Tokenized Assets12 min read
MB
Editorial Team
·September 18, 2026

Why Is No Major Tokenized MMF Fully On-Chain?

A tokenized money market fund (TMMF) issues or records fund shares as digital tokens, but the token is only one layer of the product. The European Central Bank found that none of the largest global or EU TMMFs is fully on-chain because underlying assets, ownership records, cash rails, or core fund processes remain off-chain.

TL;DR — Key Takeaways

  • ✓The finding: The ECB found no fully on-chain fund among the largest global and EU TMMFs.
  • ✓The market: The sample covered a market of about EUR 7 billion that had roughly doubled in one year.
  • ✓The register: Around half still used a traditional ledger as the primary ownership record.
  • ✓The operating gap: Tokens may move 24/7 while issuer redemptions still follow business-hour processes.
  • ✓The risk: Secondary prices can detach from NAV when the fund cannot create or redeem continuously.

Ready to get started?

Join others who are already using our platform.

Why Is No Major Tokenized MMF Fully On-Chain?

Tokenization Usually Stops at the Liability Side

Most TMMFs tokenize the investor's fund share while keeping Treasury bills, deposits, repos, custody, and portfolio management in traditional systems. The on-chain token therefore represents an off-chain balance sheet.

The ECB's April 2026 review estimated the global TMMF market at about EUR 7 billion, with EUR 725 million domiciled in the EU. Market capitalization had roughly doubled in one year, and the ten largest funds represented more than 90% of the market.

TMMFs “mainly tokenise liabilities while assets remain largely off-chain.”

— European Central Bank, April 2026

This is not a defect by itself. The underlying securities already have regulated issuance, settlement, and custody systems. The architectural question is whether tokenizing the claim adds enough settlement, collateral, or distribution value to justify a permanent bridge between those systems.

A TMMF Has at Least Five Separate Ledgers

The token ledger is only one record among the shareholder register, portfolio books, custodian records, cash accounts, and NAV system. A fully on-chain claim would require all five layers to reach compatible finality.

LayerTypical systemWhat must reconcile
Fund tokenPublic or permissioned DLTToken supply and wallet balances
Shareholder recordTransfer-agent ledger or DLTLegal owner and share count
PortfolioAdministrator and accounting booksAssets, income, and liabilities
Custody and cashCustodian and bank railsSecurities and settled money
ValuationAdministrator NAV enginePrice used for issue and redemption

A compliant launch therefore starts with the entire operating model described in our tokenized money market fund guide, not with the token contract alone.

Half the Sample Still Used a Traditional Ownership Record

Around half of the funds in the ECB sample used a traditional book-entry ledger as the primary record. In those structures, a token transfer does not complete the legal ownership change until the traditional ledger is updated.

The sample shows how widely architectures differ. BUIDL, BENJI, WTGXX, USTB, CUMIU, and FDIT listed a traditional official record, while USYC, JTRSY, TBILL, and several European funds used DLT as the official record. Even the DLT-record funds still held most underlying assets off-chain.

The solution is not to hide the second ledger. It is to name the authoritative one and automate synchronization. The digital transfer agent standard is one technical approach to reducing delayed reconciliation, but legal authority still comes from fund documents and applicable law.

A 24/7 Token Does Not Create a 24/7 Fund

Investors may transfer tokens or submit redemption requests at any hour, but the issuer can still depend on dealing cutoffs, administrator approval, fiat settlement, and open markets for the underlying portfolio.

Requests can arrive at any hour, while issuer redemptions may wait for “standard business hours.”

— European Central Bank, April 2026

That mismatch creates two prices during stress: the token's market price and the next actionable fund NAV. If the token trades on Sunday while the fund cannot sell Treasury holdings or process fiat until Monday, arbitrage cannot immediately close the gap.

The problem becomes sharper when TMMF shares serve as collateral. Our analysis of tokenized MMFs as institutional collateral explains why legal control and default access matter as much as 24/7 transferability.

Service Providers Concentrate the Hybrid Risk

More than half of the largest TMMFs used third-party transfer agents, and about one-third outsourced both share tokenization and investor access through fiat or stablecoins. One product can therefore depend on several operators to complete a single redemption.

The dependency chain can include the fund manager, administrator, transfer agent, tokenization provider, custodian, bank, stablecoin issuer, blockchain, oracle, and distributor. A token can remain transferable while one of those operators is unavailable, creating a state that looks liquid on-chain but is not redeemable with the issuer.

  • Map which provider controls each lifecycle state.
  • Define the source of truth for ownership, NAV, and settled cash.
  • Set maximum reconciliation and data-staleness windows.
  • Test administrator, bank, stablecoin, and chain outages separately.
  • Disclose when peer-to-peer transfer remains available but redemption does not.

The Best Architecture Makes the Off-Chain Boundary Visible

A credible TMMF does not need to claim that everything is on-chain. It needs to show exactly where the token stops, which off-chain process begins, and how the two states are reconciled under normal and stressed conditions.

DisclosureInvestor needs to know
Authoritative ledgerWhich record proves ownership in a conflict
Dealing windowWhen subscriptions and redemptions become final
NAV timingWhich price applies to a pending request
Cash routeWhether fiat, stablecoin, or both settle the trade
Outage procedureWhat remains transferable, frozen, or redeemable

The hybrid model is likely to persist because fund assets and regulation already live in mature off-chain systems. The investable improvement is not an absolute on-chain percentage; it is a shorter, testable, and legally explicit path between the token and the fund.

Frequently Asked Questions

What is a tokenized money market fund?

A tokenized money market fund is an MMF whose shares are issued or recorded as digital tokens on a distributed ledger. The token is a claim on the fund, while the fund still invests under ordinary MMF rules.

Are any major tokenized MMFs fully on-chain?

The ECB's April 2026 review found that none of the largest global or EU-domiciled tokenized MMFs was fully on-chain because underlying assets and key operating processes remained partly off-chain.

Why do tokenized MMFs keep traditional shareholder registers?

Legal ownership rules, transfer-agent systems, distributor records, and existing fund operations can require a traditional book-entry ledger. Around half of the ECB sample used that ledger as the primary ownership record.

Can tokenized MMF investors redeem 24/7?

They may submit or transfer requests at any hour, but issuer redemptions can still depend on business-hour cutoffs, fiat rails, administrator approval, and trading in the underlying assets.

What risk does the hybrid architecture create?

The token can trade while the issuer cannot continuously create or redeem shares. That gap can separate the secondary price from NAV and can amplify runs when underlying markets are closed.

What must a tokenized MMF disclose about its architecture?

It should identify the legally authoritative ledger, tokenization provider, transfer agent, cash and stablecoin rails, NAV source, dealing cutoffs, redemption finality, reconciliation timing, and outage procedures.

Ready to get started?

Join others who are already using our platform.