Suit Up · Asia's institutional desk on tokenisation

TL;DR

Tokenised bonds are the second-most-mature institutional tokenisation pattern after tokenised MMFs (money-market funds), with the worked examples concentrated in the wholesale segment: sovereign, supranational, and FI issuance, almost always to professional-investor distribution. Three reference programmes carry most of the operational learning. HSBC Orion plus the UK DIGIT pilot is the G7 sovereign benchmark. The HKSAR multi-currency green bond series (USD 1.3bn-equivalent in 2025, the largest single tokenised-bond issuance to date) is the multi-currency reference. The Project Guardian Fixed Income workstream, anchored by ICMA, is the closest the market has to a published operating manual on DvP (delivery-versus-payment) and custody for tokenised bonds. The decision tree turns on three things: the issuer's jurisdiction and legal perimeter, whether the issuance is wholesale or retail, and the cash-leg architecture (atomic on-chain DvP via tokenised commercial-bank deposits versus traditional CSD-mediated settlement).

Decision frame

The brief is straightforward in shape and harder in execution. The issuer (a sovereign treasury, a supranational, an FI debt-issuance desk, or a corporate) is choosing whether and how to tokenise an upcoming bond mandate. Most operators arrive with one or more wrong framings already baked in.

"Tokenisation is just a faster CSD." This conflates the venue with the legal architecture. A conventional CSD-cleared bond settles in T+1 or T+2; the chain entry is not the operative ownership record. A tokenised bond, properly built, has the on-chain entry as the legally operative record (per Chapter I, Part 3 on legal control). The structural difference is the legal-control question, not the speed. Skip that distinction and you ship a derivative-reference structure that is not actually a tokenised bond, and your legal team will eventually flag the mismatch.

"We need atomic DvP for tokenisation to be worth it." Atomic DvP is the upside, not the entry ticket. Many tokenised-bond programmes have shipped without atomic DvP, settling the cash leg via traditional payment systems integrated by API for near-atomic effect. Designing the issuance contingent on atomic DvP is how a programme ships eighteen months late because the cash-leg counterparty did not deliver.

"Public chain gives us global investor access." True in theory and absent in practice. Wholesale bond investors are intermediated through dealer-arrangers, custody, and CSD relationships that they do not change for one issuance. The public-chain investor base does not show up to a wholesale tokenised-bond order book. Permissioned or hybrid is where the live programmes have landed.

"Retail tokenised bonds are a year away." Longer than that for most jurisdictions. The retail-distribution legal perimeter for tokenised bonds requires either explicit retail-tokenisation rules (Hong Kong is closer than most via the SFC tokenised authorised funds framework expansion, but the bond perimeter is still primarily wholesale) or a UCITS-style wrapper that the local fund regime recognises. The wholesale segment is where the operational work is happening and where the next two years of learning will land.

The seven design decisions

Issuer perimeter and law

The legal wrapper for the issuance constrains every downstream choice. Sovereign issuers run under the local government-debt regime: UK gilts under FSMA modifications inside the UK Digital Securities Sandbox; HKSAR multi-currency green bonds under the Hong Kong perimeter, with the HK Stablecoins Ordinance and the SFC framework providing the surrounding scaffolding; Singapore Government Securities under the SFA. Supranational issuers (EIB, World Bank) tend to pick a jurisdiction of issuance for each programme based on the investor base and the available DLT-securities framework (Luxembourg under the DLT-Securities Act has been a recurring choice). FI issuers (HSBC, JPMorgan) issue under their home prudential regime with the cross-border distribution running through the standard professional-investor regimes. Corporate issuers face the highest legal-wrapper friction because the company-law treatment of on-chain bond instruments is less codified outside the major financial-jurisdiction perimeters. Pick the issuer perimeter first, because it sets the platform shortlist and the cash-leg options.

Tokenisation platform

The reference is HSBC Orion, the proprietary HSBC platform that has carried more than USD 3.5bn of cumulative tokenised-bond issuance across UK, Hong Kong, and Luxembourg deployments and is the mandated platform for the UK DIGIT pilot. Multi-currency capability is in production (HKD, USD, EUR, CNY tranches on the HKSAR programme), and the Orion architecture pairs asset issuance with tokenised commercial-bank deposits as the cash leg. Canton Network is the alternative for the JPMorgan plus Daiwa cohort and the Nomura / Mizuho / JSCC tokenised JGB collateral pilot, with privacy-partitioned domains as the structural feature. Tokeny (using the ERC-3643 standard) is the platform of record for several European institutional tokenised-securities programmes. Marketnode is the SGX-affiliated venue for Singapore-domiciled issuance. The Evaluating issuance platforms playbook is the deeper read on platform selection criteria.

Cash leg

Three patterns recur. Tokenised commercial-bank deposits as the on-chain cash leg, which is the DIGIT-pilot model and the HKSAR Orion model: the bond leg and the cash leg both move on the same permissioned ledger, and atomic DvP is the operative settlement primitive. Wholesale CBDC where available, which the HKMA EnsembleTX pilot is testing as the cash-leg architecture for HK tokenised flows. Traditional payment system (RTGS, Fedwire, or local equivalents) integrated via API for atomic-effect settlement, which is the workable fallback when the cash-leg counterparty has not yet brought a tokenised-cash rail to the issuance perimeter. The cash-leg design is the load-bearing decision. It determines whether atomic DvP is actually available and whether the operational speed-up the press release will claim is real or rhetorical.

Settlement venue

Two patterns. Direct issuer-to-investor on the platform (the DIGIT model, where the platform itself runs the issuance rail and settles the bond into investor wallets without an intermediating CSD), or platform-to-CSD bridge (where the platform issues the token but settlement reconciles to traditional CSD records, with the chain entry sitting alongside rather than replacing the conventional book entry). The first pattern produces cleaner atomic DvP and a single operative record. The second produces softer integration risk with existing custodian and dealer infrastructure but inherits the reconciliation overhead it was supposed to remove. The choice ties back to the legal-wrapper question: where the local regime treats the chain entry as the operative record, the direct pattern is viable; where the regime requires the off-chain CSD record, the bridge pattern is the only legal route.

Investor base scope

Wholesale-only via professional-investor regimes is where every existing programme sits. The US Reg D / Reg S framework, Singapore SFA Section 274 (institutional) and Section 275 (accredited), Hong Kong SFC professional-investor regime, EU MiFID II professional-client regime. Each has codified eligibility tests that the platform contract layer can enforce via whitelist gating. Retail-eligible distribution requires a UCITS-style wrapper or the local equivalent, and the legal infrastructure for tokenised retail bonds is materially less mature. Hong Kong's tokenised authorised funds framework has been moving in that direction for fund instruments, but the tokenised-bond retail perimeter is not yet there in any major financial jurisdiction. Plan for wholesale; defer retail.

Secondary market design

Two patterns again. Listed on a regulated exchange (LSEG for the UK, SGX for Singapore, HKEX for Hong Kong) with trading on the traditional venue plus reconciliation to chain. Or peer-to-peer transfers on the platform without listed-venue intermediation, which is the Orion default for the HKSAR programme. The listed-venue route preserves index eligibility, which matters because the institutional bid is partly index-driven and an instrument that is not in the relevant indices loses a meaningful slice of the addressable demand. The peer-to-peer route is operationally lighter but requires investors to underwrite the platform itself as the venue, which is a different risk acceptance.

Custody and registrar

Bank-grade custody for the underlying instrument is non-negotiable. The credible counterparty universe runs through BNY, State Street, Euroclear, and Clearstream depending on jurisdiction, with the local sub-custodians in the relevant APAC perimeters where the issuance is locally domiciled. The registrar function is where tokenised bonds diverge from conventional ones: in the Orion model HSBC itself holds the registrar role for its issuances, with the platform contract layer enforcing transfer eligibility. In a CSD-bridge model the existing CSD remains the registrar with reconciliation to chain. In a transfer-agent model an external transfer agent holds the role. The registrar choice is the second-most-binding integration point after the cash leg, and the transfer-agent theme page is the deeper read on the function.

Worked examples

UK DIGIT pilot

Sovereign issuer (HM Treasury), HSBC Orion as the platform, tokenised commercial-bank deposits as the cash leg, atomic DvP at settlement, wholesale-only distribution to UK gilt-market participants. The regulatory perimeter is the joint Bank of England, FCA, and PRA supervision via the Digital Securities Sandbox under FSMA 2023 modification powers. The mandate was awarded on 15 December 2025 and is the first G7 sovereign digital-bond programme of its scale per public reporting (HSBC media release; The Block). The cash-leg participants and the planned issuance scale and cadence are not in current public coverage. The architectural reference for the design choices flows back to the HKSAR multi-currency green bond programme that Orion has been running since 2023, which is why an APAC operator reading the DIGIT design can read it as the UK adopting an architecture pioneered in Hong Kong. The structural deep-dive is at HSBC Orion + UK DIGIT.

HKSAR multi-currency green bond

Sovereign issuer (HK SAR), HSBC Orion as the platform, multi-currency at the contract level (HKD, USD, RMB, EUR tranches), HKMA-supervised market-infrastructure context. The 2025 issuance crossed approximately USD 1.3bn-equivalent in size and is widely cited as the largest single tokenised-bond programme issued to date. The cash leg sits on tokenised commercial-bank deposits issued by participating banks, with the conventional RTGS leg of bank-to-bank settlement running parallel where the tokenised path is not available across all participating banks. The programme has been the testing ground for several architectural choices that have flowed into the DIGIT design: paying-agent integration, custodian segregation, and the atomic-DvP primitive against tokenised-deposit cash legs. For an APAC sovereign or supranational issuer evaluating Orion, the HKSAR programme is the operational reference rather than the marketing case study.

Red flags

Tokenising a retail-distributed bond before the local regulatory framework explicitly contemplates retail tokenised distribution. You will spend more on legal opinions than on the issuance itself, the new product committee will burn through patience, and the second issuance becomes harder to justify.
Promising atomic DvP without confirmed cash-leg integration. Your bond leg ships, the cash leg slips into a follow-on phase, and you carry reconciliation overhead worse than the conventional settlement you were replacing. The cash-leg counterparty needs to be named, the integration tested in a controlled environment, and the fallback behaviour for partial settlement specified before the issuance is announced.
Going multi-currency at launch. Operational complexity scales non-linearly with each currency added. Pick one currency for the first issuance, get the architecture working at production discipline, and add currencies in subsequent tranches. The HKSAR programme is multi-currency now but did not start that way.
Letting the platform partner gate the secondary market. If transfers can only happen inside the platform's perimeter and the platform is the only path to the instrument, the bond becomes platform-locked and investors discount accordingly. The secondary-market design needs to be defensible without relying on the platform as the indefinite venue of record.
Skipping the listed-venue secondary in markets where intermediated dealing is the norm. Your bond loses index eligibility, which removes a meaningful slice of the addressable institutional demand. Listing-plus-chain is structurally more complex than chain-only, but it preserves the institutional bid that index-driven mandates produce.

</invoke>

[Suit Up]

Tokenising bonds in practice