Search papers, labs, and topics across Lattice.
This paper challenges the prevailing custodial model of digital payments by proposing a non-custodial architecture that maintains user privacy while ensuring compliance with regulatory standards. The authors introduce a reference architecture and core protocol rules that embed compliance data directly into digital assets, allowing for independent verification of transactions without relying on centralized entities. Key findings demonstrate that this approach can effectively integrate with existing payment systems, offering a more secure and privacy-preserving alternative to traditional models.
Non-custodial digital assets can achieve regulatory compliance without sacrificing user privacy, fundamentally reshaping the landscape of digital payments.
Received wisdom on payments infrastructure strongly supports the custodial, account-based model as a necessity for transaction integrity, auditability and verification; the set of fundamental primitives for regulated digital money exchange, the argument goes, necessitates designated identifiable entities that store and process credentials, perform KYC, and ultimately act as the 'single version of the truth' for compliance remediation and, most important, AML. In this paper, we propose this is not the case, by arguing that non-custodial, cash-like digital assets can embody such capabilities, in an arguably more secure manner. To that end, we present a reference architecture and core protocol rules for digital-value-exchange systems that preserve meaningful user privacy while enabling strong auditability. The protocol defines the conditions under which digital asset creation, transfer, and redemption are valid. The architecture specifies the allocation of actors, roles and components through which these rules operate, enabling independent verification of transaction compliance with applicable norms. Building upon the Unforgeable, Stateful, Oblivious (USO) asset model of Goodell et al., regulatory compliance data are embedded directly into the asset state as cryptographically signed attestations issued by independent entities. A transfer is valid only upon satisfaction of applicable compliance predicates and inclusion of the resulting signature within the asset state. Compliance enforcement is thus performed at the protocol level rather than through institutional custody or identity-based account control. We conclude that our proposed model can successfully interface with existing payment systems, making it possible to integrate non-custodial, compliance-verified transactions with legacy financial infrastructure.
