Unykorn Legal
Foundation Brief · ~12 min read

How RWA Actually Works

Real-World-Asset tokenization is not a magic technology. It is a legal structure with a database attached to it. This brief walks through what the token represents, where the asset actually lives, and how value moves through the system.

1. What "RWA" actually means

"Real-World Asset" tokenization means representing a legal claim to an off-chain asset — real estate, private credit, gold, invoices, treasuries, royalty streams — as a token on a blockchain. The token is not the asset. The token is a digital certificate of ownership in something that lives in the physical or legal world.

The three things that must be true simultaneously for RWA to work:

  1. A legal entity holds the underlying asset. Typically an SPV (Special Purpose Vehicle) — a limited liability company formed for the sole purpose of holding one asset or one asset pool.
  2. The token represents a legally-enforceable claim against that entity. Either as an equity interest, a debt claim, or a beneficial interest in the assets held.
  3. The transfer of the token effects a transfer of the underlying claim under applicable law. This is the hardest part. It typically requires the LLC operating agreement to expressly permit token-based transfer.

A token that fails any of these three tests is not real RWA — it is a database entry with a marketing story on top.

2. The two custody layers (do not confuse them)

Every RWA structure has two distinct custodians, and confusing them is the single most common failure mode in the industry:

Physical / Asset Custodian

Holds the underlying real-world asset. Examples: LBMA-approved vault (gold), title-insurance escrow (real estate), qualified custodian for securities (Anchorage, BitGo Trust), warehouse (commodities).

Their job: physical safekeeping of the actual asset.

Digital-Asset Custodian

Holds the private keys that control the tokens on the blockchain. Examples: Fireblocks, Copper, BitGo, Anchorage, Coinbase Custody.

Their job: cryptographic safekeeping of the tokens (and the tokens' controlling keys).

Load-Bearing Distinction

In any investor material or offering document, both custodians must be named explicitly. Conflating them — saying "Fireblocks custodies our gold" when Fireblocks actually holds the token that represents gold held at a separate vault — is Rule 10b-5 anti-fraud exposure. Attorneys reviewing PPMs and subscription documents will look for this specific error first.

3. The four-stage capital lifecycle

Every RWA structure follows the same lifecycle. If any stage is unclear, the structure is not investable at scale.

  1. Origination — the asset gets acquired

    The SPV closes on the underlying asset (buys the property, funds the loan, takes delivery of the gold). Investor capital is deployed. Physical custodian takes possession.

  2. Tokenization — the digital claim gets issued

    Tokens are minted on-chain representing the SPV's cap table (or debt facility). Token supply is fixed and tied to the invested capital. Digital-asset custodian holds the initial token allocation before distribution to investors.

  3. Operation — the asset produces cash flow

    Rent, interest, royalties, appreciation. Cash flow accrues to the SPV. An oracle or independent administrator attests to the asset's condition, valuation, and cash-flow performance on a defined cadence (monthly, quarterly).

  4. Distribution — token holders get paid

    Cash flow is distributed to token holders pro rata. Typically in stablecoin (USDC, USDT) or in the return-of-capital token. Distribution triggers K-1 reporting (for US-taxed partnership SPVs) or 1099 reporting (for US-taxed corporate or fund vehicles).

4. Oracle attestation — the trust anchor

The token lives on-chain, but the asset lives off-chain. The bridge between the two is the oracle attestation: a periodic signed statement from an independent third party asserting the current state of the asset.

Serious RWA structures require at least three attestations:

The attestation is typically signed by a licensed appraiser, an independent administrator, or a specialized attestation firm (e.g., BDO, Grant Thornton, Withum for the reserve-attestation market). The signed attestation is often posted publicly (or committed to on-chain) so token holders can verify without asking permission.

5. Transfer restrictions — why "permissionless" is a myth for real securities

US-regulated RWA tokens typically embed transfer restrictions. A token issued under Regulation D 506(c) is a "restricted security" under Rule 144(a)(3) and cannot be resold freely at issuance. Under Rule 144(b)(1)(ii), a non-affiliate of a non-reporting issuer may resell without volume, manner-of-sale, or current-public-information conditions after a one-year holding period — but the operating agreement or subscription document commonly imposes additional contractual restrictions (accredited-only transferees, issuer consent, opinion-of-counsel requirement). Section 4(a)(7) is a separate statutory resale exemption that has an accredited-purchaser condition; do not conflate it with Rule 144.

The two dominant technical standards enforce this at the smart-contract level:

6. The regulatory pathways

For a US-issued RWA token, the operative exemption almost always is one of:

ExemptionInvestor limitSolicitationBest for
Reg D 506(b)Unlimited accredited + up to 35 sophisticated non-accreditedNo general solicitationWarm-network raises
Reg D 506(c)Unlimited accredited only, verifiedGeneral solicitation permittedPublic marketing, waitlist funnels
Reg A+ Tier 2Up to $75M/year; retail investors permitted with income/net-worth capsGeneral solicitation permitted (post-qualification)Retail-scale RWA (must file 1-A + audit)
Reg CFUp to $5M/year; retail with per-investor limitsVia registered funding portal onlyCommunity-scale raises
Reg SNon-US persons onlyOffshore — no US directed sellingGlobal raises paired with a US exemption

Most institutional RWA tokens use Rule 506(c) because it permits marketing and doesn't cap raise size — but the accredited-verification burden is real. See Section 06 · System for the Rule 501(a) verification framework the Unykorn Legal Ops System implements.

7. What breaks in practice

The failure modes we see repeatedly in intake diligence on new RWA structures:

Common failure modes

  • Operating agreement doesn't allow token transfer. Token trades but the legal claim doesn't follow. Buyer owns a JPEG.
  • Physical custody unspecified. "The gold is in a vault" — which vault? Under whose name? With what insurance?
  • Oracle single-source. One party attests both existence and valuation, or the attestor is affiliated with the sponsor.
  • Same signatory on both sides of the true-sale. Kills bankruptcy remoteness of the SPV. Assets go back to the sponsor's estate on default.
  • Transfer restrictions not enforced on-chain. Token trades freely, exposing the sponsor to Section 5 registration liability.

What survives review

  • Op agmt expressly recognizes token-based transfer as effective
  • Physical custodian named + insured + independent
  • Digital-asset custodian named separately + not affiliated with sponsor
  • At least two independent attestors (or one attestor + one on-chain verifier)
  • ERC-3643 or ERC-1400 with active compliance modules
  • Signatory separation: SPV-side signer is not sponsor-side signer

Further reading