Analyst Dojo
Lesson 1 of 4 6–9% of the exam

Distributed ledgers and blockchain: how digital assets are recorded

A distributed ledger is a database copied across many participants, updated only when the network agrees by consensus and protected by cryptography. A blockchain is a ledger built from linked blocks. Networks agree by proof of work or proof of stake and may be open (permissionless) or restricted (permissioned).

8 min cram, 30 min full read. Based on the 2027 CFA® Program Level I curriculum, Alternative Investments, Learning Module 7. Also part of the 2026 curriculum, so it applies to the November 2026 exam too.

Tailor this to you: take the self-assessment

Before this: Alternative Investment Features, Methods and Structures

On the exam

  • Describe financial applications of distributed ledger technology

Describe the financial applications of distributed ledger technology. Expect: proof of work versus proof of stake; permissioned versus permissionless networks; matching a type of digital asset to its description: security, utility and governance tokens, non-fungible tokens (NFTs) and central bank digital currencies (CBDCs).

How deeply to learn each part
Know the idea
Understand it in general. It frames other topics, but you will not calculate with it.
Use it
Understand it well enough to solve a question with it. Recognize when it applies.
Memorize
Learn it by heart. The exam will not give it to you.

You know this one. The full lesson is folded away. The takeaways, formulas and checkpoint below are your quick refresher, and the checkpoint is a fair test of whether you still do.

You tested strong here. The full lesson is folded away. The takeaways, formulas and checkpoint below are your quick refresher, and the checkpoint is a fair test of whether you still know it.

Cram mode: the one-screen version of this lesson. Switch to Full for the explanations, worked examples and interactives.

What is a distributed ledger?

A distributed ledger technology (DLT) network lets many participants keep the same record of who owns what, with no single keeper. A distributed ledger is the shared database at its heart: entries are recorded, stored and spread across the network so that every participant holds a matching, verified copy of all current and past transactions.

Three elements make up a DLT network: the digital ledger itself, a consensus mechanism and the network of participants (called nodes). Consensus has two steps. The network first validates a transaction, then agrees to update the ledger. Once agreed, a record is practically immutable (unchangeable), yet participants can see it in near real time.

Cryptography is the algorithmic scrambling of data so that it is useless to anyone not authorized to read it. DLT uses it to prove who the participants are and to protect the data, which gives the network its security and integrity.

Smart contracts are programs stored on the ledger that carry out themselves when pre-agreed conditions are met. Examples are paying a contingent claim on a derivative automatically, or moving collateral the instant a party defaults.

Potential benefits are greater accuracy, transparency and security of records, faster transfer of ownership and peer-to-peer dealing. Drawbacks: the technology is not fully secure, privacy and data protection can be breached, and the computing behind it can consume enormous amounts of energy.

How does a blockchain add a transaction?

A blockchain is a distributed ledger in which entries are recorded in sequence inside blocks, and the blocks are linked (“chained”) together and secured with cryptography. Each block holds a group of transactions plus a hash , a secure fingerprint-like link to the block before it. Because every block carries the previous block’s hash, altering an old block breaks the links after it.

  1. A transaction takes place between a buyer and a seller.
  2. A block with the transaction details is created and broadcast to the network’s nodes.
  3. The nodes validate the transaction and its parties.
  4. The verified transaction is combined with others into a new block of a predetermined size.
  5. The new block is linked to the previous blocks by a cryptographic process.
  6. The transaction is complete and the ledger is updated.

The network: everyone holds the same record

New transaction A pays B 2 coins Consensus most agree ① broadcast ② ③ ④ the new entry, added to every copy

The chain: each block locks in the one before

As recorded Block 1 prev 0000 own 4c9e Block 2 prev 4c9e own 81d2 Block 3 prev 81d2 own e07b each block stores the hash of the one before it ⑤ If someone edits block 1 Block 1 edited prev 0000 own 9b5f Block 2 prev 4c9e ✗ own d316 Block 3 prev 81d2 ✗ own e07b

Two ways to reach consensus

⑥ Proof of work miners solve costly puzzles Energy use Attack needs most of the computing power Proof of stake validators pledge their own assets Energy use Attack needs most of the staked assets
  1. ① Broadcast. A new transaction is sent to every node, not to one central bookkeeper.
  2. ② Validate. Each node checks the transaction, for example that A really holds the coins.
  3. ③ Agree. The consensus mechanism decides when enough of the network agrees to update the ledger.
  4. ④ Update every copy. The entry is added to all copies at once, so every participant sees the same record in near real time.
  5. ⑤ History is locked. A block's hash depends on its contents. Edit block 1 and its hash changes, so block 2 no longer points to it, and so on down the chain. To make the edit stick, an attacker must redo every later block and win over most of the network.
  6. ⑥ Work or stake. Proof of work relies on miners and uses a lot of energy; proof of stake relies on validators who put up their own assets and uses far less. Either way, the network pays the winning validator in new coins or tokens.
Everyone holds the same record, and changing history means outvoting most of the network.
Read the diagram as text

The network. Eight nodes sit in a ring and each holds an identical copy of the ledger. A new transaction arrives at one node. Step 1: it is broadcast around the ring to every node. Step 2: each node checks that it is valid. Step 3: the nodes reach consensus at the center, meaning most of the network agrees. Step 4: the transaction is added to every copy of the ledger at once.

The chain. Three blocks are linked in order. Each block holds its transactions, the hash of the previous block and its own hash: block 1 has previous hash 0000 and own hash 4c9e; block 2 has previous hash 4c9e and own hash 81d2; block 3 has previous hash 81d2 and own hash e07b. Step 5: if someone edits a transaction in block 1, its own hash changes to 9b5f, which no longer matches the 4c9e stored in block 2. Re-sealing block 2 changes its hash to d316, which no longer matches the 81d2 stored in block 3. Every later block breaks, so the edit is obvious to the network.

Two consensus mechanisms. Step 6: proof of work, shown with a pickaxe: miners solve costly cryptographic puzzles; energy use is high; an attacker needs most of the network's computing power. Proof of stake, shown with a stack of coins: validators pledge their own assets; energy use is low; an attacker needs most of the staked assets.

Hashes are shortened, made-up labels for illustration.

How do networks agree: proof of work or proof of stake?

Memorize

Blockchains let parties who do not trust each other work from the same record. The rules that decide which block may join the chain are the consensus protocol. Two matter for the exam.

How a network agrees on the ledger
Consensus protocolsthe rules for adding a block; both reward the validator with new digital assets
  • Proof of work (PoW) Memorize the most widely used protocol
    • Validators are miners solve costly puzzles with computing power and energy
    • Attack threshold control most of the network's computing power (51%)
  • Proof of stake (PoS) Memorize lower energy use
    • Validators pledge (stake) assets they propose blocks; other validators attest
    • Attack threshold control most of the staked assets

Under proof of work , the right to add the next block is decided by a computationally costly lottery. The miners on the network use powerful computers and a great deal of energy to solve a cryptographic puzzle, and the winner locks the block into the chain and earns new cryptocurrency. The cost makes it very hard and expensive to rewrite history. Participants treat the longest valid chain as the true record, so an attacker would have to out-compute the rest of the network, which in theory takes most of its computing power. That is the 51% attack threshold, and it marks the limit of the protocol’s security. Proof of work has been the most widely used protocol.

Under proof of stake , selected participants called validators pledge (stake) capital to vouch for a block. A validator proposes a block, a majority of the other validators who have also staked assets must attest that it is valid, and validators are rewarded for both proposing and attesting. Security rests on honest validators controlling most of the staked assets. It uses far less energy than mining.

Under both protocols, validation is rewarded with new digital assets, whether a cryptocurrency or a token.

Exam tip Puzzles and computing power point to proof of work; pledged assets point to proof of stake. Watch the wording: the rewarded validation is loosely called “mining” under both, so a question can say a miner earns new coins whatever the protocol.

Who may join: permissionless or permissioned?

Memorize

Permissionless and permissioned networks
Distributed ledger networkswho may take part decides speed, cost and governance
  • Permissionless (open) Memorize anyone can join and perform every function; Bitcoin is the best-known example
    • Decentralized governance by the members; no trust needed between parties
    • Slower and costlier many members must reach consensus
  • Permissioned (restricted) Memorize membership is limited, with varied rights
    • Partly decentralized governed by a central organization
    • Faster and cheaper few members validate each transaction

A permissionless network is open to any user, every user can see every transaction, and any participant can perform every network function. No central authority confirms transactions; the consensus mechanism does. There is no single point of failure because every node stores a copy. Trust between the transacting parties is not required. Bitcoin, created in 2009, is the best-known example, and most cryptocurrencies use permissionless networks.

A permissioned network limits membership, often giving members different rights (a regulator might be allowed to view but not to validate, for instance). Because few members validate each transaction, it is faster and cheaper, but it is only partly decentralized and a central organization decides the governance.

PermissionlessPermissioned
AccessAnyoneRestricted members, varied rights
SpeedSlowerFaster
CostCostlierCheaper
DecentralizationFullPartial
GovernanceBy membersBy a central organization

What kinds of digital assets live on a ledger?

Digital assets are assets that exist only as electronic records, with rights to use, buy or sell them. They can stand for securities, currencies, property or commodities. Cryptocurrencies have their own blockchains; tokens are built on an existing blockchain. When a question asks you to classify, a CBDC goes with the cryptocurrencies (even though a central bank issues it), and initial coin offering (ICO) tokens, NFTs and utility tokens go with the tokens.

Types of digital assets
Digital assetsexist only as electronic records with rights to use, buy or sell
  • Cryptocurrencies Memorize digital currencies with their own blockchains
    • Bitcoin the first and largest
    • Altcoins every other privately issued cryptocurrency
      • Smart coinsprogrammable, such as Ether
      • Stablecoinsaim to hold a steady value
      • Meme coinspopularity, not utility
    • Central bank digital currencies (CBDCs) Use it a central bank's tokenized fiat currency; not privately issued
  • Tokens Memorize built on an existing blockchain
    • Non-fungible token (NFT) Memorize unique, certifies a specific item
    • Security token Memorize digitized ownership of a security; may pay dividends
    • Utility token Memorize pays for services and fees on a network
    • Governance token Memorize votes on how a network is run
    • ICO tokens Use it sold in an unregulated offering to raise money

Cryptocurrencies are privately issued units for transferring or storing value, with near-real-time transactions and no intermediary. Central banks are studying their own versions: a central bank digital currency (CBDC) is typically a tokenized version of the central bank’s fiat currency, in effect a digital bank note or coin.

Tokenization is representing ownership rights to a physical asset (property, luxury goods, commodities) on a ledger. A single digital record of ownership, history and authenticity simplifies verification and transfer.

  • A non-fungible token (NFT) links a digital item to a certificate of authenticity. Unlike a cryptocurrency unit, each NFT and the item it certifies are unique. The most common use is digital art.
  • A security token digitizes ownership rights in a security. Holding it on a ledger can speed up post-trade processing, settlement and custody, and a single ledger removes the need to reconcile records. It may pay dividends.
  • A utility token pays for services and fees inside a network. It compensates activity on the network and does not pay dividends.
  • A governance token is a vote on how a network is run, important on permissionless networks where no central body decides. Owners can vote on a fix after a technical problem or on major changes.

An initial coin offering (ICO) is an unregulated sale of newly created tokens for money or another cryptocurrency, typically tokens that can be used for products or services the issuer is developing. Compared with an initial public offering (IPO) it can be cheaper and faster, but most ICOs carry no voting rights, regulation is only under consideration in several jurisdictions, and there have been many cases of investor loss through fraud.

Go deeper Why the longest chain is treated as the truth

Several miners may find a valid block at about the same time, so the network can briefly hold competing versions of the latest block. Nodes accept whichever chain has the most accumulated work behind it, and honest miners keep building on it, so the competing branch dies out. A cheat who wanted an altered history to win would need to add blocks faster than all the honest miners combined, which is the 51% attack. Even a briefly successful attacker can only change as much history as the period of control allows.

Go deeper Clearing and settlement as a DLT use case

Today, after a trade, buyer, seller, broker, custodian and clearing agent each keep their own records and reconcile them over a day or more. If ownership is a security token on a shared ledger, there is one golden record that everyone sees, so reconciliation falls away and settlement can approach real time. That is why the industry’s interest in DLT centers on post-trade processing and compliance, with smart contracts automating the steps and identity verification built into the network.

Memorize this

MemorizeProof of work versus proof of stake

Proof of workProof of stake
Who validatesMiners solve costly puzzlesValidators pledge assets (stake)
CostHeavy computing and energyLower energy; capital at risk
Attack needsMost of the computing power (51%)Most of the staked assets
RewardNew coins or tokensNew coins or tokens for proposing and attesting

Memory hook Work = machines and electricity. Stake = skin in the game, with your own assets.

Know it cold Puzzles and computing power = proof of work; pledged assets = proof of stake. Under both, the rewarded validation is loosely called mining and pays new digital assets.

MemorizePermissionless versus permissioned

PermissionlessPermissioned
AccessAnyoneRestricted members, varied rights
Speed and costSlower, costlierFaster, cheaper
DecentralizationFullPartial
GovernanceBy the membersBy a central organization
Trust between partiesNot neededTrust in the operator

Memory hook Open means decentralized, and decentralized means slow. Restricted means fast, and someone is in charge.

Know it cold A permissioned network is less decentralized, never more.

MemorizeToken types

TokenWhat it does
Security tokenDigitized ownership of a security; may pay dividends
Utility tokenPays for services and fees on a network; no dividends
Governance tokenVotes on how a network is run
NFTUnique token that certifies a specific item
CBDCCentral bank's tokenized fiat currency
ICOUnregulated token sale to raise money; usually no votes

Memory hook Security = shares, Utility = services, Governance = government (votes), NFT = one of a kind.

Know it cold Cryptocurrencies are fungible. A CBDC is grouped with cryptocurrencies but issued by a central bank; ICO tokens are grouped with tokens.

How a network agrees on the ledger
Consensus protocolsthe rules for adding a block; both reward the validator with new digital assets
  • Proof of work (PoW) Memorize the most widely used protocol
    • Validators are miners solve costly puzzles with computing power and energy
    • Attack threshold control most of the network's computing power (51%)
  • Proof of stake (PoS) Memorize lower energy use
    • Validators pledge (stake) assets they propose blocks; other validators attest
    • Attack threshold control most of the staked assets
Permissionless and permissioned networks
Distributed ledger networkswho may take part decides speed, cost and governance
  • Permissionless (open) Memorize anyone can join and perform every function; Bitcoin is the best-known example
    • Decentralized governance by the members; no trust needed between parties
    • Slower and costlier many members must reach consensus
  • Permissioned (restricted) Memorize membership is limited, with varied rights
    • Partly decentralized governed by a central organization
    • Faster and cheaper few members validate each transaction
Types of digital assets
Digital assetsexist only as electronic records with rights to use, buy or sell
  • Cryptocurrencies Memorize digital currencies with their own blockchains
    • Bitcoin the first and largest
    • Altcoins every other privately issued cryptocurrency
      • Smart coinsprogrammable, such as Ether
      • Stablecoinsaim to hold a steady value
      • Meme coinspopularity, not utility
    • Central bank digital currencies (CBDCs) Use it a central bank's tokenized fiat currency; not privately issued
  • Tokens Memorize built on an existing blockchain
    • Non-fungible token (NFT) Memorize unique, certifies a specific item
    • Security token Memorize digitized ownership of a security; may pay dividends
    • Utility token Memorize pays for services and fees on a network
    • Governance token Memorize votes on how a network is run
    • ICO tokens Use it sold in an unregulated offering to raise money

How it is asked

  1. Match the token to its description

    A token gives holders a vote on changes to a network's rules. Which type?

    Governance token. Traps: utility token (pays for services), security token (an ownership claim that may pay dividends).

  2. Proof of work or proof of stake

    Participants pledge their own assets to validate new blocks. Which mechanism?

    Proof of stake. Costly puzzles and the 51% computing-power threshold belong to proof of work.

  3. Compare the two network types

    Compared with a permissionless network, a permissioned network is most likely...

    Faster and cheaper, but more centrally governed. Trap: "more decentralized".

  4. ICO versus IPO

    How does an ICO differ from an IPO?

    Unregulated, cheaper and faster; usually no voting rights; fraud is common. Trap: calling an ICO a regulated offering.

Exam traps

  • Saying a permissioned network is more decentralized. It has limited membership and central governance, so it is less decentralized.
  • Mixing up the mechanisms. Solving costly puzzles with computing power is proof of work; pledging assets is proof of stake. Under both, validation is rewarded with new digital assets.
  • Misfiling a CBDC or an ICO. A CBDC is grouped with cryptocurrencies (though a central bank issues it); ICO tokens are grouped with tokens.
  • Calling an NFT fungible. Each NFT is unique.
  • Treating a utility token as a claim on dividends. Only a security token may pay dividends.
  • Treating an ICO as a regulated IPO. An ICO is an unregulated token sale.

Checkpoint

5 exam-style questions. About 90 seconds each.

  1. 1Which statement about proof of stake is most accurate?

  2. 2Compared with a permissionless blockchain, a permissioned blockchain is most likely:

  3. 3A token that gives holders voting rights over changes to a network's rules is a:

  4. 4An attacker who wants to rewrite history on a proof-of-work blockchain would most likely need to control:

  5. 5Compared with an initial public offering, an initial coin offering is most likely:

Key takeaways

  • Distributed ledger technology = a shared ledger + a consensus mechanism + a network of participants, secured by cryptography.
  • Proof of work: miners, heavy energy, a 51% computing-power attack. Proof of stake: validators who pledge assets.
  • Permissionless networks are open, decentralized, slower and costlier; permissioned networks are restricted, faster, cheaper and centrally governed.
  • Know the types: cryptocurrencies, CBDCs, and the four tokens (NFT, security, utility, governance); an ICO is an unregulated token sale.

All Alternative Investments formulas, every lesson

Practice exam-style questions on Digital Assets

Questions about this lesson?

Where this comes back

Questions candidates ask

What is distributed ledger technology?

A database shared across a network of participants, each holding a matching copy. New entries are added only after the network agrees through a consensus mechanism, and cryptography secures the data. A blockchain is the best-known form: transactions grouped into linked blocks.

What is the difference between proof of work and proof of stake?

Under proof of work, miners spend computing power and energy to solve puzzles and earn new coins; attacking needs most of the computing power. Under proof of stake, validators pledge assets to vouch for blocks; attacking needs most of the staked assets. Stake uses far less energy.

What is the difference between permissioned and permissionless blockchains?

Permissionless networks are open to anyone, fully decentralized and run by their members, but slower and costlier. Permissioned networks restrict membership, are faster and cheaper, and are governed by a central organization, so they are only partly decentralized.

Spotted an error? Tell us and we will fix it.

  1. Distributed ledgers and blockchain: how digital assets are recorded
  2. How digital assets differ from stocks, bonds and currencies
  3. Ways to invest in digital assets: direct and indirect
  4. Digital assets: risk, return and diversification

Ask Sensei Listen instead

Questions on Distributed ledgers and blockchain: how digital assets are recorded

Learn with Sensei, out loud The voice tutor, in early access

Sensei teaches the lesson aloud and stops when you interrupt: "wait, why is the geometric mean lower?" It answers with the lesson's own example, then quizzes you by voice. Every account can try Sensei on one module, with one voice question.

USD 149 a month founding price (regular USD 199), kept for as long as you stay subscribed. Everything in Plus included.

In active development and improving every day. Send feedback · Plans and pricing

Analyst Dojo Plus

Your free review list holds 10 items.

Plus keeps everything you save, for USD 19 a month. To make room on the free plan, remove something from your review list.

See Plus

Lessons, checkpoints and the lesson questions in practice stay free. Compare plans