The Year Tokenized Securities Went Institutional: Korea Legislates, the EU Centralizes, IMF Cools the Hype

South Korea is formally moving stocks, bonds and funds onto the tokenized-securities track; the EU Council has decided to put the largest crypto platforms under direct ESMA supervision; and the IMF warns that a $65 billion market is amplifying a new risk of “fast collapse.” Global tokenization is moving from pilots to institutions.

Korea: Putting Stocks, Bonds and Funds on the Blockchain

On October 2, the South Korean Financial Services Commission formally launched the legislative pre-announcement (입법예고) of implementing rules under the Electronic Securities Act and the Capital Markets Act, with a public comment window running to November 11 and the implementing statutes scheduled to take effect on February 4, 2027. This is the first time Korea has set out written rules governing the issuance and circulation of “securities-right tokens,” and marks the formal extension of tokenization beyond the 2025 fragmented-investment-securities pilots (real estate, art) to traditional securities including stocks, bonds and funds.

The framework rests on a two-track judgment: crypto exchanges, custodians and transfer service providers remain within the virtual asset service provider (VASP) registration and anti-money-laundering regime, while tokens representing securities rights fall under the Capital Markets Act and the Electronic Securities Act. The underlying logic is clear: a blockchain record does not by itself change the legal nature of an asset. A stock is a stock, a bond is a bond; tokenization changes the method of record-keeping, not the content of the rights.

The phase-one opening follows an “institutions first, retail later” cadence: private money market funds, private bonds, trust-based unlisted stocks and publicly offered fractional investment securities go first; public bonds and funds for retail investors will only open after the market has operated for a while and demand has been assessed. Retail entry is capped by a hard limit: an annual net purchase cap of KRW 100 million (about $74,000) per bond OTC platform. Settlement initially relies on the existing cash settlement system through the Korea Securities Depository, while on-chain delivery (stablecoin settlement) awaits further legislation.

In parallel with the tokenization framework, Korea is tightening VASP admission standards. Since August 20, Korean VASPs must keep their debt ratio at or below 200%, applicants must show no default record in the past three years and pass eligibility reviews for executives and major shareholders; customer assets must be segregated from the firm’s own funds, with at least 80% of customers’ virtual-asset value held in cold wallets, and providers must obtain insurance, mutual-aid coverage or reserves against hacking and system failures. On the AML side, the travel rule is being extended from “transfers above KRW 100 million between registered VASPs” to “all transfers between registered VASPs”; transfers of KRW 10 million or more to an overseas VASP or wallet provider must be reported to the Korea Financial Intelligence Unit (KFIU), regardless of risk rating.

The EU: ESMA Centralizes Power, the Passport Shows Its Cracks

On October 9, EU finance ministers (ECOFIN) agreed a negotiating position on the Market Integration and Supervision Package, consenting to let the European Securities and Markets Authority (ESMA) directly supervise the EU’s most significant cross-border crypto-asset service providers (CASPs). This is the core legislation of the Savings and Investments Union, aimed squarely at a structural flaw in MiCA’s passport regime: a firm licensed in any single member state can serve all 27 countries, with its home regulator as the only primary supervisor.

The Council’s position is more restrained than the European Commission’s original proposal. The Commission initially wanted all CASP supervision moved to ESMA; the Council version adopts a “two-tier supervisory model”: only the most significant cross-border platforms come under direct ESMA supervision, while the rest stay with national authorities. By one estimate, only 10-15 of roughly 360 CASPs would fall under ESMA’s direct remit. The threshold: at least 15 million active EU users, or meeting three of five significance criteria (over 1 million active users, over EUR 1 billion in crypto assets under custody, over EUR 4 billion in annual client transactions, and others). ESMA would gain powers to request information, conduct on-site inspections, investigate breaches and impose financial penalties.

The trigger for this reform was ESMA’s July 2025 public criticism of the Malta Financial Services Authority (MFSA) authorization review: the review found insufficient evidence that a crypto service provider’s licensing assessment adequately addressed governance, conflicts of interest, technology infrastructure, custody arrangements and certain anti-money-laundering risks. Malta opposed centralizing supervision at the time, arguing MiCA was too new to justify another regulatory layer. But the case proved that regulatory arbitrage under the passport regime was not hypothetical: the quality of a single license depends on the enforcement rigor of the issuing state.

Complementary reforms include: a new full-time ESMA executive board; a two-year transition during which joint teams of ESMA and national experts support supervision, with final supervisory assessments and decisions resting with ESMA; and existing MiCA licenses for firms brought under direct supervision remain valid, with no reauthorization needed. It should be noted that the Council agreement does not take direct effect: trilateral negotiations can only begin after the European Parliament adopts its own position. But the direction is clear: the EU is moving crypto regulation from “the licensing state decides everything” toward “the scale determines the supervisor.”

The IMF: A $65 Billion Market, and the “No-Buffer” Worry

On October 8, the IMF published Chapter 3 of its October 2026 Global Financial Stability Report, “Scaling Tokenization: New Efficiencies, New Vulnerabilities,” giving the tokenized market its first systematic assessment. As of July 2026, the public tokenized real-world asset market (excluding stablecoins and repos) totaled roughly $65 billion, of which bonds and money market funds accounted for about $48 billion and tokenized equities only about $2.3 billion – a sliver of the roughly $300 trillion global capital market. But tokenized repo now averages $300-350 billion in daily transaction volume, a “shadow-banking-scale” figure that can no longer be ignored.

The IMF acknowledges tokenization’s real efficiencies: atomic settlement (both sides of a trade complete at the same instant or not at all), 24/7 operations, and less reliance on intermediaries. More than half of tokenized trading happens outside traditional market hours, and about 80% of tokenized equity trades are smaller than one full share, showing retail investors are voting with their feet. But the report’s warning focuses on the other side: instant settlement means a market can also unwind instantly; interconnected platforms mean a tokenized Treasury and a tokenized money market fund are only a smart contract apart; automated trading means sell decisions are executed by code written months earlier, not by a person watching a screen.

Traditional settlement delays, manual reconciliation and next-day settlement look inefficient but are in fact the buffers the financial system uses to absorb shocks. Tokenization strips those buffers away: margin calls are automatic, settlement is atomic, and a failed trade does not sit waiting to be unwound – it immediately pulls liquidity out of the system. The IMF therefore warns that as the tokenized market scales, fire sales, liquidity runs and contagion could be amplified through tighter interconnection and leverage. The more efficient the market, the faster the collapse. The report recommends a technology-neutral regulatory approach: countries should clarify the legal rights attached to tokenized assets, regulate similar activities consistently regardless of technology, and support interoperability between tokenized platforms and traditional financial systems.

Takeaways for Practitioners