Ondo Guide
Custody Arrangements for RWA Issuers: How Tokenized Assets Are Safely Held
# Custody Arrangements for RWA Issuers: How Tokenized Assets Are Safely Held
When you issue a real-world asset (RWA) token, the underlying asset—whether a treasury bond, a piece of real estate, or a private credit instrument—must be held by a regulated custodian, while the token itself lives on a blockchain. The custody arrangement is the legal and operational bridge between those two worlds. For issuers, this means choosing a structure where the custodian holds the off-chain asset in a segregated account, and the token smart contract records ownership rights to that specific holding. Unlike crypto-native custody, which focuses on private keys, RWA custody centers on legal title, settlement finality, and auditability of the off-chain asset.
## The Core Custody Models for RWA Issuers
There is no single standard. Issuers typically choose between three primary models, each with distinct trade-offs regarding control, cost, and regulatory clarity.
### Traditional Custodian with Token Wrapper
This is the most common approach for tokenized securities like money market funds. A licensed bank or broker-dealer holds the underlying asset (e.g., U.S. Treasuries) in a segregated account. The issuer then creates a token that represents a proportional claim on that account. The custodian does not interact with the blockchain; it simply holds the asset and confirms balances to the issuer or a transfer agent.
- **Pros:** High regulatory comfort, existing institutional rails, clear bankruptcy remoteness.
- **Cons:** Slower settlement, manual reconciliation between off-chain records and on-chain balances.
### On-Chain Custody via Smart Contract Escrow
Here, the custodian is a smart contract itself. The issuer deposits the RWA into a contract that locks the asset until certain conditions are met (e.g., KYC verification, payment confirmation). This model reduces counterparty risk from a human intermediary but introduces smart contract risk. It is more common for physical assets like tokenized commodities or art.
### Hybrid: Qualified Custodian + Digital Asset Sub-Custodian
Many issuers split duties. A traditional qualified custodian holds the legal title to the asset, while a digital asset custodian manages the private keys to the token contract and the issuer’s treasury wallet. This separation ensures that a compromise of one system does not expose the other.
## Key Legal and Operational Safeguards
Regardless of the model, every RWA custody arrangement must address three non-negotiable elements.
### Segregation of Assets
The custodian must hold the RWA in a separate account, not commingled with its own assets or those of other clients. This is critical for bankruptcy remoteness: if the custodian fails, the asset remains the property of the token holders, not the custodian’s creditors. Issuers should verify this in the custody agreement and request periodic attestations.
### Control and Signature Authority
The issuer must define who can instruct the custodian to move or sell the asset. Usually, this is a multi-signature process involving the issuer’s compliance officer and the custodian’s operations team. The token smart contract should also have a pause or freeze function, but only under predefined legal conditions (e.g., court order), not at the whim of a single admin key.
### Reconciliation and Proof of Reserves
Because the token trades 24/7 on-chain but the underlying asset settles in traditional markets, daily reconciliation is essential. Issuers should require the custodian to provide a daily report of holdings, which the issuer then matches against the token supply. Some issuers, like Ondo Finance with its tokenized Treasury products, publish periodic proof-of-reserves reports so token holders can independently verify that the on-chain supply equals the off-chain assets held in custody.
## The Role of the Issuer vs. the Role of the Custodian
A common confusion is that the issuer itself is the custodian. In most jurisdictions, they are not. The issuer creates and manages the token, handles investor onboarding, and ensures compliance. The custodian is a separate, regulated entity with a fiduciary duty to safekeep the asset. This separation is a regulatory requirement in places like the U.S. under the Investment Advisers Act, and it protects investors from issuer fraud.
| Responsibility | Issuer | Custodian |
|----------------|--------|-----------|
| Token creation and smart contract management | Yes | No |
| Legal title to the underlying asset | No | Yes |
| KYC/AML on token holders | Yes | No |
| Physical or book-entry safekeeping of asset | No | Yes |
| Daily reconciliation and reporting | Yes (oversight) | Yes (execution) |
| Bankruptcy remoteness of asset | No | Yes |
## Practical Considerations for BrickYield Issuers
If you are building a tokenized real estate or infrastructure fund, your custody arrangement must align with the asset’s liquidity profile. For illiquid assets like a commercial building, you do not need daily price feeds or proof-of-reserves in the same way a treasury product does. Instead, you need a custodian that can hold the deed or title, manage insurance documents, and handle property-related cash flows. For liquid assets like tokenized bonds, you need a custodian that can settle quickly and provide daily valuations.
### Choosing a Custodian: What to Ask
Before signing, issuers should ask the following questions:
- Does the custodian have experience with tokenized assets, or only traditional securities?
- Can the custodian provide a clear legal opinion on how tokens map to the underlying asset?
- What happens to the asset if the custodian goes bankrupt? Is it explicitly excluded from the custodian’s estate?
- Does the custodian support multi-signature withdrawals, and who holds the signing keys?
- How often are reconciliation reports delivered, and are they auditable by third parties?
### The Ondo Example: Transparency as a Feature
Ondo Finance’s approach to tokenized Treasuries offers a useful reference. They partner with regulated custodians for the underlying bonds, while their smart contracts handle token issuance and redemption. They publish a monthly report showing the exact amount of assets held in custody versus the total token supply. This creates an audit trail that both retail and institutional investors can trust. For a BrickYield issuer, adopting a similar transparency layer—even if simpler—will reduce the discount at which your tokens trade relative to their net asset value.
## The Future of RWA Custody
We are moving toward a world where the custodian and the blockchain are more deeply integrated. Some custodians now offer "tokenized custody," where they issue their own receipt tokens on-chain that represent the underlying asset, and the issuer’s token wraps those receipts. This creates a nested structure that adds complexity but also enables instant transfer of the underlying claim without moving the physical asset. For now, the safest path is to keep the legal title and the token separate, reconcile daily, and never assume that a smart contract replaces a regulated custodian.