Brazil Tokenization Rules: Securities Regulator Sets a 60-Day Deadline

Brazil’s securities regulator just put a clock on tokenization. The Comissão de Valores Mobiliários wants a blueprint for how securities can be issued, traded, and settled on blockchains, and they want a first version fast.

The agency created a Tokenization Working Group to study, test, and propose rules. The first deliverable is due in 60 days, which is a clear signal: the tokenization playbook for Brazil is moving from theory to drafts.

If you build issuance platforms, run brokerage rails, or manage custody, this is the prep window. The rulebook will start experimental, but the choices made in the next two months will set the tone for the next few years.

Point Details Working group created CVM announced a Tokenization Working Group to study, test, and propose rules for securities on DLT on July 17, 2026 (Comissão de Valores Mobiliários (CVM) — gov.br). Legal basis Established via Portaria CVM/PTE No. 177, dated July 15, 2026 and published July 17, 2026, with a 120-day term extendable by 30 days (LegisMap). 60-day deadline Within 60 days of installation, the group must submit a proposal for an experimental tokenization framework for securities to the CVM’s board (LegisMap). Who is involved Representatives from 14 CVM components, coordinated by José Alexandre Cavalcanti Vasco and Bruno de Freitas Gomes (CVM — gov.br). Market impact Early path for tokenized issuance, trading, custody, and settlement. Likely pilot phase with limits and reporting while rules harden.

What the CVM just put in motion

The CVM formalized a Tokenization Working Group to move Brazil’s securities market toward blockchain rails. The announcement sets the scope clearly: study, test, and propose rules for issuance, custody, trading, and settlement of securities that live on distributed ledgers. That is not marketing fluff. It is the full lifecycle.

The group is grounded in Portaria CVM/PTE No. 177, signed July 15 and published July 17, 2026. The Portaria establishes a 120-day initial duration for the group, with a possible 30-day extension. It also locks in an early milestone: within 60 days of installation, the group must send a proposal for an experimental framework to the CVM’s board. Those are hard dates on paper, not “we’ll get to it” timelines (LegisMap).

On composition, this is not two people in a corner. The CVM says the group pulls representatives from 14 different organizational units, coordinated by José Alexandre Cavalcanti Vasco and Bruno de Freitas Gomes. That breadth usually means the deliverable will touch market supervision, investor protection, infrastructure, and enforcement from the outset (CVM — gov.br).

In short, this is Brazil’s securities regulator setting up the machinery to write real rules for tokenized securities, and putting the first draft on a 60-day timer (CVM — gov.br).

Why the 60-day clock matters for builders

Sixty days is not enough to redesign a capital market, but it is enough to lock in a scaffolding that projects will live under for years. A first experimental framework will likely set which entities can participate, which assets qualify, what data must be reported, and how custody gets handled. Even if it is temporary, it will become the default for pilots and set a precedent for the permanent regime.

If you are running a tokenization platform, a brokerage, a transfer agent function, or a fund that wants to hold tokenized positions, this is when to shape your stack. The specs you choose now will either align cleanly with the experimental regime or require rewrites later. Think wallets, signing, KYC integrations, and how you record ownership and settlement finality.

Also, the 60-day output goes to the CVM’s board. That is a policy vector. When a group this broad ships a proposal to the board, it usually comes with implementation ideas and a sense of what is actually testable in Brazil’s market plumbing.

What the experimental framework may include

We do not have the draft yet. But based on the Portaria’s scope and what other markets have trialed, expect a few patterns.

Eligibility and scope

• Asset types: likely plain vanilla at first. Debentures, fund quotas, or other regulated securities that translate cleanly to tokens. Exotic structures may wait.
• Participants: licensed intermediaries, market infrastructures, and possibly fintechs admitted under a pilot, each with defined responsibilities.
• Limits: caps on issuance size or number of investors during the pilot phase to contain systemic risk.

Custody and control

• Qualified custody: requirements for who can hold client assets, with wallet governance policies, key management standards, and operational resilience tests.
• Ownership records: clarity that on-chain state and off-chain registries must reconcile, including how errors are corrected.
• Segregation: rules to keep client tokens separate from firm assets, plus audit trails.

Trading and settlement

• Trading venues: conditions for matching and reporting trades, possibly within sandboxes or under existing ATS-like permissions.
• Settlement finality: a definition of when a tokenized security transfer is considered final under Brazilian law, and how reversals are handled if needed.
• Interoperability: guidance on chain selection and how to manage bridges or wrapped representations to reduce fragmentation risk.

Disclosures and reporting

• Issuer disclosures: standardized docs and periodic reporting adapted to tokenized instruments.
• On-chain transparency: minimum metadata or on-chain references to prospectuses and corporate actions.
• Supervisory access: data interfaces so the CVM can monitor activity effectively.

Pro tip: Design your smart contracts and operational manuals with toggles for limits, whitelists, and reporting hooks. When the experimental framework lands, you want to switch features on without rewriting your core.

Who is likely in scope on day one

Tokenized securities pull in a lot of actors. Even if the first phase is narrow, expect these groups to be touched in some way:

• Issuers that want to tokenize debt or equity-like instruments, especially those already under CVM registration.
• Broker-dealers and distributors that place or trade those instruments for clients, including retail platforms if allowed by the pilot’s limits.
• Market infrastructures that handle trading or post-trade processes and may experiment with on-chain netting or delivery versus payment.
• Custodians and registrars who hold client assets or maintain ownership records, including firms adding wallet and key management capabilities.
• Funds and asset managers that might buy tokenized instruments for portfolios and need valuation, pricing, and audit comfort.
• Tech providers building issuance platforms, KYC engines, oracle feeds, or chain monitoring tools.

The pilot could gatekeep via eligibility criteria, and it may sequence participants by readiness. If you are not licensed today, expect to partner with someone who is.

A practical checklist to get ready

1. Map your regulatory posture. Identify which existing CVM rules you already meet and where tokenization introduces gaps. Write it down. It will speed conversations with counsel and the regulator.
2. Pick a chain with intent. Document why it fits your risk, performance, and interoperability needs. Be ready to justify choices on uptime, governance, and upgrade paths.
3. Harden custody. Define key ceremonies, role-based controls, and recovery. Practice a simulated key compromise and show how clients still get made whole.
4. Engineer whitelists and transfer controls. Many pilots require participant whitelisting, jurisdiction filters, and lockups. Build these as modules, not hard forks.
5. Automate disclosures. Set up canonical data feeds for terms, prospectuses, interest schedules, and corporate actions. If the rulebook asks for on-chain references, you already have them.
6. Rehearse incident response. Create playbooks for chain halts, oracle failures, or corrupted state. Who calls who, and how do you pause, resume, or roll forward safely.
7. Plan audits. Line up external reviews of smart contracts and custody processes. Pilots often require attestations before launch.

Key risks you should price in now

• Regulatory drift. An experimental framework may change quickly. Design for adaptability and keep hardcoded assumptions to a minimum.
• Smart contract bugs. Tokenized securities need strict transfer logic. Formal verification or risk-reduced patterns are worth the time.
• Custody failures. Operational wallets and MPC setups are only as good as their procedures. Segregation and audit logs are non negotiable.
• Interoperability traps. Bridges and wrapping create additional risk. If you must bridge, define limits and emergency stops.
• Liquidity illusions. Early tokenized instruments can look liquid but trade thin. Size positions and redemption terms accordingly.
• Tax and accounting friction. Even if the instrument is familiar, token mechanics can raise questions on timing, FX, and recognition. Confirm treatment with advisors before launch.

Risk reminder: Nothing here is investment advice. Tokenized securities carry market, operational, smart contract, and regulatory risks. Do independent diligence.

How Brazil’s push stacks up next to the EU and US

The EU has been running its DLT Pilot Regime to let market infrastructures test tokenized trading and settlement with guardrails. That gave Europe a head start on supervised experimentation. Brazil is now signaling it wants a similar controlled lane, tailored to local law and market plumbing. The big advantage is practical learning without forcing everything into legacy systems.

The US has seen tokenization experiments run under existing exemptions or through broker-dealers and alternative trading systems, often with complex interpretations of custody and transfer rules. That approach creates optionality but also fragmentation. Brazil’s working group approach may deliver a more unified blueprint for the local market, even if it starts with narrower scope.

Bottom line, Brazil looks set to learn fast from others while adapting to domestic realities. The 60-day deliverable forces momentum, which has been missing in plenty of jurisdictions.

Timelines and what to watch next

Here is the core sequence to track:

• Installation date. The 60-day countdown starts from the group’s installation, not the press release. Note that timing to estimate the draft window accurately (LegisMap).
• Initial proposal. Within that 60-day window, a proposal for an experimental framework should go to the CVM’s board. Watch for scope, eligibility, reporting, and custody language (CVM — gov.br).
• Public consultation. Many CVM initiatives follow with public hearings or consultations. If there is one, use it. Field feedback early so your design does not fight the rules later.
• Pilot selection. Pay attention to who is admitted to early pilots. Their stack choices can become de facto standards that others adopt to interoperate.
• Coordination signals. Look for joint statements or cross references with other Brazilian authorities on payments and settlement. Those hints tell you how delivery versus payment might be structured.
• Extensions. The Portaria allows a 30-day extension of the group’s life. If used, it might mean additional complexity to solve or a broader scope emerging.

Pro tip: Assign someone on your team to track the docket daily and log changes. A single outdated assumption can cost months.

Implementation questions builders should ask their teams

• Can we enforce investor eligibility and lockups at the token level without breaking transferability for permitted wallets
• How do we handle corporate actions on-chain, including interest accrual, coupon payments, and redemption events
• What is our recovery plan if an issuer or custodian needs to correct a mistaken transfer
• Which oracle sources do we trust for rates and pricing, and how do we fail safe if they go offline
• Do our contracts support pausing, emergency redemptions, or migration if the framework evolves
• How do we evidence segregation of client assets for auditors, with proofs that are meaningful and not just screenshots

Case patterns that tend to work in early pilots

From other markets, a few designs often survive the first round of regulatory scrutiny:

• Permissioned transfer with allowlists. Wallets get onboarded through KYC, and transfers only process to approved holders. Secondary trading still happens, but inside the whitelisted universe.
• Delivery versus payment via escrow contracts. Funds and tokens sit in escrow until both sides meet conditions, then settle atomically. It is less fancy than cross-chain dreams, but it works.
• On-chain corporate action hooks. Issuers post schedules and payment instructions in metadata, and custodians run jobs that read contracts and trigger payouts. No PDF scavenger hunts.
• Dual books with reconciliation. A conventional registry mirrors the on-chain state daily. If a fork or outage happens, you have a legal source of truth to resolve disputes.

It is not glamorous, but it aligns with what supervisors want to see in the first innings.

What this means for professional investors

For asset managers, the short term is about access and plumbing, not yield magic. Tokenization can compress settlement times and simplify corporate actions, which reduces operational drag. But early issues can be tight and illiquid, with wide spreads until venues and market makers get comfortable.

If you plan to buy tokenized instruments in Brazil once the experimental regime opens, lock down how your custodian will hold them and how you will value them. If the chain is permissioned, verify the onboarding pack and timeline. If it is public, ask how censorship resistance and governance are managed when you need a corporate action processed.

Finally, check mandate language. Some fund documents do not contemplate on-chain assets, even when they represent familiar securities. Clean that up before you try to allocate.

Stay on top of the next moves

If you need a single place to track Brazil’s tokenization pivot without the noise, we cover each filing and pilot phase as it lands at Crypto Daily. Short reads, real links, no fluff.

Frequently Asked Questions

What exactly is the 60-day deadline for

The working group must send a proposal for an experimental framework for tokenized securities to the CVM’s board within 60 days of its installation, per Portaria CVM/PTE No. 177. That proposal starts the policy conversation and may lead to pilots or consultations.

Who coordinates the working group

José Alexandre Cavalcanti Vasco and Bruno de Freitas Gomes are listed as coordinators, and the group includes representatives from 14 CVM organizational components, according to the regulator’s announcement.

Does this mean tokenized securities are already approved in Brazil

No. The announcement kicks off a structured process to propose and test rules. Expect an experimental phase with limits before any permanent regime.

What kinds of assets might be included first

Early phases usually focus on simpler, well understood instruments that map cleanly to tokens, like certain debt securities or fund quotas. Complex or novel structures often come later after initial learnings.

Will the framework pick a specific blockchain

Unclear. Some jurisdictions allow multiple chains if governance, security, and monitoring standards are met. Others start with a narrower set. Builders should be ready to justify their choice.

How should platforms prepare before the rules are published

Strengthen custody, design transfer controls, automate disclosures, and line up audits. Build toggles into contracts so you can adapt quickly once the experimental requirements are public.

Could the timeline be extended

The Portaria sets a 120-day term for the group with a possible 30-day extension. The 60-day proposal deadline is early in that window, but the overall work could continue if extended.

Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.