Is the Tokenized RWA Market Too Concentrated?
By assets under management, five issuers or platforms control roughly 75–80% of total on-chain real-world asset value, and within tokenized Treasuries a handful of programs account for the overwhelming majority. Concentration alone would be an ordinary market-structure observation. What makes it consequential here is layering: tokenized products are routinely built on other tokenized products, so an operational failure at a base issuer or its service providers propagates into every wrapper depending on it. Ondo's OUSG has held BlackRock's BUIDL as an underlying, meaning a failure at BlackRock, Securitize or BNY Mellon would cascade into OUSG redemptions despite Ondo being independent. This guide covers how concentrated the market actually is, why layering makes it worse than the headline figure suggests, and how to measure exposure at the level where it exists.
TL;DR — Key Takeaways
- ✓The Figure: Five issuers or platforms control roughly 75-80% of on-chain RWA value by AUM. Within tokenized Treasuries, a handful of programs dominate outright.
- ✓Why It Compounds: Products are built on products. OUSG has held BUIDL as an underlying, so a failure at BlackRock, Securitize or BNY Mellon reaches OUSG holders directly.
- ✓The Failure Mode: Not a Treasury default. An operational event at a shared service provider — transfer agent, custodian, contract — that hits every dependent product at once.
- ✓The Measurement Error: Diversifying by ticker while sharing transfer agents, custodians and underlyings is one exposure wearing four names.
- ✓Why It Happened: The large programs are large because they cleared institutional diligence. The quality that built the sector is now shared infrastructure with correlated failure modes.
Decentralised Settlement, Centralised Everything Else
Five issuers or platforms control roughly 75–80% of on-chain real-world asset value by assets under management. The settlement layer beneath them is genuinely distributed; the issuance, custody and administration layers above it are not, and those are the layers where operational failures originate.
This is not an argument that the sector is fragile in some general sense. It is a narrower observation about where the risk actually sits. A portfolio manager assessing tokenized exposure tends to think about the underlying assets — short-dated Treasuries, money market instruments — which are about as safe as financial assets get. The concentration is not in the assets. It is in the small number of entities standing between the holder and those assets.
On-chain RWA value “is not distributed across a broad ecosystem of competing protocols. By AUM, five issuers or platforms control approximately 75–80% of the total, creating its own form of systemic risk.”
— Market structure analysis of on-chain real-world asset concentration, 2026
“Its own form of systemic risk” is the right qualification. This is not the systemic risk of the underlying asset class, which is minimal. It is the systemic risk created by many products sharing few providers — a structure that produces correlated outcomes from uncorrelated-looking positions.
Why Layering Makes the Headline Figure Understate It
The market share figure counts issuers. It does not count dependencies between them, and those dependencies mean the effective concentration is higher than 75–80%. Ondo's OUSG has held BUIDL as its underlying asset, so an OUSG holder is exposed to BlackRock, Securitize and BNY Mellon regardless of holding no BUIDL directly.
Read that structure from a risk system's perspective. A position in OUSG is recorded as exposure to short-dated Treasuries with Ondo as counterparty. That is accurate as far as it goes and omits three institutions whose operational continuity the position depends on. The omission is not an error in any individual system — it is that position-level reporting describes what is held, and the dependency lives in how it is held.
| What the position says | What the position depends on |
|---|---|
| Exposure to short-dated US Treasuries | The underlying securities — genuinely low risk |
| Counterparty: the wrapper issuer | Its contracts, redemption mechanics and team |
| (not recorded) | The base fund the wrapper holds, and its manager |
| (not recorded) | The base fund's transfer agent and its recordkeeping continuity |
| (not recorded) | The custodian holding the underlying securities |
Key Insight
The three unrecorded rows are unrecorded for a structural reason, not through negligence. Conventional risk systems were built for a market where a fund holds securities, so the chain has two links and both are visible. A tokenized fund holding another tokenized fund adds links the data model has no field for, and the information does exist — it is in the offering documents — but it is not where a risk system looks. Concentration limits set on issuer names will therefore pass cleanly while the underlying exposure breaches every limit the institution thinks it has.
What a Concentrated Failure Would Look Like
The scenario worth modelling is not a Treasury default. It is an operational event at a shared provider — a transfer agent unable to process transfers, a custody dispute, a contract vulnerability, an exhausted redemption facility — where the underlying securities remain entirely money-good and the wrapper stops functioning anyway.
Transfer agent interruption
The register cannot be updated, so subscriptions and redemptions stall across every product that agent serves. Holders own their positions and cannot act on them.
Custodian dispute or failure
The underlying securities are held by an entity whose ability to release them is impaired. Every fund custodied there is affected simultaneously, regardless of manager.
Smart contract vulnerability in a base program
A defect in a widely-held program propagates to every wrapper built on it. Market growth has outpaced comprehensive audit standards, which is precisely how a shared defect goes unnoticed.
Redemption facility exhausted
Instant windows draw on pre-funded reserves with caps. Once exhausted, holders fall back to the standard cycle at the moment they most need speed.
Each of these is an availability failure rather than a credit failure, which matters for how institutions should think about it. Credit risk is compensated by yield and modelled by default probability. Availability risk is compensated by nothing, appears in no standard risk measure, and for a holder facing a margin call is functionally identical to a loss until it resolves — a dynamic explored in what happens when tokenized treasuries become DeFi collateral.
Measuring Concentration Where It Actually Sits
Exposure has to be aggregated at the service provider level, not the issuer level. For each position, record the transfer agent, the custodian of the underlying, the tokenisation platform, the chain, and what the instrument itself holds — then ask which single entity's failure would touch the largest share of the portfolio.
| Dimension | Question to answer per position |
|---|---|
| Issuer | Who manages the fund or program? (the level most portfolios stop at) |
| Underlying | Does it hold securities directly, or another tokenized instrument? |
| Transfer agent | Who maintains the authoritative register, and do other holdings share it? |
| Custodian | Who holds the underlying securities, and who holds the digital assets? |
| Tokenisation platform | Whose contracts and infrastructure issue and move the token? |
| Redemption capacity | What is the instant window, and is it shared across all holders? |
Most institutions that run this exercise find the transfer agent row produces the highest concentration, because a small number of registered transfer agents serve a large share of the tokenized market and that dependency appears in no position record. What that role involves, and why its continuity is load-bearing, is set out in who is the transfer agent for a tokenized security.
The Case for Concentration, Honestly Stated
Concentration in this market is a consequence of quality, not a failure of competition. The large programs became large by clearing institutional diligence, engaging established custodians and transfer agents, and producing documentation that smaller issuers could not match. Standardisation and regulatory robustness are real benefits and they came from the same process that produced the concentration.
What concentration bought
- Institutional-grade service providers
- Documentation that survives diligence
- De facto standards where none were written
- Regulatory engagement smaller issuers cannot fund
What it costs
- Correlated operational failure modes
- Dependencies invisible in position data
- Diversification that does not diversify
- Shared redemption capacity under stress
What actually helps
- Limits set per service provider, not per issuer
- Underlying composition disclosed and recorded
- A second route tested before it is needed
- Redemption capacity sized against the position
The honest conclusion is that this is a trade-off rather than a defect to be eliminated. A market of many small issuers with weak service providers would have different and probably worse problems. The failure worth avoiding is not concentration itself but concentration that participants have not measured — carrying an exposure they would have declined had they seen it stated plainly.
How Blockmaze Makes Dependencies Measurable
Concentration cannot be managed if it cannot be seen, and the reason it currently cannot be seen is that the dependency data lives in offering documents rather than in position records. Moving it into the instrument itself is what makes portfolio-level aggregation possible.
Service Providers Recorded
The transfer agent, custodian and tokenisation platform behind an instrument are recorded against it, so exposure can be aggregated by provider across a portfolio.
Underlying Composition Declared
Where an instrument holds another tokenized instrument, that dependency is explicit, so a wrapper does not conceal the base program's operational risk.
Redemption Capacity Surfaced
Instant redemption limits are recorded against the instrument, so positions can be sized against real convertibility rather than assumed liquidity.
Provider Changes Are Events
A change of transfer agent or custodian registers as a dated event rather than a silent update, so a concentration profile that shifts is visible when it shifts.
None of this reduces concentration, and no infrastructure can — the market structure is what it is. What it changes is whether an institution holds a measured exposure or an unmeasured one, which is the distinction between a risk decision and an accident. The protocol-level design choices that reduce correlated failure are examined in mitigating RWA systemic risks through Layer-0 design.
Measuring Concentration You Cannot Currently See?
Blockmaze provides the compliance layer that records service providers and underlying composition against each instrument, so exposure aggregates by dependency rather than by ticker.
Frequently Asked Questions
How concentrated is the tokenized RWA market?
By assets under management, five issuers or platforms control roughly 75–80% of total on-chain RWA value. Within the tokenized Treasury segment specifically, a handful of names — BlackRock, Franklin Templeton, Ondo, Circle and Superstate among them — account for the overwhelming majority. That is high concentration by any conventional measure. The relevant comparison is not to a mature market but to what the sector claims about itself: an ecosystem described as decentralised in which four-fifths of value sits with five entities is decentralised in its settlement layer and centralised in everything that matters for credit and operational risk.
Why is concentration worse in tokenized markets than in conventional funds?
Because of layering. In conventional asset management, a large manager's failure is contained by the fact that its funds hold securities directly. In tokenized markets, products are routinely built on other products: Ondo's OUSG has held BUIDL as an underlying, so a material operational failure at BlackRock, Securitize or BNY Mellon would cascade into OUSG redemptions even though Ondo's contracts and team are independent. The holder of the wrapper carries the base issuer's operational risk without that dependency being visible in the position.
What does a concentrated failure actually look like?
Not a default on the underlying Treasuries, which is the risk everyone models and the least likely one. It looks like an operational event at a service provider — a transfer agent unable to process, a custodian dispute, a smart contract vulnerability, a redemption facility exhausted — that propagates to every product depending on that provider simultaneously. The underlying securities remain money-good throughout. What fails is the ability to redeem, transfer or value the wrapper, which for a holder needing liquidity is indistinguishable from a loss until it resolves.
Does holding several tokenized funds diversify the risk?
Only if they do not share dependencies, which most do. Four tokenized Treasury funds that use the same transfer agent, the same digital asset custodian, or hold each other as underlyings are four positions with one operational exposure. Genuine diversification requires mapping the service provider chain beneath each holding — issuer, transfer agent, custodian, tokenisation platform, chain — and confirming the sets differ. Diversifying by ticker while concentrating by infrastructure is the specific error this market makes easy.
Is concentration purely negative?
No, and pretending otherwise misreads why it happened. Concentration in this market reflects standardisation and regulatory robustness: the large programs are large because they cleared institutional diligence, engaged established custodians and transfer agents, and produced documentation smaller issuers could not. That is a real quality signal. The trade-off is that the same institutions that made the sector credible are now shared infrastructure, so their standards raise the floor while their failure modes correlate everyone's outcomes.
What should an institution actually do about it?
Measure exposure at the service provider level rather than the issuer level, and set limits there. That means recording, for each position, which transfer agent maintains the register, which entity custodies the underlying, which platform issued the token, and what the instrument holds. Then aggregate across the portfolio and ask which single entity's failure would affect the largest share. That number is the real concentration, and in most portfolios assembled without this analysis it is considerably higher than the issuer-level view suggests.
Related Articles
What Happens When Tokenized Treasuries Become DeFi Collateral?
How collateral use multiplies claims on the same concentrated base assets.
RWA Tokenization Risks: What Institutional Issuers Must Mitigate
The wider risk taxonomy for tokenized programs, of which concentration is one dimension.
Mitigating RWA Systemic Risks Through Layer-0 Design
Design choices at the protocol layer that reduce correlated failure.
How Do Tokenized US Treasuries Work for Institutional Investors?
The instrument at the centre of the concentration — issuance, redemption and the major programs.