these, KoreChain provides a number of specialized capabilities such as several layers of artificial intelligence, event management, and transaction management for securities.

All this makes the KoreChain an industrial-strength engine for KoreContracts, which are true smart contracts for financial services. One special category of KoreContracts is the  KoreTokenContract, which is the fundamental template for KoreTokens. The KoreChain is carefully designed to ensure a safe and secure environment for security tokens and their management throughout their entire lifecycle, including provision for various corporate actions.

More on these exciting developments in subsequent blogs and articles!
Please see the following introductory Executive KoreBriefing on What is KoreChain?
We will release the detailed technical whitepaper shortly.