
Researchers affiliated with the Bank for International Settlements have built and tested a comprehensive system anchoring official banking and economic statistics on the XRP Ledger, according to working paper 1374 published on September 2, 2026. The prototype was designed to verify whether official statistical datasets were altered after publication, addressing the common challenge that recipients must trust downloaded files are authentic and unchanged since publication. As reported by the research team, the experimental system was not intended for production deployment and remains an unmaintained prototype software. The working paper, numbered 1374, specifically targets a real gap in the SDMX standard that international bodies use to exchange statistics, which has no built-in way to prove a file hasn't been altered after publication. The system gives statistical agencies a way to prove published data is genuine, with each release receiving a cryptographic fingerprint that the XRPL Ledger stores permanently.
The prototype connected the XRP Ledger with Statistical Data and Metadata eXchange (SDMX), an international standard used by organizations including the BIS to exchange statistical information. The system fingerprinted whole files and each country series separately, allowing publishers to anchor one series, a subset, or an entire release. The backend strips old anchor tags, then normalizes the file with Canonical XML 1.1 before hashing with SHA3-512 at both whole-file and per-series level. Those hashes become leaves in a domain-separated Merkle tree that collapses into one root, which is then written into the Memos field of an XRPL Payment transaction. The gateway then rewrites the SDMX file header to hold the anchor, ordered Merkle leaves, and a Verifiable Credential, with an onchain attestation registry binding the publisher's identity key to its XRPL address. The system was designed around the ledger's low transaction costs and rapid confirmation times, with the BIS noting that XRPL's DevNet was selected for its performance characteristics. Median publication latency landed between three and five seconds, set mainly by XRPL ledger close, while verification finished in one to two seconds per dataset under controlled test conditions.
The prototype's cost structure demonstrates significant scalability advantages, with per-release anchoring effectively free due to XRPL's base fee of 10 drops (0.00001 XRP). The system's mechanics stay lightweight by design, with the backend normalizing files and hashing them before creating Merkle roots. The memo approach needs no smart contracts, avoiding gas costs and contract risk entirely. With batching, one transaction covers an entire batch, whatever its size, with processing and storage dominating at roughly half a cent per dataset. Above about 50 datasets per batch, ledger fees stop mattering entirely. The prototype ran on a single developer workstation using a Docker stack, with proof and hash metadata adding only one to two kilobytes per dataset. Verification also scales logarithmically with batch size, so proofs stay compact as volumes climb, making batching the economics nearly disappear. The approach is data-format-agnostic and can be extended to other structured statistical or regulatory formats.
The prototype addressed security risks by using a W3C Verifiable Credential signed by an identity key associated with the publisher's XRPL address, allowing recipients to check that the publishing party controlled the recognized address. A verifier can then check both that the data was unchanged and that the party publishing it controlled the recognized address. The SDMX message carried the transaction reference, ordered Merkle leaves and credential required for verification, with the architecture potentially supporting zero-knowledge proofs that could allow organizations to prove selected facts about restricted data without disclosing full datasets. The system ensures confidentiality holds throughout as the underlying data never touches the chain, only the fingerprint does. The authors want standard verification protocols for autonomous systems reading official data, with AI agents receiving similar treatment. The paper notes that the design is blockchain-agnostic and meant to work with solutions other than XRPL as well, though the prototype uses XRPL specifically.
The prototype would require additional security, governance and operational work before official statistics providers could rely on it, including policies governing publisher keys, compromised credentials, transaction failures and corrections to previously issued datasets. The BIS frames this as a proof of concept rather than a live service, with production use requiring HSM-backed signing, pinned validator nodes, and formal load testing. The ledger certifies only what was published, by whom, and when, with publishers staying responsible for whether the numbers themselves are correct. The authors look beyond statistics publishing toward tokenized markets, arguing the payoff grows when verified data sits on the same ledger as digital assets. Inflation-linked products, perpetual futures, and derivative settlement appear as candidates, with contracts potentially confirming inflation prints are authentic before releasing payments. The paper also proposes Chainlink integration to carry verified statistics onto other chains, with the authors discussing mirroring anchors across chains for redundancy and pointing to XRPL's EVM-compatible sidechain as a natural next step. The authors note that DevNet shares the transaction format and ledger-close cadence with mainnet, so latency figures are representative, and mainnet fees stay in the sub-cent range.