RWA Tokenization: How It Works and Where It Breaks

By the Guardian team Updated November 2026 6 min read

Quick answer. RWA tokenization records an offchain asset, such as a fund share or bond, as a blockchain token, built on a legal wrapper, register, custody and price feed. Its main risks: admin keys, compliance bugs, oracles and bridges.

Watch: RWA Tokenization: How It Works and Where It Breaks 1:43

Video transcript

RWA tokenization records a fund share, bond or other offchain asset as a token. Its main risks are admin keys, compliance bugs, oracles and bridges.

What a holder owns depends on the structure. SEC staff separate issuer-sponsored tokens from third-party custodial and synthetic ones.

A tokenized fund share runs on six layers, each with its own operator and keys. If one fails, token and asset can disagree.

Mint keys fail two ways. Paxos minted 300 trillion PYUSD by mistake, then burned it. An attacker who reached Resolv's cloud signing key minted about 80 million unbacked USR.

A transfer restriction is only as strong as its weakest path. Guardian's public review of Manifest found three. Test every route a token can take.

NAV updates daily, but tokens move around the clock, so bound each oracle update. Burn-and-mint bridge verifiers act as minters, so they need rate limits and a pause.

Ask for evidence of controls: a legal opinion on which record governs, admin roles behind a delayed multisig, mint caps, monitoring, and an audit matched to deployed bytecode.

Guardian audits contracts with two competing teams, one manual and one AI-driven, and pentests the cloud accounts, apps and APIs on the path to the asset.

Read the full guide, or start with Guardian's low-commitment Digital Asset Assurance Pilot, built from the modules you choose.

RWA tokenization has reached core market plumbing. On October 28, 2026, DTC, DTCC's depository, launched a service for minting tokenized representations of assets it holds.

It is integrated with the Canton Network and DTCC's private Besu network. Our Canton Network security guide covers the first.

This guide covers each layer, where it breaks and what to require.

What RWA Tokenization Is

The BIS and its payments committee define tokenisation as "the process of generating and recording a digital representation of traditional assets on a programmable platform".

The token is not always the asset. A January 2026 SEC staff statement describes three models:

Issuer-sponsored: the issuer issues the security itself as a token.
Third-party custodial: the token evidences an interest in a security held in custody.
Third-party synthetic: a third party's own security tracks a referenced one.

Staff warn that third-party token holders may face that third party's risks, "such as bankruptcy". The statement "has no legal force or effect".

Ondo's tokenized stocks are structured notes from a BVI special purpose vehicle. Holders get economic exposure, but no shareholder voting rights.

The first question for any token: what does the holder legally own, and which record wins?

The Tokenization Stack

A tokenized fund share passes through six layers. Public documents for BlackRock's BUIDL, Franklin Templeton's FOBXX and Ondo's OUSG show who runs each.

Layer	What it does	Example
Legal wrapper	Defines what the holder owns	OUSG: limited partnership interests in a private fund
Register	Keeps the official ownership record	BUIDL: Securitize, as transfer agent
Token contract	Enforces who may hold and transfer	FOBXX: a whitelist of permissioned wallets
Custody	Holds the underlying assets	BUIDL: BNY Mellon, as custodian and administrator
Price feed	Puts NAV onchain	OUSG: NAV set each business day, then written to an oracle
Chains and bridges	Where tokens live and move	BUIDL: several chains, linked by Wormhole

Each layer has its own operator and keys. If one fails, the token and the asset can disagree.

Asset Classes

The stack stays the same. The price source and the speed of exit change.

Asset	What the holder gets	Watch for
Treasury and money market funds	Fund shares or interests	Daily NAV against round-the-clock transfers
Bonds	A bond issued or recorded on a ledger	Ledger transfer before legal finality
Private credit	Interests in loan pools	Queued redemptions and infrequent loan valuations
Equities	Shares, custodial receipts or linked notes	No shareholder rights in some structures
Bank deposits	A tokenized claim on a commercial bank	The bank's own ledger, keys and finality

The BIS report names tokenised bonds, commercial bank deposits and repos among regulated-sector use cases.

Token Standards

Three Ethereum standards come up in permissioned designs.

Standard	Status	What it adds
ERC-3643 (T-REX)	Final	Identity registry, compliance contract, agent powers
ERC-1400	Draft; issue closed in 2022	Partitions, transfer checks, documents, controller transfers
ERC-7540	Final	Asynchronous deposit and redemption requests for vaults

ERC-3643 checks each transfer against an identity registry and a compliance contract. The issuer's agents can mint, burn, freeze and force transfers.

Mints and forced transfers "bypass the compliance rules", and burns skip eligibility checks. The standard notes its audits focused primarily on one implementation, Tokeny's.

ERC-7540 serves vaults where requests settle later, and names real-world asset protocols as a use case.

Its warning: a user who approves an operator "must trust that operator" with both the asset and the share.

Where Tokenization Breaks

According to summaries by WilmerHale and A&O Shearman, IOSCO's November 2025 tokenization report flags unclear ownership rights, cyberattacks and interoperability challenges.

Mint and admin keys

The powers that fix errors can also cause them. Ondo's private markets docs say its issuer can pause, freeze, claw back, mint, burn or migrate tokens.

Stablecoins show both failure modes:

Error: Paxos minted 300 trillion PYUSD by mistake on October 15, 2025, then burned it.
Theft: an attacker reached Resolv's cloud signing key on March 22, 2026 and minted about 80 million unbacked USR.

Chainalysis found Resolv's contract had no onchain check of minted USR against collateral, and no cap.

Compliance logic

A transfer restriction is only as strong as its weakest path. Guardian's public review of Manifest, issuer of a token backed by US home equity investments, found three:

transferFrom checked sender and recipient, but not the caller (L-06, resolved).
A staker with revoked KYC could move tokens to an approved account (M-01, acknowledged).
Through EIP-7702, an approved account could relay swaps for unapproved users (remediation M-01, acknowledged).

Test every route a token can take: allowances, permits, batch calls, smart accounts and bridges.

Oracles and NAV

NAV is struck offchain, then published onchain. Ondo updates OUSG's NAV each business day, then its onchain oracle.

Yet BUIDL and OUSG tokens transfer around the clock.

Anything pricing the token reads that number, so bound it.

USDY's oracle limits routine rate changes to 10% of the current rate, at most once every 8 hours. Larger or faster changes need a timelock.

Units matter too. Manifest's price bounds assumed 6 decimals while its comments said 8, a possible 100x error (M-03, resolved).

Bridges

A burn-and-mint bridge creates tokens on the destination chain, so its verifiers act as minters.

Ondo's bridge, built on LayerZero, uses three independent verifiers, a daily rate limit per route and an emergency pause.

Check that transfer restrictions hold on every chain a token reaches.

Records and finality

The BIS warns that a ledger transfer and legal finality may not coincide. A ledger state "could be retroactively reversed" through legal action.

Franklin's prospectus says its transfer agent can "correct errors and unauthorized transactions". Know which record governs, and reconcile supply to it daily.

Controls Institutions Need

Before you issue or hold a tokenized asset, ask for evidence of these controls.

A legal opinion on what the token is and which record governs.
Mint, burn, freeze, forced-transfer and upgrade roles behind a multisig, with a delay.
Onchain mint caps, and daily reconciliation of supply to the register.
Restrictions tested on every path, including smart accounts and bridges.
Oracle updates bounded in size and frequency, with staleness checks.
Bridge rate limits, independent verifiers and a tested pause.
Monitoring of privileged calls and supply changes, with a rehearsed response.
An audit matched to the deployed bytecode, with findings closed.

Hong Kong's SFC says tokenised product providers should confirm, and on request show, that their smart contracts are free of flaws "with a high level of confidence".

If asked, they should obtain a third-party audit or verification.

Our SFC tokenisation circular guide explains what that takes.

Choosing a vendor? Use our due diligence checklist.

For budgets, see what it costs to tokenize an asset.

How Guardian Helps

For institutions, Guardian advises on target architecture and control design. It reviews the bridges, custodians and oracles you would depend on.

Guardian's smart contract audits run two competing teams, one manual and one AI-driven, with invariant fuzzing beneath both.

Guardian also pentests the cloud accounts, apps and APIs on the path to the asset.

The Digital Asset Assurance Pilot is a low-commitment start, built from the modules you choose.

In Manifest's words: "A thorough review, that's the standard for bringing real-world assets onchain."

Frequently Asked Questions

What is RWA tokenization?

It is recording a traditional asset, such as a fund share or bond, as a token on a programmable platform. The token may be the security itself, a custodial interest in one, or a separate security that tracks it.

What are the main security risks of RWA tokenization?

Admin and mint keys, transfer restrictions that miss a path, lagging or wrong NAV oracles, bridges that mint on other chains, and gaps between onchain balances and the register.

Is ERC-3643 required for tokenized securities?

None of the texts cited here mandates one standard. ERC-3643 is a Final Ethereum standard for permissioned tokens. Hong Kong's SFC gives a permissioned token as an example of a control on public permissionless blockchains.

Does a token holder own the underlying asset?

It depends on the structure. SEC staff distinguish issuer-sponsored tokens from third-party custodial and synthetic ones. Ondo's tokenized stocks, for example, give economic exposure but no shareholder voting rights.

Sources

Review your tokenized asset with Guardian

Send Guardian your token contracts, privileged roles, oracle and bridge design, and get a scope for the audit and pentests your asset needs.

Talk to Guardian Explore Guardian for institutions