How to Tokenize an Asset: Step-by-Step Process

The $31B real-world asset market on-chain proves tokenization has moved from pilot to production, yet most issuers still fail at the first gate: the legal structure. Real estate, private equity, and corporate debt are all tokenizable, but misclassifying the legal wrapper — SPV vs.

Introduction

The $31B real-world asset market on-chain proves tokenization has moved from pilot to production, yet most issuers still fail at the first gate: the legal structure. Real estate, private equity, and corporate debt are all tokenizable, but misclassifying the legal wrapper — SPV vs. trust vs. REIT — before minting a single smart contract line carries the highest remediation cost in the entire process. This article walks through the six sequential decisions that separate successful issuances from costly failures: asset type selection, legal wrapping, regulatory framework alignment, platform and blockchain choice, token standard selection, and secondary market listing. By the end, readers will understand why legal structure determines everything downstream, which exemption targets their issuer category, and how ERC-3643's on-chain identity controls enforce compliance at the transfer level.

What Can Be Tokenized and What Must Come First

Real estate, private equity, corporate debt, commodities, fund units, and intellectual property are all candidates for tokenization — but the asset type determines which legal wrapper, token standard, and regulatory pathway apply before a single line of smart contract code is written. The real-world asset (RWA) market on-chain surpassed $31B by May 2026, driven by assets that cleared these foundational requirements.

Which Asset Types Can Be Tokenized Today

Six primary asset classes currently support on-chain issuance at institutional scale. Real estate — fractional ownership in commercial properties or mortgages — accounts for the largest share of tokenization pilots. Private equity and venture fund units transfer through special purpose vehicles (SPVs) that hold the underlying shares. Corporate and government bonds issue as security tokens under Reg D or equivalent frameworks. Commodities, including gold and carbon credits, tokenize through custodial structures where the physical asset is held by a regulated vault operator.

The Key Legal Requirement — Provable Ownership or Claim

Tokenization requires a legally provable ownership claim — not a digital representation alone. The token must map to an underlying right: title to property, equity in an SPV, a debt obligation, or a custody receipt. Without that mapping, the token represents nothing a court would recognize. Jurisdictions including the US, UK, and Singapore have each issued guidance confirming that a token derives its legal status from the underlying instrument — meaning the legal structuring step is non-negotiable regardless of the blockchain chosen.

Data current as of June 2026.

Legal structure selection drives every downstream decision — token classification, investor eligibility, and secondary market access all depend on getting the wrapper right from the start.

Choosing the Right Legal Wrapper and Why It Matters

The legal wrapper chosen before tokenization — SPV, trust, LLC, or REIT — is not a formality: it determines whether the token is classified as a security, what investor rights attach, and which jurisdictions can legally hold it. Misclassification at this stage carries the highest downstream remediation cost in the entire tokenization process.

Choosing the Right Legal Wrapper — SPV, Trust, or REIT

An SPV is the most common structure for single-asset tokenization: it isolates the asset from the issuer's balance sheet, holds title directly, and issues membership interests as tokens. A trust structure is preferred for debt instruments and fund units because it separates legal ownership (the trustee) from beneficial ownership (the token holder), a distinction recognized across common law jurisdictions. A real estate investment trust (REIT) structure allows broader retail participation but triggers securities registration requirements and ongoing disclosure obligations that smaller issuers often cannot absorb. The choice among these three is driven first by asset type, then by target investor jurisdiction, and only last by cost.

Why Legal Structure Determines Token Classification

Token classification flows directly from the rights the token confers. An SPV membership interest token carries equity rights — dividends, voting, liquidation preference — and is a security in every major jurisdiction. A trust certificate token carries debt or beneficial ownership rights and is similarly classified. A utility token carrying no ownership claim or cash flow right is not a security, but no asset-backed token qualifies as utility. The legal structure chosen dictates which exemptions are available, which disclosures are mandatory, and which secondary venues can legally list the token — making this the decision with the highest downstream cost if wrong.

Regulatory framework selection — the next decision — must align precisely with the legal structure chosen here, because each exemption targets a specific token type and issuer category.

Selecting a Regulatory Framework — US, EU, and Global Pathways

Security token issuers must select a regulatory exemption before minting — the choice sets the investor pool, disclosure burden, and secondary market structure. Three US exemptions and two major international frameworks cover the broadest range of issuance scenarios in 2026 (as of May 2026) .

US Pathways — Reg D, Reg A+, and Reg S for Security Tokens

Regulation D 506(c) permits token sales to accredited investors only, with no cap on raise size and minimal disclosure requirements — it is the default for institutional-grade security token offerings. Regulation A+ extends access to retail investors with a $75M annual raise limit and a full SEC-qualified offering circular; issuers must file ongoing annual, semiannual, and current reports with the SEC. Regulation S covers token sales to non-US investors and carries no SEC registration requirement, but issuers must implement distribution compliance measures to prevent flowback into US markets within the applicable restricted period. Many issuers combine Reg D (for US accredited) with Reg S (for international) in a simultaneous dual-tranche offering, a structure Securitize has processed for multiple tokenized fund issuances.

EU and Global Frameworks — MiCA, MAS Project Guardian, and ADGM

The Markets in Crypto-Assets Regulation (MiCA) governs token issuance across all 27 EU member states and covers asset-referenced tokens and e-money tokens, though security tokens remain subject to existing MiFID II securities rules alongside MiCA's disclosure requirements. The Monetary Authority of Singapore (MAS) Project Guardian framework enables institutional DeFi pilots — 24 financial institutions participated in Project Guardian pilots through early 2026 — and explicitly covers tokenized bonds and fund units. The Abu Dhabi Global Market (ADGM) has issued dedicated digital securities regulations allowing full tokenized security issuance and secondary trading within its jurisdiction. Each framework carries distinct minimum investment thresholds, cross-border passport rights, and custody requirements that interact with the legal wrapper chosen in the prior step.

Data current as of June 2026.

Platform and blockchain selection — the next decision — must match the regulatory framework chosen, because certain platforms are licensed only under specific exemptions.

Selecting a Platform and Blockchain for Tokenization

Platform choice and blockchain choice are interdependent decisions: Securitize operates under SEC-registered transfer agent and broker-dealer licenses that constrain it to US-compatible frameworks, while Tokeny's ERC-3643 deployment model works across any jurisdiction with a compliant legal wrapper. The blockchain choice then follows from the platform's supported networks and the liquidity requirements of the target investor base.

Platform Comparison — Securitize, Polymath, Tokeny, and Ondo

Securitize reported $4B+ in tokenized assets under management (AUM) and $19.5M in Q1 2026 revenue and manages BlackRock's BUIDL fund among other institutional mandates — it is the leading US-regulated tokenization platform by both AUM and revenue. Polymath targets capital markets issuers with its Polymesh permissioned blockchain, designed specifically for regulated securities with on-chain governance for corporate actions. Tokeny specializes in ERC-3643 deployments and serves issuers across Europe and Asia who need interoperable compliance without relying on a single platform's licensing infrastructure. Ondo Finance operates differently — it issues tokenized US Treasuries and money market funds as public DeFi-composable products, with total value locked (TVL) surpassing $2.5B across OUSG and USDY. Its primary buyers are protocols and institutional decentralized finance (DeFi) participants rather than individual security token purchasers.

Which Blockchain to Choose — EVM, Permissioned, or Hybrid

Ethereum remains the dominant settlement layer for tokenized assets because it provides the deepest liquidity, the widest smart contract tooling, and the largest base of institutional-grade wallets and custodians. Permissioned chains — Polymesh, Fabric-based networks, and enterprise Hyperledger deployments — offer privacy controls and governance features that regulated issuers in banking and insurance prefer, at the cost of secondary market liquidity. Layer-2 networks including Arbitrum and Polygon reduce transaction costs for high-frequency transfers — a property that suits tokenized money market funds where daily redemptions generate substantial on-chain activity. The choice among these architectures depends on whether the issuer prioritizes public DeFi composability, regulatory privacy controls, or transaction-cost efficiency.

Smart contract deployment follows platform and blockchain selection — the technical layer where the compliance rules encoded in the legal wrapper are converted into on-chain transfer restrictions.

Token Standards and Investor Onboarding Infrastructure

ERC-3643's on-chain identity module makes it the default for regulated security tokens — underpinning $32B+ in tokenized assets across 180+ jurisdictions — because it enforces compliance at the transfer level rather than relying on a separate off-chain gate that can be bypassed. The token standard chosen determines how know your customer (KYC) and anti-money laundering (AML) rules are implemented technically.

Choosing the Right Token Standard — ERC-20, ERC-3643, or ERC-1400

ERC-20 is the base fungible token standard and carries no compliance logic — transfers execute unconditionally. Without an external compliance layer that must be maintained separately, ERC-20 is unsuitable for security tokens. ERC-3643, also known as T-REX, extends ERC-20 with an on-chain identity registry that verifies wallet eligibility before every transfer — non-whitelisted wallets are blocked at the smart contract level. ERC-3643 is in active ISO standardization as of 2026 and underpins regulated issuances from Tokeny, Securitize, and Société Générale's digital bond platform. ERC-1400 offers a partition-based model suited to complex capital structures — different share classes within one token contract — and is used in fund issuances where preferred and ordinary units must be segregated with distinct transfer rules.

KYC/AML Whitelist Setup and Investor Onboarding

Investor onboarding for a regulated security token requires three steps before a wallet is whitelisted for transfer: identity verification against a government-issued document, accreditation verification matching the applicable exemption (income or net worth thresholds for Reg D, MAS institutional definitions, etc.), and sanctions screening against OFAC and equivalent lists. Securitize and Tokeny both provide onboarding modules that output a verified identity claim stored either on-chain (ERC-3643 ONCHAINID) or in a permissioned registry linked to the smart contract. Each verified wallet receives a transfer eligibility flag that the token contract checks before executing any transfer — meaning a non-verified wallet cannot receive tokens even if the issuer manually sends them, because the smart contract reverts the transaction.

Data current as of June 2026.

Secondary market listing — the final step — determines where verified investors can trade the token after issuance, and it carries its own regulatory requirements that vary by venue type.

Secondary Markets and Post-Issuance Obligations

Listing on a regulated alternative trading system (ATS) constrains the investor universe to the jurisdiction's eligible participants but satisfies securities regulators; listing on a permissioned decentralized exchange (DEX) widens access but requires ongoing wallet whitelisting that extends the issuer's compliance obligations indefinitely. Both options carry post-issuance reporting requirements that exist in perpetuity.

ATS vs DEX — Regulated vs Permissionless Secondary Markets

An ATS — tZERO, MERJ Exchange, or SDX in Switzerland — operates under securities exchange regulations, meaning it screens participants, maintains order books under market surveillance rules, and provides a regulatory audit trail acceptable to the SEC, FCA, and equivalent bodies. Tokens listed on an ATS benefit from price discovery and institutional credibility, but trading hours, participant eligibility, and supported token standards constrain liquidity. A permissioned DEX — a decentralized protocol with a whitelist gate enforced by the token's smart contract — allows 24/7 trading across any compliant wallet globally, but the issuer bears responsibility for keeping the whitelist current as investor accreditation status changes, legal ownership transfers, or sanctions lists update. Several issuers in 2026 operate dual-venue structures: ATS for primary institutional liquidity and a permissioned DEX pool for after-hours and cross-border access.

Post-Issuance Obligations — Reporting, Compliance, and Investor Relations

Post-issuance obligations begin the day the token is issued and do not expire as long as the token remains outstanding. Under Reg A+, issuers file annual reports on Form 1-K and semiannual reports on Form 1-SA with the SEC. Under MiCA, issuers publish periodic disclosures aligned with the approved white paper and notify the competent authority of material changes. Issuers must also update the KYC whitelist when investor circumstances change — an accreditation that lapses removes the investor's transfer eligibility — and manage corporate action events including distributions, redemptions, and voting on-chain through the token contract's governance module. Platforms including Securitize automate the majority of these functions through their transfer agent infrastructure, but ultimate legal liability for disclosure accuracy and whitelist maintenance rests with the issuer.

FAQ

References / Sources