For most of the last decade, “crypto meets Wall Street” was a pitch deck, not a trade. The two worlds shared a vocabulary — assets, liquidity, settlement, custody — but almost nothing else. Crypto ran twenty-four hours a day on anonymous public ledgers; regulated finance ran on business hours, named intermediaries, and a reconciliation layer so old that parts of it still assume paper. We spent years watching people insist the merger was inevitable while producing very little that a treasurer could actually buy.
That gap has closed faster than most of the skeptics on our desk expected. The emblematic example is a large asset manager standing up a tokenized money-market fund that lives on a public blockchain — BlackRock’s BUIDL is the one everyone points to, and for good reason. We will not quote you an exact size, because the number moves and precision here is a trap; what matters is the shape of the thing. A regulated fund, holding boring cash-equivalent assets, issued as a token that settles on-chain and pays yield programmatically. That is not a whitepaper. That is a product, and its existence changes the conversation from “if” to “on which rails, and who gets hurt when they break.”
This piece is our attempt to map the actual mechanics — how stocks, bonds, and securities migrate on-chain, why the institutions want it badly enough to fight their own compliance departments, and where we think the whole thing lands over the next decade. We hold a specific, and slightly unfashionable, view: the destination for regulated assets is probably not the permissionless public chain that crypto natives imagine. It is something more guarded, more reversible, and more boring. We will argue that, and we will argue the other side honestly too.
What is actually moving on-chain right now
Start with the inventory, because the debate gets abstract fast. Three categories of traditional assets are genuinely migrating today. First, cash-like instruments: tokenized money-market funds and short-dated treasuries, which are attractive precisely because they are simple, high-quality, and yield-bearing. They give on-chain capital somewhere to sit that is not a stablecoin. Second, the stablecoins themselves, which have quietly become the cash leg of nearly every on-chain trade — the settlement medium that makes everything else possible. Third, and earliest in its life, tokenized equities and security tokens: shares and debt instruments issued or wrapped as tokens, listed by a growing set of exchanges and brokers.
The order of that list is not accidental. Finance is tokenizing the easy things first — instruments whose value is stable, whose legal status is clear, and whose buyers are sophisticated. Treasuries before equities, equities before anything exotic. This is how real adoption looks: unglamorous, collateral-shaped, and driven by treasurers who want yield and settlement efficiency, not by anyone chasing a narrative.
There is a fourth category worth flagging, because it is the one the plumbing crowd gets excited about: repo and intraday collateral. Short-term secured lending — a trillion-dollar-a-day habit for the banking system — is a natural fit for atomic on-chain settlement, because the whole point of repo is moving collateral back and forth quickly and cheaply. Tokenized cash on one side, a tokenized treasury on the other, swapped and unwound in a single atomic transaction with no overnight counterparty exposure. It is unglamorous to the point of invisibility to a retail audience, which is exactly why it may end up being the largest use case of them all.
You can already see the second-order effects in the equities world. When a broker starts offering tokenized stock exposure, or a crypto exchange lists a wrapped equity, the boundary between the two business models begins to dissolve. We track the public-market side of this convergence on our own crypto-related stocks tracker, and the pattern is consistent: the companies building the pipes are the ones being repriced first.
Why finance actually wants this
Institutions are not tokenizing assets because a conference told them to. They are doing it because the current plumbing is genuinely expensive, and the savings are concrete. Consider settlement. Equities in most major markets settle T+2 — two business days between trade and finality — with a recent grind toward T+1. On-chain, settlement can be T+0, atomic, delivery-versus-payment in a single transaction. Two days of counterparty risk and collateral tied up in transit collapses to seconds. For anyone running a balance sheet, that is not a rounding error.
Then stack the rest. Markets that trade twenty-four hours a day rather than freezing at a closing bell. Compliance rules written directly into the token — transfer restrictions, investor eligibility, lock-ups enforced by code rather than by a back-office checking a spreadsheet. Collateral that can move across venues in minutes instead of being trapped in a custodian’s silo. Fractionalization that lets a single bond or a single building be split into thousands of tradable units. And underneath all of it, the slow disappearance of the reconciliation layer.
The real prize is not a faster stock. It is turning the clearinghouse into code — replacing a settlement guarantee that costs basis points and days with one that costs gas and seconds.
That last point deserves emphasis, because it is where the money is. Today an army of intermediaries — the DTCC-style central depositories, custodians, transfer agents, and clearing brokers — exists to answer one question: who owns what, and did the trade actually happen? A shared ledger answers that question by construction. When ownership is the database, reconciliation between competing databases stops being a job. The people who quietly run that job are, understandably, not thrilled. But the economic gravity is real, and it points one direction.
Collateral mobility deserves its own line, because it is the quiet giant. In the current system, the same high-quality bond can be pledged in one place, sitting idle in another, and unavailable to a third desk that badly needs it — all because moving it between custodians and jurisdictions takes days and touches a dozen intermediaries. On a shared ledger, that bond can be pledged, recalled, and re-pledged in minutes, following demand in real time. Firms spend fortunes managing this friction today. Removing it does not just save cost; it frees capital that was previously trapped by the sheer mechanics of moving it. For a large institution, a few basis points of freed collateral across the balance sheet is a serious number.
What a security token legally is
Here is the part crypto natives most often get wrong, so we will be blunt. Tokenizing a security does not deregulate it. A tokenized share of a company is a share of a company; a tokenized bond is a bond. Regulation follows the asset, not the rail it settles on. If an instrument was a security under securities law before it was wrapped in a token, it is a security after — with all the disclosure, eligibility, and market-conduct obligations that implies. The token is new clothing. The body underneath is the same regulated body it always was.
This is why so many early “security tokens” quietly restrict who can hold them, enforce jurisdictional gates, and bake transfer whitelists into the contract. They are not being cautious for fun. They are complying with the exact same rules that govern the un-tokenized version, using code to do what paperwork used to do. Anyone who tells you tokenization is a regulatory escape hatch is selling something — most likely something that will end in an enforcement action.
Stablecoins are the gateway drug
None of this works without a credible cash leg, and that is what stablecoin regulation quietly provides. A tokenized treasury fund is useless if you cannot pay for it on the same rail; you would be back to wiring dollars through the old system and defeating the entire point. Regulated stablecoins — dollar liabilities with real reserves, real audits, and a legal framework behind them — are the settlement asset that makes on-chain securities tradeable in the first place.
We think of stablecoin frameworks as the gateway drug for the whole merger. Once a jurisdiction has clear rules for tokenized cash, it has implicitly built the settlement layer for tokenized everything else. The cash leg comes first; the securities leg follows, because now there is something safe and legal to pay with. Watch the stablecoin rules in each major market, and you are watching the on-ramp for that market’s tokenized securities being poured.
The hacking problem nobody at Davos wants to own
Now the obstacle, and it is the one we care about most, because it is the reason we do not believe the naive public-chain future. Public-chain DeFi has lost enormous sums to exploits — drained bridges, buggy contracts, compromised keys, oracle manipulation. This is not a smear; it is a well-documented, recurring pattern, and we are not going to invent a total for it because the honest total is “a great deal, repeatedly.” The point is structural: on a permissionless chain, a clever attacker who finds a flaw can move irreversibly, and the code does exactly what it was told.
Irreversibility is crypto’s signature feature. It is also institutional finance’s nightmare. Play the scenario out. A pension fund holds a tokenized bond position. A bridge it never chose to trust — but which sat somewhere in the path of its custody or its liquidity — is exploited over a weekend, and the position is gone. There is no chargeback, no clearinghouse to make the fund whole, no counterparty to claw back from. Now imagine the fund’s trustees explaining that to a regulator, or to a retiree. “The smart contract executed as written” is not an answer any fiduciary can survive giving.
It is worth being precise about why the bridge, specifically, is the recurring villain. A bridge holds real value on one chain while minting a claim to it on another, which makes it a single honeypot concentrating enormous sums behind a single codebase and a single set of keys. Get the validation logic wrong, or compromise the keys that authorize withdrawals, and the entire pool leaves at once. The same logic applies to oracles — the components that feed off-chain prices to on-chain contracts — where a manipulated input can make a contract behave correctly according to bad data. These are not exotic edge cases. They are the load-bearing joints of any cross-chain system, and they fail in the same handful of ways over and over, which is precisely what should worry anyone putting regulated assets near them.
This is the wall the whole grand narrative runs into. Traditional finance is not organized around maximizing efficiency; it is organized around allocating and reversing losses when things go wrong. Reversibility, dispute resolution, and a named party who is liable are not bugs the blockchain will fix. They are the product. Any migration that cannot preserve them will be capped at the size of capital that can afford to lose everything overnight — which, for regulated money, is roughly none of it.
Where regulated assets probably actually land
So here is our thesis, stated plainly. Regulated securities are most likely headed not for the open permissionless chain but for private and permissioned environments — either purpose-built consortium chains or permissioned layers sitting on top of public rails. The properties that make institutions comfortable are exactly the ones crypto purists dislike: a known, vetted set of validators; identity-gated access so you always know your counterparty; reversibility by legal process when fraud or error occurs; and privacy, so a fund’s positions are not broadcast to every competitor with a block explorer.
We should argue the other side, because it is strong. Permissioned chains recreate the walled gardens tokenization was supposed to tear down. They fragment liquidity — an asset trapped on a consortium ledger cannot freely compose with the wider DeFi economy, and composability is where public chains generate their network effects. Public-chain advocates counter that the fix is not to retreat behind permissions but to let institutional-grade tooling mature in the open: qualified custodians, multi-party computation for key management, account abstraction that makes wallets recoverable and policy-bound, and privacy tech that shields positions without leaving the public network. In that view, the public chain wins because it is the only place with real liquidity, and everything else is a transitional crutch.
Both can be right at once, which is where we actually land. We expect a hybrid. Bearer-style assets and the core settlement layer — stablecoins, tokenized cash, the base money — gravitate to public chains, where liquidity and neutrality matter most. Regulated securities with named owners and legal obligations gravitate to permissioned environments, where reversibility and identity are non-negotiable. And between the two sits the bridge — the connective tissue that lets value cross from the permissioned world to the public one and back. That seam is where the money is, and it is also, unavoidably, where the exploits live. The most contested and most dangerous engineering of the next decade is not the chains themselves. It is the crossings between them.
Reversibility is the feature that makes the permissioned side workable, and it is worth understanding how it can exist without throwing away the ledger entirely. The trick is that “reversible” need not mean rewriting history. It can mean a governance layer with the authority to freeze a token, void a fraudulent transfer, and reissue to the rightful owner — a court order executed as a transaction, on a chain whose validators are legally accountable entities rather than anonymous miners. Crypto natives recoil at this, and they are not wrong that it reintroduces trusted parties. But that is the whole point: regulated finance is a system of trusted, liable parties. A chain that cannot name one, and cannot compel it to make a victim whole, is a chain that regulated money will politely decline to use.
Custody, and what happens to the exchanges
Two practical consequences fall out of this. The first is custody. Regulated money cannot self-custody a bond in a browser extension; it needs qualified custodians with real controls. The maturing standard here is multi-party computation and threshold signing — keys that never exist whole in one place, so no single stolen device drains the account, and so policy (limits, approvals, time-locks) is enforced cryptographically. Custody is not a footnote to tokenization. It is the precondition for any of the large, cautious pools of capital to participate at all. The firms that solve custody credibly will quietly capture much of the value in this transition, because they own the one thing every regulated participant needs before they can touch a token: a place to keep it that a regulator will bless.
The second consequence is a role swap that is already beginning. When equities trade on-chain, today’s crypto exchanges start to look like brokers — they hold customer assets, route orders, and owe suitability and best-execution duties. And today’s brokers and traditional exchanges start to look like crypto venues, running matching and settlement on ledgers. The two business models converge from opposite directions. Exchanges become brokers; brokers become exchanges. If you want to see that collision in slow motion, watch the firms building tooling for both worlds at once on our traditional-market tools and DeFi platforms hub — the interesting names sit in the overlap, not at either pole.
The next decade, plausibly
We are wary of prediction theater, so here is a restrained version. Over the next several years, expect the cash-like layer to keep growing quietly — more tokenized treasuries and money-market funds, because they are the safe first step and the collateral everyone wants. Expect stablecoin regulation to keep unlocking new markets one jurisdiction at a time, each set of rules functioning as an on-ramp. Expect tokenized equities to expand from novelty listings toward genuine venues, with the exchange-broker convergence accelerating as it does.
And expect the architecture to stay split: public rails for money and bearer assets, permissioned rails for regulated securities, contested bridges in between. The failures that make headlines will mostly happen at those bridges, because that is where the incentives, the value, and the attack surface all concentrate. The winners will be whoever makes the crossings boring — reversible, insured, identity-aware, and dull. Boring is the highest compliment traditional finance can pay a technology, and it is the state this one has to reach before the largest pools of capital fully commit.
The bottom line
The merger of TradFi and crypto is real, it is underway, and it is being led by the least exciting instruments on the shelf — cash, treasuries, high-grade collateral. That is a sign of health, not disappointment. But the romantic version, where every stock and bond ends up trading on an open permissionless chain alongside memecoins, runs straight into a wall that no amount of throughput solves: regulated money cannot accept irreversible, un-appealable loss, and a bridge exploit is exactly that. Our bet is a hybrid world — public chains for settlement and bearer value, permissioned environments for regulated securities, and a decade of hard, dangerous work on the seams between them. The technology that wins will not be the fastest or the most decentralized. It will be the one that can lose gracefully — and prove, to a regulator, that it can.