Insights ·
The Most Expensive Idle Capital on Canton
Super Validators are funding their locks out of the balance sheet, where the capital sits idle for years. CIP-105 doesn't require that, and a growing number are sourcing the lock through Cashen instead.
CIP-105 has been approved since March. Most Super Validators have worked out what it costs them. Fewer have worked out that the capital doesn't have to be theirs.
Participation is voluntary. CIP-105 does not compel any Super Validator to lock anything, and choosing not to lock does not remove you as an SV. What it does is tie forward SV Weight to how much you lock. Lock nothing and you keep operating, with reduced Weight or none at all.
Worth being precise about what Weight means here. This is reward weight, your share of the SV minting pool. Canton governance voting is separately structured as one SV, one vote. Falling out of a tier costs you emissions, not your seat.
If you want to earn Weight, the base is aggregate lifetime earned SV rewards. Everything the validator has earned historically plus everything earned after activation, aggregated across every SV instance the organization runs. The CIP names Digital Asset-1, Digital Asset-2, Cumberland-1 and Cumberland-2 to remove any doubt about aggregation.
That base is narrower than people assume. It is lifetime SV rewards, not everything in the organization's wallets. Purchased CC, app rewards and client balances are not part of the calculation. A fair amount of public commentary has treated aggregate SV holdings as though they were lifetime SV reward totals. They are different numbers, and the second one is smaller.
The tiers are discrete, not a curve. At activation, 70% locked earns full Weight, 45% earns 60% of it, and 35% earns 40%. After one year Tier 3 disappears and the remaining thresholds are 65% and 50%. After two years only Tier 1 survives, at 60%. After three years it is 55%. Below the lowest live tier, Weight is zero. There is no partial credit between tiers.
The framework is not permanent. It terminates automatically thirty days after the next step down in rewards, currently forecast for late summer 2029.
What it costs
CIP-105's own worked example is the clearest illustration. A Super Validator with Weight 10 and a billion CC of historical earnings locks 700 million to hold Tier 1. That is the CIP's number, offered as an example rather than a measured statement about any operator's actual book, and it is worth treating it that way. Long-running high-Weight operators are looking at a substantial stock of historical rewards. Recently onboarded or low-Weight SVs are looking at much less.
Whatever the number, the shape of the problem is the same. Capital that satisfies a lock requirement is capital doing one job, and it has to keep doing that job continuously for as long as you want the Weight.
Exit is the part that gets described badly. This is not a three-year cliff. An SV may initiate an unlock of any size at any time, and 1/365.25 of the requested amount vests each day, so a full year to liquidate that slice. Only the still fully locked portion counts toward Weight, which means the Weight consequence lands immediately while the coins take a year to arrive. Any balance above your tier threshold also has to leave through vesting. Circumventing vesting is a lock violation, with one named exception, Lock Substitution, defined in the operational guidelines rather than in the CIP itself.
So the commitment is economic rather than contractual. You can start leaving tomorrow. You give up Weight the same day and wait a year for the capital.
The thirty day problem
Fall under your tier and the under-locked portion of your Weight comes out of the active pool within seven days. You then have thirty days from the initial under-lock event to restore the lock and return to the higher tier. Miss that window and the Weight is permanently removed, and the CIP is explicit that it cannot be reclaimed later.
There are no exemptions. Section 9 of CIP-105 reads, in full, "None." Not for the Foundation, not for ecosystem funds.
This is live, not theoretical. Tokenomics has already recommended minting weight reductions for CIP-105 non-compliance, and restorations once the relevant PartyIds cleared Tier 1.
So the operational question is not only how you fund the lock. It is what happens if the lock breaks and you have four weeks to fix it.
Where things actually stand
One thing the marketing around this tends to skip. The network is still in Phase 1.
In Phase 1, "locked" means CC sitting in a segregated PartyId disclosed to the Foundation, with SV Weight evaluated weekly. It is not yet an on-chain locking contract with automatic vesting. Phase 2 activates on deployment of CC locking contracts to MainNet, and as of late September those were still being specified.
That matters for how you think about sourcing. CIP-105 requires the implementation to support locking from self-custody wallets, institutional custodians and qualified third-party custody providers, across multiple wallets, custodians and PartyIds, meeting the threshold in aggregate, with no SV forced into a particular custody model. The CIP's own Example 4 runs 10% at one custodian, 20% at another, 20% in the validator and 20% in a wallet, arriving at 70% and full Weight.
What the CIP does not do is define products. Funding it yourself, borrowing, and delegating are market structures built on top of a single underlying fact, that CC can be shown as locked in a disclosed PartyId for a given SV. Non-SV balance locking as a protocol primitive is a Phase 2 design item. In Phase 1 it is an operational arrangement, which is why it works today.
Three ways to source it
Fund it yourself. Simplest. Most expensive, because the capital leaves your working balance sheet for as long as you hold the tier.
Borrow the CC. You take custody, so the lender takes principal risk and prices it. Collateral posted, a credit premium on top of the rate. You pay for the capital and again for the exposure created by moving it.
Delegate. A holder locks on your behalf and keeps custody throughout. Nothing transfers, so there is no collateral and no credit exposure on either side. You pay a fixed fee for a lock you don't own, and your capital stays available to the business.
Why liquidity is the argument
Delegation works only if there is someone on the other side, and it keeps working only if there is someone else when your first supplier steps away.
Lock Substitution is the CIP's sole sanctioned bypass of vesting, and it exists precisely because supplier circumstances change. In Phase 1, substitution is a manual add-then-swap inside a short window, so the incoming lock lands before the outgoing one leaves and the SV never prints an under-lock. Phase 2 designs aim to replace that with an atomic substitution.
Whichever mechanism is running, the constraint is the same. Substitution needs a replacement supplier who can be found and matched fast. Against a thirty day cure window, "fast" is the whole requirement.
This is why supplier depth matters more than rate. A cheap delegation from a thin market is worse than a fair one from a deep market, because the cheap one leaves you exposed on the day your counterparty exits and there is nobody to take their place.
Where Cashen comes in
Cashen is the Canton Coin locking marketplace. Super Validators and Featured Apps source locked CC from institutional holders, bilaterally, with terms fixed at origination.
Five terms per deal: the CC amount, a fixed APR, a minimum lock period, recall notice terms, and a breach rate if a recall goes unresolved. Interest accrues continuously and settles monthly. Both sides stay non-custodial. Nothing is pooled and nothing is lent, so the rate carries no credit premium, because no party takes principal risk.
Those are contract terms, not network rules. CIP-105 says nothing about recall notice periods. What a marketplace can do is write continuity into the deal itself, so that when a holder wants their position back the delegation stays in force through a defined notice period while a substitute is arranged, and the SV is not left to source a replacement from a standing start. On Cashen, a holder who has served a recall notice that goes unresolved waits a further twenty calendar days before they can trigger an unlock. That is the Cashen template, and it exists because the CIP's thirty day cure window is unforgiving.
Super Validators have already used Cashen to get locked. The SV requirement is larger and runs longer than the Featured App requirement, and the one-year vesting tail raises the cost of a broken lock rather than lowering it, but the mechanism is the one that has been running at volume since the June compliance deadline. Roughly 70 apps onboarded. More than 335 million CC locked in active deals. Fastest listing to matched deal, ten minutes. Average time to first match measured in hours.
The number that matters for a Super Validator is none of those. It is the depth of the supplier network behind them, because that determines whether substitution is something you can execute or just a clause you have agreed to.
Cashen carries the largest network of institutional CC suppliers on a single platform. Access requires onboarding and full institutional KYB. Cashen Labs is a member of the Canton Foundation, backed by Ergonia, a Cumberland DRW company.
What to do about it
The tier schedule moves for everyone on the same dates, so most SVs that intend to hold Weight will be sourcing into the same market at the same time. Sourcing at SV scale is not something that happens in an afternoon, and a rushed process produces worse terms than a considered one.
The question to be asking is not whether you can fund the lock. Most SVs can. It is whether you should, and what that capital would otherwise be doing between now and 2029.