Two regulated exchanges have asked the European Commission to change a number, and they have asked loudly enough to make it news. Nasdaq and Boerse Stuttgart have jointly urged Brussels to raise the size ceilings inside the EU's DLT Pilot Regime — the sandbox that lets tokenized securities trade and settle on distributed ledgers under targeted exemptions from the rules that normally govern European market infrastructure. Their stated reason is the standard one: restrictive caps suppress innovation, and European tokenization will migrate to the United States if the ceilings stay where they are.
The number at the center is €6 billion. That is the maximum aggregate market value of DLT financial instruments a DLT market infrastructure may admit under Regulation (EU) 2022/858. A second, tighter number sits underneath it: shares may only be admitted where the issuer's market capitalization does not exceed €500 million. Six years of legal runway, six billion euros of exposure, half a billion per issuer.
I don't read the letter for its argument. I read the regulation it wants amended. And inside that regulation, the ceiling is not the binding constraint. The cash leg is.
Start with what the Regime actually authorizes, because the lobbying language depends on nobody looking. Regulation (EU) 2022/858 entered into force in March 2023 with a six-year horizon and a deliberately narrow aperture. It creates three categories of authorized infrastructure: the DLT multilateral trading facility, the DLT settlement system, and the DLT trading and settlement system, plus a separate track for sovereign bonds and money market instruments. In exchange for operating on a ledger, an authorized venue receives carve-outs from MiFID II, from parts of the Central Securities Depositories Regulation, and from the ordinary designation mechanics of the Settlement Finality Directive. That is not a small gift. It is the temporary suspension of the settlement discipline regime that European post-trade has spent two decades building.
The ceilings are the price of that gift. They are calibrated so that a failure inside the sandbox cannot contaminate the wider market infrastructure. Six billion euros is roughly the size at which a supervised collapse is survivable without triggering a systemic event. Half a billion per share issuer keeps the biggest listed companies out entirely, because the segment most likely to be used as collateral in a stress event is precisely the segment the sandbox is designed to exclude. This is not an oversight. It is the design.
Now the two institutions asking for it to be undone. Boerse Stuttgart Group has operated regulated digital asset custody and a retail crypto venue since the late 2010s, and has run tokenized debt issuance on its own rails. Nasdaq has spent several years building digital asset infrastructure and public filings and product disclosures indicate a tokenized collateral line as an institutional target. Both are real institutions with real balance sheets and no run-away risk. Neither has ever had a capital-markets product collapse trigger a supervisory intervention. Their credibility is not in question.
Their motive is. Nasdaq and Boerse Stuttgart are not technology suppliers. They are venues. When a venue asks a regulator to raise a ceiling, it is not asking for permission to build something. It is asking for permission to sell more of something it has already built.
The economics of tokenization do not accrue to issuers or investors. They accrue to the venue that owns the ledger, the custody, and the settlement instruction simultaneously.
This is the part the innovation narrative obscures. A tokenized bond that trades and settles on one platform collapses three separate revenue lines — trading fee, clearing margin, custody fee — into a single counterparty. The Regime's DLT TSS category is explicitly built to allow that collapse, because the whole point of ledger settlement is atomic delivery-versus-payment without a central counterparty in the middle. For an issuer, that means lower cost. For an investor, that means faster settlement. For the venue, that means it captures the entire post-trade stack instead of a slice of it.
The ceiling of €6 billion is what prevents that stack from being amortized. Building a production-grade DLT settlement engine, a custody stack, a collateral management system, and the legal wrappers for eleven member states is a fixed cost with a long payback. You amortize it on volume. At €6 billion of admissible instruments, the volume is not there. The venue carries the build cost and receives sandbox revenue. That is the actual complaint inside the letter, dressed as competitiveness.
I trace the wallet, not the whisper. The wallet here is the fee stack.
Where does the business actually go if the ceiling rises? Not to tokenized equities, which no European venue has meaningfully captured. It goes to tokenized collateral — margin, repo, and securities lending. The European repo market is measured in trillions, not billions. If a DLT infrastructure can hold large-cap instruments and pledge them intraday, it inserts itself into the funding plumbing of every bank on the continent. That is the pool the €500 million issuer threshold currently locks out. No DAX-listed issuer qualifies. No sovereign qualifies under the share track. And without large-cap collateral, a DLT settlement venue is a fast venue for small instruments, which is to say it is a curiosity.
So the request is technically coherent. Nasdaq and Boerse Stuttgart are not lying about the ceiling being restrictive. They are simply not describing what the ceiling protects, or who would absorb the risk if it were removed.
Here is where the case against the letter becomes not a case about caps at all.
Even with the ceiling lifted to infinity, the DLT Pilot Regime's settlement model does not deliver the product it advertises, because the cash leg still clears against infrastructure that is not on a ledger and not open at three in the morning.
Atomic delivery-versus-payment requires both legs to be final in the same instant. The securities leg can be final on a distributed ledger. The cash leg cannot, unless the cash is a token issued by a central bank that accepts it as its own liability. The euro is not that token. The digital euro is not live and will not be live inside the current Regime window. The European Central Bank's exploratory work on DLT settlement concluded with two models on the table: a trigger solution that links a DLT platform to the existing TARGET2 real-time gross settlement rail, and a full-DLT model with central bank money issued on the ledger itself. Neither is in production. Neither is scheduled.
What that means in practice is that a DLT trading and settlement system running today settles its securities leg on-chain and its cash leg through a legacy account at a central bank or a commercial bank, during that institution's operating hours, subject to that institution's cutoffs. The trade is not atomic. It is sequenced. The ledger leg is final; the cash leg is contingent. In a failure window, that contingency is exactly the exposure the Settlement Finality Directive exists to eliminate, and the Regime's exemptions are what allow the contingency to persist.
I spent part of 2018 reading transaction relay logic in the 0x exchange contracts, where improper nonce handling allowed a signed order to be replayed. The lesson was not that nonces are hard. The lesson was that settlement assumptions that are never tested in production are not assumptions — they are debts. The DLT Regime has a cash-leg debt that no ceiling change repays.
The second structural problem is the same shape. The Regime exempts DLT market infrastructures from key parts of the CSDR settlement discipline regime. In the conventional market, a failed delivery triggers mandatory buy-ins and cash penalties, and the CSD absorbs the operational burden of forcing resolution. In a DLT TSS, there is no CSD in the chain. There is the operator. The CSDR buy-in regime, revised in 2023 and delayed in application precisely because the industry could not operationalize it, was the mechanism that made late settlement expensive. Exempt the ledger venue from it and late settlement becomes cheap again — cheaper than the legacy rail, in fact, because the venue pays no penalty for the delay either.
That asymmetry is the observable result of the sandbox. And it is why the ceiling matters more than the letter admits. The ceiling is the only thing capping the size of the exposure that the exemption creates.
When the fee stack is that tall and the competition is a handful of licensed venues, the exit is rigged. A sandbox with three authorized participants is not a market. It is a cartel with a regulator's signature on it. Raising the ceiling before broadening the participant list converts a controlled experiment into a licensed oligopoly, and the price of settlement in Europe becomes whatever the three incumbents say it is.
Now, the part the bears get wrong, including some who write in this space.
The DLT Pilot Regime is, as of this writing, the only legally binding framework anywhere in the world that formally authorizes tokenized securities trading and settlement as a supervised activity rather than a tolerated one. The United States has no equivalent statute. It has agency posture: rescinded staff accounting bulletins, custody rule amendments, enforcement forbearance, and whatever the current administration's working group decides is acceptable this quarter. That is not a framework. That is a mood.
A tokenization regime built on staff guidance rather than statute is a vacuum mint — there is nothing behind it except the disposition of the people who happen to be in office. The next administration can reverse it with a memo. The EU's Regime requires a regulation to unwind, and regulations are slow in both directions. That durability is worth more to an institutional issuer than any ceiling, and it is the strongest argument the exchanges have not made.
There is a second point in the bulls' favor, and it is the one I have to concede on principle. I spent the aftermath of the Terra collapse arguing that technical audits without legal accountability are theatre — that code review cannot substitute for a rulebook with penalties attached, and that regulators who arrive after a $60 billion wipeout have arrived to write a press release, not a remedy. Here, the EU has done the opposite of what I criticized. It wrote the accountability into the authorization, and it capped the exposure at a size it could survive.
The exchanges want the cap raised. If it is raised, the accountability architecture has to be raised with it, because right now the ceiling is doing work that the settlement discipline exemptions would otherwise have to do.
The question is not whether the €6 billion becomes €60 billion. In a bull market, with every large venue lobbying for volume and every member state competing for the tokenized business that Frankfurt, Paris, and Zug are all chasing, the ceiling will move. The question is whether the cash leg is final before it does. A ledger trade whose euro leg still waits for TARGET2's calendar is not a 24/7 market. It is a nine-to-five market with a receipt. And when the venue is exempt from buy-ins and the settlement window closes at five, someone has to sign for the trade that never landed.
That signature does not exist yet in any regulation I have read.
