Cross-Chain Swap Engine
An atomic settlement protocol between Canton Network and Ethereum.
The Cross-Chain Swap Engine is a cross-chain atomic settlement protocol built by Interstice Digital. It moves value between Canton Network and Ethereum using paired hashed-timelock contracts (HTLCs), so either both sides of a swap settle or both sides refund. There is no intermediate state in which one side has moved without the other.
This documentation explains how the engine works, the contracts that enforce its guarantees, the role of counterparties who provide liquidity, and the model used to verify the people and entities who transact through it.
Who this is for
Users evaluating whether the engine fits the way they need to move value between Canton and Ethereum.
Integrators building applications that source liquidity from the engine.
Counterparties interested in providing liquidity into the engine.
Researchers and reviewers examining the protocol's security and trust model.
What you'll find here
A swap end-to-end in three phases.
The protocol, security model, fees, and failure modes.
The Canton side, the Ethereum side, and the off-chain coordination layer.
HTLCs, counterparties, verification, and on-chain privacy.
Direct answers to common questions.
Definitions of terms used throughout the docs.
The REST API for counterparties quoting and settling swaps.
Programmatic taker access: where it stands and what is planned.
What the engine is not
It is not a custodial exchange. Interstice does not hold user assets at any point in the swap. It is not a wrapped-token bridge — there are no synthetic IOUs in transit between chains. It is not a generic AMM — pricing comes from counterparty quotes against a request for quote, not from a constant-function pool.
The contracts were assessed by CertiK in June 2026; see the security assessment for the findings summary. This documentation describes the protocol as currently implemented. It is not an attestation, and it is not a substitute for your own review.
Last updated