7. Security Tokens
Section 6.4 treated the securities question as a threshold test: does this token qualify as a security? For ICO projects in 2017, the answer determined whether regulators came knocking. Hundreds of projects structured their tokens to avoid the classification, calling everything a "utility token" regardless of the economics underneath.
The projects that accepted the label built differently. tZERO filed with the SEC, verified every investor, and raised $134 million through a registered offering in 2018 1. It's still operating. Blockchain Capital tokenized a venture fund and gave investors in 80+ countries access to a VC portfolio that would normally require a $250,000 minimum and a 7-to-10-year lock-up 2. In January 2025, it made its first on-chain dividend payment in stablecoins. Most ICO projects from the same era no longer exist.
The gap between those outcomes wasn't technology or vision. It was legal infrastructure.
This chapter picks up where Section 6.4 left off. The classification question is settled: your token is a security. Now what?
What Makes Security Tokens Different
Every token category covered so far operates in relatively permissionless environments. Anyone with a wallet can hold fungible tokens (Section 3), bid on NFTs (Section 4), vote with governance tokens (Section 5), or use utility tokens (Section 6). Security tokens don't work that way.
Security tokens require compliance infrastructure at every step. Issuers must file with securities regulators and choose a regulatory exemption pathway. Every buyer must pass identity verification and anti-money laundering checks. Smart contracts enforce transfer restrictions, checking a whitelist before executing any transaction. Licensed intermediaries, from transfer agents to broker-dealers to regulated exchanges, must facilitate issuance and trading. Skip any of these, and you're operating illegally.
The trade-off is explicit: more rules, more cost, more friction. A Regulation D security token offering costs $100,000 to $500,000 in legal, technical, and filing expenses. Only accredited investors can participate under most exemptions, restricting who can buy. Tokens face lock-up periods before secondary trading can begin. Fewer exchanges support security tokens, and daily trading volumes remain a fraction of what major crypto platforms process.
But security tokens open doors that other token categories cannot. Real estate, private equity, venture funds, bonds, gold, and institutional fund shares now exist on-chain as regulated financial products. Investors who could never access a Detroit rental property or a venture capital portfolio can buy fractional exposure starting under $100. Smart contracts automate dividend distributions and coupon payments that traditional finance handles through manual processing. And institutional investors managing trillions of dollars can participate, because the compliance infrastructure gives them permission to.
The institutional signals are hard to ignore. BlackRock's tokenized money market fund holds over $2.5 billion in assets across nine blockchain networks 3. JPMorgan processes $2 billion daily through its blockchain settlement infrastructure 4. The European Investment Bank has issued digital bonds on Ethereum 5. Goldman Sachs, Societe Generale, and Franklin Templeton all have active tokenization programs. These institutions didn't enter crypto through utility tokens or governance tokens. They entered through security tokens, because security tokens operate within the regulatory framework they already trust.
The market is growing but still early. On-chain tokenized real-world assets (excluding stablecoins) grew from roughly $5 billion in late 2023 to $24 billion by mid-2025, and projections from BCG put the total addressable market at $16 trillion by 2030 6. But most security tokens still trade thinly, secondary markets serve thousands of participants instead of millions, and the compliance costs that enable institutional trust also limit accessibility. The tension between regulatory legitimacy and market friction runs through every section of this chapter.
A Note on Fractionalized NFTs
One overlap worth flagging: fractionalized NFTs (covered in Section 4.2) can trigger securities classification. Splitting a high-value NFT into fungible shares that buyers hold for profit looks a lot like a securities offering under the Howey Test. Several projects have faced regulatory scrutiny for this reason. The line between NFTs and security tokens isn't always clean. The same asset can shift categories depending on how it's structured and sold.
What This Section Covers
7.1 Compliance Infrastructure and Issuance Pathways covers the four US exemption pathways that let security token offerings proceed without full SEC registration, what each costs in time and money (from Reg D's weeks and $100K to Reg A+'s two years and $2 million), and how ERC-3643 enforces investor eligibility directly inside the token contract so that non-compliant transfers fail automatically, before any human gatekeeper gets involved.
7.2 Asset-Backed Tokens maps five categories of tokenized real-world assets: real estate (RealT's $100 minimums and weekly USDC rental income), equity and fund shares, bonds (EIB's €100 million digital bond settled in one day instead of five), tokenized commodities like PAXG, and institutional fund shares like BlackRock's BUIDL. It covers the three-layer structure every asset-backed token depends on, why thin secondary markets remain the category's central problem, and why tokenization moves ownership on-chain but cannot move trust verification with it.
7.3 Real-World Examples: tZERO and Blockchain Capital (BCAP) follows two 2017-2018 projects that built compliance infrastructure while most ICOs were cutting corners. tZERO raised $134 million, got SEC-registered status, and built the exchange plumbing that institutions now rely on, while its own TZROP token lost 80% of its value and averages 1,500 daily trades. BCAP proved a tokenized VC fund can pay stablecoin dividends on-chain to investors in 80+ countries, while trading at a 40-75% discount to net asset value. The lesson isn't that compliance fails. It's that infrastructure takes time to find its market.
7.4 Geographic Considerations maps how nine jurisdictions treat the same security token differently, from the US shifting its stance after $7.7 billion in enforcement actions to the EU's DLT Pilot Regime enabling tokenized securities across all 27 member states through a single license, to China's comprehensive ban and India's 30% flat tax that achieves the same deterrence without prohibition. Geographic strategy and compliance strategy are the same decision, and per-jurisdiction legal costs make most issuers restrict to one to three markets.
7.5 Real-World Assets explains why "RWA" became the dominant term (DeFi protocols coined it in 2022 while searching for yield that could survive a bear market, not TradFi securities lawyers), introduces a second model where RWAs function as yield infrastructure inside DeFi protocols rather than as end-investor products (Centrifuge, Maple Finance, Ondo), and puts the $24 billion currently on-chain into context against a $330 trillion global real estate market, $130 trillion bond market, and $14 trillion private equity industry.