How to Evaluate an RWA Project: A Complete Due Diligence Framework for Tokenized Asset Investors

The real-world asset (RWA) tokenization market crossed $39 billion in on-chain value in 2026, with new projects launching weekly across tokenized Treasuries, private credit, real estate, commodities, and infrastructure. The range of quality across these projects is enormous. Some represent genuinely sound financial and legal engineering from institutional-grade teams. Others are marketing exercises dressed in blockchain vocabulary, with no meaningful legal structure, no credible custody arrangement, and no path to investor recourse if something goes wrong.

Evaluating RWA projects requires a different analytical framework than evaluating DeFi protocols or cryptocurrency networks. The risks are different — counterparty risk, legal structure risk, and regulatory risk dominate over smart contract risk. The due diligence questions are different. And the red flags are different: the most dangerous RWA projects are not the ones with poor code, they are the ones with sound code but a broken legal structure underneath it.

This framework covers the six dimensions that determine whether an RWA project is genuinely sound: legal structure, asset quality, custody and access, yield sustainability, regulatory compliance, and team accountability.

Dimension 1: Legal Structure

The most important question in RWA due diligence is not "what blockchain is this on?" It is "what do I actually own, in the eyes of what jurisdiction's law, and what can I do about it if something goes wrong?"

A tokenized asset is only as good as the legal structure that connects the token to the underlying asset. The token itself — a record on a blockchain — has no intrinsic legal significance. What gives it legal significance is the combination of: (a) a legal entity that holds the underlying asset, (b) legal documentation that establishes the token holder's rights against that entity, and (c) a jurisdiction's courts that will enforce those rights.

Questions to ask about legal structure:

• What entity holds the underlying asset? A special purpose vehicle (SPV) in a regulated jurisdiction provides better investor protection than a general corporate entity. A Delaware LLC, a Cayman Islands SPV, or a Luxembourg SICAV all have different bankruptcy remoteness characteristics — the degree to which the underlying assets are protected if the operating company fails.
• What legal document establishes my rights as a token holder? There should be an offering document, a subscription agreement, or a trust deed that explicitly establishes what the token holder is entitled to. "The smart contract is the agreement" is not a sufficient answer for a regulated investment.
• Is the legal structure bankruptcy-remote? If the company that issued the token goes bankrupt, what happens to the underlying assets? A properly structured SPV keeps the underlying assets separate from the issuer's general estate — token holders have a claim on the assets even if the issuer is insolvent.
• Which jurisdiction governs the token holder's rights? US investors face the most regulatory complexity. Securities registered with the Securities and Exchange Commission (SEC) have the most robust investor protections. Securities offered under Regulation D (accredited investors only) or Regulation S (non-US persons) have fewer. Offshore securities with no US regulatory connection have none of the protections US securities law provides.

Red flag: Any project that describes the smart contract itself as the legal agreement, without an underlying legal document in a recognized jurisdiction, has not solved the legal structure problem. Blockchain is an excellent record-keeping system. It is not a substitute for contract law.

Dimension 2: Asset Quality and Verification

The token represents a claim on an underlying asset. The value of that claim depends entirely on the quality of the underlying asset and the reliability of the mechanism for verifying that the asset exists as described.

For tokenized Treasuries and money market products: The underlying assets — US Treasury bills, government money market instruments — are the highest-quality assets in the world. The due diligence question is whether the assets are actually being held as described. BlackRock's BUIDL fund publishes regular attestations from PricewaterhouseCoopers confirming the fund's holdings. Franklin Templeton's BENJI token is on-chain with daily holding reports. For Treasury products, the key question is whether a reputable third-party auditor regularly confirms the holdings.

For tokenized private credit: The underlying assets are loans to companies. These require deeper due diligence: who are the borrowers, what is their credit quality, what collateral secures the loans, what is the historical default rate on this platform's loan portfolio, and how are non-performing loans handled? Maple Finance and Centrifuge publish borrower information and on-chain default histories. A private credit platform that does not disclose its borrower composition is not providing sufficient basis for investment analysis.

For tokenized real estate: Who performed the property appraisal? What is the occupancy rate? What is the rental yield? What is the local real estate market doing? Property tokenization platforms like RealT publish rental income data on-chain — every rent payment that flows through the smart contract is publicly verifiable. This on-chain cash flow transparency is one of the genuine advantages of tokenized real estate over traditional real estate investment trusts (REITs).

For tokenized commodities (gold, carbon credits, energy): Who holds the physical asset? Where? What are the audit rights? Tokenized gold products like PAXG (backed by gold held by Paxos Trust Company) and XAUT (backed by gold held by Tether's custodian) publish audited holdings reports. Carbon credit tokens are more complex — the underlying offset project's validity is what determines value, and verification requires understanding the specific carbon standard (Verra, Gold Standard, American Carbon Registry) and the third-party verifier who assessed the project.

Red flag: Any project where the underlying asset cannot be independently verified by a third-party auditor or where the audit rights are limited or absent.

Dimension 3: Custody and Access

Who holds the underlying asset, and what happens to your tokens if they fail?

Custody for institutional RWA products is typically a licensed custodian — a bank or trust company regulated as a custodian in a recognized jurisdiction. For BUIDL: the underlying Treasury bills are custodied by BNY Mellon, the world's largest custodian bank. For tokenized real estate: the property title is held by a legal entity with documented ownership records in the relevant jurisdiction. The digital tokens representing these assets are separate from the underlying asset custody — they are held in the investor's own wallet or through a digital asset custodian like Coinbase Custody or Fireblocks.

Self-custody of the digital token is one of the genuine advantages of properly structured RWA tokenization over traditional fund structures. In a traditional fund, you cannot hold your units directly — they exist as entries in the fund administrator's records. In a tokenized fund with self-custody capability, you hold the token in your own wallet and the fund administrator's records are the blockchain itself, visible to anyone.

Questions to ask about custody:

• Who is the custodian for the underlying asset, and are they licensed in a regulated jurisdiction?
• Can I hold the token in self-custody, or must I use the issuer's custodian?
• What happens to the underlying asset and my token rights if the issuer or custodian fails?
• What are the redemption mechanics — how do I exit, how long does it take, and under what conditions can redemptions be suspended?

Red flag: Any project where the same entity issues the token and custodies the underlying asset without independent oversight. The issuer and the custodian should be separate entities with independent accountability.

Dimension 4: Yield Sustainability

If an RWA product is paying yield, that yield has to come from somewhere. The source of the yield determines whether it is sustainable, what risks it carries, and whether the stated yield is real.

Treasury-backed yield: The yield on tokenized Treasury products comes directly from US government interest payments. It is as reliable as the US government's ability to pay its debts. Current yield: approximately 3.3-3.5% annually. The gap between this and bank savings accounts is the core retail RWA value proposition.

Private credit yield: The yield on tokenized private credit comes from borrower interest payments. Higher yield — 8-15%+ — reflects real borrower default risk. The historical default rates on the platform's loan book are the primary basis for assessing whether the yield is compensation for real risk or an unsustainable promotional rate.

Real estate yield: Rental income from properties. Verifiable on-chain if the platform routes rental payments through smart contracts. The yield is sustainable as long as the properties are occupied and the tenants pay. Vacancy rates, local market conditions, and property management quality are the primary risk factors.

Red flag: Any yield that is significantly higher than comparable risk-free or risk-adjusted returns without a clear explanation of the additional risk being taken. A tokenized Treasury product yielding 15% is either taking significant undisclosed risks or is paying yield from token issuance (a Ponzi structure). The source of every dollar of yield should be traceable and explainable.

Dimension 5: Regulatory Compliance

RWA tokenization operates at the intersection of financial regulation and blockchain technology. The regulatory environment is evolving rapidly — the CLARITY Act failed in September 2026, leaving the US with an administrative rulemaking path rather than statutory clarity. But existing regulations already govern most serious RWA products, and compliance with those existing regulations is determinative.

For US investors: Is the product registered with the SEC, or offered under a valid exemption? Regulation D (Rule 506(b) or 506(c)) allows sales to accredited investors without full registration. Regulation A+ allows sales to non-accredited investors up to certain limits. Regulation S covers sales to non-US persons. A product that claims to be unrestricted but has no registration or exemption should be treated as a significant legal risk.

For EU investors: Does the product comply with MiCA (Markets in Crypto-Assets Regulation) for crypto-asset-specific rules, and with the Prospectus Regulation or AIFMD for the underlying security if applicable? The EU's regulatory framework for tokenized assets is now comprehensive and non-compliance carries significant legal risk for both issuers and investors.

For global investors: The most defensible products have clear regulatory compliance in at least one major jurisdiction, and either comply with or are legally exempt from the regulations of every jurisdiction where they are offered. Products that are deliberately structured to avoid regulatory oversight in all jurisdictions are the highest-risk category.

Dimension 6: Team and Track Record

The final dimension is the team operating the product. RWA tokenization requires genuine expertise in multiple disciplines simultaneously: financial structuring, legal analysis across multiple jurisdictions, blockchain engineering, custody operations, and regulatory compliance. Teams that are expert in blockchain but not in financial structuring produce products with technically sound smart contracts and legally inadequate underlying structures. The reverse also occurs.

Questions to ask about the team:

• Do the founders have backgrounds in financial services, not just blockchain? A tokenized private credit fund run entirely by people whose only experience is DeFi is a different risk profile from one run by people who built conventional private credit funds first.
• Has the team operated through a full credit cycle? In private credit, the test of underwriting quality comes when borrowers start defaulting — typically during economic stress. A platform that launched in 2021-2022 and has never managed through a downturn has not demonstrated its loss mitigation capabilities.
• Are the founders and key personnel identifiable and publicly accountable? Anonymous or pseudonymous teams operating regulated financial products is a regulatory red flag in most jurisdictions and a practical accountability concern for investors.
• What is the platform's track record? On-chain data provides genuine track record evidence for tokenized platforms in a way that traditional fund track records do not — the default history, repayment schedules, and cash flow performance of a tokenized credit platform are publicly auditable.

A Practical Checklist

Before investing in any RWA product, confirm each of the following:

The RWA market is producing genuinely excellent products alongside products that will not survive their first significant test. The framework above does not guarantee investment outcomes — it identifies the structural characteristics that distinguish the former from the latter.

→ RWA Token Standards — the technical layer under the legal structure
→ What You Actually Own — the ownership spectrum explained
→ Tokenized Private Credit — the largest RWA category evaluated
→ How to Invest in RWA — the beginner guide