Most tokenized stocks are unauthorized offshore paper. The CEO of Securitize just said it out loud.
Carlos Domingo, the man running one of the most tightly licensed platforms in digital securities, looked at an industry obsessed with 'Real World Assets' and called the trade exactly what it is: a regulatory landmine with insider trading hidden in the architecture. Not a bug report. Not a thoughtful essay. A direct warning from the center of the compliance stack.
That warning is a technical statement before it is a legal one. It should change how you evaluate every tokenized equity product currently trading on unrestricted chains. And for anyone holding tokens that claim to represent Apple, Tesla, Coinbase, or a pre-IPO unicorn without a clean legal opinion, it is the closest thing to an on-chain margin call.
Speed reveals truth; patience reveals value. The truth is uncomfortable: most of the tokenized stocks circulating on unregulated or offshore rails do not have the legal authorization to exist as securities in the jurisdictions where they are being sold. The code works. The marketing works. The legal foundation is still paper-air.
Let me unpack why this moment feels different.
Tokenization is just transportation; authorization is title. The RWA narrative became this cycle's most durable theme. BlackRock tokenized a money market fund using Securitize as its distribution layer. BNY Mellon started treating crypto custody as inevitable. Every conference panel has at least one speaker explaining why tokenized Apple stock will bring eight billion people into capital markets.
Maybe. But the shadow market that has grown up around tokenized equities looks nothing like the regulated, KYC-cleared pipeline BlackRock touched. It is an offshore bazaar. Tokens are minted on Ethereum, BNB Chain, Arbitrum, or an appchain with a marketing page. They are backed by promises rather than custody. They are sold to anyone with a wallet, an internet connection, and an appetite for exposure to the most famous stocks in the world.
Domingo's warning has three distinct accusations: unauthorized, offshore, insider trading risk. Each one has a different technical aftertaste. Conflating them hides the mechanics.
The unauthorized technical stack is a financial hallucination with an attractive interface. In a compliant security token issuance, the token is a transferable ledger entry, but the legal reality is governed by a stack of off-chain and on-chain controls. A competent security token smart contract has a whitelist. It enforces transfer restrictions. It embeds KYC/AML status in an off-chain registry. It respects the specific exemption under which the token was sold. The public chain is the transportation layer. The law is the title layer.
Unauthorized means none of that. It means someone deployed a smart contract, gave the token a ticker, minted a supply, and suggested a peg to the price of a stock. The code can price; wallets can trade. But the token cannot confer ownership because the issuer never legally sold that stock, and no custodian holds it. The token is a representation without a referent.
Based on my time auditing tokenization flows, the first question I ask is never 'what chain is this on?' It is 'who is the issuer?' More precisely: 'who is the legal owner of the underlying asset, and how did they get it?' If the answer cannot be proven with a signed legal opinion and a custody agreement, the token is not a security. It is a souvenir.
Once you understand that distinction, the next step is the token standard. A legitimate security token often uses ERC-3643 or ERC-1400. These are not glamorous. They bind the token to an identity registry, enforce transfer restrictions, and make compliance a technical property. They are the difference between a securities ledger and a casino. The offshore sector does not use them because offshore operations want open trading. The choice of token standard is therefore a legal signal, not just a technical detail.
This is why Howey testing matters. The SEC's four-prong test โ money invested, common enterprise, expectation of profits, and profits from the efforts of others โ applies to almost every tokenized stock. If the token is not registered and no exemption is available, it is an illegal offer by default. A smart contract cannot file a Form S-1. Decentralization does not dissolve the Securities Act. It just makes the violation easier to automate.
Compliance is not a clause; it is a primitive. I have a simple test I run with teams. It is not a technical test. It is the legal provenance test. I ask for four documents: a legal opinion from a qualified securities lawyer, a custody agreement with a licensed custodian, a written exemption or registration statement, and an audit trail that connects the token to a specific share certificate. Every serious tokenization project can produce those four documents within a week. Every offshore paper project produces a series of excuses.
The offshore trick is Regulation S, reverse engineered. Many tokenized stock issuers claim to use Regulation S, the SEC rule that allows unregistered offerings outside the United States. In theory, a token issued offshore to non-U.S. persons is outside the SEC's primary jurisdiction. In practice, a public blockchain has no national border. Once a token is deployed, U.S. residents can buy it through a DEX or a foreign exchange without a broker telling them no.
The result is a beautiful regulatory arbitrage. The issuer says the token is not being offered to U.S. persons. The technology says it is available to anyone with a wallet. The lawyer, if there is one, writes the opinion. Meanwhile, retail holders have no idea whether the original issuance was legal, whether the token has reserve backing, or whether the platform has any duty to stop a secondary sale to an American IP address.
This is not a loophole in the code. It is a loophole in the legal wrapper. And it is the exact reason unauthorized tokenized stocks feel more liquid than their compliant counterparts. Compliant platforms restrict. Offshore tokens flow. Speculative capital prefers the fastest settlement, not the cleanest title. The chain settles transactions, not legal title.
Do not be fooled by volume either. In a sideways market, everyone hunts for signals. I have seen tokenized stock tokens with millions in cumulative trading volume that are structurally unable to settle the underlying stock. You cannot look at trading volume and declare a token healthy. You have to ask whether settlement can actually happen. On-chain settlement for unauthorized tokens means updating a database; it does not mean transferring a share. That is the difference between a settlement and a screenshot.
Insider trading is the inevitable product of no disclosure. In traditional markets, insider trading is monitored through disclosure regimes. Form 4 filings. Insider trading windows. Compliance departments. Blockchain removes none of those obligations. It simply adds a transparent ledger to a system without accountability.
What does that create? A market where founders, team wallets, and early investors can move in and out of tokenized stock tokens with no reporting requirement. On-chain transparency gives us the data, but not the classification. There is no file telling you whether a wallet dumping into a thin liquidity pool is a person with material non-public information or a random arb bot. Without a regulator to force the disclosure, the line between legal trading and insider trading is invisible.
Worse, many of these tokenized stocks have no settlement connection to the underlying stock. If a project is issuing tokenized Tesla without actually owning shares, the 'stock price' is just a reference. The team sets a redemption policy, or does not. In that environment, the tokens behave less like securities and more like synthetic exposure to the stock, with the issuer as the counterparty. That is not stock ownership. That is a CFD with an NFT wrapper.
Think about the incentive. A team launches a tokenized stock, hypes a close correlation with a NASDAQ share price, builds a small liquidity pool. Insiders know exactly what the token is really worth, because they know whether the underlying asset exists. If there is no asset, the fair value is near zero. Selling into a hot liquid market before the obvious discovery is not criminal in any practical sense, because no regulator has jurisdiction. That is what offshore paper means: a market designed to make insider trading safe.
There is also a quieter form of insider trading: the publishing team. Some of these projects market themselves as news outlets while simultaneously supporting a tokenized stock product. They are not exactly the same as insiders at a public company, but the information asymmetry is identical. They control the narrative, the liquidity, and the timing. Without a compliance officer, that structure is a time bomb.
Now the Devil's Advocate section, because this space always needs one. Carlos Domingo's warning is not purely altruistic. Securitize profits from being a gatekeeper. Its model depends on enterprises choosing compliance-heavy infrastructure over open alternatives. A public attack on unauthorized tokenized stocks pushes fear in exactly the direction of his product roadmap.
That does not make the warning untrue. Conflicts of interest and accuracy can coexist. But investors should ask what remedy he is selling. If the regulatory response follows the most aggressive reading of the law, the entire market for tokenized stocks could be forced through a small number of licensed platforms. That is good for Securitize. It may also be good for investors. Those two things are not mutually exclusive.
The more uncomfortable contrarian point is that unauthorized offshore tokenization exists because the regulated system still excludes most of the world. Retail investors in Asia, Africa, and Latin America often cannot open a brokerage account for U.S. equities. They can, however, open a crypto wallet. Tokenized stocks become an access tool, not just a speculative vehicle. This is why unregulated projects keep minting. They are meeting demand that the compliance layer refuses to touch.
Libertarian crypto purists will argue that authorization is itself a restriction and that the market should decide. There is an element of truth. Traditional securities law favors large incumbents and excludes small issuers. But a tokenized stock without legal rights does not create a free market. It creates a fantasy market. The freedom to buy a worthless paper is not the freedom to own an asset. It is the freedom to gamble on the issuer's endurance.
But that demand does not forgive the structural flaw. If the underlying token has no legal claim to the stock, then the price is purely a function of market belief. Belief is not custody. An accessible interface to nothing is still nothing. In a crash, the only thing that saves a tokenized asset is a legal title that survives the market. Offshore paper has no title. It just has a ticker.
The deeper insight is this: tokenization is just transportation; authorization is title. The smart contract cannot convert an IOU into a share. The law does that. When the law has not done it, the ledger records a claim that no one has legal power to honor. That is not a technology problem. No blockchain consensus can fix a missing paper chain.
The market may be in a sideways grind, but the regulatory clock is not. The separation between compliant and non-compliant tokenized stocks is likely to become binary rather than gradual. Watch three signals.
First, enforcement. If the SEC files an action against a tokenized stock issuer in the next few months, every offshore project with similar structure gets repriced in hours. No code audit can save a platform from a subpoena.
Second, exchange delistings. Centralized exchanges have risk departments. Once legal scrutiny hits an asset class, the easiest risk mitigation is removal. A wave of delistings would crush liquidity for gray-market tokens and push users to regulated alternatives.
Third, legal reform. The real solution to unauthorized tokenization is not a ban. It is a cleaner registration path for small public companies and funds that want to issue digital securities. The EU has a framework. The U.S. does not. Whoever creates a workable chain-based exemption or registration template will define the next generation of tokenized capital markets.
Until those signals resolve, the correct position is not bearish on tokenization. It is bearish on legal ambiguity. Treat every unauthorized tokenized stock as a risk position, not an investment. If you must hold one, demand proof of custody, proof of issuance, and proof of authorization. You will find that most projects cannot provide it.
The RWA narrative just met its first serious credibility test. Carlos Domingo's warning does not kill tokenized stocks. It accelerates their maturation. The gray market will continue to exist until the first catastrophic blowup or the first major enforcement action. After that, the space will split into two worlds: custody-backed, regulator-approved securities on one side, and floating tickers without legal referents on the other.
The question is not whether you believe in tokenization. The question is whether your portfolio is on the side of title or on the side of paper. Speed reveals truth; patience reveals value. In tokenized equities, patience now means checking the legal chain, not just the block chain.