Security Token

Total security token issuance surpassed $12 billion by Q1 2026, with STO issuance growing from $5.6 billion in 2024 to $6.66 billion in 2025. More than 284 active token listings trade on SEC-registered ATS platforms, with real estate tokenizations accounting for 38% of aggregate trading volume. The broader RWA on-chain market reached $19.4 billion in early 2026 according to RWA.xyz, with BlackRock’s BUIDL fund ($1.87 billion AUM, tokenized by Securitize) commanding 45% of the tokenized treasuries market. This asset class — digital tokens deliberately structured as securities under federal law — represents the compliant alternative to the unregistered token sales that generated $6.05 billion in SEC enforcement penalties across 125 actions from 2021 to 2024, according to Cornerstone Research.

Definition

A security token is a digital asset issued on a blockchain that represents ownership rights in a traditional financial instrument — equity shares, debt obligations, fund interests, revenue participation rights, or real asset fractional ownership — and that is explicitly structured to comply with U.S. securities laws through either SEC registration under Section 5 of the Securities Act or an applicable offering exemption.

The term “security token” is an industry designation, not a statutory category. Under federal securities law, the relevant classification is whether the digital asset constitutes an “investment contract” under the Howey test, a “note” under the Reves family resemblance test, or another enumerated category within the Section 2(a)(1) definition of “security.” The practical distinction is intent: security token issuers proactively structure their offerings as securities and build compliance infrastructure, while issuers of unregistered tokens either failed to recognize securities law applicability or deliberately evaded it.

Characteristics That Distinguish Security Tokens

Compliance by Design

Security tokens embed regulatory compliance requirements into their smart contract architecture. A properly designed security token smart contract enforces:

• Transfer restrictions. The smart contract blocks transfers to wallets that have not completed KYC/AML verification and, for Reg D tokens, accredited investor verification. This programmatic enforcement of Rule 144 holding periods and investor qualification eliminates the manual compliance processes that add cost and delay to traditional restricted securities.
• Cap table management. The blockchain serves as the authoritative record of ownership, replacing the traditional transfer agent ledger with an immutable, auditable on-chain record. Platforms like Securitize and Polymath maintain parallel off-chain records to satisfy SEC transfer agent requirements while leveraging blockchain efficiency.
• Regulatory reporting. Smart contracts can automatically generate the transaction data needed for Form D filings, Blue Sky state notice filings, and ongoing FINRA reporting obligations.

Asset Types Tokenized

The security token market encompasses several distinct asset categories, each with different regulatory considerations:

Equity Tokens. Representing shares of stock in a corporation, these tokens are the most common type of security token. They entitle holders to voting rights, dividends, and pro-rata liquidation proceeds just like traditional equity shares. Reg D 506(c) is the predominant exemption for equity token offerings, with an average raise size of $14.2 million.

Debt Tokens. Representing fixed-income obligations — bonds, promissory notes, or other debt instruments — these tokens pay periodic interest and return principal at maturity. The SEC’s analysis under the Reves family resemblance test applies to debt token classification, though most issuers also structure for Howey compliance.

Fund Interest Tokens. Representing limited partnership interests, LLC membership interests, or shares in investment funds, these tokens provide exposure to pooled investment vehicles. The tokenized fund structures space has grown rapidly, with several SEC-registered funds issuing tokenized shares.

Real Estate Tokens. Fractional ownership of commercial or residential real estate, typically structured as REIT shares, LLC interests, or direct property co-ownership. Real estate tokenization accounts for the largest share of security token trading volume, driven by the illiquidity premium in traditional real estate investment.

Revenue Share Tokens. Entitling holders to a percentage of revenue from a specific project, product, or enterprise. These tokens must be carefully structured to avoid investment company classification under the Investment Company Act of 1940.

Token Standards and Technical Infrastructure

Security tokens are typically built on Ethereum-compatible blockchains using standards designed specifically for regulated securities:

ERC-1400 (Security Token Standard). A modular standard developed by Polymath that provides document management, transfer restrictions by partition, operator permissions, and forced transfers for regulatory compliance actions. It is the most widely adopted security token standard globally.

ERC-3643 (T-REX Protocol). An open-source permissioned token standard that integrates identity verification at the protocol layer, enabling on-chain compliance enforcement. Used by several European security token platforms and gaining adoption in U.S. markets.

Polymesh. A purpose-built blockchain for security tokens developed by Polymath, featuring native identity, compliance, and governance primitives. Unlike general-purpose blockchains, Polymesh was designed from its base layer for regulated securities.

ERC-20 with Transfer Restrictions. Some security token platforms use standard ERC-20 tokens with custom transfer restriction logic, though this approach lacks the standardized compliance interfaces of ERC-1400 and ERC-3643.

Regulatory Framework

Security tokens are subject to the full apparatus of U.S. securities regulation:

Primary Offering. Tokens must be registered with the SEC or offered under an exemption. The dominant exemptions are Reg D 506(c) (for offerings limited to verified accredited investors), Reg A+ (for offerings qualified with the SEC and available to retail investors up to $75 million), and Reg S (for offerings to non-U.S. persons).

Secondary Trading. Security tokens can only be traded on SEC-registered venues — either an Alternative Trading System or a national securities exchange. Platforms like tZERO and INX provide these regulated secondary markets.

Transfer Restrictions. Rule 144 imposes a six-month holding period on restricted securities issued under Reg D before they can be resold, and requires ongoing compliance with volume limitations and current public information requirements.

Broker-Dealer Involvement. The distribution and trading of security tokens requires registered broker-dealers to handle order execution, customer accounts, and suitability determinations.

Custody. Custody frameworks for security tokens must comply with the SEC’s Customer Protection Rule (Rule 15c3-3) and, for investment advisers, the Custody Rule (Rule 206(4)-2).

Market Data

The security token market has evolved from near-zero issuance in 2018 to meaningful scale:

Real estate tokens account for 38% of trading volume, followed by corporate equity (25%), fund interests (20%), and debt instruments (12%), according to ATS market activity data.

Security Token vs. Utility Token vs. Unregistered Token

The distinction between security tokens and other digital asset categories is both legal and practical:

• Security tokens are proactively structured as securities, offered through compliant exemptions, and traded on registered ATS platforms. Issuers accept the regulatory burden in exchange for legal certainty.
• Utility tokens are designed to provide access to a platform’s services rather than investment returns. However, the SEC has successfully argued in multiple enforcement actions — including LBRY and Kik — that utility function does not preclude securities classification.
• Unregistered tokens are digital assets sold without SEC registration or exemption compliance, exposing issuers to enforcement risk and purchasers to Section 12(a)(1) rescission claims.

For authoritative guidance on security token classification, see the SEC’s Framework for “Investment Contract” Analysis of Digital Assets and FINRA’s guidance on digital asset securities.

Related Terms

• Howey Test — The legal framework determining whether a digital asset is a security.
• Accredited Investor — The investor classification required for Reg D security token offerings.
• Alternative Trading System — The regulated venue where security tokens trade on secondary markets.
• Wells Notice — The enforcement process that follows unregistered security token distribution.
• ATS Platform Comparison — Comparative analysis of platforms where security tokens trade.