The point at which a transfer can no longer be reversed by the sending party. Finality attaches to a leg of a transfer, not to a transaction as a whole, and it binds the sender only. Other parties — an issuer, a court, an insolvency office-holder — can retain a lever the sender has lost. Systems reach the point differently: a proof-of-work chain approaches it asymptotically, a proof-of-stake chain declares it at a checkpoint, and a designated payment or securities settlement system fixes it by rule and protects it by statute.
Three finality models, and what each one guarantees
| Model | Where it applies | What it guarantees | How reversal still happens |
|---|---|---|---|
| Probabilistic | Proof-of-work chains | Confidence rising with block depth. There is no defined point; the six-confirmation convention on Bitcoin is market practice, not a protocol rule | A deeper competing chain reorganises the block out |
| Deterministic (economic) | Proof-of-stake chains with a finality gadget | A checkpoint that cannot be reverted without a large, slashable loss of staked value. On Ethereum a checkpoint finalises across two epochs — 64 slots, about 12.8 minutes, nearer 15 in practice for a transaction landing mid-epoch | Only by an attack whose cost is at least a third of the staked total |
| Legal / settlement | Designated payment and securities settlement systems | That transfer orders entered into the system stand even if a participant enters insolvency proceedings | Outside a protected system, ordinary insolvency and claw-back rules apply to a completed transfer |
The three are not degrees of the same thing. A chain answers reversal by reorganisation. Settlement-finality law answers reversal by a liquidator. A transfer can be immune to the first and exposed to the second.
Where finality falls on a crypto-funded bullion purchase
- The buyer sends. Control ends when the transaction is broadcast and included in a block. Under the definition above, this is the buyer’s finality moment on the buyer’s leg, and it arrives before anything else in the chain of events has happened.
- The chain settles it. Depth accumulates, or a checkpoint finalises. No party to the purchase governs this clock.
- The gateway operator accepts it. The number of confirmations at which an operator treats an incoming transfer as received is set by that operator, not by the protocol. Between step 2 and step 3 the value is final on-chain and not yet anything to anyone.
- The platform screens and converts. A licensed digital-asset platform screens the wallet and the transaction under its own licence, converts, and settles the seller in national currency. Golden Ark Reserve receives fiat only, holds no digital assets, and issues no token or claim on metal.
- Fiat settlement arrives against the order reference. This is the seller-side finality moment. It is governed by the rules of whichever payment system carries it — rules the buyer is not a party to and cannot observe from outside.
- Allocation. Specific bars are identified by serial number, weight, fineness, producer and location in the Allocation Record, and the counterparty is named in the vault register of a dedicated client sub-account at Brink’s. Title to identified bars sits here. Neither preceding finality moment moves it.
Six steps, three independent clocks, one identifier — the order reference — binding quote, pro forma invoice, incoming payment, settlement, allocation and the resulting document set to a single instruction.
What sets the clock
The protocol sets the first interval and is indifferent to the transaction: block interval, epoch length and checkpoint rule are fixed inputs. The Glamsterdam upgrade does not shorten them — single-slot finality remains a roadmap item, and the proposal to halve Ethereum’s slot time was cut from that upgrade during scoping. The operator sets the second interval through its confirmation threshold and its screening. The seller sets the third: price fixation runs fifteen minutes and locks Golden Ark Reserve’s own quote, not the market.
Finality carries no fee. What it costs is the interval — the window in which the sending party has parted with the asset, the receiving party has not yet acted on it, and no bar carries anyone’s name. That window is a function of three clocks that are not synchronised to each other and are not designed to be.
What finality leaves behind as evidence
On the funding leg: the transaction identifier and its confirmation depth, and the operator’s settlement advice showing receipt in national currency against the order reference. On the seller’s side, the digital-asset funding leg adds two documents to the Evidence Set that a bank-funded purchase does not produce — the screening record and the conversion record. The screening report itself is internal; the counterparty-facing output is the verification status with its date and internal reference.
None of these is a title document. The Allocation Record and the vault register are.
What goes wrong
Crediting before finality. A recipient that credits on inclusion rather than on finality carries the reorganisation risk itself. This is the specific loss vector that deep-reorg attacks are built to exploit, and it sits with whoever released value early — not with the sender, whose transfer was valid.
Transfer to a wrong or unrecoverable address. Finality means the protocol offers the sender no remedy. Any remedy that exists is against a person, and only where a person can be identified and reached.
Unattributed credit. A payment arriving without a matching order reference is final on the chain and unplaced in the record. It cannot be applied to an instruction until it is matched, and the interval belongs to the party waiting for allocation.
Issuer action after settlement. For a stablecoin, chain finality ends the sender’s ability to reverse and does not end the issuer’s ability to act on the balance. The definition is exact on this point and the exactness is the whole content of it: no longer reversible by the sending party.
Claw-back. A transfer outside a system protected by settlement-finality law can be unwound by an insolvency office-holder or a court after it is technically irreversible. Immutability of the record is not a defence to a claw-back claim; it is the reason the claim is brought against a person rather than against the ledger.
Terms it is confused with
Settlement is the discharge of the obligation. Finality is the point at which that discharge stops being reversible. A transfer can be settled and not yet final.
Clearing determines what is owed and to whom. It precedes settlement and has no finality moment of its own.
Irrevocability is the point at which the sender can no longer instruct a cancellation. In EU settlement-finality law it is a distinct moment from entry into the system, and both are distinct from the discharge itself.
Confirmation is one block of depth. It is a count, not a state.
Immutability is a property of a record. Finality is a property of a transfer.
Transfer of title is a register event. On the metal leg it occurs at allocation and bears no relation to any payment-leg finality moment.
What is changing in the definition itself, 2025–2026
Two rewrites are running at the same time, one legal and one regulatory, and each moves a different edge of the word.
The EU is converting settlement finality from a directive into a regulation. On 4 December 2025 the European Commission proposed a Settlement Finality Regulation that would repeal Directive 98/26/EC — the 1998 Settlement Finality Directive — and amend the Financial Collateral Directive, as part of its market-integration package. Three features change what the term covers. The rules become directly applicable instead of transposed, removing the divergence between national implementations that makes cross-border finality opinions expensive. The proposal adds a further finality moment, the moment of final settlement — the point at which the parties’ respective obligations are discharged unconditionally and irrevocably — alongside the existing moments of entry into the system and irrevocability. And the text is drafted to be technology-neutral so that distributed-ledger systems, including tokenised cash and securities, can fall inside the regime, with ESMA and EBA tasked with rules on how finality is assessed in such systems. It is a proposal and not law: through 2026 Member States have divided in Council discussion over whether the new moment belongs in this instrument at all, and over whether the system operator or ESMA determines it. The directive it would replace has already been amended six times; the most recent change opened designated payment systems to payment institutions and e-money institutions, which have held direct access since April 2025.
The US has made stablecoin finality conditional on the issuer. The GENIUS Act, signed 18 July 2025, requires a permitted payment stablecoin issuer — and a foreign issuer whose tokens are made available in the United States — to hold the technological capability to comply with a lawful order to seize, freeze, burn or block the transfer of the stablecoins it issued. A joint FinCEN and OFAC proposed rule published in April 2026 would classify those issuers as financial institutions under the Bank Secrecy Act and extend the block-freeze-reject obligation to secondary-market transactions, subject to a standard requiring the token or account to be identifiable with reasonable particularity; Treasury issued further proposed rules on issuance, offer and sale in August 2026. The Act takes effect on the earlier of 18 January 2027 and 120 days after final implementing rules are issued.
The consequence for a treasury reading a confirmation screen is narrow and concrete. For a dollar stablecoin, the chain’s finality moment and the point at which the value is beyond recall are not the same point, and the distance between them is a function of an issuer’s obligations rather than of a protocol’s design. A finality figure quoted in seconds or epochs describes the first and is silent on the second.
Finality is a property of a leg, not of a purchase
Two bodies of literature define this term and they do not meet. Chain documentation defines finality against reorganisation and answers in slots, epochs and confirmations. Settlement-finality law defines it against insolvency and answers in designated systems and protected moments. Neither addresses the case where one purchase crosses both, which is the case a counterparty funding bullion from a digital-asset position is actually in.
That purchase has three finality moments and no relation between them. The buyer’s on-chain transfer is final in minutes, against the buyer and against nobody else. The platform’s fiat settlement to the seller is final under a payment-system rule the buyer is not party to and cannot inspect. The allocation is a register event with no chain and no payment system behind it at all. The moment the buyer can watch is the one that decides the least: on-chain finality establishes that the asset has left, and establishes nothing about whether the operator has accepted it, whether the seller has been settled, or whether any bar carries the buyer’s name.
The order reference is what makes the three describable as one transaction, and it is not a finality mechanism — it is a binding identifier that lets an incoming payment post against an instruction instead of arriving as an unattributed credit. What closes the purchase is not a finality moment either. Title to identified bars passes at the Allocation Record — serial number, weight, fineness, producer, location — with the counterparty named in the vault register of a dedicated client sub-account at Brink’s, segregated from the seller’s own stock.
A counterparty asking whether a bullion purchase is final is asking a payments question about a property question. The two answers live in different records, are produced by different parties, arrive at different times, and only one of them names bars.
The route these legs belong to is set out at Buy Gold with Crypto.