Skip to main content

Cboe Global Markets and S&P Dow Jones Indices announced a 25-year extension of their exclusive licensing agreement this morning, 29 September 2026, running through 2051. Cboe keeps the exclusive right to list options on the S&P 500. Buried in the second paragraph of the release, in the flat register companies reserve for things they have not decided yet, is this: the two “may also collaborate to pursue innovation beyond traditional index derivatives, including new products like tokenized options contracts.” No product, no timeline, no mechanism, and the rest of the release is about liquidity records. But it attaches the world’s most heavily traded derivative to the word tokenized, spoken by the two parties who would have to build it, and it is worth stopping on before anyone ships anything.

TL;DR

  • Cboe and S&P DJI extended exclusive S&P 500 options licensing to 2051 and floated tokenised options contracts, with no product, timeline or details announced.
  • A tokenised SPX option would be a self-executing contract settling on a number that is private property, maintained by a confidential committee of one company’s employees.
  • The release’s own small print says the index is “proprietary”, that S&P DJI “does not have any liability” for products built on it, and that Cboe did not calculate it and is not liable for errors in it either.
  • This is not the oracle problem. An oracle can be wrong about a price because a price has a referent. An index has no referent outside its author, so verification stops at a licence agreement rather than at reality.
  • Every casino paytable is the same structure: the draw can be provably fair while the schedule it pays against is an authored document that was never part of the proof. A VRF draw produces its own number instead of referencing someone else’s, which removes a licensor, not a supplier.

The half nobody asks about

Tokenise an option and you get a genuinely better instrument: atomic settlement, logic anyone can read, composability with the rest of the chain. Nasdaq is working with Kraken’s parent on tokenised equities with voting attached, NYSE is building a 24/7 blockchain venue, and DTCC launches a tokenisation service next month. The plumbing is arriving.

Now ask what an SPX option actually settles against. It settles against a level of the S&P 500 Index. And the S&P 500 Index is not a fact about the American economy that a sufficiently careful observer could independently establish. It is a product. It is manufactured by a company, from rules that company wrote, applied by a committee that company staffs, and it is licensed for use by other companies under contracts with expiry dates. Catherine Clay, the CEO of S&P DJI, called it “the definitive barometer of U.S. equity market performance” in the release. A barometer measures something that exists whether or not the barometer does. The S&P 500 does not.

So the unasked half here is not whether the contract executes correctly. It will. The unasked half is that you can make the settlement mechanism trustless, permissionless, immutable and auditable, and the input it settles on remains someone’s intellectual property, revised in confidence, licensed for a term. Decentralising the venue does not decentralise the number.

Read the small print, it is the whole story

The most honest part of any press release is the legal block at the bottom, because nobody writes it to persuade you. Cboe’s says, verbatim:

“The S&P 500 Index is proprietary to S&P Dow Jones Indices LLC or its affiliates. S&P®, S&P 500®, The 500®, 500™, US 500™ and SPX® are trademarks of Standard & Poor’s Financial Services, LLC or its affiliates … all of which have been licensed for use by Cboe Exchange, Inc.”

Proprietary. Licensed for use. Then, two sentences later:

“Cboe Exchange’s options on the S&P 500 Index are not sponsored, issued or endorsed by S&P Dow Jones Indices and S&P Dow Jones Indices does not have any liability with respect thereto.”

And then Cboe disclaims the number from its own side, saying it and its affiliates “have not calculated, composed or determined the constituents or weightings of the securities that comprise the third-party indices referenced in this press release and shall not in any way be liable for any inaccuracies or errors in any of the indices referenced in this press release.”

Read those together. The index provider accepts no liability for the contracts written on its number; the exchange accepts no liability for the number those contracts settle on. Nothing improper is happening, every index licence on earth reads roughly like this, but it means the settlement input for 970.6 million contracts in 2025 alone sits in a gap both counterparties have contractually stepped out of. Into that gap, the two of them now propose to put a self-executing token.

One more line from the same document, from Cboe’s list of risks that could cause results to differ from expectations: “the loss of our right to exclusively list and trade certain index options and futures products”. The right to run the largest index options market in the world is a term in a contract, and Cboe lists its expiry as a business risk. That is exactly what today’s announcement is for. The headline is not that a partnership was renewed. The headline is that a licence had a date on it, and the date has been moved to 2051.

The committee meets regularly and tells you nothing

The S&P 500 is not a rules-only ranking that anyone with a data feed could reproduce. Its maintenance is discretionary, and the discretion is documented. A Barclays prospectus filed with the SEC in May 2025, describing the index governance S&P DJI applies to its US indices, puts it like this:

“An S&P Dow Jones Indices Index Committee (the ‘Index Committee’) maintains the Indices. All members of the Index Committee are full-time professional members of S&P Dow Jones Indices staff. The Index Committee meets regularly. At each meeting, the Index Committee may review any significant market events. In addition, the Index Committee may revise Index policy for timing of rebalancings or other matters.”

Then the sentence that should be read by everyone who has ever said the word trustless in a pitch deck:

“The index sponsor considers information about changes to its indices and related matters to be potentially market moving and material. Therefore, all Index Committee discussions are confidential.”

That is the correct policy. Deliberations about index inclusion genuinely are market moving, and publishing them live would be worse for everyone. I am not alleging misconduct, there is nothing to allege, I am pointing at the shape. The same filing notes certain deletions from the S&P 500 are “at the discretion of S&P Dow Jones’s U.S. index committee”, so a company can stay in after it stops meeting the criteria that would get it added. Discretion, by definition, is the part that is not in the rules.

So picture the product. A tokenised SPX option is a contract whose code you can read, on a chain whose history you can verify, settling against a number produced by a body whose membership is one firm’s payroll and whose discussions are confidential by design. Every layer of the stack is auditable except the one the whole thing is about. My arithmetic, not theirs: at 2025’s volume held flat, the 25 years just signed cover roughly 24.3 billion contracts of settlement resting on a meeting you will never see minutes from.

One more line from the same filing: “In the event there is a disruption in intraday calculations, S&P Dow Jones Indices will not recalculate the impacted period.” If the index goes wrong during the day, the wrong values stand. That is defensible, because restating a benchmark millions of contracts have already settled against would cause more harm than the original error. But a blockchain also does not go back and fix a bad period, and we sell that as a virtue. The difference, and it is the whole difference, is that S&P DJI will not and a chain cannot: one is a policy an organisation could reverse next quarter, the other is a property of a system with no key to reverse it with, and on the day it matters they look identical. We made a version of this point when CCIP 2.0 made the second verifier optional. Tokenising an option inherits the policy and dresses it in the property.

This is not the oracle problem

The obvious objection is that this is the oracle problem with a suit on. When Coinbase put tokenised Apple on Base priced by Chainlink feeds, we argued that a signature proves provenance and can never prove correspondence: the feed tells you these nodes reported this number, not that the number matched the world.

An index breaks that argument in a way I did not expect and think is genuinely new. A price feed can be wrong, because there is a real trade at a real venue that the number either matches or does not. An index cannot be wrong in that sense, because there is nothing outside S&P DJI’s computation for it to fail to match. If the committee changes the constituent set on Monday, the index did not become inaccurate. It became different, and the new value is fully correct by construction. The referent and the report are the same object.

Which means the question you can ask of a price, “is this true”, has no purchase here. The only question available is “who is allowed to say”. That is a question about ownership and contract, not about measurement, and no amount of cryptography touches it. The proof does not stop at the oracle’s doorstep this time. It stops at a licence agreement.

For what it is worth, S&P Global now appears in this series twice in twelve days: once as the buyer of the auditors, and once as the owner of the number. Not a conspiracy, just a reminder of how few independent parties there are once you start counting.

What this looks like in a casino

Here is the part that actually concerns us, and I have not seen it put this way before: a paytable is an index, and the studio that sets it is an index committee.

Think about what a provable fairness page proves. It proves the draw: server seed, client seed, nonce, hash chain, verify the roll was not tampered with after you bet. Genuinely good, and enormously better than nothing. Now list what it does not cover. Not the payout schedule. Not which outcomes count as wins. Not the contribution weighting that decides whether a stake moves a bonus requirement by its full value, a fraction of it, or nothing. Not the excluded games list. Every one of those is an authored document held by a party you never deal with, revisable without the game looking any different, and none of it is inside the proof.

The structure is identical to what Cboe and S&P just signed. The venue licences a brand, and the number that determines what you get paid is authored somewhere else, by people whose deliberations you will not see, under terms that are commercial rather than cryptographic. A verifiably fair roll against an unverifiable paytable is a very precise proof of the wrong half.

What Satoshie actually claims

Our claim here is narrow and structural rather than clever. A Satoshie draw does not reference a number. It produces one.

Chainlink’s documentation describes the mechanism plainly: “For each request, Chainlink VRF generates one or more random values and cryptographic proof of how those values were determined. The proof is published and verified onchain before any consuming applications can use it.” There is no licensor of that value. Nobody owns the randomness, nobody can withdraw the right to use it, and there is no committee that meets in confidence to decide what it should have been. The number is not a claim about anything outside the chain, which is precisely why nobody has to be trusted to author it.

The second half matters as much. The prize, the entry price, the number of entries and the draw conditions are in the contract before the draw runs. Our paytable is not a config row in an admin panel that a support agent could change between your entry and the result. It is the same object the draw executes against, published in advance, on the same chain, with no separate document and no separate owner. That is not a claim about being more honest than anyone, it is a claim about there being fewer places to put a decision.

Three things this does not fix

First, and this one is uncomfortable: our independence from all of the above is a property of what we sell, not a virtue we earned. Games that settle on randomness need no external referent. The moment anyone, us included, ships a product settling against a price, an index or a sports result, we are renting someone’s number on exactly these terms. The right response to “we have no index risk” is “because we have no index”, not applause.

Second, we removed a licensor, not a supplier. We do not author VRF, we consume it, and as noted when we wrote about the security margin nobody computes, we have no crypto agility if that scheme ever needs replacing. The meaningful difference is not that we have no counterparty. It is that this counterparty’s output carries a proof that verifies on-chain, and a licence agreement does not.

Third, somebody still chooses. Satoshie sets the prize, the entry price and the timing. Those are discretionary decisions made by us, not discovered in a market, and we would be lying to pretend otherwise. What we do is fix them in a contract before anyone can enter, so the discretion is exercised in public and in advance rather than in private and after. Choosing and publishing is not the same as not choosing. It is just the only version of choosing that can be checked.

The number you settle on has an author

Cboe and S&P DJI have done nothing wrong. They have renewed a 43-year relationship that works, and the SPX complex is one of the genuinely great pieces of market infrastructure. The release goes out without disclosing financial terms, which is unremarkable and also quietly instructive: the price of the number that 3.9 million contracts a day settle against is a private matter between two companies.

The thing to watch is what happens when that arrangement meets a token. The industry’s habit is to call anything settled by a smart contract trustless and stop the audit at the edge of the code. The code will be fine. The chain will be fine. Verification will run cleanly all the way down to a number decided in a confidential meeting by employees of a company that disclaims liability for the products built on it, under a licence that expires in twenty-five years.

Ask of any on-chain product, ours included: what does this settle against, and who wrote it? If the answer is a dataset somebody owns, the blockchain underneath is settling faithfully on a number it has no opinion about. That is not a scandal. It is just the half of the sentence that the word tokenized keeps leaving off.

Sources: Cboe and S&P Dow Jones Indices press release, 29 September 2026; Barclays Bank PLC Form 424B2 filed with the SEC, 16 May 2025, for the S&P DJI index governance language; Chainlink VRF documentation.

📷 Photo by 2H Media on Unsplash

Valentina Ní Críonna

Author Valentina Ní Críonna

More posts by Valentina Ní Críonna