Tokenized Private Credit Risks: Where Onchain Credit Fails

Video transcript

The token changes how a loan is recorded and sold. It does not change who repays it, and it adds risks of its own.

As of November sixth, 2026, 8.21 billion dollars of tokenized credit was distributed, able to move outside its issuing platform.

Each pool adds parties you depend on: the borrower, the manager, the legal entity, the contracts and the keys.

Defaults have happened. Orthogonal Trading got a default notice on about 36 million dollars of Maple loans. On Goldfinch, about 7 million dollars of a Stratos loan was at risk, and Tugende defaulted on 5 million.

Defaults reach the token late. Goldfinch v1 allows a 45 day grace period, then a 120 day linear writedown, about five months in all before a loss is fully reflected.

A pool can only pay out what is liquid. Maple says there is no guaranteed maximum withdrawal period.

Recovery happens offchain, under the loan documents, and your claim may stop at one entity. Maple says lender claims are exclusively against the assets of the segregated portfolio.

Contracts and keys can lose money no borrower owes. Zoth's deployer wallet was taken and a vault proxy upgraded, costing about 8.4 million dollars, per Rekt. So map the admin powers and oracles.

Guardian underwrites the onchain side: the code, who controls it and what it depends on. Read the full guide, or talk to Guardian at guardian.security.

On November 6, 2026, RWA.xyz counted $8.21 billion of "distributed" tokenized credit: tokens that can move to wallets outside the issuing platform.

Another $42.53 billion is "represented": recorded onchain, but unable to leave the issuing platform. Figure's HELOC token on Provenance, the largest entry, is $26.25 billion of that.

The token changes how a loan is recorded and sold. It does not change who repays it.

This guide separates the credit risk from the operational, legal and contract risks the token adds, using public defaults.

How Tokenized Credit Pools Work

The common pattern: lenders deposit stablecoins into a contract and receive a token for their share.

A manager lends the money to borrowers under offchain loan agreements. Repayments flow back to the pool, and losses cut the token's value.

Each layer adds a party you depend on: the borrower, the manager, the legal entity, the contracts and the keys.

Borrower and Manager Risk

Maple's own disclosure says "each loan is subject to the risk of borrower default." Collateral helps, but its sale may be "insufficient to cover the outstanding loan."

Orthogonal Trading, December 2022

On December 5, 2022, CoinDesk reported that M11 Credit, a manager of Maple pools, had sent Orthogonal Trading a notice of default.

It covered $31 million of USDC loans and about $5 million of wETH, roughly $36 million in all.

Orthogonal had told M11 it "incurred larger losses than previously disclosed" from funds held on FTX. Maple said it was "misrepresenting its financial position."

Concentration made it worse. Orthogonal was about 80% of the M11 USDC pool's active loans.

Stratos and Tugende on Goldfinch, 2023

In February 2022, a Goldfinch pool lent $20 million in USDC to Stratos, a fintech credit fund. Stratos split it across three investments.

In October 2023, CoinDesk reported about $7 million at risk. The $5 million REZI position was expected to be written down to zero.

Stratos sold the $2 million POKT position at a "near full loss," and added collateral to cover the shortfall.

Warbler Labs, one of the loan's 43 backers, said it "was not aware of" the POKT allocation at the time.

The same report covered a $5 million default by Tugende, which had breached covenants by lending to a struggling sister company.

The lesson: the borrower may itself be a fund, and the risk is where it sends the money. Covenants and reporting live offchain.

Valuation and Redemption

An onchain price only moves when someone updates it, so defaults reach the token late.

Goldfinch's v1 docs give a 45-day onchain grace period before a loan is marked in default.

The senior pool then writes the loan down "on a daily linear basis" over 120 days, reversing it if repayments arrive.

So a missed payment can take about five months to reach the senior pool in full. Holders who redeem in that window can exit above what the loan may recover.

Maple marks impaired loans down instead. Lenders who withdraw during an impairment have "no claim to any future recoveries on that loan."

Redemption gates

A pool can only pay out what is liquid. Much of its money is lent out.

• Maple: withdrawals currently average under 24 hours, but "this is not guaranteed." There is "no guaranteed maximum withdrawal period."
• Centrifuge: pools can use ERC-7540 vaults, where a redemption is a request settled later.

Legal Structure and Recovery

When a loan fails, recovery happens offchain, under the loan documents.

Goldfinch's docs say investors and the borrower first try a repayment plan. If that fails, investors can pursue legal recourse offchain against the collateral.

After Orthogonal, Maple said it would pursue "all appropriate legal avenues to recover funds," including arbitration or litigation.

Your claim may also stop at one entity. Maple's risk disclosures say lender claims are "exclusively against the assets of the segregated portfolio" where they deposited.

Ask four questions of the documents:

• Which entity issues the token, and which one holds the loans?
• Is that entity bankruptcy remote from the platform and the manager?
• Who enforces against a defaulting borrower, and in which courts?
• Who holds the collateral, and how fast can it be seized?

Smart Contract and Key Risk

The contracts and keys around a pool can lose money that no borrower owes.

On March 21, 2025, an attacker took control of Zoth's deployer wallet and upgraded a vault proxy, Rekt reported. Rekt valued the loss at about $8.4 million.

Asset issuers locked down 73% of Zoth's TVL right after the breach, which limited the damage.

Our RWA hacks report found the same pattern: losses came from contracts and wallets around the asset, not the asset itself.

So map the admin powers. Maple's disclosures say its DAO approves contract versions and can change parameters such as withdrawal cooldowns.

Centrifuge bounds pool managers with an optional per-pool policy. Anything outside it needs a timelocked authorization, its protocol README says.

Oracles matter too. Maple warns of losses "if an oracle provides inaccurate, delayed, or manipulated price data."

And audits have limits: "no audit can guarantee the absence of vulnerabilities," Maple says.

Diligence Questions

1. Who are the borrowers, and what share of the pool is the largest?
2. What collateral backs each loan, who holds it, and how is it valued?
3. Who underwrites, and what do they lose on a default?
4. How often do borrowers report, and who checks the numbers?
5. When is a loan marked impaired or in default onchain?
6. Who sets the NAV or price, and who can change the oracle?
7. How do redemptions work under stress, and who can change the rules?
8. What is your legal claim, against which entity, in which jurisdiction?
9. Who can upgrade, pause or mint, behind what quorum and timelock?
10. Does the deployed code match the audited code?

For the treasury version of these checks, see tokenized treasuries explained. For platforms, use our tokenization platform checklist.

How Guardian Helps

Credit underwriting stays with your credit team. Guardian covers the onchain side for capital allocators.

Its underwriting reads the deployed code, who controls it, and what it depends on, such as oracles, bridges and keepers.

It also weighs operator posture: track record, disclosure behavior and how past incidents were handled.

Monitoring then watches upgrades, signer and timelock changes and oracle swaps, and re-scores a position when its risk moves.

Frequently Asked Questions

What is tokenized private credit?

Private loans, such as loans to companies, funds or homeowners, recorded as tokens on a blockchain. Investors usually hold a share of a pool or fund that makes the loans, while borrowers repay under offchain agreements.

What are the main risks of tokenized private credit?

Borrower default first. Then the token's own risks: manager failures, valuations that lag defaults, redemption queues, legal claims limited to one entity, and smart contract, oracle and key risk.

Has tokenized private credit had defaults?

Yes. In December 2022, Orthogonal Trading got a default notice on about $36 million of Maple pool loans. In 2023, about $7 million of a $20 million Goldfinch loan to Stratos was at risk, and Tugende defaulted on $5 million.

Can you always redeem tokenized private credit on demand?

No. Redemptions depend on pool liquidity. Maple says there is no guaranteed maximum withdrawal period, and some tokens, such as Figure's HELOC token, cannot leave the issuing platform at all.

Sources

• RWA.xyz: Tokenized Credit dashboard (read November 6, 2026)
• RWA.xyz: A New Framework for Tokenized Assets: Distributed and Represented (November 21, 2025)
• Maple docs: Introduction (read November 6, 2026)
• Maple docs: syrupUSDC, syrupUSDT and syrupUSDG Risk Disclosures (read November 6, 2026)
• Goldfinch docs: Default process, Goldfinch v1 (read November 6, 2026)
• Centrifuge: Centrifuge Protocol README, GitHub (read November 6, 2026)
• CoinDesk: FTX Contagion Spreads as Orthogonal Trading Gets Default Notice for $36M Debt on Maple Finance (December 5, 2022)
• CoinDesk: Real-World Asset Loan Worth $20M at Risk of Losing $7M on DeFi Platform Goldfinch (October 9, 2023)
• Rekt: Zoth, Rekt (March 24, 2025)
• Guardian: RWA Hacks and Exploits: Losses and Root Causes Since 2023