Canonical messages
A deterministic envelope separates the interledger message from any source-chain transaction format. Domain-separated message identifiers support replay resistance.
XIM · Research preview
Authenticated messaging and settlement across independently governed ledgers, institutional networks and financial rails.
Research preview · September 2026. XIM is not yet ready for production use.
XIM proposes a common messaging layer without requiring connected networks to adopt the same consensus system. It defines canonical messages, deterministic identifiers, cryptographic commitments, replay protection, verification policies, execution semantics and acknowledgements.
Each source–destination connection, or lane, declares a verification policy suited to its value, finality, privacy and trust requirements. XDC Mainnet may serve as a coordination, checkpoint or settlement domain where a workflow requires it; every message does not have to pass through XDC.
A deterministic envelope separates the interledger message from any source-chain transaction format. Domain-separated message identifiers support replay resistance.
A lane can select native proofs, light clients, zero-knowledge proofs, threshold attestations, trusted-execution-environment attestations or a hybrid policy.
Message hashes, sparse Merkle roots and append-only transition logs support auditability without replicating every foreign chain’s state.
UAID distinguishes an economic asset from its contract addresses and representations on different networks, retaining the distinction between identity and representation risk.
Eligible routes depend on jurisdiction, asset support, privacy, verification strength, value limits, liquidity, deadlines and finality.
Lane-specific monitors can rate-limit, pause or downgrade a route without globally stopping unrelated lanes.
Detect finalized events on a source network and construct candidate XIM messages.
Translate authenticated financial instructions and APIs into the protocol’s message semantics.
Evaluate the supplied evidence against the verification policy of the lane.
Select eligible direct or multihop settlement paths.
Submit verified actions to the destination and record execution receipts.
Detect anomalies and apply circuit breakers to affected lanes.
An adapter observes source finality, builds proof evidence, commits a message, verifies it on XDC, executes the destination settlement and emits an acknowledgement.
An authorized gateway commits to a private institutional event. Selective disclosure supports verification without publicly replicating confidential transaction data.
A gateway authenticates a financial instruction, creates a settlement intent, verifies HSM-backed evidence, executes destination settlement and returns reconciliation output.
XIM does not eliminate trust. The proposal makes trust assumptions explicit for each lane so that verification, operational responsibility and risk can be assessed separately.
A destination accepts a message only when evidence satisfies the lane’s policy.
A consumed message identifier cannot execute a second time within the destination security domain.
An anomalous or compromised lane can be paused without stopping unrelated routes.
Authenticated commitments and events allow state transitions to be reconstructed.
Public blockchains, permissioned ledgers, institutional networks, stablecoins, tokenized assets, trade finance and ISO 20022-compatible payment workflows.
The roadmap describes a staged minimum viable implementation. Public test vectors, reproducible benchmarks, adversarial testing, independent audits and formal analysis are required before production use.
Finalize the v0.1 schema, NetworkID and UAID formats, state machine, lane policies and test vectors.
Implement MessageRegistry, VerifierRegistry, RiskManager, replay protection and the event model.
Develop XDC and Ethereum observers and executors, deterministic encoding and a threshold-attestation bootstrap.
Build the sparse-Merkle-tree library, batch roots, TypeScript and Go SDKs, and REST/gRPC APIs.
Add rate limits, lane pause, key rotation, monitoring and chaos/failure tests.
Demonstrate Ethereum–XDC testnet messages and asset transfers, then publish benchmarks.
A proposed verification-agnostic protocol for messaging and settlement between ledgers, institutional networks and financial rails.
No. Each network retains its own governance and consensus; XIM defines authenticated exchange between those trust domains.
Each lane selects an explicit evidence policy, including proofs, light clients, attestations or hybrid verification.
Risk monitors can limit, pause or downgrade the affected lane while unrelated routes continue.
XDC Zero supports subnet–mainnet communication. XIM research broadens the model to heterogeneous chains, institutional ledgers and financial gateways.
No. It is a research preview, with implementation, testing, benchmarks, audits and formal analysis still part of the path to production.
Research by Atul Khekade, Ritesh Kakkad, Wanwiset Peerapatanapokin and Behnam Mohammadkhani, XDC Network Research & Engineering, September 2026.
Protocol design and implementation roadmap.
Companion presentation of the protocol research.
Ask technical questions and share implementation experience.
Join the XDC developer community.
Network, smart-contract and node documentation.
AI-assisted technical support and development tools.
Content carried forward from XinFin’s public website and linked primary sources. Historical material is identified where applicable.
Source record Editorial methodology