What is RWA tokenization? How real-world assets become tokens

RWA tokenization is the process of recording rights in a real-world asset, such as a property, a fund unit or a loan, as tokens on a blockchain, so that ownership and transfers follow rules written in code. The token is only as strong as the legal structure behind it: someone must hold the asset, and the law must recognise the token holder's claim.

Key takeaways

  • A token is a record of a right in an asset. It is not the asset: the building, the fund or the loan stays off-chain with whoever holds it.
  • There are 3 legal models behind a token: ownership recorded at a registry, a share in a company that owns the asset, or a claim on the issuer. An offering should state exactly one.
  • Rules depend on the place. Dubai's Land Department opened a tokenisation pilot on 19 March 2025, and the EU's MiCA regulation has applied in full since 30 December 2024.
  • Tokenization changes the record and the transfer. It does not create buyers, remove legal steps or prove that the off-chain asset exists.
  • The chain can fail too. MANTRA Chain was exploited on 20 August 2026 and was unavailable for 30 hours and 13 minutes.

What "real-world asset" and "tokenization" mean

A real-world asset is anything of value that exists outside a blockchain, and tokenization records rights in it as transferable tokens. Short entries for each term are in the tokenization glossary, and the other guides are in the MANTRA Chain learn hub.

Real-world assets

A real-world asset (RWA) is an asset whose value exists outside a blockchain: property, fund units, government bills, loans, commodities or company shares. The label says where the asset lives, not what kind it is. Bitcoin is native to its chain. A tokenized warehouse receipt points to metal in a vault, so it depends on people, contracts and registries as well as on code.

Tokenization

Tokenization is the creation of a blockchain token that represents a defined right in an asset and can be transferred under set rules. Asset tokenization and RWA tokenization name the same process. Payment tokenization is something else: it replaces a card number with a substitute value during a payment. EU law takes a similarly broad view. Regulation (EU) 2023/1114 on markets in crypto-assets defines a crypto-asset as a digital representation of a value or of a right that can be transferred and stored electronically using distributed ledger technology or a similar technology.

What a token can and cannot represent

A token can represent ownership, a share, a debt claim or a right to income. It cannot hold the asset or enforce a claim in court. Code controls who holds the token and when it moves. Whether the holder can make anyone hand over a building or a repayment depends on the offering documents and the law behind them. A token is an entry in a register: only as good as the registrar and the right it records.

How RWA tokenization works, step by step

RWA tokenization works in five steps: verify the asset, place it in a legal structure, issue tokens, check investors and apply transfer rules, then service the asset while the tokens exist. The first two steps are entirely off-chain. Figure 1 shows how the two layers connect.

The two layers of a tokenized asset Off-chain, a legal layer holds the issuer, the custodian and the asset. On-chain, a token layer holds the token contract and the wallets of two holders. Arrow 1, issuance, runs from the issuer down to holder A. Arrow 2, transfer, runs from holder A to holder B after a check by the token contract. Arrow 3, income, runs from the asset down to holder B. Arrow 4, redemption, runs from holder B back up to the legal layer. OFF-CHAIN: LEGAL LAYER ISSUER owes holders CUSTODIAN holds asset ASSET e.g. a loan offering documents set the token's rules HOLDER A verified TOKEN CONTRACT HOLDER B verified 1 2 3 4 ON-CHAIN: TOKEN LAYER
Figure 1. The two layers of a tokenized asset. Issuer, custodian and asset sit off-chain. The token contract and the holders' wallets sit on-chain.

The four flows in Figure 1

1 Issuance
The issuer creates tokens for investors who passed its checks.
2 Transfer
A holder sends tokens to another verified wallet. The contract refuses a transfer that breaks the rules.
3 Income
Rent, coupons or repayments collected off-chain are paid to the holders on the record date.
4 Redemption
A holder returns tokens for what the offering documents promise.

1. Choose and verify the asset

The issuer first proves that the asset exists, who owns it and what it is worth: loan agreements and payment histories for a loan pool, the title record and a valuation for a building. An independent valuer, auditor or lawyer usually signs the evidence. Responsible: the originator and the issuer. Every later step inherits the quality of this one. A token cannot repair a title dispute or a bad loan.

2. Put it in a legal structure

The asset is then placed where the rights of token holders can attach to it: a registry entry, a company set up to own it (a special purpose vehicle, or SPV), a trust or fund, or a contract in which the issuer promises payments backed by the asset. The offering documents state what one token entitles its holder to. Responsible: the issuer and its lawyers, with a custodian, trustee or registrar holding the asset.

3. Issue tokens on a blockchain

The issuer deploys a token contract and creates (mints) a number of tokens that matches the legal structure, for example 50,000 tokens for 50,000 equal claims. RWA tokens are normally permissioned. ERC-3643, titled "T-REX - Token for Regulated EXchanges", is one published standard: it keeps the ERC-20 interface and adds an identity and compliance check to every transfer. Responsible: the issuer or its platform. Validators record transactions. They do not vouch for the asset.

4. Check investors and apply transfer rules

Before anyone receives a token, the issuer or a distributor checks the investor's identity and eligibility (KYC, AML and, where required, investor class or residence) and records the result against the wallet. From then on the contract applies the rules. Under ERC-3643 a transfer succeeds only if the receiving wallet is verified, and tokens can be frozen, moved by an appointed agent or recovered after a lost key. Responsible: the issuer and its agents, who answer to their regulator.

5. Service the asset and the token

While the tokens exist, someone must collect what the asset earns, pay it out, report and keep the two records in step. A servicer collects rent or repayments, the issuer distributes them to the wallets holding tokens on the record date, and an auditor compares the token supply with the asset register. At the end the issuer redeems and destroys (burns) the tokens. Responsible: the issuer, the servicer and the auditor. If one of them stops, the token still moves on-chain while its value drains away off-chain.

Every RWA token rests on one of three legal models: direct ownership recorded at a registry, a share in a company that owns the asset, or a claim on the issuer backed by the asset. An offering must state exactly one, because the model decides what a holder can enforce and against whom.

Three legal models for a tokenized asset
ModelWhat the holder ownsExample settingMain risk
Direct ownership recorded at a registryA recorded part of the asset itself.A land registry that tokenizes title deeds.The registry's rules decide ownership, not the token.
A share in a company that owns the assetShares or units in an SPV or fund that holds the asset.A property SPV, or a fund that holds government bills.Holders depend on the directors and the manager.
A claim on the issuer backed by the assetA contractual right to payment or redemption from the issuer.A pool of loans, or metal in a vault.If the issuer fails, holders are its creditors.
Last reviewed . The offering documents and local law decide which model applies.

Direct ownership recorded at a registry

The holder owns part of the asset itself, and an official registry records it. This is the strongest model and the hardest to build, because the registry must accept the token as its record or keep its own in step. Property is the main case: the Dubai Land Department describes its pilot as tokenization of property title deeds. The guide to how real estate tokenization works covers what that changes for a building.

A share in a company that owns the asset

The holder owns shares or units in a company, and the company owns the asset. The holder has a shareholder's rights: a vote where the articles give one, a part of each distribution and of the proceeds of a sale. If the manager acts badly, the remedy lies in company law, not in code. In many jurisdictions such a token is a security.

A claim on the issuer backed by the asset

The holder owns a promise: the issuer undertakes to pay or redeem and holds the asset as backing. This is the simplest model to set up and the most exposed to the issuer. Ask whether the backing is kept apart from the issuer's own property, who checks it and where holders rank in an insolvency. The loan-pool example below uses this model.

What can be tokenized

Almost any asset with a clear owner and a measurable value can be tokenized. Use is still small: in its report on the financial stability implications of tokenisation, the Financial Stability Board found on 22 October 2024 that the limited public data pointed to very low adoption that appeared to be growing.

Real estate

A building is usually tokenized through a company that owns it, and less often through the land registry. Rent and sale proceeds reach holders after costs. When it launched its tokenisation pilot on 19 March 2025, the Dubai Land Department projected a market of AED 60 billion by 2033, or 7% of Dubai's real estate transactions. That is a projection, not a measurement. MANTRA's work in the field is on the page about real estate tokenization on MANTRA Chain.

Funds and government bills

A fund is tokenized by recording its units as tokens, so the token holder is an investor in the fund. The administrator still calculates the net asset value, and subscriptions and redemptions still follow the fund's dealing days. Funds that hold short-dated government bills are simple to value. The token adds a transferable record. It does not change what the fund owns.

Private credit

Loans are tokenized as claims on an issuer or as shares in a vehicle that holds them. Borrowers pay a servicer, who passes the payments to token holders in proportion to their holdings. The token's value depends on borrowers paying on time, on the security for each loan and on the servicer's records. None of that is visible on-chain unless someone reports it.

Commodities and other assets

A commodity token is normally a claim on metal or goods held by a custodian in a vault or warehouse. What matters is whether the holder can take delivery, in what minimum quantity and at what cost, and who audits the stock. Shares, bonds and leases are tokenized in the same three ways. Each time, name the right, the holder of the asset and the way out.

Benefits, and where they stop

Tokenization has three real benefits: smaller minimum amounts, faster transfer and settlement, and one shared record. Each stops where the off-chain asset, the law or the market takes over.

Smaller minimums

Dividing an asset into many tokens lets an investor buy a small part of it. A pool of USD 5,000,000 split into 50,000 tokens can be bought USD 100 at a time. The limit: a smaller ticket does not create buyers. A fraction of an asset that few people want is still hard to sell, and offering rules may restrict who can buy.

Faster transfer and settlement

A token transfer and its payment can settle together in one transaction, at any hour, without intermediaries reconciling separate books. The limit: on-chain settlement is final only for the token. Where the law requires a registry update, a notarised deed or a transfer agent's approval, that step still takes its time, and the holder's right is complete only when it is done.

A shared, auditable record

Every issuance, transfer and redemption is written to one ledger that the issuer, the holders and the auditors can read. The limit: a public record proves what happened to the token. It does not prove that the building exists, that the vault holds the metal or that the borrowers are paying. Only audits, attestations and registry checks can show that.

What tokenization does not fix

Tokenization does not improve a weak asset, a weak issuer or a weak legal claim, and it adds risks of its own: software faults, lost keys and dependence on one network. A report by the Bank for International Settlements and its payments committee, Tokenisation in the context of money and other assets, noted on 21 October 2024 that the risks usually tied to financial market infrastructures apply to token arrangements too, though they may appear in a different form.

What can go wrong: five risks to check

Five things can go wrong with a tokenized asset: the legal claim fails, the party holding the asset fails, no buyer appears, the software or the network fails, or the rules change. The formal statement for this site is the risk disclosure for tokenized assets.

Legal and enforcement risk

The token may not give its holder a right that a court will enforce. This happens when the offering documents are vague, when local law does not recognise a token as proof of ownership, or when the asset and the holder are in different countries. Check which law governs the token and who hears a dispute.

Custody and counterparty risk

Someone holds the asset, and that party can fail, be careless or commit fraud. A custodian can lose title documents, a servicer can misdirect payments and an issuer can pledge the same asset twice. Segregation, an independent custodian and regular third-party audits reduce the risk. None of them removes it.

Liquidity risk

A holder may find no buyer at an acceptable price, or no buyer at all. A token that moves only between approved wallets and trades on a single venue has few possible buyers, and redemption with the issuer may be the only exit. The Financial Stability Board's report names liquidity and maturity mismatch first among the vulnerabilities of tokenization.

Smart-contract and blockchain risk

The token contract, or the network under it, can contain a fault that an attacker finds first. MANTRA Chain is a first-hand example.

First-hand example: MANTRA Chain, 20 August 2026

On 20 August 2026 an attacker used an unsigned-integer underflow in cosmos/evm, an upstream software module that MANTRA Chain depends on, to move 720,923,967.99 MANTRA: 600,000,035.56 from the chain's burn address and 120,923,932.44 from a legacy multisig. MANTRA's post-mortem puts the total at approximately US$3.6 million at the price before the incident. The chain was halted at 23:13 UTC and resumed at 05:26 UTC on 22 August on a patched release, 30 hours and 13 minutes later.

According to the post-mortem, no validator keys, administrator keys or governance controls were compromised, no customer account, exchange-held customer balance or application contract was debited, and no new MANTRA was created. Users were still affected: the network was unavailable for more than a day, and deposits and withdrawals stayed suspended at some exchanges for longer. As of 28 August 2026 no tokens had been recovered.

For a tokenized asset the lesson is plain. A legal claim survives a halt, but transfers, payouts and redemptions stop until the chain returns. The full account is in the August 2026 incident report.

Regulatory risk

Rules for tokenized assets are new and differ by country. A token that is lawful to sell in one place can be restricted in another, and a regulator can decide that it is a security or a regulated virtual asset and require a licence that the issuer lacks. Check who holds a licence, for what and from whom. On this site, Mantra Finance FZE is licensed by VARA in Dubai under VASP Licence VL/25/02/001, while MANTRA Chain Association, which operates the chain, is not licensed by VARA. The entities are set out on the page about MANTRA Chain.

Which blockchain: general-purpose, permissioned or purpose-built

An issuer can enforce its rules in three places: inside each token contract on a general-purpose public chain, across a private permissioned ledger, or in the base layer of a public chain built for the purpose. The choice decides who can read the record, who validates it and how easily tokens reach other markets.

Three places to enforce the rules of a tokenized asset
ApproachWhere rules are enforcedWho validatesOpennessTrade-offs
Rules in each smart contractIn the token contract, for example with ERC-3643.A public validator set.Anyone can read the ledger.Wide reach. Each issuer maintains its own rule set.
Private permissioned ledgerIn the membership rules of the network.Operators approved by the network.Only admitted parties can read or write.Privacy. Outsiders cannot check the record.
Public chain with compliance built inIn shared modules of the chain and in the token contract.A public validator set.A public ledger. Applications restrict holders.Shared tools. Dependence on one network's software.
Last reviewed . General descriptions; individual networks differ.

Rules in each smart contract

On a general-purpose chain the token contract carries all the rules. A standard such as ERC-3643 gives it an identity registry and a compliance check, so a transfer to an unverified wallet fails. The approach reaches the widest set of wallets and applications. The cost is repetition: each issuer writes or buys its own rule set, has it audited and maintains it.

Private permissioned ledgers

On a private ledger the operator admits every participant, so compliance is enforced at the door. The model suits institutions that must keep client data out of public view. The price: outsiders cannot verify the record, tokens do not move easily to other networks, and holders rely on the operator staying in business.

Public chains with compliance built in

A purpose-built public chain keeps the ledger open and moves common compliance tools into the network. MANTRA Chain is one such network. It is built on the Cosmos SDK and has been EVM-compatible since 17 September 2025. Its builder page says it integrates "KYC/AML, permissioned pools, and institutional guardrails at the protocol level"; that is the site's own statement, not an independent finding. In the week of 28 September to 4 October 2026 the network processed 14,274 transactions at an average fee of 0.0136 MANTRA. The drawbacks: the mainnet has run only since 23 October 2024, the network depends on upstream software it does not control, and its record includes the exploit described above. Fees are paid in the network's coin, described under MANTRA token facts.

See how the tokenization platform works

The stack, the token standards and the compliance model are on the page about the RWA tokenization platform on MANTRA Chain.

See how the tokenization platform works

How tokenized assets are regulated

Tokenized assets are regulated according to what the token represents and where it is offered, not according to the technology. Two regimes matter most for this site.

United Arab Emirates

In Dubai, outside the Dubai International Financial Centre, the Virtual Assets Regulatory Authority (VARA) sets the rules. Its Virtual Asset Issuance Rulebook places asset-referenced virtual assets in Category 1, so an issuer needs a VARA licence before it issues one. Rules elsewhere in the country differ. The guide to RWA tokenization regulation in the UAE covers each regulator.

European Union

In the EU, Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA) has applied in full since 30 December 2024. It does not apply to crypto-assets that qualify as financial instruments, so a tokenized share or bond stays under securities law. For other crypto-assets, an offer to the public generally requires a published white paper.

Why the label matters

The same asset can fall under different rules depending on how its token is built. A token that is a share is a security. A token whose value or rights refer to an underlying asset may be an asset-referenced virtual asset under Dubai's rules. A token recorded at a land registry follows property law. The label decides the licence the issuer needs, the document it must publish and the protection a holder has.

A worked example: a tokenized loan pool with illustrative numbers

This example follows one invented pool of business loans issued under the third legal model, a claim on the issuer. Every figure is illustrative, not a forecast, and no return is implied.

Illustrative figures, not a forecast

The pool
Business loans with a combined face value of USD 5,000,000 (illustrative), held by the issuer and collected by a servicer.
The tokens
50,000 tokens. USD 5,000,000 ÷ 50,000 = USD 100 of face value per token (illustrative).
One holding
250 tokens × USD 100 = USD 25,000 of face value. 250 ÷ 50,000 = 0.5% of the pool (illustrative).
A repayment
Borrowers pay USD 40,000 in one period. USD 40,000 ÷ 50,000 = USD 0.80 per token, so 250 tokens receive USD 200 before fees (illustrative).
A late payer
One borrower misses an instalment of USD 10,000. The pool collects USD 30,000, or USD 0.60 per token, and the same holding receives USD 150 before fees (illustrative).

What the holder owns here is a contractual claim on the issuer for 0.5% of what the pool pays, not 0.5% of any single loan. If the late borrower pays in the next period, the missing USD 50 arrives then. If the borrower defaults, the loss is shared across all 50,000 tokens. If the issuer itself fails, holders rank as its creditors unless the loans were kept apart for them.

The amounts are payments received, which include repaid principal. They say nothing about a return. The token contract shows every transfer and every payout. It cannot show whether a borrower will pay.

Eight questions to ask about any tokenized asset

Before buying any tokenized asset, a reader should be able to answer eight questions from the offering documents alone. If an answer is missing, treat that as the answer.

  1. What is the legal right? Ownership at a registry, a share in a company or a claim on the issuer: one of the three, stated in writing.
  2. Who is the issuer, and does it hold a licence? Look for the legal name, the regulator and the licence number, then check them on the regulator's public register.
  3. Who holds the asset? A named custodian, trustee or registrar, independent of the issuer where possible.
  4. How do I exit? Redemption terms, notice periods, the venues where the token trades and who is allowed to buy it.
  5. What are the fees? Issuance, management, servicing, custody, transfer and redemption fees, plus the network fee on each transaction.
  6. Who audits, and how often? The auditor's name, the date of the last report and where to read it.
  7. Which chain, and what is its incident record? Outages, exploits and how the operator reported them.
  8. What investor protection applies, if any? Ask in writing whether any compensation scheme covers the token. Often none does.

A building raises three more questions. They are in the property guide listed at the end of this page.

Frequently asked questions

What does RWA mean in crypto?

RWA stands for real-world asset. In crypto it means an asset that exists outside a blockchain, such as property, a fund unit, a government bill, a loan or a commodity, and that a token represents on-chain. The token records a right in the asset. The asset itself stays off-chain with a custodian, a company or a registry.

Is RWA tokenization the same as asset tokenization?

Yes, in everyday use. Asset tokenization is the broader term and can include assets that exist only in digital form, while RWA tokenization stresses that the asset lives outside the blockchain. Neither is the same as payment tokenization, which replaces a card number with a substitute value during a payment.

Does owning a token mean I own the asset?

Not necessarily. It depends on the legal model. In a registry model the holder owns a recorded part of the asset. In a company model the holder owns shares in a company that owns it. In an issuer-claim model the holder owns a promise from the issuer. The offering documents say which one applies.

Is RWA tokenization legal?

Yes, in many jurisdictions, under conditions that differ from place to place. The technique is lawful; what is regulated is the token and the offer. In Dubai, VARA requires a licence to issue asset-referenced virtual assets, and the European Union applies MiCA or securities law depending on what the token is.

Can I lose money on a tokenized asset?

Yes. The two most common ways are that the issuer or the legal structure fails, so the claim behind the token cannot be enforced in full, and that there is no buyer when you want to sell. The asset can also fall in value, and the contract or the blockchain can fail.

Sources

Each source below was opened and read for this guide. Statements about MANTRA Chain come from MANTRA's own publications and are labelled as such in the text.

  1. Virtual Assets Regulatory Authority, Virtual Asset Issuance Rulebook, Part I (issuance categories), rulebooks.vara.ae, read 12 October 2026.
  2. Regulation (EU) 2023/1114 of 31 May 2023 on markets in crypto-assets, Official Journal of the European Union L 150, 9 June 2023, text held by the Publications Office of the European Union, read 12 October 2026.
  3. ERC-3643, "T-REX - Token for Regulated EXchanges", Ethereum Improvement Proposals, eips.ethereum.org, read 12 October 2026.
  4. Dubai Land Department, "Dubai Land Department Launches Pilot Phase of the Real Estate Tokenisation Project", 19 March 2025, dubailand.gov.ae, read 12 October 2026.
  5. Financial Stability Board, "The Financial Stability Implications of Tokenisation", 22 October 2024, fsb.org, read 12 October 2026.
  6. Bank for International Settlements and Committee on Payments and Market Infrastructures, "Tokenisation in the context of money and other assets: concepts and implications for central banks", 21 October 2024, bis.org, read 12 October 2026.
  7. MANTRA, full post-mortem of the incident of 20 August 2026, published 28 August 2026, mantrachain.io/resources/announcements/20th-august-2026-full-incident-post-mortem, read 12 October 2026.
  8. MANTRA, Weekly Transparency Report 21 (week of 28 September to 4 October 2026), mantrachain.io/transparency/21/; builder page, mantrachain.io/for-builders; key dates, mantrachain.io/llms.txt. All read 12 October 2026.

Disclaimer

For information only. Not investment advice. This guide explains how tokenization works in general. It does not recommend any token, issuer or platform, and it is not legal or tax advice. Rules change: check the current text of each source and take professional advice before you act.

MANTRA Chain Research Team

This guide was drafted by the research team, checked against the primary sources listed above and reviewed by the Head of Compliance before publication. Corrections are dated and shown on the page. The editorial policy explains how we produce content, including how AI-assisted drafts are fact-checked.