What is Real-World Asset (RWA) tokenization?

An RWA token is only as reliable as the custodian holding the asset and the oracle (the service that inputs the real-world price onto the chain) that prices it. The blockchain audits neither. The tokenization of real-world assets (RWA: Treasury bonds, private credit, real estate, gold) is marketed as the migration of traditional finance to the chain, and institutional money is backing it—as of June 2026, it hovered around $32 billion in on-chain transferable value (excluding stablecoins) and exceeded $350 billion in represented value. But the narrative has an uncomfortable reversal: RWA tokenization does not eliminate the intermediary; it hides them behind an oracle. Crypto was born to avoid dependence on custodians, legal vehicles (SPV, for special purpose vehicle: a company created solely to isolate an asset), or courts. An RWA depends on all three again—and adds a new attack surface on top. This article explains from scratch what an RWA is, how it is manufactured step-by-step, and, at each stage, whom you have to trust: because that is where the real risk lies, not in the smart contract.

What is an RWA and what can be tokenized?

Imagine a distributed banking application—a database that is not controlled by a single bank, but one that anyone can help run. On top of it, anyone can create their own points system, and each type of point is a token. Until now, those points represented chain-native things: a crypto unit of account, a stake in a protocol. An RWA is a point that represents something existing outside the chain: a US Treasury bond, a slice of a loan to a company, an apartment, a gold bar in a vault.

The token is not the asset. It is an on-chain entry stating "the bearer has economic rights over this asset" or "the bearer is the owner of this share." The difference matters, and a lot, because there is always a legal bridge between the token and the asset: someone has to custody the actual gold bar, and a document must state that your token is equivalent to that specific gram.

The major categories, ranked by size as of June 2026:

• Tokenized Treasury Bonds — the dominant category, with around $15 billion in transferable value and a yield of around 3-4% annually in mid-2026, with daily redemption (repurchase of the token in exchange for cash value). This is the cleanest use case: the underlying asset does have a continuous market price.
• Private Credit — loans to non-listed companies, the second category and the fastest-growing. Here, the underlying asset does not have a continuous price: it is worth whatever the last valuation says.
• Commodities — primarily tokenized gold, where the token is equivalent to a physical amount held in custody.
• Real Estate — fractions of a property or a property portfolio, with advertised yields of 6-12% annually. The class with the longest and most fragile legal bridge of all.

On-chain private credit alone already exceeds $23 billion in represented value (about $6 billion distributed on-chain), according to the market tracking we conducted in the RWA market analysis at 26 billion. The interesting question regarding RWA tokenization is not how much it grows, but what happens between the asset and the token.

How is a bond converted into a token? The five steps

Tokenizing is not "uploading the bond to the blockchain." It is a chain of five legal and technical links, and in each one, an actor appears whom you trust without the chain verifying them.

1. Custody of the real asset. Someone has to hold the bond, the gold, or the property deed off-chain: a regulated bank, a depository, a trustee. This is the first point of blind trust: the token is only worth something if the asset exists and is where they say it is.
2. Legal structure: SPV or holding. A vehicle is created (an SPV or a holding company) whose sole purpose is to own the asset and issue the rights to it. It is the contract that connects "holding the token" with "having a legal right enforceable in court." Without this layer, your token is an entry without legal backing.
3. Legal audit and verification. Lawyers and auditors confirm that the SPV is valid, that the asset has actually been contributed, and that the issuance complies with securities regulations. This is the layer the investor never sees, yet it decides whether the token is a legitimate security or worthless paper.
4. Token issuance with compliance rules. This is where the code comes in. Unlike a standard token (ERC-20), which anyone can receive, an RWA uses permissioned standards. ERC-3643—the dominant standard for permissioned tokens in 2026, referenced by regulators and bodies such as the SEC, the DTCC, and the MAS of Singapore, and in the process of ISO standardization—links each token to a verified on-chain identity (KYC, for know your customer), so that only authorized wallets on a whitelist can receive it. ERC-1400, an alternative, focuses on the asset structure: it divides the balance into tranches (partitions) to manage complex capitalization tables. The practical consequence: an RWA is born with a gatekeeper at the door.
5. Price oracle and redemption window. An oracle (a service that feeds data from the outside world into the chain) tells the smart contract what the asset is worth, and a redemption mechanism defines when and how you can exchange the token for real money. These last two links are the ones almost no one explains and the ones that fail the most.

Count the actors: custodian, SPV, auditor, issuer, oracle. Crypto promised to eliminate intermediaries; an RWA reintroduces them all, lined up behind a token that looks decentralized. The smart contract is the part that fails least. To understand how the fifth link works, it is useful to be clear on the oracle piece—we elaborate on this in what is a blockchain oracle.

Why are oracles the Achilles' heel of illiquid RWAs?

A Treasury bond has a market price every second: the oracle only has to read a public quote and publish it on the chain. Simple to audit. The problem starts when the asset is not continuously traded: a slice of private credit or a building does not have a market price at 3 PM on a Tuesday. They are worth whatever their last valuation says—the NAV (net asset value)—which is calculated periodically: monthly, quarterly, sometimes at the manager's discretion.

Here lies the most underestimated technical risk in the sector. The oracle of an illiquid RWA does not read a market: it reads a report. And a report can be outdated, optimistic, or, in the worst case, manipulated. The chain-reaction consequences are concrete:

• Liquidations of healthy assets. If the token is used as collateral in a lending protocol and the oracle publishes a dropped price (due to error, delay, or attack), the protocol can liquidate a position backed by an asset that hasn't lost a cent of real value.
• Ghost prices. If the NAV is updated once a month, for 29 days the oracle asserts a value that may no longer be true. The token trades on an accounting fiction until the next update.
• Single point of failure. Whoever controls the oracle controls the on-chain price of the asset. The blockchain executes what the oracle says, without asking where the data came from.

This links back to the lesson we already learned from custody and identity hacks: the weak link is almost never the cryptographic one. The smart contract does exactly what it was programmed to do; the failure enters through the data you feed it. In an illiquid RWA, that data is a human valuation that the chain treats as revealed truth.

Who holds the real asset and what happens if the custodian goes bankrupt?

This is the prudent investor's question that almost no article answers: if the company holding your bond or your apartment goes bankrupt, what do you have left? The answer depends entirely on the legal structure chosen in step 2. Not all protect equally.

The conclusion the table provides: the "BlackRock" or "Franklin Templeton" seal is not a magic guarantee, but a clue about what type of structure and custody is behind it. What protects your money is not the issuer's brand, but the quality of the legal segregation and the solvency of the custodian. And that is exactly what the blockchain does not verify: the chain records that you have a token; whether that token is equivalent to a recoverable asset is a matter of bankruptcy law, not cryptography. In the case of real estate, where the longest structure accumulates (token → SPV → property → registry), we detail the analysis of legal risks in real estate tokenization in DeFi.

And all of this rests on a question that changes depending on where you are: under what law the token lives. In the United States, most RWAs are securities and are issued under SEC exemptions (Reg D, Reg S). In the European Union, they are not covered by MiCA—which excludes securities—but by financial market regulations (MiFID II and the Prospectus Regulation). Switzerland frames them under its DLT Act, Singapore under the MAS, and the United Arab Emirates through ADGM and VARA. The same token can be a regulated security with enforceable rights in one jurisdiction and an instrument without a clear fit in another; that framework—not the blockchain—is what decides what you have left if something goes wrong.

Who rules in RWA and why are institutions entering now?

The institutional wave of 2026 is no coincidence. With US public debt yielding around 3-4% in mid-2026, tokenizing Treasury bonds allows a crypto investor to earn that yield without leaving the chain, and managers to capture crypto capital without building new infrastructure. These are the actors in charge—and they should be viewed not as a seal of quality, but as the new custodians whose bankruptcy would affect you:

Here, a shift in thesis is appropriate: these names do not appear as a seal of quality, but as the new custodians whose bankruptcy matters. The fact that BlackRock manages billions in tokenized bonds—something we analyzed in the case of BUIDL and institutional yield—reduces counterparty risk compared to an anonymous issuer, but does not eliminate it: it simply concentrates it in a very large institution. And there is an additional trap for the retail investor: leading the tokenized asset market does not mean the issuer's governance token will rise. Ondo is the textbook example—dominating the RWA market while simultaneously having a crashed token—a paradox we dissect in the Ondo paradox. Buying the tokenized asset and buying the stock of the issuer are two different bets, and mixing them is a costly mistake.

Why does an RWA break the composability that made DeFi unique?

The great superpower of a native token is composability: since anyone can receive it and any contract can use it, a DeFi token fits like a Lego piece into loans, liquidity pools, and vaults without asking anyone's permission. That property—combining protocols freely—is what made DeFi unique compared to traditional finance.

An RWA arrives with the gatekeeper from step 4 in place. Because it lives under a permissioned standard (ERC-3643 with KYC whitelist), it can only move between previously authorized wallets. When you try to use it as collateral in a lending protocol like Aave or Morpho, it crashes head-on into its own nature:

• Collateral is exclusive. The token can only enter pools or contracts that are on its whitelist. It is not a universal Lego piece: it is a piece that only fits on approved boards.
• Liquidation becomes complicated. If the position needs to be liquidated, the liquidator must also be on the whitelist. The market of emergency buyers is reduced to those who passed KYC, exactly when liquidity is most needed.
• Composability fragments. Instead of an open market, islands of permissioned RWAs appear that do not connect freely with each other. The RWA provides stable yield, but at the cost of what made the chain special.

The result is a tense hybrid: real-world yield within DeFi, but with the chains of traditional regulation attached. The emergence of on-chain private credit at scale, with protocols like Morpho channeling institutional capital, shows where the experiment is headed—we follow it in the Morpho round for on-chain credit. As of June 2026, no protocol has solved that triangle—yield, openness, and regulatory compliance: on-chain private credit is growing, but in permissioned islands that do not interconnect. The RWA buys real-world yield at the price of the composability that made the chain unique.

How to evaluate an RWA token before investing?

Tokenization is real, and so is institutional money. But the "crypto without intermediaries" narrative is reversed: an RWA reintroduces the custodian, the SPV, the auditor, and the oracle, and adds an attack surface that a native token does not have. Before touching one, follow the chain of trust to the end with these questions:

• Who custodies the real asset and under what structure? Segregated bank custody and a shielded SPV protect more than an operating holding. If you can't find the answer in the documentation, that absence is the answer.
• Does the asset have a continuous market price or does it depend on a periodic NAV? A Treasury bond is transparent; a building or a private loan depends on a valuation that the oracle treats as truth. The more illiquid it is, the more weight the person calculating the price carries.
• Who controls the oracle and how often is it updated? A slow or centralized oracle is the asset's single point of failure.
• Is it a regulated security with enforceable rights, or an entry without bankruptcy backing? The token gives you no more rights than what the SPV recognizes before a court.

The rule that summarizes everything: the blockchain tells you the truth about who holds the token, never about whether that token is worth what it says. That second truth still depends on custodians, lawyers, and courts—exactly what crypto promised to escape.

Sources and links: RWA.xyz — Tokenized Treasuries · Securitize (BUIDL) · Ondo Finance · ERC-3643 Association · OpenZeppelin Docs · CoinDesk