BIS Digital Cash Prototype Falls Short of Production Ready

A new technical prototype for central bank digital currency designed to mimic the anonymity of physical cash cannot yet be deployed in real-world financial systems, according to findings released Tuesday by the Bank for International Settlements.

The Basel-based institution published the results of Project Aurum Phase 2, an initiative aimed at engineering a privacy-preserving architecture for digital money. While researchers demonstrated that their codebase could achieve what they termed “cash-like privacy,” the underlying technology stack remains unfit for production environments.

Project Aurum attempts to navigate one of the most contentious debates in modern monetary policy: how to digitize sovereign currency without creating an infrastructure for mass financial surveillance. The prototype employs a balanced architectural approach, rejecting both absolute transaction anonymity and total transparency in favor of a tiered privacy model.

Security testing revealed specific vulnerabilities within this model. If a participating commercial bank suffers a data breach, customer information held by that specific institution could be exposed. However, the BIS assessment found that such a compromise would not cascade across the network to reveal the identities of customers transacting through other banks. Similarly, breaching a validator node — the infrastructure responsible for confirming transactions — proved insufficient on its own to unmask end users.

These threat models address longstanding criticisms from privacy advocates and technologists who argue that CBDCs inherently centralize financial control. Unlike decentralized cryptocurrencies such as Bitcoin or Monero, which operate on public or cryptographically obfuscated ledgers independent of state authority, a CBDC is issued and ultimately governed by a central bank. This structural difference means the issuing authority theoretically retains the power to monitor, restrict, or reverse transactions.

Those theoretical concerns materialized into public backlash in 2023 when Brazil’s central bank published the source code for its Drex pilot program. Independent developers quickly identified embedded functions that would allow authorities to freeze user wallets or directly reduce account balances without traditional judicial intermediation. The discovery intensified global skepticism regarding government-issued digital tokens.

The political response has been particularly sharp in the United States. President Donald Trump signed an executive order in January barring federal agencies from advancing CBDC development, framing the prohibition as a defense of both financial stability and individual privacy. Republican lawmakers have since pushed legislative efforts to make that ban permanent ahead of upcoming House votes, effectively walling off the U.S. from the experimental frameworks being tested by institutions like the BIS.

Despite the political headwinds in Washington, more than 130 countries representing over 98% of global GDP continue exploring some form of digital fiat currency, according to tracking data maintained by the Atlantic Council. Nations including China, India, and members of the Eurozone are running active pilots or advanced research programs, though none have deployed a retail CBDC with the cryptographic privacy guarantees outlined in the Aurum framework.

The BIS has not announced a timeline for advancing Project Aurum beyond its current prototype phase or indicated whether the Phase 2 codebase will be integrated into future iterations of the project.