Digital AssetsExplainer

What is distributed ledger technology, and how does a blockchain work?

Banks have always kept ledgers. A distributed ledger is a ledger that many computers keep together and agree on. Here is how that works, why finance is interested, and what the technology cannot do.

6 sources ↓
Close-up of a steel chain against a blue background
Photo: “Metal chain (Unsplash)” by JJ Ying jjying, CC0 1.0 (edited: cropped, colour-graded)

Quick answer

Distributed ledger technology (DLT) lets a group of computers, called nodes, keep the same record of transactions and agree on updates using a consensus mechanism⁠[1]. A blockchain is one type of distributed ledger: blocks of transactions are chained together with cryptographic hashes, which makes tampering easy to detect⁠[3].

Key points

  • A ledger is a record of who owns what and who paid whom; a distributed ledger is shared and synchronised across many computers.
  • A consensus mechanism is the set of rules the computers use to agree that a transaction is valid.
  • A blockchain links each block to the previous one with a cryptographic hash, so changing old data is easy to spot.
  • Permissionless ledgers let anyone take part; permissioned ledgers only let approved participants publish records.
  • DLT is not a cure-all: it cannot check whether real-world data is true, and a lost private key can mean lost assets.
On this page
  1. What is a ledger, and what makes one 'distributed'?
  2. How does a blockchain work, step by step?
  3. What is a hash, and why does it make tampering obvious?
  4. How do the computers agree on what is true?
  5. What is the difference between permissionless and permissioned ledgers?
  6. How is DLT used in finance today?
  7. FAQ
  8. Sources

#What is a ledger, and what makes one 'distributed'?

A ledger is simply a record book: who owns what, and who paid whom. Your bank keeps a ledger of your account; a stock exchange's depository keeps a ledger of who owns which shares. Normally one organisation holds the master copy and everyone trusts it.

A distributed ledger is shared instead. The EU's crypto law defines it as an information repository that keeps records of transactions and that is shared across, and synchronised between, a set of network computers (called nodes) using a consensus mechanism⁠[1]. Distributed ledger technology (DLT) is the technology that makes such ledgers work⁠[1]. The Committee on Payments and Market Infrastructures at the BIS has published a framework for central banks to analyse how distributed ledgers might be used in payment, clearing and settlement⁠[2].

A traditional ledger vs a distributed ledger
FeatureTraditional ledgerDistributed ledger
Who keeps the recordOne central organisationMany nodes keep synchronised copies⁠[1]
How updates are agreedThe central organisation decidesA consensus mechanism among nodes⁠[1]
How tampering is spottedInternal controls and auditsCryptographic links between records⁠[3]
Who may write recordsOnly the ownerAnyone (permissionless) or approved parties (permissioned)⁠[3]

#How does a blockchain work, step by step?

A blockchain is the best-known kind of distributed ledger. The US National Institute of Standards and Technology (NIST) describes blockchains as tamper-evident and tamper-resistant digital ledgers implemented in a distributed fashion, usually without a central authority such as a bank, company or government⁠[3]. Each block has a header with information about the block and a body containing validated transactions, and every block header except the first contains a cryptographic link to the previous block's header⁠[3].

From a transaction to a confirmed block

  1. A user signs a transaction

    The user authorises it with a private key, a secret code only they should hold⁠[3].

  2. Nodes check it

    Computers in the network check the transaction is valid, for example that the sender has the asset.

  3. Transactions are grouped into a block

    Valid transactions are collected in the block's data section⁠[3].

  4. Consensus picks the next block

    The network's consensus rules decide whose block is accepted⁠[1].

  5. The block is chained

    Its header stores a hash of the previous block's header, linking the chain⁠[3].

#What is a hash, and why does it make tampering obvious?

A hash function turns any input into a short, fixed-length fingerprint called a digest. NIST explains that even the smallest change to the input, such as a single bit, produces a completely different digest, and names SHA-256, a hash with a 256-bit output, as one used in many blockchain implementations⁠[3]. Because each block stores the previous block's hash, changing an old transaction would change its block's hash and break every link after it.

Worked example

Worked example: one character, a totally different fingerprint

We ran two almost identical sentences through SHA-256 with Python's hashlib. Only the last character differs, yet the digests share nothing obvious. Digests shown in full, 64 hexadecimal characters each.

Input A
Alice pays Bob 10
SHA-256 of A
69ad18dfd1ac4b3d711b02ee62caa00a82f0f67cc11ebacdd0c0ede0d8b6eaed
Input B
Alice pays Bob 11
SHA-256 of B
83e970b5a467ce2dea0a573ee54380252a1d193b2625e2c29ad43ad6600990aa

#How do the computers agree on what is true?

That is the job of the consensus mechanism: the rules and procedures by which nodes agree that a transaction is validated⁠[1]. NIST describes two common families. In proof of work, a user publishes the next block by being the first to solve a computationally intensive puzzle. In proof of stake, the idea is that users with more value staked in the system are less likely to want to subvert it⁠[3]. Each has trade-offs: NIST notes, for example, that proof of work carries the potential for a '51% attack' by someone who obtains enough computing power⁠[3].

#What is the difference between permissionless and permissioned ledgers?

NIST draws the line by who may publish records. Permissionless networks are open to anyone publishing blocks without needing permission from any authority; permissioned networks require publishers to be authorised by some authority⁠[3]. Public cryptocurrencies use permissionless designs. Banks and central banks testing DLT usually choose permissioned ones, so they know who runs each node.

#How is DLT used in finance today?

The main uses are stablecoins, crypto-assets and tokenized real-world assets. Central banks are experimenting too. The BIS proposes a 'unified ledger', which may or may not use DLT, bringing tokenised central bank reserves, commercial bank money and financial assets together⁠[4]. Its Project Agorá, with eight central banks and over 40 financial institutions, is testing a shared programmable platform for wholesale cross-border payments⁠[5]. The Financial Stability Board notes that tokenisation based on DLT is still small, with very low adoption⁠[6].

Common beginner mistakes about DLT

  • Thinking 'on the blockchain' means 'true'

    The ledger records what was entered; it cannot check that a real-world asset exists or that the data is accurate.

  • Believing a blockchain can never be changed

    It is tamper-evident and tamper-resistant⁠[3], which is not the same as impossible to attack.

  • Forgetting about keys

    NIST notes that if a user loses a private key, any digital asset associated with it is lost⁠[3]. See crypto custody explained.

  • Treating every DLT as public crypto

    Many financial projects run permissioned ledgers with known, regulated participants.

The bottom line

Distributed ledger technology is a way for many computers to keep one shared record and agree on changes without a single owner. Hashing makes tampering obvious and consensus rules decide what gets added. It is a useful tool for some financial jobs, but it does not make data true, and it moves responsibility for keys onto whoever holds them.

Frequently asked questions

Is a blockchain the same as distributed ledger technology?

A blockchain is one kind of distributed ledger, in which blocks are linked by cryptographic hashes⁠[3].

Who controls a distributed ledger?

In permissionless networks anyone can publish blocks; in permissioned networks only authorised participants can⁠[3].

Does DLT need a cryptocurrency?

No. The BIS's Project Agorá, for example, tests tokenised commercial bank deposits together with tokenised central bank reserves on a shared programmable platform for wholesale payments⁠[5].

What happens if I lose my private key?

Any digital asset associated with that key is lost⁠[3], unless a custodian holds the keys for you.

Sources

  1. MiCA Article 3 — Definitions — ESMA Interactive Single Rulebook (Regulation (EU) 2023/1114), 2023 Primary
  2. Distributed ledger technology in payment, clearing and settlement: an analytical framework — Committee on Payments and Market Infrastructures (BIS), 2017 Primary
  3. NISTIR 8202: Blockchain Technology Overview — National Institute of Standards and Technology, 2018 Primary
  4. Annual Economic Report 2025, Chapter III: The next-generation monetary and financial system — Bank for International Settlements, 2025 Primary
  5. Project Agorá — BIS Innovation Hub, 2026 Primary
  6. The Financial Stability Implications of Tokenisation — Financial Stability Board, 2024 Primary