If the Issuer Fails, What Do You Actually Own?

Most explanations of a tokenized equity stop at the happy path. A firm buys a share, puts it somewhere safe, and issues a token that tracks it. Trading, redemption and price discovery all follow from there. The question that decides how much that structure is actually worth is the unhappy path: the day the firm that issued the token cannot pay its own bills. At that moment the token in your wallet and the share sitting in a custody account have to be reconciled by a bankruptcy process, and whether you end up with the share, a claim on the share, or a place in a creditor queue depends on plumbing that was fixed long before anything went wrong.

The two claims you are holding

Owning a tokenized stock means holding two things at once, and they are governed by different systems. The first is the token: a balance on a chain, moved by your key, with settlement finality that belongs to the chain's consensus rules. Nobody has to agree that you own it, because the ledger simply says you do. The second is the entitlement the token represents, which lives in the ordinary legal world. Somewhere there is a share, held by a custodian, registered to a nominee, subject to a contract between you and an issuing entity. That claim is only as good as the documents behind it and the court that reads them.

In good weather the two claims behave as one, because the issuer honours redemptions and arbitrage keeps the token near the share price. In insolvency they separate. Your token still moves, because the chain does not know or care that a company has filed. Your entitlement stops moving, because the person who was supposed to act on it is now subject to a stay, an administrator, or a regulator's directions. The gap between those two facts is the entire risk.

Where the share actually sits

The word that does the most work in any tokenized equity disclosure is 'segregated'. A segregated account is one where the assets are held in the name of clients, or a nominee for clients, and are identifiable as not belonging to the firm. If the firm fails, those assets are not part of its estate. They are returned to the clients they belong to, subject to whatever shortfall exists and the cost of the administration itself. That is the outcome token holders want.

The alternative is that the shares sit on the issuer's own balance sheet, held in its name, funded from its own treasury, with the token treated as a contractual promise to deliver value. That structure is cheaper to run and easier to build, because it avoids the legal and operational work of a custody arrangement with real client-asset protections. It also means that in a failure, the shares are the company's property, and the holders of the tokens are unsecured creditors of the company. They do not get the shares. They get a number on a list, behind secured lenders, employees and tax authorities.

A third pattern sits in between and is common in practice: an issuing vehicle that is legally separate from the operating company, holding the shares, with the operating company as its administrator. The vehicle is meant to be bankruptcy remote, meaning the failure of the operator does not pull its assets into the estate. Whether it actually is depends on whether the separation was respected in practice: separate accounts, separate directors, no commingling of cash, no use of the vehicle's assets to secure the operator's borrowing. Structures fail this test more often than their marketing suggests.

Who is allowed to press the button

Even where the shares are properly segregated, someone has to instruct the custodian to release them, and someone has to decide who gets what. A token balance is not a share register entry. The custodian's records name a nominee, not you. So the process of turning tokens into shares in an insolvency requires a bridge: a record, held by the issuer or an administrator, that maps token holders to entitlements at a moment in time.

That bridge is where operational risk concentrates. If the mapping is a snapshot taken by the failed company's own systems, it has to be recovered and trusted. If it is derived from the chain, someone has to decide which addresses count, what happens to tokens sitting in a liquidity pool or a lending protocol at the snapshot block, and how to treat tokens held by the issuer itself or by a market maker who was short. Pools complicate this badly. A token deposited into an automated market maker is legally held by nobody in particular and economically held by every liquidity provider in proportion to a curve. Untangling that is a spreadsheet exercise with no established precedent.

What jurisdiction does to the answer

Tokenized equity structures are deliberately assembled across borders. The share may be custodied in one country, the issuing vehicle incorporated in another, the platform operated from a third, and the buyer resident in a fourth. Each of those choices imports a different insolvency regime with different views on client assets, different priority rules and different willingness to recognise a foreign administrator. The practical consequence is that recovery time and recovery rate are set less by how much value exists than by how many courts have to agree about it.

Read the terms for two things. First, which entity is your counterparty, by name, and where it is incorporated. That is the entity whose failure matters, and it is frequently not the well-known brand on the front of the app. Second, what law governs the contract and which courts hear disputes. A claim against an offshore vehicle, governed by offshore law, enforceable only offshore, is a materially different asset from a claim against a regulated intermediary in a jurisdiction with a client-asset rulebook and an investor compensation scheme, even if both tokens track the same share and trade at the same price.

The chain part keeps working, and that is the trap

The most disorienting feature of an issuer failure onchain is that the market does not stop. Liquidity pools keep quoting. Perpetual venues keep matching. The token continues to have a price, set by whoever is still willing to trade it, and that price is now an opinion about recovery rather than a reflection of the underlying share. Robinhood Chain carried $2.72bn of decentralised exchange volume in a day against $920.2m of total value locked, on figures from DefiLlama, which is the shape of a venue where turnover is far larger than the capital parked on it. Markets that deep in flow and thin in locked capital reprice a broken claim very quickly, and they do it without any of the halts, disclosure obligations or orderly-wind-down machinery that an exchange-listed instrument would trigger.

That is the tradeoff at the centre of the whole product. You are exchanging the settlement certainty and 24-hour transferability of a token for the legal certainty of being on a share register with a regulated intermediary standing behind you. Some structures give back most of that legal certainty through segregation, bankruptcy-remote vehicles, attestations and a named custodian. Some give back very little and rely on the issuer simply continuing to exist. The token looks identical in both cases, trades on the same venues, and often carries the same ticker.

What to watch

Three details separate a structure that survives a failure from one that does not. Whether the shares are held in a segregated client account or on the issuer's balance sheet, stated in those words rather than implied. Whether the entity issuing the token is legally distinct from the entity operating the platform, and whether that distinction is maintained in the accounts. And whether there is a defined, documented procedure for producing a holder register from the chain, including a stated treatment for tokens held in pools and protocols. The first two decide whether there is anything to distribute. The third decides how long it takes to find out who it belongs to.