2.1 The ICO Era (2017–2018): What Went Wrong and What It Taught Us

The initial coin offering era was the industry's original sin and its most valuable education, simultaneously. Between 2017 and 2018, projects raised an estimated $20 billion globally through token sales that promised investors everything from decentralized file storage to autonomous hedge funds to blockchain-based social networks. Most of those projects failed. A significant number were fraudulent. The SEC noticed.

The theoretical logic of ICOs was not entirely wrong. Blockchain networks genuinely need native assets to function: miners and validators need incentives, users need a medium of exchange for network transactions, and governance tokens can meaningfully distribute decision-making power over protocol parameters. The problem was that the logic of network utility tokens was systematically stretched to cover instruments that were, by any honest analysis, investment contracts under the Howey test. Founders raised capital by promising investors that the token would appreciate in value as the network grew. That is the textbook definition of a security: an investment of money in a common enterprise with an expectation of profits from the efforts of others.

The SEC's response came in July 2017 with the DAO Report, a pivotal document that the industry spent the following year alternatively ignoring and misreading. The DAO (Decentralized Autonomous Organization) was a smart contract on Ethereum that functioned as a venture fund, raising approximately $150 million in ETH from investors who received DAO tokens representing their proportional interest in the fund. When the DAO was exploited through a reentrancy attack in June 2016, the resulting crisis led Ethereum to hard fork to reverse the hack, an act that itself illustrated how non-decentralized the "decentralized" ecosystem actually was. The SEC's 2017 report on the DAO concluded that DAO tokens were securities and that the offer and sale of those tokens without registration violated the Securities Act. The report did not announce enforcement action, but it stated clearly that federal securities law applies to blockchain-based instruments when the Howey test is satisfied.

The ICO industry largely responded by producing whitepapers with more elaborate utility token narratives, adding disclaimers that the tokens were "not securities," and continuing to raise money from retail investors worldwide. The SEC responded with enforcement. Between 2018 and 2021, the Commission brought dozens of enforcement actions against ICO issuers, settled with projects ranging from Telegram to Kik Interactive, and established that the question of whether a token is a security is answered by the economic substance of the arrangement, not by the label the issuer chooses to apply.

What the ICO era taught the serious practitioners who stayed in the space: compliance is not optional, it is the product. The next generation of tokenized securities infrastructure would be built around regulatory frameworks, not around regulatory avoidance.

2.2 The STO Wave (2018–2019): Harder Than It Looked

The security token offering, or STO, emerged as the compliant alternative to the ICO. The idea was straightforward: issue tokenized securities under existing SEC exemptions (primarily Reg D), provide investors with genuine legal rights rather than vague utility promises, and use smart contract-enforced transfer restrictions to manage the compliance obligations that come with exempt offerings.

In practice, it was much harder than it looked.

The first problem was infrastructure. There was no established custodial framework for tokenized securities. Qualified custodians, a requirement for many registered investment advisers and institutional investors, had no clear regulatory guidance on whether holding a private key constituted custody of the underlying security. The SEC didn't publish guidance on that question until 2019, and even then the guidance was ambiguous enough that most institutional custodians stayed on the sidelines.

The second problem was liquidity. One of the core promises of the STO wave was that tokenized securities would trade on alternative trading systems, providing secondary market liquidity that traditional private placements could never offer. In practice, the secondary markets never materialized at scale. The investor population eligible to trade tokenized Reg D securities was small (US accredited investors subject to 12-month lockup periods), the trading systems were new and lightly capitalized, and the compliance overhead of verifying buyer eligibility before each transfer was substantial. Promising investors that their tokens would be liquid, and then delivering an instrument that was essentially as illiquid as any other Reg D offering, destroyed trust in the space.

The third problem was coordination. Every platform had its own token standard, its own compliance framework, its own investor verification system. A token issued on Platform A couldn't be easily managed by Platform B, which made the secondary market problem worse. The industry needed standards, and building standards requires the kind of collaborative effort that is difficult in a competitive market where every player thinks their proprietary protocol will become the dominant one.

2.3 The Early Players: Pioneers, Pivots, and Survivors

The period from 2017 to 2022 produced a cohort of companies that defined the early structure of the tokenized securities industry. Some are gone. Some have pivoted so dramatically they barely resemble their original form. A few have survived and grown into the infrastructure that the industry runs on today.

Polymath arrived in 2017 as the first purpose-built security token protocol, offering the ERC-1400 standard that encoded transfer restrictions and compliance logic directly into the token. Polymath's early vision was to be the "Ethereum of security tokens," a dedicated platform for compliant issuance. When Ethereum's limitations became apparent, Polymath pivoted to build Polymesh, a purpose-built blockchain for regulated securities with on-chain identity, compliance, and governance built into the base layer.

Harbor took a compliance-layer approach, building a "Regulated Token" (R-Token) standard that wrapped around existing ERC-20 tokens and enforced transfer restrictions by routing every transfer through Harbor's compliance service. The intellectual framework was sound: separate the token from the compliance logic, so that compliance can be updated without redeploying the token contract. Harbor raised $38 million, tokenized real estate assets, and was ultimately acquired by Bittrex in 2020.

Securitize started as a token issuance platform with its DS Protocol (Digital Security Protocol). The pivot that defined Securitize's trajectory was the decision to become a fully registered transfer agent under the Securities Exchange Act of 1934. That decision, made around 2019, transformed Securitize from a software platform into a regulated financial intermediary. Today Securitize operates as a full-stack transfer agent, investment manager, and alternative marketplace, having executed tokenized fund structures for KKR and Hamilton Lane.

tZERO was Overstock.com's bet on tokenized securities trading. Patrick Byrne built an alternative trading system for tokenized securities, registered with the SEC as a broker-dealer and ATS operator, and completed a Reg D/S offering of tZERO preferred tokens in 2018. The regulatory journey was long and expensive, and the secondary market liquidity materialized slowly. tZERO remains one of the few licensed ATS operators for tokenized securities in the US.

I'll write the Vertalo entry from the inside, because I was there. In March 2018, Vertalo closed what I believe was the first natively tokenized Reg D/S securities offering in the United States. "Natively tokenized" is an important qualifier: the security was designed from the outset to exist as a token on a distributed ledger, with the blockchain as the primary record-keeping system, rather than having a traditional security tokenized after the fact. What that experience taught me was that the hard problems in tokenized securities are not cryptographic. They are operational. KYC/AML verification. Accredited investor status confirmation. Tax document generation. Corporate action processing. Wire instruction handling for proceeds. These are the workflows that a transfer agent manages for any securities offering, and tokenization doesn't eliminate them. It changes the format of the records and the mechanics of transfer, but the compliance obligations and operational workflows remain. Vertalo pivoted from being a token issuance platform to being a fully registered digital transfer agent, joining the SEC's Transfer Agent Registry in 2019. Over 8 years and 100+ issuers served, the lesson has been consistent: the infrastructure that matters most is the infrastructure that handles compliance, not the infrastructure that handles cryptography.

OpenFinance, later rebranded as Texture Capital, built one of the first alternative trading systems specifically for tokenized securities. The liquidity problem that plagued the entire STO era hit OpenFinance directly: a secondary market for restricted securities requires both eligible sellers and eligible buyers, a robust compliance verification system, and enough trading volume to provide meaningful price discovery. Texture Capital continues to operate as a licensed ATS.

Tokeny, based in Luxembourg, developed the ERC-3643 standard (also known as T-REX, Token for Regulated EXchanges) as an open-source framework for compliant security token transfers. The Luxembourg context matters: the Grand Duchy has been a leading jurisdiction for tokenized fund administration in Europe. ERC-3643 builds on an on-chain identity registry to verify investor eligibility at the token contract level. In 2024, Tokeny was acquired by Euronext, the pan-European exchange operator.

2.4 The Trough (2019–2022)

The period between 2019 and 2022 was the industry's valley of disillusionment. Regulatory uncertainty was the primary drag: the SEC's 2019 Staff Framework on Investment Contract Analysis of Digital Assets provided some guidance but left enough ambiguity that institutional investors and custodians couldn't build reliable compliance programs around it. The custody problem remained unsolved for most of the period. COVID-19 disrupted the in-person relationships and conferences through which the industry had been building momentum. Several prominent projects failed, including the high-profile collapse of the Telegram TON project after a prolonged SEC enforcement action. Consolidation reduced the number of active players, and the companies that survived did so by cutting costs, narrowing focus, and building real regulatory compliance rather than regulatory-adjacent positioning.

The trough was painful, but it performed a useful function. It separated the companies that were building real financial infrastructure from the companies that were building narratives. The survivors came out of it leaner, more focused, and better regulated.

2.5 The Institutional Pivot (2023–2025)

The shift from retail-focused STOs to institutional tokenized asset management is the most significant structural change the industry has experienced. It was triggered by BlackRock.

In March 2024, BlackRock launched BUIDL (the BlackRock USD Institutional Digital Liquidity Fund) on Ethereum, a tokenized money market fund that rapidly accumulated over $500 million in assets under management. The signal was unambiguous: the largest asset manager in the world, with $10 trillion in AUM, had concluded that tokenized securities infrastructure was ready for institutional deployment. Franklin Templeton had arrived earlier, with FOBXX (the Franklin OnChain US Government Money Fund) launched in 2021 on Stellar and later expanded to Polygon. KKR tokenized a portion of its Health Care Strategic Growth Fund II on Securitize in 2022. Apollo Global Management followed with a tokenized private equity fund structure. JPMorgan's Onyx platform has processed trillions of dollars in intraday repo transactions using tokenized collateral.

What changed was not the technology. The technology in 2024 and 2025 was not fundamentally different from the technology in 2019. What changed was institutional confidence that the regulatory environment was navigable, that the custody infrastructure was mature enough for compliance programs, and that the operational advantages were worth the implementation cost. When BlackRock decides that something is worth doing, other institutions follow.

2.6 The Regulatory Unlock (2025–2026)

The period from early 2025 through March 2026 produced the most favorable regulatory environment for tokenized securities that the industry has ever seen, driven by a combination of new leadership at the SEC, bipartisan legislative momentum, and specific regulatory actions that removed years of uncertainty.

The DTC's December 2025 no-action letter created a 3-year pilot program allowing tokenized securities to interact with DTC's settlement infrastructure, covering Russell 1000 index securities, US Treasury securities, and ETFs. This is the connection between the legacy settlement system and the tokenized securities ecosystem that practitioners have been waiting for since 2018. Paul Atkins was confirmed as SEC Chairman in early 2026, and his public statements, along with those of Commissioners Uyeda and Peirce, made clear that the Commission's posture toward tokenized securities had shifted from adversarial to constructive. The CLARITY Act moved through Congress with bipartisan support, providing legislative clarity on the boundary between SEC-regulated digital securities and CFTC-regulated digital commodities.

On March 17, 2026, the SEC and CFTC jointly published Release No. 33-11412 in the Federal Register, establishing the first binding joint taxonomy for crypto assets ever produced by a US financial regulator. That document is the subject of Chapter 3A, and it represents the clearest articulation of where tokenized securities sit in the regulatory universe that the industry has ever had.

The next chapter covers the US regulatory framework that governs how tokenized securities are issued, managed, and traded. Understanding that framework is the prerequisite for everything that follows.