The Decentralisation Illusion
A protocol can be distributed and the system around it centralised.
A protocol is distributed. A system is centralised. Canton Digital Asset, the enterprise blockchain backing Deutsche Börse’s D7 post-trade network, is marketed as decentralised. Twenty-six of 295 validators control 100 per cent of governance decisions. Canton is controlled by a Delaware company funded by Goldman Sachs, JPMorgan and Citadel.
Sovereignty is who controls. By that test, Canton is foreign-controlled and unfixable. Ethereum is foreign-controlled at the access layer and fixable through procurement. Europe has neither asked the question of Canton nor written the rule that would require asking it. The DLT Pilot Regime should permit institutional euro settlement only on sovereign or truly distributed positions.
The DLT Sovereignty Framework
Blockchain introduces a category of infrastructure that does not exist in traditional data systems: networks controlled by no one. The five-position data sovereignty framework (Paper 1), designed for cloud, payments, and identity systems where an operator necessarily exists, cannot directly classify blockchain without adaptation.
This is a conceptual limitation. The framework assumes that something must be controlled somewhere. Blockchain removes that assumption. It is possible to build infrastructure where no single entity, jurisdiction, or consortium can unilaterally change the rules. This possibility is unique to blockchain.
The DLT Sovereignty Framework extends the framework-layer logic while accounting for this fundamental difference. The core principle remains constant across both frameworks: sovereignty is defined by who controls governance decisions, who can change the rules, what jurisdiction has authority over those decisions.
Who controls when authority is invoked. This is the distinction that matters for policy. A system can claim decentralisation while remaining controlled. A system can operate across multiple jurisdictions while remaining subject to one. The framework separates appearance from reality.
The framework establishes five positions. Position 1 (National Sovereignty) is controlled by one nation’s institutions. An example is a French national securities settlement chain governed solely by Banque de France, where French regulatory authority determines all protocol changes and enforcement. Position 2 (EU Sovereignty) is controlled by EU institutions or a consortium of member states.
A pan-European settlement chain governed by the ECB and national central banks collectively represents this position. Both positions assume control is necessary and acceptable when that control is national or EU.
Position 3 (Truly Distributed Global) is controlled by no one: no single entity, no jurisdiction, no consortium can compel protocol changes. This position does not exist in traditional infrastructure and is unique to blockchain. Bitcoin is the purest case: no single entity has authority to change the protocol. The network achieves consensus through distributed validation without central control.
Ethereum presents a more complex case: governance is distributed across researchers and client implementation teams without single-entity capture, but infrastructure concentration on cloud providers introduces Position 4 risk at the access layer. Despite infrastructure risks, the protocol itself remains Position 3 because no entity can unilaterally change protocol rules.
Position 4 (Foreign Controlled, Centralised) is where a foreign entity controls centralised infrastructure. This can involve deception (claiming EU governance while subject to American authority) or honesty (openly using American cloud providers). Amazon Web Services is clear Position 4 when used knowingly and transparently.
An “AWS European Sovereign Cloud” that claims EU sovereignty while remaining subject to American jurisdiction through CLOUD Act is “Nominal Position 2” (falsely claiming Position 2 while being Position 4). Deception is common but not definitional. What defines Position 4 is foreign control of what should be or claims to be sovereign centralised infrastructure.
The deception reveals whether the actor is attempting to mislead.
Position 5 (Foreign Controlled, Any) is where a foreign entity controls infrastructure regardless of whether it claims decentralisation. Position 5 includes both cases where decentralisation is claimed but not genuine (Canton, marketing distributed operation while concentrating governance) and cases of frank foreign control without deception.
A US government blockchain operated for intelligence purposes is straight Position 5 for Europe, without deception. A US corporate blockchain claiming to be decentralised while maintaining captured governance is “Nominal Position 3” (falsely claiming Position 3). Deception is an aggravating factor distinguishing sub-cases but not determining the position itself.
What matters is control.
The essential distinction: both Position 4 and Position 5 are foreign-controlled, but they operate in different spaces. Position 4 operates in the space of centralised infrastructure, where control is expected but should be national or EU. Position 5 operates in the space of decentralised infrastructure, where control should not exist.
Position 5 makes a false claim about control; Position 4 may or may not be deceptive about its nature. Understanding this distinction is essential for regulatory design. You cannot regulate Position 5 infrastructure as if it were Position 3. You cannot accept Position 3 governance claims when infrastructure remains Position 5.
The Promise
On 3 January 2009, Satoshi Nakamoto embedded a headline into Bitcoin’s genesis block: “The Times 03/Jan/2009 Chancellor on brink of second bailout for banks.”
The message was not decorative. It was the thesis[1] embedded in code. Nakamoto argued that central banks “must be trusted not to debase the currency, but the history of fiat currencies is full of breaches of that trust.” The technology was designed explicitly as[2] an escape from centralised monetary control.
This was not abstract ideology.
The technology was built in response to lived experience.
In Greece, the troika imposed austerity and dictated fiscal policy. In Cyprus, a bank deposit levy confiscated private wealth. In Portugal, Spain, and Ireland, the conditions attached to[3] financial assistance made clear that monetary union without fiscal sovereignty means your economy operates at someone else’s discretion. The 2008 financial crisis was not just a market failure.
It was a sovereignty event.
Bitcoin was the response: censorship-resistant, borderless, peer-to-peer value transfer.
No single government could freeze your funds. No jurisdiction could dictate your economic policy.
The promise was real. The protocol delivered what was specified: a system where consensus is achieved without central authority, where protocol changes require distributed agreement, where no single actor can unilaterally freeze funds or reverse transactions (except through consensus). What the protocol could not do was protect itself from recapture at the layers above it.
This is what the DLT Sovereignty Framework makes visible: a system can be technically decentralised at the governance layer while remaining entirely controlled at the infrastructure, access, and settlement layers. When control resides in infrastructure rather than governance, the technical decentralisation is performance.
The system feels decentralised because it is marketed that way, and because the protocol is decentralised. But felt decentralisation is not actual sovereignty.
Why Decentralisation Matters for European Sovereignty
Europe’s relationship with digital sovereignty is contradictory and instructive. The continent built GSM, the standard that connected the world’s early mobile networks, and lost control to American companies who commoditised the market. Europe created the World Wide Web in a Swiss laboratory and lost it to American platforms that built dominance on European innovation.
Europe designed GDPR, the world’s most thorough privacy regulation, and lost implementation to American cloud infrastructure that satisfies GDPR while remaining subject to American government access. The pattern is consistent: Europe creates, America dominates. This pattern is not accidental. It results from how infrastructure gets built, funded, and scaled.
Cryptocurrency represented a different kind of opportunity. Unlike telecommunications or web infrastructure, which require physical networks and data centers that concentrate naturally through geography and capital, blockchain technology is explicitly designed to distribute control across multiple parties and jurisdictions.
A cryptocurrency can operate with validated nodes running in dozens of countries simultaneously. Settlement can occur without central clearing houses controlled by one jurisdiction. Monetary policy can be encoded in mathematics rather than delegated to central banks whose decisions are influenced by geopolitical factors.
For Europe, this was the rare case where technology could enable sovereignty without requiring Europe to out-build American incumbents.
A decentralised blockchain represents Position 3: truly distributed global, controlled by no one. But Position 3 requires actual control distribution, not claimed distribution. The distributed ledger must be distributed across multiple jurisdictions and multiple independent validators with no single entity holding the ability to change protocol decisions.
Ethereum with 37% of validators on AWS still has distributed governance even if infrastructure is concentrated. But Ethereum achieves Position 3 governance despite Position 4 infrastructure; this is the distinction that makes it fixable.
Instead, cryptocurrency has become the most sophisticated tool for American monetary expansion. Dollar-denominated stablecoins extend American financial dominance into populations and markets the traditional banking system could never reach. Iranian central banks cannot access the dollar system through traditional banking.
But they can acquire USDT and execute transactions through decentralised platforms, extending dollar control precisely where traditional channels are blocked. The infrastructure layers that matter: access, settlement, value; they are controlled by American companies in American jurisdictions.
The only thing that remains distributed is the protocol layer, the one that users cannot change anything about. The DLT Sovereignty Framework exposes this contradiction: the system achieves Position 3 governance while depending entirely on Position 4 and Position 5 infrastructure.
The Three Layers of Capture
Blockchain technology achieved distributed protocol-level consensus. But the infrastructure layers above the protocol: RPC endpoints, validator hosting, staking infrastructure, and value layer stablecoins have recreated the very centralisation the technology was designed to escape.
Understanding each layer and its sovereignty position is essential because genuine decentralisation requires consistent sovereignty positioning across every layer. Control at one layer while losing control at another reproduces the exact vulnerability the technology was supposed to solve.
You cannot achieve sovereignty through governance alone if your infrastructure is entirely controlled elsewhere. The system is only as decentralised as its most centralised layer.
Access Layer: Public Blockchain Infrastructure
Start with the visible evidence of concentration: 37% of Ethereum validators operate on a single cloud provider, Amazon Web Services. This[4] statistic is remarkable. A network with 6,408 validators, intended to be[5] distributed globally, has single-provider concentration at the level where infrastructure failure becomes network failure.
In October 2025, when AWS experienced stress, Ethereum kept running but access to the network degraded. The network required 63% non-AWS validators to survive major disruptions. This is not a secure margin; it is a vulnerability zone waiting to be tested by accident or design.
But validator concentration is not the most severe problem. It is the most visible. Above the validator layer sits something more critical: the access layer. How do applications and users interact with the blockchain? Two companies: Infura and Alchemy, both American, Infura owned by Consensys; they handle 70 to 80% of all Ethereum RPC traffic.[6]
These are Remote Procedure Calls: how applications read blockchain state and submit transactions. They are the interface between users, decentralised applications, and the distributed ledger. This is the invisible plumbing of Web3. When you interact with the blockchain through MetaMask, through any Web3 wallet, through a DeFi protocol, you are almost certainly routing through these two providers.
The user interface feels decentralised. The infrastructure is not.
The 2020 Infura outage demonstrates the fragility with precision. MetaMask went offline. ENS domain name service stopped resolving .eth[7] addresses. Layer 2 solutions that depended on Ethereum access became inaccessible. Millions of users lost access to DeFi protocols, exchanges, and their wallets.
A single provider experiencing technical problems cascaded through the entire ecosystem, affecting populations of users because the access layer had never been decentralised. The protocol did not fail; the protocol remained immutable. In sovereignty terms, the access layer is Position 4: Foreign Controlled (Centralised).
The RPC providers are American, subject to American jurisdiction, and could be compelled to censor or freeze access.
This is not speculation. The OFAC sanctions on Tornado Cash in August 2022 resulted in Infura and Alchemy implementing transaction filtering,[8] complying with US sanctions authority at the moment of invocation. The distributed ledger became a distribution mechanism for American sanctions compliance.
Any transaction routing through these providers that involved addresses on the Tornado Cash sanctions list was rejected, cancelled, or filtered. The protocol permitted it. Infrastructure blocked it. Infrastructure won.
Enterprise Layer: DLT and Governance Capture (Canton)
Enterprise blockchain follows a different architectural pattern than public blockchains, but faces identical capture dynamics. Canton Digital Asset, formerly Digital Asset Holdings, is a distributed ledger platform designed for institutional use. It is marketed as enterprise-grade, operationally mature, and trusted by major financial institutions.
The company has raised $452 million in total venture capital from American investors including Goldman Sachs, JPMorgan, and Citadel. This investment profile demonstrates that Canton is viewed as a platform with strategic value: an infrastructure play in which major American financial institutions have placed substantial capital, not a decentralised experiment.[9]
Canton’s governance structure is explicit: twenty-six of 295 validators control 100% of governance decisions. That is 8.8% of the network by[10] design. In the DLT Sovereignty Framework, this is a characteristic of Position 5 infrastructure.
The 8.8% governance concentration is the aggravating factor (fake decentralisation, marketing while controlling), but the defining factor is who controls: Digital Asset Holdings, incorporated in Delaware, subject to American legal authority, has ultimate control of the system. Canton passes European regulatory scrutiny because no European regulation asks who controls.
This jurisdictional reality is absolute and operational. Canton is subject to OFAC (Office of Foreign Assets Control, US Treasury Department) sanctions authority. US jurisdiction means FISA 702 applies, allowing NSA access to communications. The Federal Reserve can demand data from validators.
If the US government determines that transaction details stored on Canton must be disclosed, European banks cannot refuse based on data protection or data sovereignty arguments. They cannot prevent it if American courts compel Digital Asset Holdings. The governance structure becomes almost irrelevant when jurisdictional control is total.
Deutsche Börse built the D7 post-trade network on Canton specifically because Canton succeeds at what it sets out to do. The platform is reliable, operationally mature, and trusted by major financial institutions. D7 is now the settlement layer for significant portions of European equity trading. European banks depend on it for completing transactions.
This integration is evidence of Canton’s technical success. But success at the protocol layer cannot compensate for failure at the jurisdiction layer. A 295-validator network where 26 entities control governance and 100% depend on American jurisdiction is not decentralisation. It is American control distributed across 295 nodes.
Additional lock-in mechanisms compound the position. The smart contract language is Daml, proprietary to Digital Asset Holdings, creating language lock-in so substantial that migration becomes prohibitively expensive. If European institutions want to move away from Canton, they must rewrite all smart contracts in a different language.
For a system handling billions in daily settlement, this switching cost is prohibitive at operational scale. The vendor lock-in is structural and intentional. This is what creates the cage.
Why Big Players Choose Canton: The Sovereignty Paradox
This raises the question that defines the DLT capture problem in Europe: if Canton is Position 5 foreign control with structural lock-in, why are so many European big players still using it? The answer exposes the regulatory vacuum. BNP Paribas runs Global Markets Neobonds on Canton. Euroclear deployed the Canton Global Collateral Network in February 2025 for tokenised collateral mobility.
Santander joined a consortium exploring reserve-backed digital assets on Canton. Deutsche Bank, Circle, and Polychain all participate in Canton governance. These are not rogue actors or uninformed participants. They are the continent’s most sophisticated financial institutions.
The answer lies in what Canton actually delivers. The platform excels at regulatory compliance through privacy by design. Canton implements sub-transaction privacy, where parties only see transaction components that directly affect them, satisfying European data minimization standards and GDPR requirements for the right to be forgotten.
Banks cannot achieve this on Ethereum or Bitcoin without building expensive custom infrastructure. Canton also provides institutional-grade permissioning and governance controls. Participants can restrict access, enforce regulatory compliance rules, and manage counterparty permissions at a level traditional databases offer but distributed ledgers rarely provide.
For financial institutions accustomed to centralised infrastructure, Canton delivers the governance and privacy controls they legally require, wrapped in blockchain technology. The DTC partnership with Digital Asset to tokenize $100+ trillion in US Treasury securities on Canton demonstrates that the platform succeeds precisely because of its permissioned architecture.
This exposes the regulatory trap. European institutions did not choose Canton despite knowing it was foreign-controlled. They chose Canton because no European regulation required them to assess sovereignty. No regulation asked whether the controlling entity was foreign. No regulation compared Canton to European alternatives with equivalent technical capability.
The regulatory vacuum that allowed Canton to enter Europe is the same vacuum that locks European banks into it. They built on Canton because the alternative: Ethereum with all its infrastructure problems was worse for regulated finance. Europe did not face a choice between Canton and true decentralisation. Europe faced a choice between Canton and nothing.
The window to change that choice is closing.
Value Layer: Stablecoin Monopoly
The final layer is the most consequential: what you use to store value on these networks. The stablecoin market has reached $312 billion. Eighty-three per cent of that value is dollar-denominated, issued by American companies, backed by American Treasury securities, subject to American jurisdiction. Euro-denominated stablecoins account for less than $1 billion. The ratio is approximately 330 to 1.
European blockchain infrastructure settles in a currency that Europeans do not control.
The largest euro stablecoin is EURC, issued by Circle Internet Financial, a Delaware-incorporated company headquartered at One World Trade Center in New York. Circle can freeze any EURC token at the instruction of a US court or US sanctions authority. The euro in “EURC” is cosmetic. The jurisdiction is American. The operational control is American. The freeze capability is American.
This is Position 4 infrastructure: foreign control of what should be European monetary settlement. Every euro-denominated transaction settles through an American-controlled entity.
This creates a structural asymmetry that reveals the real capture. A European bank can run validators on Canton and settle trades through D7. But the settlement is in EURC or USDC, both freezable by American authorities. If the US government sanctions a European bank, traditional financial channels are already regulated and harder to capture.
But a smart contract executing on Canton can be made inoperable by freezing the stablecoin collateral. The distributed ledger becomes a distribution mechanism for American financial control. The decentralisation is real at the protocol layer; the control is total at the settlement layer. The system is captured at the value layer, the one that actually matters.
The protocol is not where the capture lives.
Classification Through the DLT Sovereignty Framework
The DLT Sovereignty Framework makes visible what casual observation obscures. Canton is not a problem because governance is concentrated. Canton is Position 5 (Foreign Controlled) because Digital Asset Holdings, incorporated in Delaware, controlled by American investors, subject to American legal authority, controls the system.
The governance concentration is a secondary issue; an aggravating factor that demonstrates contempt for even nominal decentralisation claims. What defines the position is who controls when authority is invoked.
Ethereum presents a different classification across different layers. The governance layer: where protocol decisions are made; is Position 3 (Truly Distributed Global). Protocol governance is distributed across Ethereum researchers, client implementation teams, and staking validators without single-entity control or jurisdictional capture.
No American court can compel Ethereum researchers to change the protocol. No single validator can execute protocol changes without consensus. This is genuine decentralisation in the framework’s most important sense.
But Ethereum’s infrastructure layer is Position 4 (Foreign Controlled, Centralised) at the validator hosting level, with 37% on AWS. The access layer is Position 4 across Infura and Alchemy, both American RPC providers. The value layer depends on USDC and USDT, both Position 4 (foreign-controlled, American jurisdiction). The distinction matters.
Ethereum is not fundamentally compromised like Canton. The problems exist at infrastructure and procurement layers, not at governance. A system with Position 3 governance can become decentralised by making different infrastructure choices. This is an institutional problem. A system with Position 5 control cannot be fixed without abandoning it entirely.
Ethereum: The Fixable Case
Ethereum’s problems are real but fixable. Validator concentration on AWS is a problem but not a fundamental one. The solution is clear: diversify validator infrastructure away from hyperscalers toward European providers. European governments and institutions could procure validator infrastructure from European cloud providers: OVHcloud, Scaleway, Hetzner; and run it themselves.
The protocol governance is distributed across Ethereum researchers and client maintainers without single-point capture or jurisdictional control.
If European institutions moved to running validators on European infrastructure and operating their own RPC endpoints, Ethereum would become decentralised for European purposes. This is a procurement and investment problem, not a protocol problem. The technology exists. European cloud providers have the capability. What is required is institutional choice and political will.
This is achievable within an 18-month timeframe if Europe makes the commitment.
This is why Ethereum belongs in a different category from Canton. Canton is fundamentally compromised: foreign control is structural and irreversible without abandoning the platform entirely. Ethereum’s problems are fixable because they result from economic decisions about where to run validators and where to purchase RPC services, not technical design.
European institutions making different procurement choices would solve the problem. This is the distinction that matters for strategic planning: is the problem fixable through institutional choice (Ethereum), or is it structural and irreversible (Canton)?
The Regulatory Gap
Canton passed European regulatory scrutiny without sovereignty assessment. This is an absence of regulation. MiCA covers crypto-assets and stablecoins but does not cover DLT infrastructure governance. The DLT Pilot Regime assesses operational resilience and market abuse prevention but does not assess governance sovereignty or jurisdictional exposure.
MiFID II covers financial instruments but not infrastructure. CSDR covers settlement finality but not who controls the ledger.
Canton passes all current regulation because none of it asks the questions that matter for sovereignty. Who controls governance? Where are the controlling entities incorporated? Can a foreign jurisdiction compel access to transaction data? Is the “decentralisation” genuine or claimed? The regulatory gap is in conception. No regulation assesses sovereignty position.
This must be corrected.
The DLT Pilot Regime should be amended to require sovereignty position assessment as part of approval for institutional use.
Assessment must examine four dimensions.
Governance concentration: no single entity and no single legal jurisdiction holding a stake at or within ten percentage points below the network’s consensus blocking-minority threshold.
Jurisdictional exposure: where the controlling entities are incorporated.
Vendor lock-in: whether migration is technically and economically feasible.
The gap between decentralisation claims and operational reality.
This single amendment closes the regulatory gap.
The ECB Path: Pontes and Appia as European Alternatives
The European Central Bank approved a strategic response to Canton’s dominance on 1 July 2025. The Governing Council committed to a two-track approach: Pontes, a short-term pilot to connect distributed ledger platforms with TARGET Services by end-2026, and Appia, a long-term blueprint for an integrated European digital financial ecosystem by 2028.
These initiatives represent the first explicit acknowledgement at policy level that Europe needs alternatives to foreign-controlled enterprise blockchains for genuine euro settlement sovereignty.
Pontes will operate as the Eurosystem’s distributed ledger platform, designed to link market DLT platforms with TARGET Services and enable settlement of transactions in central bank money. The pilot is scheduled for launch by Q3 2026 under Eurosystem direct control. This is European infrastructure built by European central banks.
Pontes will allow participants to settle wholesale transactions in tokenised central bank money; a development that eliminates the need for freezable stablecoins like EURC. A transaction on Canton can be made inoperable by American authorities freezing the stablecoin collateral. A transaction on Pontes, settled in tokenised euros issued directly by the ECB, has no foreign control point.
The settlement layer becomes Position 2: EU Sovereignty.
Appia takes the longer view. The ECB committed on 1 July 2025 to deliver a blueprint for a future integrated European digital financial ecosystem by end-2028. Appia is a vision for how tokenised securities, tokenised deposits, and central bank digital currency can interoperate across Europe without foreign control. It is not a single platform.
The framework explicitly considers how DLT systems can operate at global scale while maintaining European regulatory authority and without depending on American cloud infrastructure or American stablecoins.
Supporting these initiatives, the Eurosystem announced on 27 January 2026 that it will accept DLT-based assets as eligible collateral for central bank credit operations beginning 30 March 2026. This regulatory change removes a critical barrier: institutions can now issue tokenised securities on European infrastructure and use them directly as collateral for Eurosystem borrowing.
Canton participates in this framework only if participants choose to migrate off Canton and settle on Pontes. The collateral framework creates institutional demand for European infrastructure where none existed before. This is how capture is reversed: by making European alternatives so institutionally attractive that they become the obvious choice. Foreign platforms are not banned.
What This Means for Europe
Cryptocurrency was supposed to be Europe’s escape from dollar hegemony. Instead, the euro barely exists in the stablecoin ecosystem. European RPC providers are marginalised. The largest euro stablecoin is American. The validator nodes run on American cloud. The collateral is dollar-denominated.
European alternatives exist; Monerium issues EURe, Quantoz issues EURQ, Angle Protocol issues EURA; but combined they represent a fraction of Circle’s market capitalisation. At current adoption rates, European alternatives will not achieve scale within a meaningful timeframe.
The honest reckoning: Cryptocurrency’s decentralisation failure is not a technology problem. The protocol works. Bitcoin and Ethereum deliver on protocol-layer promises. It is a structural problem. The same forces that built American tech hegemony rebuilt it inside the technology designed to escape it.
But unlike the euro, which lost infrastructure sovereignty after the fact, crypto can be built right. European crypto sovereignty is achievable if Europe makes deliberate choices about procurement, infrastructure, and institutional demand.
This requires five concrete steps. First: European governments and central banks must procure European RPC providers and validator infrastructure instead of hyperscaler services. Second: European stablecoin ecosystems must receive institutional support from major financial institutions.
Third: Requirements that critical infrastructure not be locked to specific vendors through proprietary languages. Fourth: Explicit governance requirements that no single entity and no single legal jurisdiction holds a stake at or within ten percentage points below the consensus blocking-minority threshold of the network in question.
Fifth: Infrastructure distributed across multiple European jurisdictions so that no single nation’s regulatory decision can capture the system.
The Path Forward: Regulatory Amendment and Institutional Action
What does European sovereignty in crypto actually look like operationally? The DLT Sovereignty Framework points to five institutional steps.
First: Amend the DLT Pilot Regime and MiCA to require sovereignty position assessment as a condition of approval, and to permit institutional euro settlement only on Position 1, Position 2, or distributed Position 3 platforms. Assessment must examine governance concentration, jurisdictional exposure, vendor lock-in, and the gap between decentralisation claims and operational reality.
Second: Establish a procurement mandate that the ECB and national central banks source settlement infrastructure from Position 1, Position 2, or distributed Position 3 platforms. This creates institutional demand for European alternatives.
Third: Establish a European stablecoin consortium. Major European financial institutions and central banks should issue European stablecoins across multiple blockchain networks.
Fourth: Finance European cloud and infrastructure for fintech. OVHcloud, Scaleway, and other European providers require sustained investment to build fintech-grade infrastructure. EU funds should finance this explicitly as infrastructure development.
Future regulation should require that critical infrastructure not depend on single vendors, that vendors have European control, and that data not reside on American cloud.
Fifth: Develop open technical standards for smart contract language. European standards should specify language-neutral bytecode or open-source alternatives, removing the vendor lock-in that today binds institutional infrastructure to specific proprietary platforms.
European crypto sovereignty succeeds when each of the following holds.
Euro stablecoins under MiCA scope are issued by European entities under European law.
RPC providers serving European financial institutions are European-jurisdictional.
DORA-regulated critical financial infrastructure is hosted by European cloud providers.
No single entity and no single legal jurisdiction holds a stake at or within ten percentage points below the consensus blocking-minority threshold of any institutional DLT network.
All critical payment infrastructure is subject to European law and European regulatory authority.
This is not utopian.
All of it is technically feasible.
The barriers are political and financial, not technological.
What remains is the will to build it, the time to act, and the political commitment to sustain investment until sovereignty is achieved.
Conclusion: The Honest Assessment
The blockchain layer delivered on the promise of decentralisation. The layers above it did not. And the layers above it are where control actually resides. A protocol is distributed. A system is centralised. Cryptocurrency remains decentralised at the layer no one can change anything about and centralised at every layer that matters.
The DLT Sovereignty Framework makes this visible. Canton is Position 5 (Foreign Controlled) because Digital Asset Holdings, incorporated in Delaware, controlled by American investors, subject to American legal authority, controls it. The governance concentration is an aggravating factor but not the defining problem.
Ethereum is Position 3 governance with Position 4 infrastructure; it is fixable through different procurement choices and European institutional commitment.
Canton succeeds technically and fails strategically. Deutsche Börse chose Canton for good reasons: operational maturity, consortium backing, technical sophistication. But success at the protocol layer cannot compensate for failure at the jurisdiction layer. A 295-validator network where 8.8% control governance and 100% depend on American jurisdiction is not an escape from American control.
It is American control distributed across 295 nodes.
European sovereignty in crypto is achievable. It requires procuring sovereign RPC infrastructure, European validator nodes, and European stablecoins at scale. It requires the European Central Bank and national governments acting as anchor customers for European alternatives.
It requires treating the infrastructure layer: access, collateral, execution; with the same political seriousness Europe gave to monetary policy when it built the euro.
The cryptographic blueprint (Paper 5; threshold governance using privacy-preserving architecture) makes Position 0 technically achievable.
The technology works. The capacity exists. What is required is political will and regulatory amendment. The DLT Pilot Regime must be amended to require sovereignty position assessment. Only Position 1, Position 2, or Position 3 infrastructure should be permitted for institutional euro settlement.
This closes the regulatory gap that allowed Canton to pass European scrutiny without sovereignty assessment.
The technology that was designed to escape American control has been recaptured by it. But unlike the euro, which lost infrastructure sovereignty after the fact, crypto can be built right. European crypto sovereignty is not utopian. It is the only alternative to watching this one escape route be closed as well. The window closes in quarters, not years.
The decision to act is the decision that matters.
[1] Bitcoin genesis block (block 0), mined 3 January 2009 by Satoshi Nakamoto. Coinbase parameter contains the text ‘The Times 03/Jan/2009 Chancellor on brink of second bailout for banks’, referencing The Times (London) headline of 3 January 2009.
[2] Satoshi Nakamoto, P2P Foundation forum post, 11 February 2009; Bitcoin: A Peer-to-Peer Electronic Cash System, white paper, 31 October 2008.
[3] Cyprus financial crisis, March 2013. Bank deposit haircut imposed on uninsured deposits at Bank of Cyprus and Cyprus Popular Bank as condition of European Stability Mechanism financial assistance.
[4] Ethereum validator distribution analyses, rated.network and Etherscan, 2025. Approximately 37 per cent of Ethereum beacon-chain validator nodes run on Amazon Web Services infrastructure.
[5] Note: figure should be approximately 1.06 million active Ethereum validators as of 2025; the 6,408 figure may reflect a subset such as solo or self-hosted validators. Source: beaconcha.in and Ethereum Foundation validator statistics.
[6] Infura (owned by Consensys Software Inc., US) and Alchemy Insights Inc. (US) Remote Procedure Call providers. Combined market share for Ethereum RPC traffic estimated at 70 to 80 per cent across third-party analyses including Messari Research and The Block.
[7] Infura RPC outage of 11 November 2020 affecting Ethereum mainnet access. MetaMask wallet, Ethereum Name Service resolution, Uniswap and other dependent services experienced disruption for several hours.
[8] US Department of the Treasury, Office of Foreign Assets Control (OFAC), Tornado Cash designation, 8 August 2022, under Executive Order 13694. Infura and Alchemy subsequently implemented filtering of transactions involving sanctioned addresses.
[9] Digital Asset Holdings LLC, cumulative venture capital raised through 2025 totalling approximately 452 million US dollars. Investors include Goldman Sachs, JPMorgan Chase, Citadel Securities and Salesforce Ventures.
[10] Canton Network Super Validator and Validator counts, canton.network and Canton Foundation public documentation, 2024-2026. Approximately 26 Super Validators hold protocol governance authority through the Global Synchronizer; total Validator population approximately 295.
Sign the Manifesto. The eight demands that follow from the case made in this paper and the twenty-seven others. Sign →