RWA Custody: Securing Tokenised Real Assets

As tokenised real-world assets move from pilot programmes into institutional portfolios, the question of how those assets are held — and who is legally responsible for holding them — has become the defining due-diligence issue for wealth managers and family offices.

Why RWA Custody Is a Distinct Discipline

Traditional securities custody is governed by decades of settled law: Central Securities Depositories Regulations (CSDR) in Europe, DTC rules in the United States, and robust prime-brokerage practice globally. RWA custody straddles two legal worlds simultaneously. The underlying asset — a commercial property, a private credit facility, a renewable-energy receivable — is governed by civil or property law. The token representing that asset is governed by emerging crypto-asset or digital-securities regulation. Getting both layers right, and ensuring they remain legally coupled, is what makes RWA custody materially harder than either pure crypto-asset custody or conventional fund administration. A failure at the token layer (key compromise, smart-contract exploit) does not automatically impair the underlying asset, but it can sever the investor's ability to prove or exercise their claim. The reverse is equally dangerous: a clean token record means nothing if the underlying collateral is disputed, encumbered, or liquidated without investor consent.

The Three Custody Layers Every Advisor Must Understand

Sound RWA custody analysis requires examining three interdependent layers. First, the underlying-asset layer: how is the physical or financial asset ring-fenced? Best practice involves a bankruptcy-remote special-purpose vehicle (SPV), preferably under a jurisdiction with tested insolvency law. Second, the legal-link layer: the mechanism — whether a deed of assignment, a registered pledge, or a notarised transfer — that ties the token to the SPV interest. If this link is unenforceable, token holders may have only an unsecured contractual claim against the issuer. Third, the token-custody layer: the secure storage and transfer of the private cryptographic keys that control on-chain token balances. Each layer can fail independently. A thorough due-diligence checklist must verify all three, since a weakness in any single layer can render the other two protections largely academic.

Regulatory Frameworks: MiCA, ESMA Guidelines, and the Liechtenstein TVTG

The regulatory landscape is converging but not yet uniform. Under MiCA (Regulation EU 2023/1114), issuers of asset-referenced tokens must maintain a custody policy and, where technically feasible, use a regulated crypto-asset service provider (CASP) for custody functions. ESMA's technical standards — still in phased development — are expected to formalise segregation and reconciliation requirements. In Liechtenstein, the Token and Trusted Technology Service Provider Act (TVTG) already provides a statutory framework: Physical Validators (PVs) register the coupling between a real-world right and an on-chain token, creating a public, auditable record. The Liechtenstein FMA supervises TVTG-registered service providers. Investhub leverages this infrastructure to issue tokens under a regulated Liechtenstein framework, giving advisors a concrete legal anchor — rather than a whitepaper promise — when assessing custody arrangements. Where an issuer cannot point to a comparable statutory framework, advisors should treat the legal-link layer as materially unproven.

Custody Models: Qualified Custodian, Self-Custody, and Multi-Party Computation

Three models dominate the market. Qualified custodian models delegate key storage to a licensed entity — a bank, trust company, or CASP — that holds assets under a fiduciary or contractual standard and maintains segregated client accounts. This model offers the clearest regulatory precedent and the most straightforward audit trail, but introduces counterparty risk to the custodian itself. Self-custody, where the issuer or SPV retains keys, reduces counterparty concentration but requires institutional-grade key management (hardware security modules, air-gapped signing, documented disaster-recovery procedures) and is rarely acceptable to institutional investors without independent verification. Multi-party computation (MPC) wallets distribute key shares across multiple parties so that no single actor can unilaterally move assets, substantially reducing single-point-of-failure risk. MPC is increasingly the default for institutional issuers, though advisors should verify which parties hold shards and whether threshold-signing quorums can be captured by a single economic group.

Operational Risks Specific to Tokenised Real Assets

Beyond key management, RWA custody introduces operational risks that are absent in pure crypto or conventional fund structures. Smart-contract risk: token logic — transfer restrictions, corporate-action processing, redemption mechanics — is encoded in code that can contain exploitable bugs. Third-party audits by reputable firms are necessary but not sufficient. Oracle risk: tokens whose economics depend on external data feeds (property valuations, interest-rate benchmarks, FX rates) are exposed to feed manipulation or failure. Governance risk: upgradeable smart contracts can alter token terms post-issuance if governance controls are weak; advisors should verify whether upgrade rights are time-locked or subject to token-holder consent. Liquidity and transfer-agent risk: secondary settlement depends on functioning transfer-agent infrastructure; Investhub's regulated bulletin board provides a controlled venue for secondary transactions, reducing the risk of off-platform bilateral trades that circumvent AML/KYC controls.

Due-Diligence Checklist for Wealth Managers and Family Offices

A practical RWA custody review should cover at minimum: (1) SPV structure — jurisdiction, insolvency remoteness, registered charge or pledge over the underlying asset; (2) legal-link documentation — independent legal opinion confirming enforceability of the token-to-asset coupling in the SPV's home jurisdiction; (3) custodian identity and licence — name, licence number, regulatory supervisor, and scope of the custody agreement; (4) key management architecture — MPC, HSM, or multi-signature, with documented recovery procedures; (5) smart-contract audit reports — recency, auditor reputation, critical findings and mitigations; (6) insurance — crime, cyber, and professional indemnity coverage scoped to digital-asset custody; (7) periodic reconciliation — frequency and independence of reconciliation between on-chain token balances and off-chain asset registers. Advisors who obtain written answers to all seven points from an issuer are materially better positioned to assess residual custody risk than those relying on marketing materials alone.

How Investhub Approaches RWA Custody in Practice

Investhub issues tokens under the Liechtenstein TVTG framework, providing the statutory Physical Validator registration that anchors token rights to underlying assets in a legally recognised way. Settlement is conducted in stablecoins, removing the foreign-exchange and custodian-bank settlement risk inherent in fiat rails. The secondary bulletin board operates under regulatory oversight, ensuring that transfer-agent and AML/KYC functions are maintained throughout the token's lifecycle — not just at issuance. Investhub does not provide investment advice, and nothing in this article constitutes a recommendation to invest in any token or asset class. Every investment in tokenised assets carries risk, including the risk of total loss of capital. Wealth managers and family offices conducting due diligence on any token issued via Investhub's infrastructure are encouraged to seek independent legal and financial advice and to request the full documentation package from the issuer.

RWA custody is not a single product or a checkbox — it is an interlocking set of legal, operational, and technical controls that must be verified at every layer of the token structure. For wealth managers and family offices conducting due diligence, the questions raised in this guide provide a working framework for distinguishing issuers with genuinely robust custody arrangements from those relying on regulatory ambiguity. Investhub's Liechtenstein-based infrastructure is designed with these requirements in mind, offering regulated issuance, stablecoin settlement, and a supervised secondary venue. We invite advisors to request the full technical and legal documentation for any token on the platform and to engage their own counsel before making allocation decisions.