The Custody Chain Behind a Stock Token: Six Parties, and Which One Actually Has Your Shares

The question worth asking

When someone says a stock token is "fully backed", the useful follow-up is not whether shares exist. They almost always do. The useful follow-up is: which legal entity holds title to them, under which regulator, in whose name, and what happens to that title if the entity you bought the token from stops operating on a Tuesday morning. A token is a claim. Claims are only as good as the chain of custody they sit on top of, and that chain has more links than the marketing page usually shows.

The six links

Between a listed share and a token in a wallet there are typically six roles, sometimes collapsed into fewer entities, sometimes spread across more. First, the central securities depository, which is the book of record for the share itself. In the United States that is a single dominant depository, in Europe several, and the position it records is almost never in your name. Second, a custodian bank or prime broker holding an account at that depository. Third, an executing broker that buys the shares in the market. Fourth, the issuer of the token, which is the entity whose balance sheet or segregated vehicle holds the beneficial interest. Fifth, the smart contract that mints and burns the token. Sixth, the distribution venue, the app or exchange where you actually clicked buy.

Omnibus, and what it costs you

Almost all of this runs on omnibus accounts. The depository sees the custodian. The custodian sees the issuer as one account holder with one aggregate position. The issuer sees your token balance on a ledger. Nobody upstream of the issuer knows you exist. This is not a crypto quirk, it is how mainstream brokerage has worked for fifty years, and it is efficient: one settlement instead of thousands, netting inside the pool, cheaper borrow.

What is traded away is the directness of the claim. In a segregated arrangement the shares sit in a vehicle whose only purpose is to hold them for token holders, and an administrator can enumerate who is owed what. In an omnibus arrangement your position is a line in the issuer's own records, and if those records are incomplete or contested, your claim is against the issuer rather than against an identified pile of shares. The two structures look identical while everything works. They diverge entirely at the point of insolvency, which is the only moment custody structure is ever tested.

The three questions that separate structures

Ask whether the shares are held by the token issuer itself or by a bankruptcy-remote vehicle. If the issuer holds them on its own balance sheet, they are the issuer's assets and you are a creditor. Ask who the named custodian is and in which jurisdiction, because a custodian regulated as a bank in a major market carries client asset rules that a general corporate entity in a light-touch jurisdiction does not. Ask whether the shares can be lent, rehypothecated or pledged. Share lending is ordinary and often funds the tight spreads a token venue advertises, but a lent share is out of the box, replaced by collateral and a contractual promise to return an equivalent. That promise is a different asset from the share.

Where the smart contract fits, and where it does not

The contract is a good record of who holds tokens and a poor record of who holds shares. It can enforce transfer rules, freeze addresses, mint on deposit and burn on redemption. It cannot verify that the custodian's account still contains what the attestation said last month. Every design that claims to solve this pushes the problem to an attester, and an attester is a party with a scope of work. Read the scope. A statement that a named account held a stated quantity on a stated date is a real fact about a moment. It is not a continuous guarantee, and it says nothing about liens sitting over the same position.

Where it breaks

Three failure modes recur. The first is a mismatch in hours: shares settle on the depository's calendar, tokens settle continuously, and a token that trades all weekend is backed by a position nobody can adjust until Monday. The issuer absorbs that gap, which means the issuer is carrying risk, which means the issuer's capital matters to you. The second is a corporate action the token machinery cannot express, where a rights issue or an unusual merger consideration arrives in a form that has no onchain equivalent and gets converted to cash at the issuer's discretion. The third is jurisdictional: the token holder is in one country, the issuer in another, the custodian in a third, the depository in a fourth, and a court in any of the four can freeze the position while the others watch.

What to watch

Watch for the word segregated and check it is doing legal work rather than describing an internal spreadsheet. Watch whether redemption is available to all holders or only to onboarded institutions, because a retail-closed redemption window means the only price discovery you have is the secondary market. Watch whether the issuer names its custodian at all. Several do not, and an unnamed custodian is the single largest unquantifiable item in the structure. Watch for changes to the attestation scope between reports, which tend to be announced quietly and tell you more than the headline reserve number.

The short version

You are not holding a share. You are holding a token that represents a claim on an entity that holds an interest in a pooled position at a custodian that holds an account at a depository that records the share. Each link is ordinary. The question is not whether the structure is legitimate, it is which link you are actually exposed to, and that is answerable from public documents in about twenty minutes per issuer.