How Canton Subnets Relate to the Canton Network and Canton Coin

Most blockchains make a single architectural choice: everything goes on one shared ledger, visible to every participant. That works fine for public applications. It is a non-starter for institutions that need to keep their counterparty relationships, positions, and transaction data private.

Canton's answer is a design it calls a network of networks. Understanding how it works requires holding two things in mind at once: the private subnets where institutions actually run their applications, and the public coordination layer that ties them together.

The Subnet Layer: Where Institutions Live

At its core, Canton replaces the idea of a single global ledger with multiple subnets connected through a shared coordination layer. Subnets are sovereign, run environments where institutional application operators can establish their own permissioning and governance.

A bank running a tokenized deposit application, a custodian managing client assets, or an exchange operating a settlement workflow each runs its own subnet. They set their own rules about who can participate, what data is visible to whom, and how transactions are governed. Transaction data is only distributed on a need-to-know basis to maintain confidentiality — in most other chains, all state and transactions get replicated to all nodes. In Canton, state and transactions are distributed only to nodes specified in the smart contracts.

This is the feature that makes Canton viable for regulated finance. A JPMorgan subnet and an HSBC subnet do not expose their internal transaction data to each other simply by virtue of existing on the same network.

The Global Synchronizer: The Public Coordination Layer

Private subnets alone would just be a collection of isolated ledgers. The Global Synchronizer is what makes them a network. It is a decentralized and transparently governed interoperability service for the Canton Network, enabling cross-chain atomic transactions while maintaining the privacy and independent controls regulated institutions require. The protocol ensures that only stakeholders see, validate, and record their parts of a transaction, even when transactions span multiple applications and subnets.

In practical terms: when two institutions on different subnets need to settle a transaction with each other, the Global Synchronizer coordinates that settlement atomically without either party having to expose their full ledger state to the other. The settlement either happens completely or it doesn't happen at all. There is no partial execution risk, no bridge, and no trusted intermediary holding funds in transit.

The Global Synchronizer is a publicly accessible, permissioned subnet operated by Super Validators and governed by the Global Synchronizer Foundation. It is the public spine of an otherwise private network.

Where Canton Coin Fits

Canton Coin is the economic layer that funds and governs the Global Synchronizer. It is used from day one to pay for use of the Global Synchronizer and can be minted by those who provide utility to the network.

The tokenomics follow a burn-mint equilibrium. All fees for using the Global Synchronizer are paid in CC and are permanently burned. New CC is minted and distributed as rewards to network participants: primarily to application providers generating activity, and secondarily to validators and Super Validators securing the network. There was no pre-mine, ICO, or VC allocation — every token enters circulation through verified network contribution.

This means CC is not a speculative asset layered on top of the network's real activity. It is the mechanism by which the network's real activity is priced and rewarded. The more institutions use the Global Synchronizer to coordinate cross-subnet transactions, the more fees are burned and the more rewards flow to the applications and infrastructure operators driving that usage.

Why the Architecture Matters

The subnet model resolves what has historically been an impossible tradeoff for institutional blockchain adoption. Institutions need privacy and control over their own environments. They also need to transact with counterparties outside those environments without introducing settlement risk or giving up that control.

Canton is modular and scales horizontally. Capacity increases with every new participant or operator that spins up a subnetwork, isolating resources while still benefiting from shared trust and interoperability.

The result is a network that gets more useful as more institutions join, without requiring any of them to compromise on the privacy and permissioning standards their regulators and clients expect.

Disclaimer

We've done our best to describe Canton Network's architecture accurately, but this is a fast-moving space and some details may be incomplete, outdated, or subject to change. If you're making technical or investment decisions, verify directly with primary sources. Nothing in this post constitutes investment advice or a recommendation to buy or sell any asset.