In the first two parts of this DYOR series, we covered how to evaluate tokenized asset products and how to read the data. In Part 03, we address the question that experienced investors consider first and most retail investors consider last: who is building this?
Team evaluation matters more in tokenized assets than in almost any other investment category. The technology is complex, the regulatory environment is evolving rapidly, and the history of the sector includes numerous cases where technically sophisticated products were built by teams that lacked the compliance expertise, fiduciary discipline, or operational integrity to sustain them. A great smart contract with a compromised team is a liability. A great team navigating an imperfect product can iterate toward something excellent.
Why Team Evaluation Is Different in RWA
In traditional private equity or venture capital, evaluating a team means assessing whether founders have the domain expertise and execution track record to build a successful company. In RWA tokenization, team evaluation adds three specific dimensions that most investor frameworks miss:
Regulatory fluency. RWA products are, by definition, operating at the intersection of blockchain technology and regulated financial markets. A team that understands blockchain but not securities law will build products that cannot legally be distributed to their intended audience. A team that understands securities law but not smart contract architecture will build products with technical vulnerabilities. Both combinations exist in the market. The question is not "does this team know crypto?" or "does this team know finance?" — it is "does this team understand both, and do they have advisors who fill the gaps?"
Custodian and legal relationships. The most important relationships an RWA team has are not with investors — they are with custodians, transfer agents, and legal counsel. A tokenized fund without a regulated custodian for the underlying assets is not a tokenized fund — it is a claim against the issuer with no independent backing. Teams that can name their custodian (BNY Mellon, Anchorage, Komainu, Fireblocks, BitGo), their transfer agent (Securitize, Tokeny, DigiShares), and their legal structure (Irish UCITS, Cayman fund, Delaware SPV) have done the institutional work that separates real products from aspirational ones.
Track record with regulated products, not just crypto products. Launching a successful NFT collection or a DeFi protocol is not evidence of the competence required to issue a regulated security. The skill sets are different. Look for team members who have previously worked in licensed financial institutions, have experience with regulated product launches, or have demonstrably navigated a regulator review process with a prior product.
The Due Diligence Checklist — Evaluating an RWA Team
- Founders — Professional background check: Search each founder on LinkedIn, their institution's website, and professional regulatory databases. Do their stated credentials check out? Have they worked at licensed financial institutions, legal or compliance firms, or regulated technology companies? Are their claimed qualifications verifiable?
- Legal team — Named, licensed, verifiable: What law firm(s) advise the product? Major RWA products work with firms that specialize in securities law and digital assets (Latham and Watkins, Sidley Austin, Morrison Foerster, Paul Hastings). If the legal counsel is unnamed or unverifiable, that is a significant red flag.
- Custodian — Named, regulated, independent: Who holds the underlying assets? Is this a regulated custodian with a demonstrable track record, or is the issuer also the custodian of their own product? Self-custody of underlying assets by the issuer is the single greatest structural risk in RWA products.
- Auditors — Smart contract and financial: Who audited the smart contracts? (Trail of Bits, OpenZeppelin, Certik, Halborn are reputable.) Who audits the financial accounts and proof of reserve? Are audit reports publicly available or available to investors on request?
- Regulatory status — Licensed or exempt? In what jurisdiction is the product registered? Under what securities exemption (Regulation D, Regulation S, UCITS, MiCA)? Has the product been through a regulator review process, or is it operating under a claim of exemption that has not been validated?
- Investor protections — What happens if the team fails? If the issuer becomes insolvent, what is your legal claim? Is the underlying asset segregated in an independent custodial structure, or is your claim unsecured? This question is the most important one to have answered before investing, and most marketing materials do not answer it.
Red Flags — What to Walk Away From
Anonymous or pseudonymous founders. There is a place for pseudonymous development in open-source crypto. There is no place for it in products that claim to represent regulated financial assets. If you cannot verify who is responsible for holding your investment, the legal accountability framework does not function.
Yield claims without clear yield source. The diagnostic question we have stated before: what real-world asset or economic activity generates the return? If a tokenized product claims 18% annual yield and cannot identify the specific loans, contracts, or assets generating that return with verifiable documentation, it is not an RWA product — it is a speculative token with an RWA marketing layer.
Self-custody with no independent verification. "We hold the assets ourselves and you can trust us" is not a custody structure. Trust is not a custodian. Every credible RWA product has a named, regulated, independent custodian whose relationship with the issuer is documented in the product legal documents.
No proof of reserve or infrequent attestation. Proof of reserve is not just a stablecoin concept. Any tokenized asset product should be able to demonstrate, on demand or through regular public attestation, that the on-chain token supply corresponds to the off-chain asset holdings. Monthly attestation at minimum. Real-time on-chain proof of reserve is the gold standard.
Regulatory jurisdiction shopping. Some teams incorporate in the least regulated jurisdiction available specifically to avoid investor protection requirements. The jurisdiction matters: a product incorporated in a jurisdiction with weak investor protection laws provides weaker investor protection regardless of how its marketing describes the structure.
Green Flags — What Good Looks Like
Named institutional partners with skin in the game. When BlackRock's BUIDL lists BNY Mellon as custodian, Securitize as transfer agent, and multiple named law firms as counsel, every counterparty has reputational and legal exposure. They have due-diligenced the product before lending their name to it. Institutional co-signatories on a product's structure are not marketing — they are risk-bearing validators.
Regulatory approval, not just exemption. The Aviva Investors USD Liquidity Fund tokenized on XRPL was approved by the Central Bank of Ireland — not claimed to be exempt from CBI oversight, but actively reviewed and approved. That distinction matters enormously for investor protection. Seek products that have been through a regulatory review process, not just claimed a regulatory exemption.
Public legal documents. The product's offering memorandum, subscription agreement, and terms of service should be accessible to potential investors before investment. If a team cannot or will not share their legal documents, they are either protecting proprietary information that investors have a right to see, or the documents reveal risks they prefer investors not to read.
Team continuity and succession planning. What happens to the product if the founding CEO leaves or is incapacitated? Credible RWA products have governance structures that specify succession and continuity. A product whose entire operational integrity depends on one person's continued involvement is a single point of failure.
The Most Important Question to Ask
After all the due diligence, one question cuts through more confusion than any other: If something goes wrong — the issuer fails, the custodian fails, the smart contract is exploited — what is my legal claim, and against whom?
The answer to that question should be in the product documents, available on request, and verifiable by independent legal counsel. If the team cannot answer it clearly and in writing, you have not yet done enough due diligence to invest.
→ DYOR Part 01: Evaluating Tokenized Asset Products
→ DYOR Part 02: Reading the Data
→ What You Actually Own — the ownership question answered for tokenized stocks