Brazil's CSD Mirrors BTG Fund Shares on XRP Ledger
Brazil's central securities depository, CSD BR, has shifted from testing to live operation, recording BTG Pactual investment fund share data on the public XRP Ledger in a joint deployment with Ripple. The move is narrow in scope but significant in precedent: for the first time, a Brazilian systemically important market-infrastructure entity is writing near-real-time records to a public blockchain in a production environment. Accounting firms, auditors, and CFOs with exposure to Brazilian capital markets need to understand what is actually happening, what is not, and what the dual-ledger design means for reconciliation and financial reporting.
What CSD BR Has Actually Built
CSD BR is Brazil's central securities depository, the entity that maintains the authoritative register of securities ownership for a substantial portion of the country's capital market. Its new deployment uses the XRP Ledger's Multi-Purpose Token standard to create on-chain representations of BTG Pactual investment fund shares.
Record mirroring, not tokenized transfer
The critical technical detail is the word "mirror." Each token on the XRP Ledger is a replica of an entry in CSD BR's own records, not an independent, transferable instrument. CSD BR's internal register remains the legal source of ownership. Neither CSD BR nor Ripple confirmed in the announcement whether participants can transfer the tokens on-chain, or whether the blockchain simply reflects changes that CSD BR has already made in its own system. That ambiguity is not a minor footnote. It determines whether the on-chain token has any independent legal standing at all, and the answer appears to be: not yet.
Daniel Polano Spreafico, Head of Products and Clients at CSD BR, described the design choice explicitly: "We chose to start with record mirroring because it is the safest and most responsible way to introduce a new technology into critical market infrastructure." That framing signals a deliberate sequencing, starting with read-only transparency before any transfer functionality is introduced.
Who can read the on-chain record
Approved banks and companies can check the blockchain copy against the official CSD BR record in near real time. The permissioning layer sits at the participant level, not at the blockchain layer, since the XRP Ledger itself is a public chain. In practice this means the token data is technically visible to anyone running a node or querying the ledger, while the business logic restricting who acts on that data is enforced off-chain by CSD BR's existing participant agreements.
Regulatory Position and What It Means for Compliance Teams
No new approval required, for now
CSD BR and Ripple stated that no new regulatory approval is needed for this deployment. Their reasoning is that participants' legal responsibilities are unchanged: ownership is still evidenced by the CSD BR register, and no new regulated activity is being introduced by adding a read-only blockchain layer. That is a defensible position while the tokens carry no independent transfer rights. It could change quickly if the architecture evolves toward on-chain settlement or peer-to-peer transfer of the tokens.
The regulator's parallel track
Brazil's securities regulator, the Comissão de Valores Mobiliários (CVM), is running its own tokenization test programme using simulated transactions. CSD BR's live deployment is separate from that programme and does not appear to be conducted under any CVM sandbox authorisation. The contrast matters for compliance teams: CSD BR is asserting that its mirroring approach fits within existing permissions, while the CVM is still stress-testing tokenization scenarios in a controlled environment. If the CVM's own programme produces guidance that treats on-chain mirrors differently from pure off-chain records, firms that have already built workflows around the CSD BR data feed will need to revisit their compliance architecture.
Accounting Implications: The Two-Ledger Problem
For any accounting or audit team that touches Brazilian investment fund positions, this deployment introduces what can reasonably be called a two-ledger environment: one authoritative (CSD BR's internal records) and one derivative (the XRP Ledger mirror). Getting the two confused in a financial reporting context would be a material error.
Which record drives the balance sheet
Under both IFRS and Brazilian GAAP (BR GAAP, aligned with IFRS for most publicly relevant entities), ownership of a financial asset is recognised when the entity has the contractual rights to the cash flows and substantially all risks and rewards. Since legal ownership of the BTG Pactual fund shares remains evidenced solely by CSD BR's register, that is the record that drives balance sheet recognition. The XRP Ledger token cannot, in its current form, be recognised as a separate asset. It has no independent legal standing and carries no contractual rights of its own.
Reconciliation workflow
Where the on-chain mirror becomes operationally relevant is in reconciliation. Because approved participants can query the blockchain copy in near real time against the CSD BR record, the deployment creates an additional data source that can flag discrepancies earlier than a traditional end-of-day file transfer. However, any digital asset accounting software or crypto bookkeeping software used to ingest on-chain data must be configured to treat the XRP Ledger data as a verification input, not as an independent source of truth for position reporting. Firms that are already managing multi-source reconciliation for tokenized instruments should review their data hierarchy settings to make sure the CSD BR authoritative feed is clearly labelled as primary.
Valuation and fair value disclosure
Investment fund shares in Brazil are typically carried at net asset value (NAV), updated daily. The existence of an on-chain mirror does not change the valuation methodology. There is no secondary market price for the token as yet, and even if one were to emerge, IFRS 13 would require firms to assess whether any such price reflects an orderly transaction in the principal market for the underlying fund unit. Auditors should be alert to any client argument that on-chain token pricing could substitute for NAV-based valuation before that legal and market infrastructure exists.
AML and Custody Considerations
Participant-level controls on a public chain
Using the XRP Ledger, a public and permissionless blockchain, for what is effectively a controlled-access application creates an interesting AML surface. The token data is visible on-chain, but the business controls restricting who can act on that data sit entirely with CSD BR and its participant agreements. For firms thinking through the on-chain AML screening considerations for firms building tokenized infrastructure, the CSD BR model illustrates a specific architectural choice: use a public chain for transparency and auditability, but rely on off-chain legal agreements for access control. That approach can work, but it requires that AML monitoring tools are pointed at the right layer. Screening the XRP Ledger for wallet activity will not be sufficient if the actual gatekeeping is happening in CSD BR's participant onboarding process.
Custody of the token versus custody of the underlying share
Because the token carries no independent transfer rights in this iteration, custody of the XRP Ledger token is not the same as custody of the fund share. Firms acting as custodians for Brazilian fund positions should not treat holding or controlling the on-chain token as satisfying any custody obligation that relates to the underlying share. The custodial record that matters is still CSD BR's. This distinction should be documented explicitly in custody agreements and operational procedures to avoid any future ambiguity if the architecture evolves.
Strategic Context: Scale and Sequencing
Fund shares are a small part of CSD BR's book
Both CSD BR and Ripple acknowledged that investment fund shares represent a small portion of CSD BR's overall activity. The depository's core business covers a much broader range of securities. Positioning this as a live production deployment is accurate, but firms should calibrate their urgency accordingly: the immediate operational impact is limited. The strategic signal, however, is meaningful. A systemically important market-infrastructure entity in one of Latin America's largest capital markets has committed to blockchain-based record mirroring in production, not just in a sandbox. That sequencing, from pilot to live without waiting for a separate regulatory approval, tells a story about how Brazilian market infrastructure operators are reading their existing legal powers.
Implications for broader tokenization readiness
For accounting firms and CFOs tracking the pace of tokenization across Latin America, the CSD BR deployment is a data point worth watching alongside the CVM's separate test programme. If the CVM's simulated-transaction work produces a regulatory framework that endorses or expands on-chain settlement, the mirroring architecture that CSD BR has built could evolve into a transfer-enabled system relatively quickly. At that point, the accounting treatment, custody obligations, and AML architecture would all need to be revisited. Firms that have already integrated blockchain data feeds for reconciliation purposes, as discussed in the context of how stablecoin payment expansion is reshaping corporate accounting workflows, will be better positioned to adapt than those starting from scratch.
For any practice building or selecting crypto accounting software to handle Brazilian tokenized securities, the near-term priority is ensuring the platform can consume multiple data sources for the same instrument, flag the authoritative source clearly, and produce a clean audit trail showing which record drove each recognised position. That capability will matter regardless of whether the CSD BR model stays in mirror-only mode or eventually gains transfer functionality.
Frequently Asked Questions
Does the XRP Ledger token represent legal ownership of the BTG Pactual fund shares?
No. Legal ownership remains evidenced by CSD BR's internal register. The on-chain token is a mirror of that record, not an independent legal instrument. Recognising the token as a separate asset on a balance sheet would not be appropriate under either IFRS or BR GAAP in the current architecture.
Does this deployment require a new regulatory licence or CVM approval?
CSD BR and Ripple state that no new regulatory approval is required because participants' legal obligations are unchanged. This assertion rests on the fact that the blockchain layer is read-only and does not introduce any new regulated activity. That position could change if on-chain transfer functionality is added.
How should auditors treat the XRP Ledger data when auditing a client's fund position?
Auditors should treat the XRP Ledger record as a supplementary data source for reconciliation, not as the primary evidence of ownership. The CSD BR register is the authoritative record, and audit procedures should be designed accordingly. Any discrepancy between the two feeds would be a point of inquiry, not an automatic basis for adjusting the recognised position.
What does this mean for firms using crypto bookkeeping software to manage tokenized security records?
Any digital asset accounting software ingesting on-chain data from the XRP Ledger for these instruments must be configured to treat that data as a verification input rather than a position source. The system's data hierarchy should clearly designate the CSD BR authoritative feed as primary. Firms should also ensure their reconciliation workflows produce a documented audit trail showing which source drove each recognised position.
Could the CVM's parallel tokenization test programme affect the CSD BR mirroring approach?
Potentially. The CVM is running its own tokenization tests using simulated transactions, a separate track from the CSD BR live deployment. If the CVM's programme produces guidance that treats on-chain mirrors as a new regulated activity, or that requires specific disclosure or approval, firms that have built workflows around the CSD BR data feed would need to reassess their compliance architecture. Monitoring the CVM's output alongside CSD BR's operational announcements is advisable.
Source: Ledger Insights