1. What "RWA" actually means
"Real-World Asset" tokenization means representing a legal claim to an off-chain asset — real estate, private credit, gold, invoices, treasuries, royalty streams — as a token on a blockchain. The token is not the asset. The token is a digital certificate of ownership in something that lives in the physical or legal world.
The three things that must be true simultaneously for RWA to work:
- A legal entity holds the underlying asset. Typically an SPV (Special Purpose Vehicle) — a limited liability company formed for the sole purpose of holding one asset or one asset pool.
- The token represents a legally-enforceable claim against that entity. Either as an equity interest, a debt claim, or a beneficial interest in the assets held.
- The transfer of the token effects a transfer of the underlying claim under applicable law. This is the hardest part. It typically requires the LLC operating agreement to expressly permit token-based transfer.
A token that fails any of these three tests is not real RWA — it is a database entry with a marketing story on top.
2. The two custody layers (do not confuse them)
Every RWA structure has two distinct custodians, and confusing them is the single most common failure mode in the industry:
Physical / Asset Custodian
Holds the underlying real-world asset. Examples: LBMA-approved vault (gold), title-insurance escrow (real estate), qualified custodian for securities (Anchorage, BitGo Trust), warehouse (commodities).
Their job: physical safekeeping of the actual asset.
Digital-Asset Custodian
Holds the private keys that control the tokens on the blockchain. Examples: Fireblocks, Copper, BitGo, Anchorage, Coinbase Custody.
Their job: cryptographic safekeeping of the tokens (and the tokens' controlling keys).
In any investor material or offering document, both custodians must be named explicitly. Conflating them — saying "Fireblocks custodies our gold" when Fireblocks actually holds the token that represents gold held at a separate vault — is Rule 10b-5 anti-fraud exposure. Attorneys reviewing PPMs and subscription documents will look for this specific error first.
3. The four-stage capital lifecycle
Every RWA structure follows the same lifecycle. If any stage is unclear, the structure is not investable at scale.
-
Origination — the asset gets acquired
The SPV closes on the underlying asset (buys the property, funds the loan, takes delivery of the gold). Investor capital is deployed. Physical custodian takes possession.
-
Tokenization — the digital claim gets issued
Tokens are minted on-chain representing the SPV's cap table (or debt facility). Token supply is fixed and tied to the invested capital. Digital-asset custodian holds the initial token allocation before distribution to investors.
-
Operation — the asset produces cash flow
Rent, interest, royalties, appreciation. Cash flow accrues to the SPV. An oracle or independent administrator attests to the asset's condition, valuation, and cash-flow performance on a defined cadence (monthly, quarterly).
-
Distribution — token holders get paid
Cash flow is distributed to token holders pro rata. Typically in stablecoin (USDC, USDT) or in the return-of-capital token. Distribution triggers K-1 reporting (for US-taxed partnership SPVs) or 1099 reporting (for US-taxed corporate or fund vehicles).
4. Oracle attestation — the trust anchor
The token lives on-chain, but the asset lives off-chain. The bridge between the two is the oracle attestation: a periodic signed statement from an independent third party asserting the current state of the asset.
Serious RWA structures require at least three attestations:
- Proof of existence. The asset still exists and is under the physical custodian's control. Vault inventory count, title-registry lookup, warehouse receipt.
- Proof of valuation. Independent appraisal or mark-to-market pricing from an unaffiliated source. For real estate: broker's opinion of value or full appraisal on annual cycle. For commodities: reference price from LBMA / CME / similar.
- Proof of encumbrance status. No liens, judgments, or third-party claims have been recorded against the asset since the last attestation.
The attestation is typically signed by a licensed appraiser, an independent administrator, or a specialized attestation firm (e.g., BDO, Grant Thornton, Withum for the reserve-attestation market). The signed attestation is often posted publicly (or committed to on-chain) so token holders can verify without asking permission.
5. Transfer restrictions — why "permissionless" is a myth for real securities
US-regulated RWA tokens typically embed transfer restrictions. A token issued under Regulation D 506(c) is a "restricted security" under Rule 144(a)(3) and cannot be resold freely at issuance. Under Rule 144(b)(1)(ii), a non-affiliate of a non-reporting issuer may resell without volume, manner-of-sale, or current-public-information conditions after a one-year holding period — but the operating agreement or subscription document commonly imposes additional contractual restrictions (accredited-only transferees, issuer consent, opinion-of-counsel requirement). Section 4(a)(7) is a separate statutory resale exemption that has an accredited-purchaser condition; do not conflate it with Rule 144.
The two dominant technical standards enforce this at the smart-contract level:
- ERC-3643 (T-REX). Every token holder must have an on-chain identity (ONCHAINID) with verifiable claims (accredited status, KYC, jurisdiction). Every transfer is validated against a set of compliance modules before it executes. If the transferee doesn't have the required claims, the transfer reverts.
- ERC-1400. Tokens are partitioned into tranches, each with its own transfer rules. Supports forced transfers (for court-ordered reallocation), operator-controlled minting/burning, and document management on-chain.
6. The regulatory pathways
For a US-issued RWA token, the operative exemption almost always is one of:
| Exemption | Investor limit | Solicitation | Best for |
|---|---|---|---|
| Reg D 506(b) | Unlimited accredited + up to 35 sophisticated non-accredited | No general solicitation | Warm-network raises |
| Reg D 506(c) | Unlimited accredited only, verified | General solicitation permitted | Public marketing, waitlist funnels |
| Reg A+ Tier 2 | Up to $75M/year; retail investors permitted with income/net-worth caps | General solicitation permitted (post-qualification) | Retail-scale RWA (must file 1-A + audit) |
| Reg CF | Up to $5M/year; retail with per-investor limits | Via registered funding portal only | Community-scale raises |
| Reg S | Non-US persons only | Offshore — no US directed selling | Global raises paired with a US exemption |
Most institutional RWA tokens use Rule 506(c) because it permits marketing and doesn't cap raise size — but the accredited-verification burden is real. See Section 06 · System for the Rule 501(a) verification framework the Unykorn Legal Ops System implements.
7. What breaks in practice
The failure modes we see repeatedly in intake diligence on new RWA structures:
Common failure modes
- Operating agreement doesn't allow token transfer. Token trades but the legal claim doesn't follow. Buyer owns a JPEG.
- Physical custody unspecified. "The gold is in a vault" — which vault? Under whose name? With what insurance?
- Oracle single-source. One party attests both existence and valuation, or the attestor is affiliated with the sponsor.
- Same signatory on both sides of the true-sale. Kills bankruptcy remoteness of the SPV. Assets go back to the sponsor's estate on default.
- Transfer restrictions not enforced on-chain. Token trades freely, exposing the sponsor to Section 5 registration liability.
What survives review
- Op agmt expressly recognizes token-based transfer as effective
- Physical custodian named + insured + independent
- Digital-asset custodian named separately + not affiliated with sponsor
- At least two independent attestors (or one attestor + one on-chain verifier)
- ERC-3643 or ERC-1400 with active compliance modules
- Signatory separation: SPV-side signer is not sponsor-side signer
Further reading
- The GENIUS Act (2025) — federal stablecoin framework
- Real-Estate Securities — tokenization patterns for property
- Lexicon — every term in this brief with formal definition
- Smart Contract Templates — ERC-3643, ERC-1400, and vault contracts
- Active Deals — RWA protocols currently in production