State Street is sending a clear message to the crypto market: if traditional finance is going to move serious real-world asset activity on-chain, blockchain security and legal clarity have to improve first.
Angus Fletcher, State Street’s head of digital assets, said at Consensus Miami that large financial institutions need stronger guardrails around blockchain-based assets, especially after a run of major decentralized finance attacks. His point was not that institutions have lost interest in tokenization. It was that interest now comes with harder questions about custody, legal rights, cross-chain exposure and operational risk.
That matters because tokenized real-world assets, often called RWAs, are no longer just a crypto-native experiment. Banks, asset managers, treasury teams and infrastructure providers are exploring how funds, credit products, cash-like instruments and collateral could move on blockchain rails. But the larger the assets, the less tolerance institutions have for unclear controls.
DeFi Hacks Are Forcing a More Practical Conversation
Recent DeFi attacks have made the risk discussion more concrete. The source article pointed to an exploit affecting Drift in early April and a similarly large attack involving KelpDAO later in the month. Even when institutions are interested in the efficiency of on-chain markets, incidents of that size make it harder to treat DeFi security as a technical detail.
Fletcher framed the issue around the future scale of on-chain finance. Before trillions of dollars in activity move to blockchain systems, the industry needs to work through the problems that could become systemic later. In practical terms, that means institutions are looking beyond whether a protocol works in normal conditions. They need to know what happens when something breaks, who has authority, what legal rights apply and how losses are contained.
For buyers and decision-makers evaluating digital asset infrastructure, that shifts the checklist. A high yield, fast settlement or broad liquidity pool is not enough. Security reviews now have to account for smart contract risk, oracle exposure, bridge design, collateral quality, governance controls and emergency procedures.
YubiKey 5C NFC security key
Protocol reviews are only part of DeFi security. Teams handling digital asset workflows also need phishing-resistant authentication for admin, custody, exchange and cloud accounts.
As an Amazon Associate I earn from qualifying purchases.
The concern is especially sharp in DeFi lending, where collateral, liquidation rules and token dependencies can create complex chains of exposure. If one asset, bridge or protocol fails, the impact can spread through vaults, lending markets and treasury positions faster than traditional operational teams are used to handling.
Institutions Want Cross-Chain Rights Defined
One of Fletcher’s central points was interoperability. Institutions do not just need blockchains to communicate technically. They need to understand what legal title and legal rights mean when a token moves from one chain to another.
That is a harder issue than it may sound. A token may represent a claim on an off-chain asset, a share in a fund, a receipt for deposited collateral or a right to redeem value. If that token is bridged, wrapped or represented on another network, the institution holding it needs to know exactly what it owns and what protections apply.
This is where crypto’s usual language can become too vague for institutional use. Phrases such as liquid, composable or interoperable do not answer a bank’s legal and risk questions by themselves. A treasury team wants to know whether a tokenized position is enforceable, how it is recorded, how it is valued, and what happens if the chain, bridge or smart contract supporting it fails.
For tokenized real-world assets to scale, the legal layer has to match the technical layer. Institutions will want clear documentation on custody, settlement finality, redemption rights, jurisdiction, counterparty obligations and dispute procedures. Without that, cross-chain activity can look efficient on the surface while leaving too much ambiguity underneath.
Morpho Executive Points to Deeper Due Diligence
Dennis Bree, head of institutional at Morpho, said April may have been the most active month for DeFi hacks so far. He also said curators are doing more diligence as they assess the risk of assets used as collateral.
That detail is important because DeFi risk is not only about whether a protocol’s own code is secure. It is also about what the protocol accepts, depends on and routes through. A lending vault can be exposed to the quality of collateral assets, the reliability of price feeds, the permissions of external contracts and the behavior of borrowers under stress.
For institutional allocators, that makes the role of curators more important. Curators decide how vaults are configured, which assets are accepted, what risk limits apply and how capital is deployed. In a market that wants institutional money, those decisions need to be explainable to risk committees, auditors, compliance teams and CFOs.
Bree also described regulatory gray areas as an everyday barrier to institutional participation. One example is accounting treatment. When a company moves capital on-chain and receives a receipt token, the token may not simply increase in quantity. It may increase in value. That creates practical questions for a treasury or finance department about classification, valuation and reporting.
Accounting for Cryptocurrency guide
When on-chain positions create receipt tokens or changing token values, finance teams need accounting-specific guidance. A crypto accounting reference can help frame the questions before formal policy review.
As an Amazon Associate I earn from qualifying purchases.
Security Is Becoming a Buying Requirement, Not a Bonus
The institutional message is increasingly buyer-aware: blockchain infrastructure has to be evaluated like financial infrastructure. That means the market for custody, compliance, monitoring, audit and risk tooling is likely to become more important as tokenization grows.
For firms reviewing vendors or protocols, the most useful questions are specific:
- What assets and contracts does the system depend on outside its own codebase?
- How are smart contracts audited, upgraded and monitored after deployment?
- What legal rights does a token holder have on each supported chain?
- How are collateral assets selected, priced and removed if risk changes?
- Who can pause, upgrade or intervene in the system during an incident?
- How will receipt tokens, yield-bearing tokens or vault positions be handled for accounting and reporting?
Those questions are not anti-crypto. They are the normal questions that appear when financial institutions consider putting meaningful capital into a new rail. The issue is whether crypto infrastructure can answer them with enough precision.
The Bigger Point for Tokenized Assets
State Street’s comments land at a moment when institutional interest in digital assets is becoming more practical. The discussion is less about whether blockchains can support financial activity and more about what standards are needed before that activity can scale safely.
That distinction matters. Tokenized real-world assets could make settlement faster, collateral more programmable and markets more accessible. But those benefits depend on trust in the surrounding system. If legal title is unclear, cross-chain movement is poorly defined or DeFi losses remain frequent, institutions will either slow down or restrict their exposure to narrower, more controlled environments.
The likely next phase is not a simple choice between traditional finance and DeFi. It is a push to make on-chain markets more legible to institutional risk teams. That means stronger security practices, clearer legal documentation, better accounting guidance and more transparent infrastructure.
For crypto builders, the signal is direct. The institutions looking at tokenized assets are not just shopping for speed or yield. They are looking for systems that can survive legal review, audit review and operational stress. Until that bar is met, the promise of trillions of dollars in on-chain RWAs will remain more conditional than inevitable.