Tokenizing funds for institutions
Nex Labs is the infrastructure layer for putting index funds onchain. Asset managers bring the fund; we provide the compliant and composable smart-contract rails that issue it, verify its backing, bundle it into indices, rebalance it automatically, and make it usable across DeFi. We operate as a software provider: the engine is delivered white-label, embedded as a feature inside the client's own technology stack, so it runs within the client's existing regulatory perimeter and assimilates the client's compliance and licensing rather than adding a separate one.
The opportunity
Index investing is the dominant form of asset management, and it is almost entirely offchain. Global ETF assets stand at roughly $19 trillion (up from about $15 trillion a year earlier) and are projected toward roughly $35 trillion by 2030. Index and passive strategies drive the bulk of flows, with a single S&P 500 ETF now past $1 trillion on its own.
Tokenization of that pool has barely begun. The onchain real-world-asset market (excluding stablecoins) is only about $31 billion to $34 billion, of which tokenized funds and Treasuries are roughly $15 billion and the flagship (BlackRock's BUIDL) is about $2.5 billion. That is well under 0.2% of the ETF market, against tokenization total-addressable-market projections in the region of $16 trillion by 2030.
Two things are missing from today's market:
Index products. Incumbents tokenize single funds and securities. Almost no one bundles tokenized funds into automatically rebalancing indices, which is the actual shape of how capital is allocated.
Composability with verification. The few composable products are crypto-native; the compliant institutional products are walled gardens. Nobody combines institutional-grade asset verification with open DeFi composability.
That intersection is our lane.
Market sizing (TAM / SAM / SOM)
Target market
Asset managers & index providers
ETF/index issuers, boutique managers, family offices
Cheaper issuance, 24/7 settlement, fractional global distribution, new onchain demand
Banks & wealth platforms
Regulated distributors seeking a digital-asset product
A compliant, white-labelled onchain index product line they do not have to build
DeFi-native capital
DAOs, treasuries, stablecoin issuers
Diversified, yield-bearing, composable collateral beyond USD and Treasuries
Data and index owners
Index methodology and data providers
Monetize proprietary indices onchain without exposing the methodology
Primary wedge: tokenizing index funds and bundling tokenized funds into onchain indices, the segment with the largest traditional pool (about $19 trillion) and the least onchain competition.
Potential benefits
Many of these are capabilities the underlying Chainlink stack unlocks, which we package and deliver as product benefits.
For the issuer and manager
Lower operating cost and fewer intermediaries. Smart contracts automate issuance, rebalancing, distributions, and compliance reporting, cutting back-office overhead and reliance on costly third-party servicers, and reducing human error.
One unified, global market. Issue a fund on one chain and let investors hold and buy it from many, creating a single market and maximizing reach rather than fragmenting liquidity across chains [1].
NAV that stays in sync, automatically. Verified net asset value is published onchain and kept synchronized with the fund's real performance, removing manual data entry and its operational risk [3].
Compliance that is faster, cheaper, and more accurate than the traditional process, with credential checks that never expose investor personal data [4].
An audit trail you can prove. Every lifecycle action is orchestrated with a verifiable record that can be shown to counterparties and regulators [5].
Proprietary-strategy protection. Weighting logic and licensed index data can be processed privately, so the methodology stays confidential [6].
For the investor and allocator
Provable backing and solvency, privately. Cryptographic, near-real-time verification that the tokens are fully backed, rather than a quarterly statement, and proven in aggregate without disclosing exact holdings or index weights [2][6].
24/7 markets and near-instant settlement, versus market hours and multi-day settlement.
Composability. Hold, trade, post as collateral, lend, borrow, or build derivatives, while remaining compliant.
Diversified exposure in one token through automated index rebalancing.
Institutional requirements
If you are an institution assessing Nex as a tokenization partner, these are the questions that decide whether this is a viable partnership, and how the platform answers each one.
Verified, tamper-proof NAV
Your tokens must mint and redeem at a fair, defensible price
SmartNAV, verified net asset value delivered onchain [3]
Proof that tokens are fully backed
You need solvency you can prove to clients and regulators, not assert
Multilayer asset verification (see Security): onchain vault balance, Proof of Reserve [2], reconciliation halt, third-party attestation
KYC/AML and eligibility enforcement
Only eligible investors may hold your regulated instrument
ERC-3643 [7] plus ACE [4], enforced at the contract level, privacy preserving
Issuer controls over the token
You must be able to whitelist, freeze, recover, and halt to meet legal and regulatory duties
ERC-3643 [7] agent powers: whitelist/blacklist, freeze, pause, forced transfer, recovery, mint/burn (see Security)
Secure, non-custodial custody model
You want to avoid a custodial honeypot and the liability it carries
Non-custodial vault, always backed 1:1; mint and burn governed by code
Auditability for regulators and counterparties
Every action you take must be provable after the fact
CRE [5] orchestration with a full audit trail
Liquidity and fair pricing
Your secondary market must track NAV
Uniswap V4 pools plus an arbitrage bot pegged to SmartNAV
Fit with your regulatory perimeter
The product must be lawful for you to distribute
Delivered white-label inside your stack, so it operates under your existing licence and compliance rather than a separate one
What we offer
Institutional-grade, multilayer asset verification. Vault balance, Proof of Reserve [2], verified NAV [3], a reconciliation halt, and independent attestation, layered so solvency is provable end to end (see Security).
Composable smart contracts. Modular, reusable contracts that other protocols and partners can build on.
DeFi integration. Eligible tokens stay usable as collateral, in lending and borrowing, and in derivatives, with compliance travelling with the asset.
Bundling into indices with automated rebalancing. The differentiator: compose tokenized funds and assets into a single index token that rebalances onchain to a defined methodology, including narrative-driven strategies (a theme, a sector, or a macro view). This makes composite index products possible that do not exist anywhere else.
Security: how the assets are protected
Investor assets never leave a non-custodial smart contract, and protection is built as defense in depth across three planes: the contract, the oracle layer, and operations. The layers are independent, so a weakness in one does not expose the backing.
1. Non-custodial vault
Theft of principal, custodial failure
Assets held in the contract, backed 1:1; no party can withdraw the backing; mint and burn run only on code
2. Contract hardening
Owner-key compromise, upgrade abuse
OpenZeppelin libraries, restricted upgradeability, minimal owner rights (a stolen owner key can at most earn protocol fees, never move user assets)
3. Reserve verification
Hidden under-collateralization
Proof of Reserve [2]: decentralized, near-real-time confirmation that the off-chain and on-chain backing exists, reported in aggregate so a fund proves full backing without revealing individual wallets, exact balances, or index weights (Chainlink Privacy Standard: DECO, zero-knowledge and range proofs) [6]
4. Valuation integrity
Mispriced mint/redeem, stale data
SmartNAV [3] with a ripcord flag that freezes the published value when upstream data is unreliable
5. Circuit breakers
Over-issuance, reserve drift
Mint logic checks reserves before minting and auto-halts if backing falls short; a reconciliation halt pauses the contract if custodian balances and NAV-implied reserves diverge beyond a threshold
6. Independent attestation
"Trust us" reserve claims
Read-only custodian feeds an auditor can pull, signed and timestamped statements, and periodic third-party proof-of-reserve attestation, so a holder verifies without trusting Nex
7. Credential isolation
Theft of licensed-data API keys
Confidential Compute [6]: secrets are decrypted only inside a secure enclave and never sit in node memory; responses can be encrypted on exit
8. Compliance gate
Ineligible or sanctioned holders
ERC-3643 [7] plus ACE [4]: only verified, eligible wallets can receive or hold; transfers to unverified or restricted addresses are rejected
The oracle layer in detail. The verification layers above do not rely on a single feed or a single server. Reserve, NAV, and compliance data are produced by Decentralized Oracle Networks, where multiple independent, professionally run node operators fetch and sign data and reach consensus before anything is written onchain. There is no single point of failure and no single source to spoof. Reserve and NAV updates are wired directly into the mint and burn logic, so the contract acts on verified data rather than a value an operator could edit. Confidential data feeds (for licensed index data) run through a separate enclave path so that credentials are never exposed even to the node operators executing the call [6].
Operational controls. Privileged roles (owner and any agent functions required for regulated instruments) are held by multisignature wallets rather than single keys, every privileged action emits an auditable onchain event, and onchain administration is kept separate from any custodian withdrawal authorizers. On the custody side, withdrawals are restricted to whitelisted destinations and require multiple authorizers, and a reconciliation halt auto-pauses minting the moment broker balances and onchain reserves diverge.
Issuer controls and policy enforcement. Where an instrument is regulated, the issuer needs real control over the token, and these powers are built into the ERC-3643 standard [7] rather than bolted on. Through an agent role (scoped behind a multisignature wallet), the issuer can whitelist or blacklist addresses so only verified, eligible investors hold the token, freeze and unfreeze specific wallets or balances, pause all transfers, force a transfer for court orders, sanctions, or error correction, recover tokens from a lost or compromised wallet, and mint or burn. Eligibility is checked at the contract level on every transfer, so an ineligible or sanctioned address is rejected automatically. This is the deliberate counterpart to our permissionless index tokens: regulated securities need these controls, so the platform gives the issuer, or the licensed partner the owner role is transferred to, that authority, with every privileged action emitted as an auditable onchain event.
Assurance. Contracts are built on battle-tested OpenZeppelin libraries and tested with Foundry and Hardhat across unit, integration, end-to-end, gas, fuzz, and invariant scenarios, with static analysis and pre-audit security tooling (Olympix) run during development. The existing products have completed three independent audits with QuillAudits across the DeFi, Cross-Chain, and Stock models, with reports published openly. New and upgraded contracts incorporate all feedback from previous audits, are independently audited before launch, and are watched with continuous monitoring and alerting.
How we stack up
Tokeny and Securitize are strong at compliant tokenization of individual securities and funds, which is their core. Neither bundles tokenized funds into automatically rebalancing indices, and DeFi composability for them is a wrapper bolt-on rather than a native property. Nex matches them on compliance and verification and is the only one of the three that delivers the index layer and native composability in one stack. Pure-DeFi index protocols do the opposite: indices and composability, but no institutional verification or compliant wrapper.
Our position: software, not a balance sheet
Nex Labs is a technology provider. We supply the smart contracts, the orchestration, the verification, and the dashboard. The product is delivered white-label, embedded as a feature inside the client's own stack, so it operates within the client's existing regulatory perimeter and assimilates the client's compliance and licensing rather than introducing a separate one. Eligibility and transfer rules are still enforced in-contract by ERC-3643 [7] and ACE [4], so the partner keeps continuous, provable control. The result: partners go to market faster because they plug into compliant, verified, rails under their own authorization, instead of assembling custody, compliance, oracles, and interoperability themselves.
Why Nex wins
The market has compliant single-asset tokenizers (Tokeny, Securitize) and it has composable crypto indices (DeFi index protocols). It does not have a platform that does both: compliant, institutionally verified, index funds that are also natively composable in DeFi. That convergence, delivered as turnkey, white-label software that runs inside the partner's own regulated stack, is Nex Labs.
Appendix: technology references
The components below are integrated into the Nex stack. Where a benefit in this brief is unlocked by one of them, it is cited inline by number.
Proof of Reserve (PoR). Decentralized, automated onchain verification that tokens are fully backed by off-chain or on-chain reserves, able to halt minting if backing falls short. It can report backing in aggregate, proving full collateralization without revealing individual wallets, exact balances, or index weights. https://chain.link/proof-of-reserve
SmartData / SmartNAV. A data standard that delivers tamper-proof net asset value, assets under management, and reserve data onchain for tokenized funds. https://chain.link/smartdata
ACE (Automated Compliance Engine). A modular compliance standard that enforces KYC/AML, sanctions, and eligibility policy at the contract level while preserving the privacy of personal data, with native ERC-3643 support. https://chain.link/automated-compliance-engine
CRE (Chainlink Runtime Environment). An orchestration layer for institutional-grade smart contracts that runs the fund lifecycle as verifiable workflows with a provable audit trail. https://chain.link/cre
Confidential Compute / Confidential HTTP and the Chainlink Privacy Standard. A privacy capability that runs sensitive API calls inside a secure enclave so credentials and licensed data never sit in node memory and, via DECO with zero-knowledge and range proofs, lets a party prove a fact such as full backing or eligibility without revealing the underlying data. https://docs.chain.link/cre/capabilities/confidential-http-ts
ERC-3643 (T-REX). The ratified Ethereum standard for permissioned, identity-bound security tokens, with built-in transfer compliance and agent-controlled recovery. https://www.erc3643.org
Market figures (mid-2026): global ETF AUM about $19 trillion (PwC, Bloomberg, MacroMicro); tokenized RWA excluding stablecoins about $31 billion to $34 billion and tokenized Treasuries about $15 billion (RWA.xyz); BUIDL about $2.5 billion (Securitize); tokenization TAM about $16 trillion by 2030 (industry projections). Competitor capabilities per Tokeny (T-REX/ERC-3643, Apex Group) and Securitize (transfer agent, BUIDL, sToken/sBUIDL) public materials. Figures to be re-verified before external use.
Last updated