SKIP TO CONTENT
Web39 minBuilding the RWA Chain / Ep. 1

Why RWA Tokenization Needs Its Own Blockchain

Adam Boudjemaa
SHARE
Pixel-art illustration of a deed-shaped key sliding smoothly into a custom-built rail while jamming against a generic mismatched rail.

KEY TAKEAWAYS

  • General-purpose L1s were not designed for regulated assets. RWA needs purpose-built infrastructure.
  • ERC-3643 is a good standard running on the wrong substrate. L2s still leak compliance across VMs.
  • An Asset Passport records an asset's full legal and valuation history, not just an allowlist entry.
  • Testnet is running now. Mainnet is on track for 2026.
3,570
TRANSACTIONS CLOSED
reported during Dubai's dip
$3.24B
VOLUME
over five trading sessions

In March 2026, by the reporting that circulated, Dubai's real estate market dropped around 20% in five trading sessions.

Roughly 3,570 transactions still closed. On the order of $3.24 billion in volume. The market didn't freeze. It just repriced.

The reason it didn't cascade into a 2008-style collapse is simple: Dubai is largely a cash market. By most estimates around 60% of deals are all-cash. No margin calls. No forced liquidations through a chain of leveraged positions. Just buyers who actually had the money.

But here's what caught my attention. Every one of those transactions ran through centralized platforms. Stake, the most established fractional-investment platform in the market, is the gold standard. And even Stake couldn't offer fractional liquidity during the crisis. You couldn't sell 10% of your position. You couldn't rebalance in real time. You could watch the number go down.

That's the problem I'm building against.

Why Ethereum Can't Do This

$443K
DAILY COST
my estimate to log property actions on L1

I'm not being contrarian about Ethereum. I co-authored ERC-3643 (T-REX), the Final-status standard for permissioned security tokens on EVM chains. I know the ecosystem well.

By my own modeling, logging property actions at scale on Ethereum L1 runs on the order of $443,000 per day. That's not a rounding error. That's the price of on-chain compliance state for a real estate fund that needs to record every transfer restriction update, every KYC refresh, every regulatory event.

L2s get you to $0.10 to $1.00 per transaction, which sounds better until you realize that "simple reads" still cost something, and real-world asset operations aren't simple. A Dubai Land Department registration event isn't one transaction.

ONE REGISTRATION EVENT
Flow diagram: 5 stepsFlow diagram: 5 steps. Compliance check, then Identity verification. Identity verification, then Transfer approval. Transfer approval, then State update. State update, then Audit log entry.1Compliance check2Identity verification3Transfer approval4State update5Audit log entry
One Dubai Land Department registration is five on-chain operations, not one. That multiplier is what a per-transaction price tag hides.

Stack those five up across thousands of daily transactions and the economics still don't work.

But cost is only part of the problem. The deeper issue is architecture.

The Compliance Gap Nobody Talks About

I call it the cross-VM compliance problem, and it's the failure mode general-purpose chains can't see. Here's how a "compliant" token walks straight out the side door.

COMPLIANCE LEAK
Flow diagram: 4 stepsFlow diagram: 4 steps. Compliant ERC-3643 token, then Registered in x/erc20 as a bank denom. Registered in x/erc20 as a bank denom, then bank.MsgSend moves it, EVM compliance checks bypassed. bank.MsgSend moves it, EVM compliance checks bypassed, then Bridged out via IBC.1Compliant ERC-3643 tokenPasses every transfer restriction onthe EVM side. Fully whitelisted, fullylegitimate.2Registered in x/erc20 as a bankdenomThe Cosmos x/erc20 module mirrors thetoken into a native bank denomination.3bank.MsgSend moves it, EVMcompliance checks bypassedThe token now moves at the banklayer. The ERC-3643 identity registrynever runs, so a blacklisted addresscan hold it.4Bridged out via IBCIt leaves the chain entirely. The EVMnever saw the transaction, and nostandard defines how compliance stateshould cross VM boundaries.
A blacklisted address can hold a compliant token, move it at the bank layer where the ERC-3643 checks never run, then bridge it out. Step three is where compliance silently drops out of the picture.

For a USDC-style stablecoin, this is a medium-severity issue. For a tokenized property deed where transfer to a sanctioned party could void your operating license, it's existential.

Generalize it. Compliance that lives in a contract is only enforced on the paths that run that contract.

Every other path is open by default. The bank module. The bridge. Whatever VM the chain adds next year. You're not protecting the asset. You're protecting one execution path and hoping nobody walks around it.

General-purpose chains weren't designed for this because their designers weren't thinking about regulated assets.

What ERC-3643 Gets Right (and Where It Hits the Wall)

ERC-3643 strengths

Solves transfer restrictions at the token level. On-chain identity registry. Compliance agents can freeze accounts, force transfers, manage whitelists. Final status on Ethereum.

Where it hits the wall

Smart contract standard on a chain that doesn't understand what it's doing. Compliance checks happen inside EVM execution, not at the consensus layer. Validator censorship, reorgs, and oracle failures are not addressed.

ERC-3643 solves the transfer restriction problem at the token level. Every transfer goes through an on-chain identity registry. Compliance agents can freeze accounts, force transfers, and manage investor whitelists. It reached Final status on Ethereum, and getting a standard accepted is a story in itself. I'm proud of the work.

But ERC-3643 is a smart contract standard sitting on top of a chain that doesn't understand what it's doing. The chain processes the transaction regardless of what the compliance logic says. The compliance check happens inside the EVM execution, not at the consensus layer.

That distinction matters when you're asking: what happens if a validator censors a compliance update? What happens if a reorg reverts a freeze transaction? What happens when your compliance oracle is a centralized service that goes down?

ERC-7943 (uRWA) has been Final since May 2026. Six functions, one common shape across ERC-20, ERC-721, ERC-1155 and ERC-6909, and one genuinely new idea: it separates whether an account is eligible to hold an asset from whether a specific transfer is allowed. ERC-3643 has no equivalent split.

But it's an interface, not a system. No identity registry, no compliance rules, no agent model, no recovery mechanism. And it says nothing about crossing a VM boundary, so the leak above is still unaddressed. A standard that runs on a chain that wasn't designed for it is still patching around the fundamental gap.

What a Purpose-Built RWA Chain Actually Needs

I've been thinking about this for two years and building against it for one. Here's what I've concluded a real RWA chain requires:

WHAT IT ACTUALLY NEEDS
1

Predictable, fixed fees

Gas prices are unpredictable on Ethereum. An agent logging a property valuation at 3am shouldn't pay 10x because of a memecoin launch. Integra uses a 5000 gwei base fee. Flat. Predictable.

2

Native compliance primitives

Not as a smart contract layer on top. ERC-3643 and ERC-7943 compliance logic should be understood at the protocol level. Every validator enforces transfer restrictions.

3

Unified identity across assets and agents

This is the piece I'm most excited about. Asset Passports and Agent Passports working together at the consensus level.

Three requirements, after two years of thinking about this and one of building against it. The second is the load-bearing one, and the next diagram is entirely about where that check has to run.

The second one is the load-bearing item, and it's easy to misread. It isn't a better contract. It's the same rule at a different altitude.

WHERE THE CHECK RUNS
Layered stack diagram: 4 layers, top to bottomLayered stack diagram: 4 layers, top to bottom. Layer 1, TODAY · CONTRACT: ERC-3643 transfer restrictions, On-chain identity registry, Compliance agent controls. Layer 2, TODAY · EVM: The check runs here, and only here. Layer 3, TODAY · CONSENSUS: Processes the transaction regardless. Layer 4, RWA CHAIN · CONSENSUS: Every validator enforces transfer restrictions, ERC-3643 and ERC-7943 logic understood at the protocol level.TODAY · CONTRACTERC-3643 transfer restrictionsOn-chain identity registryCompliance agent controlsTODAY · EVMThe check runs here, and only hereTODAY · CONSENSUSProcesses the transaction regardlessRWA CHAIN · CONSENSUSEvery validator enforces transferrestrictionsERC-3643 and ERC-7943 logicunderstood at the protocol level
Same compliance rule, two places to put it. Above consensus, consensus is free to ignore it, which is exactly how the leak above works. Inside consensus, every path inherits it.

That's the whole difference between a compliant token and a compliant chain.

Asset Passport and Agent Passport

Right now, to tokenize a Dubai property, you have to wire together a handful of systems that don't know about each other:

ASSET PASSPORT
Layered stack diagram: 2 layers, top to bottomLayered stack diagram: 2 layers, top to bottom. Layer 1, Today: UAE Pass (proprietary), Dubai Land Department API (REST), Lean (proprietary), KYC / AML provider (varies), On-chain identity registry (EVM). Layer 2, Asset Passport: One on-chain object, bound to the asset token.TODAYUAE Pass (proprietary)Dubai Land Department API (REST)Lean (proprietary)KYC / AML provider (varies)On-chain identity registry (EVM)ASSET PASSPORTOne on-chain object, bound to theasset token
Five fragmented integrations, each speaking its own protocol, collapse into one on-chain object cryptographically bound to the asset token.

Each of these speaks a different protocol. There's no standard data model, so every project rebuilds the integration from scratch.

The Asset Passport is our answer. It's an on-chain identity object that aggregates all of the above into a single verifiable record. The property's legal status, ownership history, encumbrances, and compliance flags live in one place, cryptographically bound to the asset token.

The Agent Passport extends the same model to AI agents. An agent that's authorized to execute trades on behalf of a property fund needs an identity too. It needs to be KYC'd, its permissions need to be scoped, and its actions need to be auditable. That scoping is exactly the least-privilege discipline I use for agents that move money. When a court asks for a transaction log in three years, "an AI did it" isn't an acceptable answer.

Here's the rough shape of what that looks like at the contract level:

passport-interfaces.sol
// Compliance state lives outside the interface (Solidity rule)
struct ComplianceState {
    bytes32 jurisdictionHash;
    uint64  lastVerifiedAt;
    bool    transferRestricted;
    address complianceOracle;
}

interface IAssetPassport {
    function getState(uint256 assetId)
        external
        view
        returns (ComplianceState memory);

    function updateState(
        uint256 assetId,
        ComplianceState calldata newState,
        bytes calldata oracleProof
    ) external;
}

interface IAgentPassport {
    function isAuthorized(
        address agent,
        bytes4  actionSelector,
        uint256 assetId
    ) external view returns (bool);

    function scopedExecute(
        address agent,
        address target,
        bytes calldata data,
        bytes calldata agentProof
    ) external returns (bytes memory);
}

The key detail in scopedExecute: the chain validates the agent's authorization before the call hits the EVM. This isn't a middleware check. It's a consensus-level constraint.

AGENT PASSPORT
Flow diagram: 4 stepsFlow diagram: 4 steps. Agent submits a scoped action, then Chain reads the Agent Passport. Chain reads the Agent Passport, then Authorization decided before execution. Authorization decided before execution, then Call executes, scoped and auditable.1Agent submits a scoped actionAn address holding an Agent Passport,plus a target and calldata.2Chain reads the Agent PassportisAuthorized(agent, actionSelector,assetId): is this agent permitted todo this thing, to this asset?3Authorization decided beforeexecutionAn unauthorized action never reachesthe EVM at all.4Call executes, scoped andauditableAttributable to a KYC'd agentoperating inside declaredpermissions, rather than to "an AI".
The authorization check sits under the EVM, not in front of it. Middleware you can route around, which is exactly how the cross-VM leak above works. Consensus you can't.

What This Unlocks

Once you have Asset Passports and Agent Passports working together, several things become possible that weren't before.

WHAT IT UNLOCKS
1

Fractional real estate with real liquidity

Not just "own 0.01% of a building." Your fraction can be sold in real time to a counterparty whose identity has already been verified against the same compliance registry. No settlement delay for manual KYC review.

2

AI-driven property valuation on-chain

An agent with a verified Agent Passport can publish a valuation update that's cryptographically signed, auditable, and triggers downstream logic automatically. The operating efficiencies real estate AI is projected to unlock mostly require this kind of trusted action layer.

3

Cross-border compliance without rebuilding

A property in Dubai and a property in London have different regulatory requirements. The compliance oracle system is designed to be modular. You swap the oracle, not the chain.

Three things that only become possible once Asset Passports and Agent Passports work together. The first one is the Dubai story from the opening, answered.

Go back to the opening. The thing nobody could do during the Dubai dip was sell 10% of a position to an already-verified buyer while the market was still moving. That's the first item on this list.

Vertical Wins Over General in Blockchain

Strip it down to the choice actually on the table.

SUBSTRATE CHOICE
Decide: Where should a regulated real-world asset live?Decision tree: Where should a regulated real-world asset live? If You put it straight on Ethereum L1, then Priced out. If You move to an L2 and keep ERC-3643, then Cheaper, still leaking. If You run a permissioned chain, then Compliant, not neutral. If You build the compliance into consensus, then A purpose-built RWA chain.DECIDEWhere should a regulated real-worldasset live?IF You put it straight on EthereumL1Priced outBy my own modeling, loggingproperty actions at scale runs onthe order of $443,000 per day.IF You move to an L2 and keepERC-3643Cheaper, still leaking$0.10 to $1.00 per transaction, butno answer to cross-VM complianceleakage, no native oracleintegration for real-world identitydata, and no predictable cost atthe protocol level.IF You run a permissioned chainCompliant, not neutralYou end up needing a trustedoperator, which defeats most of thevalue here. Institutions wantneutral infrastructure withverifiable rules, not each other's.IF You build the compliance intoconsensusA purpose-built RWA chainCompliance, identity, andpredictable costs enforced by thechain itself.
Three of these are real options that real teams pick today. Each one fails on a different axis, and none of them fails because somebody wrote a bad contract.

2017: General-purpose thesis

You needed a platform anyone could build on, because nobody knew what the killer apps would be. Ethereum won that bet.

2026: Vertical-specific thesis

We know the killer apps. DeFi needs composability. RWA needs compliance, identity, and predictable costs. Optimizing for both is building a car and a truck on the same chassis.

Solana made a version of this bet on high-throughput trading. It works for that use case. We're making the same kind of bet on regulated assets.

The Dubai market crash taught one lesson clearly: centralized platforms can't provide liquidity when it matters most. Decentralized infrastructure can, but only if it's built for the compliance requirements that institutional capital actually has.

That's what I'm building.

FAQ

No. L2s still don't solve cross-VM compliance leakage, don't provide native oracle integration for real-world identity data, and don't give you predictable costs at the protocol level. ERC-3643 is a good standard running on the wrong substrate.

Permissioned chains trade decentralization for compliance. You end up with a system that needs a trusted operator, which defeats most of the value of blockchain for this use case. Institutions don't want to trust each other's infrastructure. They want neutral infrastructure with verifiable rules.

An identity registry (ERC-3643 style) tells you if an address is allowed to hold a token. An Asset Passport tells you everything about the asset: legal status, valuation history, encumbrances, applicable regulations, and compliance oracle assignments. It's the asset's permanent record, not just an allowlist.

Testnet is running now. Mainnet is on track for 2026. If you're building in RWA and want early access, reach out on Twitter or LinkedIn.

Building the RWA Chain

Episode 1 · 2 published

PreviousNext
Adam Boudjemaa

Adam Boudjemaa

Former CTO of Integra. Named author (1 of 5) of ERC-3643, first author of ERC-6960, co-author of ERC-7410, and co-author of ERC-8203, which is still a draft. Building production AI and regulated Web3 systems.

Enjoyed this post?

Get more like it in your inbox every Tuesday.