Cross-Border RWA Risk: Where Tokenized Assets Live

Where does a tokenized real-world asset legally live?

A tokenized real-world asset, commonly called an RWA, can exist in several places at once. The token may be recorded on Ethereum, the issuer may be incorporated in the British Virgin Islands, an SPV may sit in Delaware, the securities custodian may be in New York, and the holder may be a company in Singapore. Each location can contribute a different rule without any one location answering the whole legal question.

The blockchain is normally the easiest layer to identify and the least useful for determining jurisdiction. Ethereum records addresses, balances, transfers, and smart-contract instructions. It does not, by itself, identify whether a token is a fund share, a secured note, an unsecured promise, a beneficial interest, or merely a contractual claim against an issuer. That classification comes from legal documents and applicable law.

To find where an RWA legally lives, start with the entity that owes the holder a duty. Then identify its domicile, the governing law in the subscription agreement or prospectus, the court or arbitration forum, and the jurisdiction holding the underlying collateral. A governing-law clause is important, but it cannot always override local insolvency law, sanctions, securities restrictions, property rules, or mandatory protections in the holder's country.

This is why the token is on Ethereum is not a legal answer. Two visually identical ERC-20 tokens can represent very different rights. One may be a registered share of a bankruptcy-remote fund, while another may be an unsecured note issued by a thinly capitalized company. Their smart contracts can look similar even though their recovery prospects are not.

The cross-border risks that can block payment or recovery

The first major risk is that the token does not grant direct ownership of the advertised asset. A token described as Treasury-backed may represent a share in a fund, a note secured by fund interests, or a contractual entitlement to redemption proceeds. If the issuer fails, the holder may need to prove a claim against that entity rather than claim specific Treasury bills. If collateral was not properly segregated or pledged, other creditors may compete for the same pool.

The second risk is a conflict between jurisdictions. A contract might select Delaware law, but collateral could be held abroad and the issuer could enter insolvency in Cayman or the British Virgin Islands. A court in the holder's country may refuse to enforce a foreign judgment on public-policy, securities-law, sanctions, or procedural grounds. Litigation can also be uneconomic even when the legal claim is sound, especially if documents require proceedings in a distant forum.

The third risk is operational exclusion. Transfer agents and administrators commonly maintain allowlists, meaning only approved wallets can hold or redeem the token. A wallet may be frozen after sanctions screening, a change in residency, expired KYC records, or suspected interaction with a prohibited address. Smart-contract administrators may also pause transfers, replace balances, or force a token into another wallet if the documents permit it.

Historical losses show why legal form matters. During the 2022 credit collapse, defaults linked to borrowers such as Orthogonal Trading caused losses in Maple Finance lending pools, despite loans being represented and managed through on-chain systems. Celsius, BlockFi, and FTX customers also discovered that an account balance or platform label did not settle whether they owned assets or held bankruptcy claims. These were not all tokenized Treasury products, but the failure mode is relevant: software can display a balance while insolvency law determines recovery.

How the legal stack works from token to Treasury bill

Consider a simplified tokenized Treasury product. An investor passes KYC and signs a subscription agreement with an issuer or fund. The investor sends cash or stablecoins. The issuer, investment manager, or broker converts those funds into permitted assets, while a regulated custodian or bank holds Treasury bills, money-market fund shares, or cash. The issuer then instructs a transfer agent or smart contract to mint tokens to the investor's approved wallet.

The investor's legal right depends on the documents connecting those steps. A fund token may represent shares recorded in the fund's official register. A note token may evidence debt owed by an issuer. A participation token may pass through only some payments received from another instrument. The blockchain record can be evidence of ownership, but many structures state that the administrator's off-chain register controls if it conflicts with on-chain data.

Redemption reverses the process, but it is rarely automatic in the legal sense. The holder submits a request, completes ongoing compliance checks, and sends or burns tokens. The administrator may impose cut-off times, minimums, settlement delays, market-closure rules, or suspension rights. The product may promise daily liquidity while reserving a broad right to delay redemptions during market disruption, banking outages, sanctions reviews, or fund liquidation.

If the issuer fails, the chain must be examined entity by entity. Are the assets legally owned by a fund for shareholders, pledged to a collateral agent for noteholders, or merely held in the issuer's general account? Is the custodian's record consistent with the token register? Was the security interest perfected, meaning the legal steps required to make it effective against other creditors were completed? An attestation showing assets at one date does not answer these priority questions.

Cayman, Delaware, and Switzerland do not create the same claim

A Cayman structure often uses an exempted company, limited partnership, or segregated portfolio company. Cayman offers flexible fund formation and a common-law legal system familiar to institutional managers. However, liquidation generally proceeds under Cayman law, and investors may need Cayman counsel to pursue shareholder or creditor remedies. A segregated portfolio can be designed to separate assets and liabilities, but the effectiveness of that separation abroad can depend on whether another country's court recognizes it.

Delaware structures commonly use limited partnerships, LLCs, statutory trusts, or corporations. Delaware provides detailed entity law and broad contractual flexibility, but that flexibility makes the documents unusually important. A token holder may have an equity interest, a debt claim, or a security entitlement through an intermediary. US federal securities law still applies where relevant, and US bankruptcy, commercial, and sanctions rules may matter even when the blockchain or investor is outside the United States.

Switzerland has a more explicit statutory route for certain ledger-based rights. Its DLT reforms allow qualifying rights to be represented in a tamper-resistant electronic register, sometimes described as register value rights. That can strengthen the connection between the ledger entry and the legal right under Swiss law. It does not automatically make every token a legally recognized security, exempt a fund from FINMA rules, or guarantee that a foreign court will apply the Swiss classification.

An SPV's domicile should therefore be treated as one part of a comparison, not a quality score. A Cayman vehicle can be carefully segregated or poorly documented. A Delaware vehicle can offer a clear perfected security interest or only an unsecured promise. A Swiss ledger right can have strong domestic recognition while remaining difficult for an ineligible foreign holder to enforce. The decisive evidence is the actual constitutional documents, offering terms, asset records, and conflicts-of-law analysis.

MiCA, Reg S, and Reg D answer different questions

MiCA is the European Union framework for crypto-assets, issuers, and service providers that fall within its scope. It generally excludes crypto-assets already classified as financial instruments under existing EU financial-services law. A tokenized fund share or transferable security may therefore be governed mainly by MiFID II, the Prospectus Regulation, AIFMD, UCITS rules, and national law rather than receiving a simple MiCA passport. Calling a product MiCA-compliant can be incomplete unless the speaker explains its legal classification.

Reg D is a group of exemptions from US Securities Act registration for private offerings. Tokenized funds often rely on Rule 506(c), under which general solicitation may be permitted but every purchaser must be an accredited investor whose status is verified. Some funds also restrict access to qualified purchasers under the Investment Company Act, which is a separate and generally higher threshold. Reg D does not mean that the security is approved by the SEC or freely tradable.

Reg S provides a safe harbor for certain offers and sales made outside the United States. It includes conditions intended to prevent an offshore offering from becoming an unregistered US distribution, including restrictions involving US persons and directed selling efforts. Depending on the security and issuer category, distribution-compliance periods or transfer controls may apply. A non-US buyer can still be rejected because of residency, ownership, sanctions, or the issuer's own risk policy.

A product can rely on Reg D for eligible US investors and Reg S for eligible offshore investors while facing EU financial-instrument rules for distribution in Europe. These regimes are not direct substitutes for one another. They address different markets and legal questions. The holder must check which offering route covers the specific purchase, not merely which acronyms appear on a website.

A worked comparison: BUIDL, OUSG, and a Maple-style note

BUIDL is the ticker associated with the BlackRock USD Institutional Digital Liquidity Fund. Its public launch materials describe a fund organized in the British Virgin Islands, with Securitize providing tokenization, transfer agency, and related services. The token represents an interest in the fund rather than direct title to a particular Treasury bill in a wallet. Access has been limited to eligible institutional investors under private-offering requirements, including US securities-law restrictions. Current documents must be checked because chains, service providers, minimums, and eligibility can change.

For a BUIDL holder, the legal path runs from the approved wallet to the official shareholder record, then to the BVI fund, its manager and administrator, and finally to assets held through custodial and trading arrangements. Ethereum helps transfer the token between approved addresses, but a dispute over shareholder rights or liquidation would not be decided by Ethereum consensus. The BVI entity's documents, selected governing law, service-provider contracts, and applicable insolvency rules would control the central questions.

OUSG is Ondo Finance's tokenized exposure to short-term US government securities and institutional money-market products. Public materials have described OUSG through a US private-fund structure associated with Ondo I LP, with access restricted to qualified purchasers and transfers controlled through compliance systems. Its portfolio and counterparties have evolved, including exposure through institutional tokenized funds such as BUIDL. That creates a layered claim: an OUSG holder has rights under OUSG's structure, while that vehicle may itself own interests in another fund. The holder does not simply become a direct BUIDL shareholder unless the governing records say so.

A Maple-style note produces a different risk map. Imagine a Delaware or Cayman issuer that sells tokenized notes and lends the proceeds through a managed credit pool. The token holder is a creditor of the note issuer, while repayment depends on borrowers, collateral, a pool delegate, and enforcement agents. Even if the token settles instantly, borrower defaults can leave recovery tied up in workouts or litigation. This stylized example is not a description of every Maple product, but it shows why private-credit tokens should not be compared with Treasury funds solely by APY.

What changes across the three structures?

• Nature of the right: BUIDL is structured as a tokenized fund interest, OUSG adds another fund or portfolio layer, and a note gives a debt claim against its issuer.
• Asset distance: The more entities between the holder and the underlying security, the more contracts, fees, insolvency estates, and reconciliation points can intervene.
• Liquidity source: Redemption may depend on fund liquidity, an issuer's cash and market access, or borrower repayments rather than on secondary-market demand for the token.
• Enforcement: Shareholder remedies, limited-partner rights, secured-creditor remedies, and unsecured claims follow different rules even when all three assets appear in the same wallet.

USDY illustrates another distinction within Ondo's product family. It has been presented as a tokenized note backed by short-term US Treasuries and bank deposits for eligible non-US investors, with Reg S-related restrictions. OUSG and USDY are therefore not interchangeable merely because both provide dollar-denominated yield exposure. ONDO is a governance token and does not itself grant ownership of OUSG, USDY, BUIDL, or their underlying assets.

What investors and DAO treasuries should verify

Begin with the offering memorandum, prospectus, subscription agreement, constitutional documents, and token terms. Marketing pages and dashboards are summaries, not the controlling contract. Record the full legal name and domicile of the issuer, fund, general partner, investment manager, administrator, custodian, transfer agent, collateral agent, and any intermediate SPV. If a document cannot be obtained, treat that absence as a material limitation rather than filling the gap with assumptions.

Next, map ownership and enforcement. Determine whether the token is itself the official ownership record or only mirrors an off-chain register. Identify the governing law, dispute forum, service-of-process method, insolvency venue, and asset location. For a secured note, find the collateral agreement and evidence of perfection. For a fund, review segregation, valuation, redemption suspension, side-pocket, expense, and liquidation provisions. A DAO should also confirm who has authority to sign representations on its behalf.

Sanctions require a separate review. There is no single sanctions exposure on US-person lists that resolves every case. OFAC maintains lists such as the Specially Designated Nationals list, while US-person obligations, territorial sanctions, ownership rules, and prohibited jurisdictions can extend beyond named wallet addresses. A non-US DAO can still encounter a US nexus through dollars, US securities, US managers, custodians, cloud providers, or signers. Screening tools can also produce false positives, yet issuers may freeze first and investigate later.

Finally, test the exit rather than assuming redemption works. Ask what happens if the investor moves country, a signer becomes ineligible, a wallet is compromised, stablecoin rails fail, the issuer is sanctioned, or the administrator closes. Verify whether redemption pays cash, USDC, or another asset, and whether a bank account in the holder's name is mandatory. Compare net yield only after legal, tax, custody, liquidity, smart-contract, and counterparty risks. How tokenized Treasuries work and RWA smart-contract risk provide useful companion frameworks, but local legal advice may still be necessary.

Read cross-border RWA news critically with Zippfeed

RWA structures, service providers, sanctions policies, and offering terms can change faster than a treasury committee can monitor them manually. Zippfeed organizes BUIDL, OUSG, USDY, ONDO, and broader tokenization headlines with bullish, neutral, or bearish sentiment scoring plus an importance rating, helping you identify developments worth checking against the controlling legal documents rather than reacting to every announcement.