This paper examines the structural limitations of legacy over-the-counter digital asset trading desks as transaction volumes, ticket sizes, and institutional participation increase. While OTC markets have historically relied on human-led execution and manual settlement processes, these models were not designed for sustained institutional scale.
The focus of this paper is settlement rather than execution. It analyses how post-trade processes, pricing opacity, and counterparty exposure interact under scale, and why many established OTC operating models encounter friction as volumes grow. The paper considers these issues from an operational and risk perspective, rather than from a market performance or asset valuation standpoint.
The analysis reflects observed industry practices and commonly deployed operating models. It does not assess individual firms, nor does it propose commercial solutions. Its purpose is to clarify why settlement has become the primary constraint in institutional OTC markets, and why this constraint is structural rather than cyclical.
Legacy OTC desks evolved in an environment where volumes were episodic, settlement timelines were flexible, and counterparty relationships were relatively informal. As institutional participation increased, these assumptions began to break down. Manual reconciliation, bilateral settlement agreements, and discretionary pricing practices that functioned adequately at lower volumes became sources of operational risk at scale.
Pricing opacity remains closely linked to settlement design. In many OTC models, the true cost of execution only becomes visible after settlement paths are determined, liquidity is sourced, and delivery constraints are resolved. This separation between quoted price and realised outcome introduces uncertainty that is difficult to quantify ex ante, particularly for large or time-sensitive trades.
Counterparty risk is often underestimated in execution-centric OTC models. Where settlement is treated as a downstream process rather than a primary design consideration, exposure accumulates across multiple stages of the trade lifecycle. These exposures are frequently managed through trust, reputation, or bilateral limits rather than through system-enforced controls.
This paper explains why the failure modes observed in institutional OTC markets are not primarily the result of poor execution, insufficient liquidity, or adverse market conditions. Instead, they arise from settlement architectures that were not designed to support continuous, high-volume institutional flow.
It outlines how manual settlement processes, opaque pricing mechanics, and loosely defined counterparty responsibilities interact under scale to create compounding operational and risk constraints. The paper then frames these issues as system design problems, setting the foundation for a discussion of settlement-first architectures and their implications in later sections.
The objective is not to critique individual market participants, but to make explicit the structural limits of legacy OTC models and why incremental optimisation of execution alone is insufficient to address them.
Institutional OTC digital asset markets remain largely execution-centric. Most operating models are organised around price discovery, liquidity sourcing, and bilateral negotiation, with settlement treated as a downstream operational function. This structure reflects the historical evolution of OTC desks rather than deliberate system design.
In practice, execution and settlement are often handled by different teams, systems, or counterparties. Pricing is agreed before delivery paths are fully resolved, and settlement mechanics are finalised after the trade is confirmed. This separation creates an implicit assumption that settlement will complete as expected, provided counterparties act in good faith and market conditions remain stable.
As volumes increase, this assumption becomes increasingly fragile. Settlement complexity grows nonlinearly with ticket size, asset type, jurisdiction, and timing constraints. Yet the prevailing market structure continues to optimise for execution speed and relationship-driven liquidity access, rather than for deterministic settlement outcomes.
The most common failure modes in legacy OTC models emerge after execution, not during it. Manual settlement workflows introduce delays, reconciliation errors, and dependency on human intervention at precisely the point where speed, accuracy, and auditability matter most.
Opaque pricing is another recurring issue. Quoted prices frequently abstract away the true costs associated with settlement, including conversion friction, balance sheet usage, timing constraints, and operational overhead. These costs may be absorbed by the desk, passed to the client post hoc, or reflected indirectly through wider spreads. In all cases, they are not fully observable at the point of trade.
Counterparty exposure compounds across the trade lifecycle. Where settlement obligations are sequential and loosely enforced, exposure persists until final delivery is complete. Failures or delays at any stage can cascade, particularly when multiple trades are settled concurrently. These risks are often managed through informal limits or discretionary controls rather than through system-enforced constraints.
These failure modes persist because they are embedded in the underlying architecture of legacy OTC models. Incremental improvements to execution tooling, pricing algorithms, or operational staffing do not address the structural separation between execution and settlement.
Market incentives also reinforce the status quo. Execution quality is visible and commercially rewarded, while settlement robustness is largely invisible until it fails. As a result, investment tends to prioritise front-office capabilities over settlement infrastructure, even as settlement becomes the dominant source of risk.
Regulatory scrutiny has increased, but often focuses on discrete control points rather than end-to-end system behaviour. This can lead to additional process layers without resolving the core issue: settlement remains reactive rather than designed as a primary constraint. Until settlement is treated as a first-order design consideration, these failures are likely to recur as institutional participation continues to scale.
A settlement-first architecture begins by reversing the priorities of legacy OTC models. Instead of optimising for execution speed and addressing settlement constraints after the fact, system design starts with the conditions required for deterministic delivery and control. Execution is then shaped to operate within those boundaries.
The primary objective is to reduce uncertainty across the trade lifecycle. This includes uncertainty around asset availability, counterparty obligations, timing windows, and reporting outcomes. Rather than relying on discretionary intervention, these constraints are enforced through system logic that applies consistently across trades and counterparties.
A secondary objective is observability. Institutional-scale settlement requires that obligations, exposures, and state changes are visible as they occur. This visibility is not solely for operational efficiency, but for risk management and supervisory review. A system that cannot explain its own state in real time cannot reliably scale.
In a settlement-first model, trade execution is conditioned on settlement parameters that are validated in advance. Asset availability, delivery routes, and timing constraints are established before pricing, ensuring execution outcomes remain compatible with settlement realities rather than being reconciled after the fact.
Once a trade is confirmed, settlement progresses through a defined sequence of state transitions. Each transition represents a change in obligation or control, with progression gated by explicit conditions that bound exposure and limit discretionary intervention.
Those conditions are finite and determinative:
Control points in a settlement-first architecture are explicit and enforceable. They define where a trade may proceed, pause, or fail safely. Unlike manual overrides or bilateral agreements, these controls are embedded in the system and applied uniformly.
Constraints are designed to limit exposure accumulation. Settlement does not advance when prerequisite conditions are unmet, and execution capacity is naturally bounded by settlement capacity. This prevents the build-up of hidden obligations that only surface during reconciliation or stress scenarios.
Importantly, these controls do not eliminate risk. Market risk, counterparty default, and operational failure remain possible. However, they are localised and observable, rather than distributed and opaque. This shift in risk posture is central to supporting sustained institutional scale without proportional increases in operational complexity.
A settlement-first architecture clarifies operational responsibility by making obligations explicit at each stage of the trade lifecycle. Responsibility is no longer inferred from bilateral relationships or informal process ownership, but defined by system state and control boundaries.
Operational teams interact with a smaller set of clearly delineated processes. Rather than managing exceptions after execution, they monitor progression through predefined settlement states. Intervention occurs only when a state transition fails or stalls, reducing reliance on continuous manual oversight.
This clarity becomes increasingly important at scale. As volumes grow, ambiguity around who is responsible for a delayed transfer, a failed conversion, or a reporting discrepancy introduces friction and risk. Systems that encode responsibility directly reduce escalation paths and enable predictable operational behaviour.
Risk distribution shifts materially when settlement constraints are enforced upstream. In execution-centric models, risk accumulates invisibly until settlement completes. In settlement-first models, exposure is bounded at each stage, and advancement is conditional on the resolution of prior risk.
Counterparty exposure is reduced not by trust or reputation, but by limiting the duration and magnitude of open obligations. Where delivery cannot proceed, exposure does not compound. This does not remove the possibility of loss, but it constrains its scope and timing.
From an institutional perspective, this redistribution of risk is often more important than nominal execution quality. Predictable exposure profiles support internal risk limits, capital planning, and supervisory engagement in a way that discretionary models struggle to achieve.
Supervisory observability improves when reporting is a direct output of system behaviour rather than an external reconstruction. Settlement-first architectures generate records as obligations change, creating a coherent audit trail without reliance on manual reconciliation.
This observability aligns more closely with how supervisory authorities assess operational and counterparty risk. Rather than reviewing static policies or retrospective reports, supervisors can understand how risk is constrained in practice through system design.
Importantly, improved observability does not imply reduced scrutiny. On the contrary, systems that make risk explicit invite more informed oversight. However, they also reduce the likelihood of unexpected findings, as behaviour is consistent, explainable, and aligned with stated controls.
A settlement-first approach enables institutional OTC activity to scale without a proportional increase in operational complexity. By conditioning execution on settlement constraints, systems naturally limit exposure accumulation and reduce the frequency of downstream exceptions. This supports higher sustained volumes without relying on expanding manual oversight.
It also enables clearer internal risk management. When obligations are explicit and state transitions are observable, exposure can be measured, monitored, and constrained in real time. This allows firms to align trading activity with internal risk limits, capital considerations, and liquidity planning more effectively.
From a supervisory perspective, settlement-first architectures enable reporting that reflects actual system behaviour. Audit trails are produced as a function of execution and delivery, rather than assembled after the fact. This improves confidence in reported data and reduces ambiguity during reviews or investigations.
A settlement-first architecture does not eliminate market risk, price volatility, or the possibility of counterparty default. Losses can still occur, and no system design can fully remove the need for judgment in exceptional circumstances.
It does not remove the requirement for robust governance, oversight, or compliance frameworks. Architectural controls constrain behaviour, but they do not replace human accountability or regulatory responsibility.
It also does not guarantee optimal execution outcomes in all market conditions. Conditioning execution on settlement constraints may limit available liquidity or timing flexibility. These trade-offs are intentional and reflect a prioritisation of delivery certainty over theoretical execution efficiency.
Legacy OTC operating models were built for an environment where volumes were lower, relationships were informal, and settlement risk could be managed through discretion. As institutional participation increases, these assumptions no longer hold.
The constraints observed in modern OTC markets are not primarily the result of insufficient liquidity or inadequate execution capability. They arise from settlement architectures that treat delivery as a downstream concern rather than a primary design constraint.
By re-centering system design around settlement, institutional OTC markets can move toward operating models that are more predictable, observable, and resilient at scale. The implications of this shift extend beyond individual firms and point toward a broader realignment in how OTC market infrastructure is constructed and evaluated.