Security Token Offering (STO)

Offering of a tokenized security, combining securities-law obligations with blockchain records, custody, transfer controls, and technology risks.

A Security Token Offering (STO) is an offering of a security represented, issued, or recorded using a crypto asset or distributed-ledger system. The security might be a share, bond, fund interest, security-based entitlement, or another regulated instrument. STO is a market label, not a separate legal exemption, and an STO can be public, private, registered, or exempt depending on its structure.

Key Takeaways

  • Tokenizing a security changes its recordkeeping or transfer technology, not its status as a security.
  • The token may represent a direct issuer obligation, a custodial entitlement, or a separate instrument created by a third party; these structures do not provide identical rights.
  • An STO does not automatically reduce issuance cost, improve liquidity, prevent fraud, or make ownership transparent.
  • U.S. offers and sales generally require Securities Act registration or a valid exemption, while trading and intermediaries can trigger additional rules.
  • Smart-contract controls must match the governing documents, official ownership record, transfer restrictions, and corporate actions.
  • Investors should identify the legal issuer, enforceable claim, custody chain, settlement process, and priority in insolvency before evaluating token features.

What Is a Tokenized Security?

The SEC describes a tokenized security as a financial instrument included in the definition of security and formatted as or represented by a crypto asset, with ownership records maintained in whole or in part through one or more crypto networks.

The underlying financial claim remains central:

Tokenized instrumentPossible holder rightEvidence to verify
Equity tokenShares, voting rights, dividends, and residual claimCharter, shareholder register, offering document, and transfer-agent records
Debt tokenPrincipal, interest, maturity, collateral, and covenantsIndenture, note terms, collateral documents, and payment-agent records
Fund-interest tokenProportionate interest in a pooled vehicleFund documents, asset custody, valuation policy, and redemption terms
Asset-linked tokenContractual exposure to an asset or security held elsewhereCustody chain, issuer obligation, segregation, and insolvency treatment
Derivative tokenContractual payoff linked to another asset or indexCounterparty, collateral, valuation, eligibility, and derivatives documentation

A token screen or wallet balance is not enough to establish these rights. The controlling legal documents and recognized ownership record determine what the holder can enforce.

Two Broad Tokenization Models

Issuer-Sponsored Tokenization

The issuer or a party acting for it records the security directly on a crypto network. The token may be the issuer’s share or debt instrument, subject to the same economic rights and transfer rules described in the offering documents.

Important questions include whether the blockchain is the official ownership record, whether a transfer agent maintains a parallel record, which record controls after a discrepancy, and how lost credentials or erroneous transfers are corrected.

Third-Party Tokenization

An unaffiliated party may issue a token linked to a security it holds, a security entitlement, or a contract providing economic exposure. The token holder may have a claim against that third party rather than a direct claim against the original security issuer.

This introduces additional custody, counterparty, insolvency, tracking, and redemption risk. A token economically linked to a public company’s share is not necessarily the share itself and may not provide its voting, dividend, information, or transfer rights.

How an STO Is Structured

An STO generally requires coordination among legal, financial, operational, and technical records:

  1. Define the security, issuer, holder rights, and governing law.
  2. Select registration or a specific offering exemption.
  3. Prepare required disclosure and contractual documents.
  4. Establish purchaser eligibility, identity, sanctions, and transfer controls.
  5. Configure token issuance, administrator permissions, custody, and recordkeeping.
  6. Reconcile blockchain records with the official ownership ledger and cash settlement.
  7. Process interest, dividends, votes, redemptions, conversions, splits, and other corporate actions.
  8. Control secondary transfers through eligible holders, venues, and intermediaries.

Technology cannot repair a defective offering exemption or missing legal right. Legal documentation also cannot compensate for insecure administrator keys or an unreconciled ownership ledger.

U.S. Offering and Trading Rules

The Securities Act of 1933 generally requires securities offers and sales to be registered unless an exemption applies. An STO might use a registered offering or an exempt route such as Regulation D, Regulation A, or Regulation Crowdfunding if all relevant conditions are satisfied.

The selected route can affect:

  • who may purchase and how eligibility is verified;
  • whether general solicitation is permitted;
  • which disclosures and filings are required;
  • offering limits and intermediary requirements;
  • whether the securities are restricted; and
  • when and how holders may resell them.

Secondary trading raises separate questions about broker-dealer, exchange, alternative trading system, clearing, custody, transfer-agent, and market-conduct requirements. A technically transferable token is not necessarily legally transferable to every wallet or through every venue.

Worked Example: Tokenized Private Bond

Assume a company issues a five-year bond in a private offering. Each token represents $1,000 principal, pays interest under a written indenture, and can be held only by approved wallets. A transfer agent maintains the official holder record, while a permissioned network records transfers. The smart contract blocks transfers to unverified addresses and records interest-payment status.

The token does not make the bond risk free or publicly tradable. Investors still face the issuer’s credit risk, the bond remains subject to its offering exemption and resale restrictions, and the official documents determine payment and enforcement rights. The network adds operational features, but administrators, custody systems, transfer controls, and record reconciliation add failure points.

If a third party instead buys conventional bonds and issues tokens promising equivalent returns, token holders may have exposure to the third party and its custody arrangement rather than a direct bondholder claim. That is a materially different instrument even if the wallet interface looks similar.

STO vs. ICO and IPO

FeatureSTOInitial Coin Offering (ICO)IPO
Core item offeredTokenized securityToken or future-token right with fact-specific classificationRegistered shares
Public or privateEitherEither, depending on structure and lawPublic registered offering
Securities-law statusSecurity by structure or associated arrangementMust be analyzed; label does not decideShares are securities
Primary disclosureRegistration or exemption documents plus token termsToken documents plus any required offering disclosureRegistration statement and prospectus
TradingSubject to security, holder, venue, and transfer rulesDepends on classification and applicable regimesUsually through regulated securities markets after listing
TechnologyDistributed-ledger representation or recordDistributed-ledger tokenConventional records, though tokenization is possible

An STO should not be described as more compliant than an ICO merely because of its name. Compliance depends on the actual instrument, offering route, disclosures, participants, controls, and conduct.

What Tokenization Can and Cannot Do

Tokenization may support programmable transfer controls, shared records, faster reconciliation, smaller denominations, or new settlement workflows. Whether it produces those benefits depends on system design, law, market participation, interoperability, and operational controls.

Tokenization does not by itself:

  • create legal ownership of the referenced asset;
  • remove intermediaries or counterparty exposure;
  • guarantee instant or final settlement;
  • create buyers or market liquidity;
  • verify issuer disclosure or asset custody;
  • prevent unauthorized code changes or credential theft; or
  • resolve conflicts among blockchain, transfer-agent, custodian, and court records.

How to Evaluate an STO

  1. Identify the issuer of both the security and the tokenized representation.
  2. Determine whether the token is the security, a receipt, an entitlement, or a derivative exposure.
  3. Read the registration statement or identify the precise exemption and its conditions.
  4. Verify holder rights, payment priority, collateral, voting, redemption, conversion, and insolvency treatment.
  5. Determine which ledger is legally authoritative and how records are reconciled.
  6. Review transfer-agent, broker, platform, custodian, and administrator roles and registrations.
  7. Inspect smart-contract audits, upgrade powers, pause controls, private-key management, and incident procedures.
  8. Confirm transfer restrictions, eligible wallets, lockups, and practical market access.
  9. Trace cash and asset custody separately from the token record.
  10. Review tax, accounting, privacy, sanctions, and cross-border consequences with qualified professionals.

Risks and Limitations

  • Issuer risk: The company or vehicle may default, dilute holders, misstate information, or fail.
  • Structural risk: Token holders may own a claim against an intermediary rather than the referenced asset.
  • Custody risk: Loss, theft, insolvency, or commingling can impair access to tokens or underlying assets.
  • Smart-contract risk: Defects, upgrades, privileged keys, or incompatible networks can interrupt transfers and payments.
  • Record risk: Blockchain and legal ownership records may diverge or be difficult to correct.
  • Liquidity risk: Transferability and fractional units do not ensure market depth or an executable exit price.
  • Compliance risk: An invalid exemption, ineligible transfer, or unregistered intermediary can disrupt issuance or trading.
  • Settlement risk: Cash and token legs may not settle simultaneously, creating principal or counterparty exposure.
  • Cross-border risk: Different jurisdictions may classify the token, custody relationship, and venue differently.

Authoritative Sources

The January 2026 tokenization statement presents SEC staff views and states that it has no legal force or effect. It is useful for understanding structures but should not be treated as a rule.

  • Crypto Tokens: Blockchain-recorded units with different technical functions and legal rights.
  • Initial Coin Offering (ICO): Token-based capital-raising transaction whose legal status depends on its facts.
  • Howey Test: U.S. test for whether a contract, transaction, or scheme is an investment contract.
  • Restricted Securities: Securities acquired in specified unregistered offerings and subject to resale limits.
  • SEC Regulation D: Private-offering safe harbors with rule-specific conditions.
  • Smart Contract: Blockchain code that can implement issuance, transfer, and administrative controls.

FAQs

Is every STO a public offering?

No. An STO can be registered for public sale or conducted under a valid private or limited offering exemption. The offering documents and legal pathway, not the STO label, determine its status.

Is an STO safer than an ICO?

Not necessarily. A clearly defined security can make rights easier to identify, but issuer, fraud, liquidity, custody, technology, market, and compliance risks remain. Registration also does not guarantee performance or safety.

Does a security token guarantee liquidity?

No. Liquidity depends on lawful transferability, eligible buyers, venue access, market depth, custody support, and issuer demand. A blockchain can record a transfer but cannot create a market.

Is the blockchain always the official shareholder or bondholder record?

No. The authoritative record may be maintained by the issuer, transfer agent, custodian, or another system. Offering documents should explain which record controls and how discrepancies are resolved.

This article is educational and is not individualized legal, securities, regulatory, tax, accounting, technology, or investment advice. Verify current laws, offering documents, registrations, and technical controls before relying on a specific tokenized security.

Browse Investing