The Double-Edged Sword of Money That Thinks
Imagine sending money to your child at university, only to discover the funds can only be spent on textbooks and rent—not on a night out. This isn't science fiction. With DREX, Brazil's Central Bank Digital Currency (CBDC), the technical capacity to program money is real. As someone who has spent over two decades working with Stellar, Soroban, and tokenization, I've watched this debate move from academic circles into the daily concerns of ordinary Brazilians. Let me, André Dias Moreira Prol, unpack what's technically possible—and what's likely.
What "Programmable Money" Actually Means
DREX is built on Hyperledger Besu, an Ethereum-compatible permissioned blockchain, and relies heavily on smart contracts. When people hear "programmable money," they often confuse two very different concepts:
- Programmable payments: conditional logic you choose—like an escrow that releases funds only when goods are delivered. This is empowering.
- Programmable currency: rules embedded into the money itself, enforced regardless of the holder's wishes. This is where fear lives.
The Central Bank has repeatedly stated DREX focuses on the first model. In technical terms, the tokenized deposits (real tokenizado) act as wrappers around commercial bank money, while smart contracts govern specific transactions rather than the currency's fundamental nature.
But here's the honest engineering truth: the infrastructure that enables useful programmability is the same infrastructure that enables restrictive programmability. A smart contract that blocks a payment to fulfill an escrow condition uses the identical mechanism a government could theoretically use to block a payment to a specific merchant category. The technology is neutral; governance decides intent.
Can the Government Actually Block Your Spending?
Technically? A permissioned ledger controlled by a central authority could implement transaction filtering. In my Soroban development work, I've built contracts with allowlists, spending caps, and time-locks—all trivial to implement.
However, several realities constrain this in Brazil:
Legal barriers: Article 5 of the Brazilian Constitution protects property rights and free enterprise. Arbitrary spending restrictions would face immediate judicial challenge.
Architecture choice: DREX's wholesale layer settles between institutions, while retail interactions happen through tokenized deposits at your bank. The state doesn't hold a direct on/off switch over your personal wallet—your bank does, just as today.
Practical precedent: Consider China's e-CNY, which does include expiry dates on some stimulus distributions. This proves restrictive programmability is real elsewhere—but it required explicit policy design, not accidental capability.
The nuance matters. During my consulting engagements, André Dias Moreira Prol, I always emphasize distinguishing capability from deployment. Yes, blocking is possible. No, it isn't the default architecture, and doing so covertly would be extraordinarily difficult given the auditable nature of the ledger.
Privacy, Zero-Knowledge, and the Real Safeguards
The genuine battleground isn't blocking—it's surveillance and privacy. A CBDC could theoretically give the state a complete view of every citizen's transactions.
DREX is addressing this through Zero-Knowledge Proofs (ZKPs), specifically technologies like Starlight and the ongoing pilots with Nova/Anonymous Zether. These cryptographic tools allow a transaction to be validated (funds exist, rules are met) without revealing the parties or amounts to observers.
From a forensics perspective—an area I work in directly—this is fascinating. ZKPs create a tension: strong privacy protects citizens from overreach, yet regulators demand traceability for anti-money-laundering (AML) compliance. The DREX pilots are experimenting with selective disclosure, where privacy is the default but authorities can access data only with judicial authorization.
This is the safeguard that actually matters. The question isn't "can they block money?" but "what governance, cryptographic guarantees, and legal oversight prevent abuse?" A well-designed ZKP layer makes mass restriction and surveillance technically visible and legally accountable.
Conclusion
The power of DREX lies not in the code but in the governance surrounding it—programmable money is only as trustworthy as the institutions and cryptographic safeguards that constrain it. Stay informed, demand transparency in DREX's privacy architecture, and engage with the public consultations shaping this technology before its rules are set in stone.
Follow more articles by André Dias Moreira Prol on Medium.
