Security Token

A security token is a digital token recorded on a distributed ledger that represents a legal interest — equity, debt, revenue share, or other economic right — in an underlying asset or enterprise, where that interest constitutes a security under applicable securities law. The token is the on-chain manifestation of an existing legal right; the underlying security law framework, not the token standard, determines classification.

Security tokens must be distinguished from utility tokens, which grant access to a product or service but do not represent investment interests, and from stablecoins and payment tokens, which are monetary instruments. The distinction is determinative: security tokens trigger registration, disclosure, and transfer-restriction obligations that utility tokens do not.

Legal Classification

United States: A token is a security if it satisfies the Howey Test — an investment of money in a common enterprise with a reasonable expectation of profits from others’ efforts. Additional Securities Act enumerated instruments (notes, bonds, debentures) may also be tokenized. The SEC has brought enforcement actions asserting that dozens of tokens sold in ICOs were unregistered securities.

European Union: MiCA explicitly carves out crypto-assets that qualify as financial instruments under MiFID II. Tokenized shares, bonds, and units in collective investment schemes remain regulated under MiFID II, the Prospectus Regulation, and the EU DLT Pilot Regime (Regulation 2022/858). The DLT Pilot Regime created a temporary sandbox allowing EU trading venues and settlement systems to operate with regulatory relaxations when handling tokenized MiFID II instruments.

Switzerland: The Swiss DLT Act (February 2021) introduced the concept of Registerwertrechte (ledger-based securities), allowing securities to be issued directly on a DLT system without a paper instrument or traditional intermediary. FINMA classifies tokens as asset tokens when they represent claims against the issuer analogous to equity or bonds, applying existing securities law by analogy.

Transfer Restrictions

Because securities are subject to resale restrictions — including Regulation D lock-up periods in the US, prospectus requirements in the EU, and qualified investor rules globally — compliant security tokens embed transfer controls at the protocol level. Transfers that would violate securities law must be blocked at the smart contract layer before they settle on-chain.

The leading technical implementation is ERC-3643 (the T-REX Protocol), which enforces on-chain compliance rules through a modular architecture comprising an identity registry, compliance module, and transfer manager. A token transfer can only execute if the sending and receiving addresses are verified in the identity registry and the transfer satisfies all active compliance rules (jurisdictional restrictions, investor type limits, holding period locks).

Regulatory Implications

Security token issuers and intermediaries face obligations across the full securities law stack:

• Registration or exemption: In the US, security tokens must be registered under the Securities Act 1933 or qualify for an exemption (Reg D, Reg A+, Reg S). In the EU, a prospectus or exemption is required under the Prospectus Regulation unless the offering is below €8 million (with member-state discretion on the threshold).
• Transfer agent and registrar functions: Maintaining an accurate register of beneficial owners. On-chain, this function is performed by the identity registry component of ERC-3643 or equivalent systems.
• Broker-dealer / investment firm authorisation: In the US, a registered broker-dealer must handle offers and sales of securities. In the EU, an authorised MiFID II investment firm must execute client orders in security tokens.
• ATS / MTF / OTF authorisation: Secondary trading of security tokens in the US requires an Alternative Trading System operated by a registered broker-dealer. In the EU, a multilateral trading facility (MTF) or organised trading facility (OTF) licence is required, or operation under the DLT Pilot Regime.

Market Context

Major platforms facilitating security token issuance include Securitize (US), Tokeny (EU), and DigiShares (EU/global). Institutional issuers have included the European Investment Bank (digital bond on Ethereum, 2021), SocGen-FORGE (OFH Tokens), and Siemens (digital bond, 2023). As of early 2026, the global security token market encompassed several hundred live issuances across real estate, private equity, infrastructure, and fixed income.

Related entries: ERC-3643 (T-REX Protocol), Security Token Offering (STO), Howey Test, Regulation D

Primary sources: SEC Digital Assets | ESMA DLT Pilot Regime | FINMA Guidance