cBTC has fifteen
places to trade
and no fixing.
CrossDesk strikes the official price for tokenised assets that no benchmark administrator covers — and settles against it, atomically, on one ledger.
Two industries. Neither one covers this.
CF Benchmarks · S&P · ICE
They price assets that trade on observable markets. CF Benchmarks prices Bitcoin. It has never priced cBTC.
BBH · State Street
They compute NAV from composition and prices. That NAV is not a licensable benchmark, and nothing about it can be settled against on-chain.
A wrapped asset in a fund, on a ledger
Nobody prices the wrapper. Nobody signs the composition. Nobody makes either of them something a contract can settle against.
One product, three layers.
The product is the fixing. The comparable is CF Benchmarks or S&P Dow Jones — not an exchange.
CME prices Bitcoin. We price a fund that holds a wrapper of Bitcoin.
cBTC is a claim on BTC held under an attestor multisig. Its value is the benchmark print multiplied by the market's confidence that redemption works.
Marking it at par is not a fact. It is an assertion — and it is the assertion that has broken every wrapped asset that ever broke.
| Signed separately | What it is | Who argues about it |
|---|---|---|
referencePrice | The benchmark print — CME CF BRR, 16:00 London | Nobody. It is free and public |
wrapperFactor | The attested par ratio | Everybody. This is the product |
Three seats, composed to disagree.
A committee of issuers is an expensive way for issuers to bless their own valuation. The number is worth something because the signers want different answers.
| Seat | What only they can see | What they want |
|---|---|---|
| Issuer BitSafe · onRails |
Whether the wrapper can actually be redeemed right now — attestor quorum, reserves, the redemption queue | The wrapper marked at par |
| Lender ACME · Alpend · Haven · Verity |
Whether they will carry this number on their own book | The mark conservative — they are under-collateralised if it is too high |
| Venue Cantex · Cantor8 |
The transaction data — the only observed prints for the wrapped asset | The mark where it traded |
No single interest holds K. Signers are never paid — attestation is a by-product of a position they already hold.
“You seated people with positions and called it oversight. That is LIBOR.”
It is the best argument against this design, and it gets answered rather than dodged.
The panel is built to disagree
LIBOR's submitters shared a direction of interest. Here the issuer, the lender and the venue each want a different answer, and no single interest holds the threshold.
Submissions are verifiable
A LIBOR submission was an unfalsifiable estimate. Every condition here is a fact with a record behind it — and the venue's is checked by the ledger itself.
Every signature is permanent
LIBOR ran on phone calls. Who signed which fixing, under which protocol version, having verified which conditions, is on the ledger forever.
What honesty requires conceding: this is a mitigated conflict, not an absent one. A panel of disinterested referees would never be assembled or funded.
Nobody is asked whether they like the price.
Each signer asserts a fact only they can see.
An unpaid committee asked for a daily act of judgement starts clicking yes within a fortnight. So the question is narrowed until it is nearly free to answer — which means signing can be automated, and a refusal names what broke rather than expressing disagreement.
| Seat | Named conditions it verifies | Enforced by |
|---|---|---|
| Issuer | attestor-quorum reserves-current reserves-cover-supply redemption-queue-clear | API · recorded |
| Lender | independent-mark-within-tolerance liquidations-consistent book-acceptance | API · recorded |
| Venue | traded-range spread-within-tolerance sufficient-volume | Ledger · enforced |
A venue cannot attest a price its own book never printed. That refusal is rejected on-chain — the one seat holding real transaction data cannot rubber-stamp.
Running, not rendered.
| Verified live against a Canton sandbox | Result |
|---|---|
| Wrapped fixing struck through the committee | 99,800 at 20 bp below par |
| Lender claiming the issuer's condition | Refused · HTTP 400 |
| Venue attesting outside its own traded range | Refused by the ledger · 409 |
| Cessation served 30 days out | Refused · 60 days enforced on-chain |
| Published series with corrections resolved | Tier, factor, age of strike |
Which of these two is an attested fixing?
I think it is the second. I will know when someone pays me.
| Who | What they buy |
|---|---|
| Fund / ETP issuer | The licence. This is the customer |
| AP / market maker | Per-order creation and redemption fees |
| Lender | A free committee seat — and the reason the number matters |
| Asset issuer | Nothing. Distribution and a seat. Never a payer |
What is not done.
A methodology that hides its gaps is not a methodology. All of this is published in
FIXING_METHODOLOGY.md §12 and SIGNER_PROTOCOL.md §7.
| Limit | Where it stands |
|---|---|
| Nobody uses it yet | No fixing has been published and no committee convened. A fixing needs participants — that is the honest chicken-and-egg |
| Striking is a human act | By design The schedule reports a missed strike rather than inventing a number nobody attested |
| Issuer and lender claims | Recorded, not verified. Only the venue's range is checked against reality |
| No holiday calendar | Business days are weekdays; a public holiday reads as a missed strike |
| Not a regulated administrator | Benchmark administration is licensed in the EU and UK. Recognition must be resolved first |
| A participant node | The standing blocker The desk runs from a local sandbox today |