Quick take on the RWA explosion happening right now.
Did TradFi figure out blockchain’s killer app (tokenizing bonds/stocks) while we were building AMMs and NFTs?
Thoughts?
Chris, this has been keeping me up at night as a DeFi builder.
I’ve spent 6 years optimizing yield farming strategies and building AMMs. But when I see BlackRock’s $1.9B BUIDL fund and the total $12B in tokenized RWAs, I have to ask: did we spend years innovating in the wrong direction?
McKinsey’s $2-4T projection by 2030 would make RWAs 20-30x bigger than all of DeFi’s current $120B TVL. That’s not a rounding error—that’s a fundamental shift in where blockchain value accrues.
Here’s what’s wild:
I don’t think we built the “wrong thing.” DeFi proved that blockchain-based financial primitives work. Without AMMs demonstrating constant product market makers, without Aave showing programmable lending, would BlackRock have the confidence to tokenize treasuries onchain?
DeFi did the hard, risky experimentation. We took the arrows. We lost $3B+ to hacks and learned security lessons. We navigated regulatory uncertainty.
Now RWAs get to benefit from that infrastructure: battle-tested smart contracts, liquidity protocols, wallet infrastructure, auditing tools.
Where this gets REALLY interesting is RWAs + DeFi composability:
Imagine:
That’s a $5T+ market if we get the infrastructure right.
But here’s what scares me: most institutional RWA volume is happening on permissioned chains we can’t see.
JPMorgan’s $900B on Onyx? Permissioned validators.
Canton Network? Private consortium blockchain.
Nasdaq Digital Assets? Controlled access.
If RWAs fragment across permissioned chains, we lose the composability that makes blockchain revolutionary. We end up with “blockchain as database”—TradFi using distributed ledger tech but keeping all the centralized control.
Should crypto developers pivot to RWA infrastructure?
Part of me says yes—that’s where institutional capital is flowing, and we could build compliant RWA systems on public chains that preserve composability.
Part of me says no—we should keep building DeFi primitives because that’s the actual innovation, and RWAs will eventually need to compose with DeFi anyway.
What I know for sure: the next $1T in blockchain value will come from whoever figures out how to make RWAs and DeFi work together.
Curious what others think—especially those working on RWA protocols or infrastructure.
Diana nailed it with the composability angle. From a regulatory perspective, I want to add context on why RWA growth is accelerating now.
The $12B in tokenized RWAs didn’t happen by accident. It happened because we finally have regulatory frameworks:
This is huge. For years, institutions sat on the sidelines because regulatory uncertainty was too risky. Now they have clear rules.
From talking to compliance teams at major firms, here’s what they tell me:
RWAs check institutional boxes:
Clear legal status (securities, not experimental tokens) Regulatory reporting built-in Custodial requirements met KYC/AML compliance embedded Reversibility if needed (unlike DeFi transactions)DeFi protocols often don’t:
Token classification unclear (security? commodity? utility?) No built-in compliance mechanisms Pseudonymous, making KYC difficult Immutable transactions (regulatory risk) Governance tokens may be securitiesDeFi took the regulatory arrows so RWAs could fly.
Think about it: SEC sued DeFi protocols, brought enforcement actions, tested legal theories. All that litigation and regulatory uncertainty in DeFi? It taught regulators HOW to regulate blockchain-based finance.
Now RWAs benefit from that clarity. They know the rules because DeFi’s battles defined them.
Diana asked: can permissionless DeFi coexist with permissioned RWAs?
My answer: Yes, if we build the right architecture.
Here’s the vision:
Example: Tokenized treasury bond on Ethereum. Transfer restrictions via smart contract ensure only KYC’d wallets can hold it. But once held, it can be used as collateral in Aave—composability preserved while maintaining compliance.
Diana’s concern about permissioned chains is valid. JPMorgan’s $900B on Onyx isn’t on public Ethereum. Canton Network is a private consortium. If RWAs stay on permissioned chains, we lose:
But there’s hope: BlackRock chose PUBLIC Ethereum for BUIDL ($1.9B). That’s a statement. They could’ve built on Hyperledger or Besu but chose transparency.
If you’re considering RWA infrastructure:
The $2-4T opportunity is real. But only if we build RWA infrastructure that stays true to blockchain’s open, composable ethos.
Compliance enables innovation. That’s not selling out—that’s growing up.
Strong perspectives from both Diana and Rachel. Let me add the technical architecture angle here.
There’s a reason BlackRock chose Ethereum for BUIDL, and it’s not just brand recognition:
Technical requirements for institutional RWAs:
This isn’t altcoin maximalism—it’s risk management. Institutions need networks that won’t go down, won’t hard fork unexpectedly, and won’t change consensus rules on them.
Most institutional RWA volume ISN’T on public Ethereum.
JPMorgan’s $900B on Onyx? That’s running on Quorum (permissioned Ethereum fork).
Canton Network? Private validators controlled by consortium members.
Nasdaq Digital Assets? Permissioned blockchain with controlled access.
From a technical perspective, these are distributed databases, not blockchains:
Rachel’s vision of “compliance bridge” is technically feasible:
How it works:
Example: Tokenized treasury bond:
This preserves both compliance AND composability.
Diana’s vision of RWAs + DeFi is not just possible—it’s inevitable:
Use cases that become unlocked:
The $5T+ market Diana mentioned isn’t hyperbole. If we get the infrastructure right, RWA-DeFi composability unlocks more value than either alone.
My biggest concern: RWAs fragmenting across incompatible chains.
Right now we’re seeing:
If this continues, we end up with:
We need:
If you’re building RWA infrastructure, build on public Ethereum (or Ethereum L2s).
Why?
Permissioned chains like Canton might handle more volume today ($900B), but they’ll never create the network effects that public chains enable.
The next $1T in blockchain value goes to whoever makes public-chain RWAs work with DeFi composability intact.
This discussion is exactly what I needed to read today. I’ve been wrestling with similar questions as a frontend dev who works on DeFi UIs.
I spent the last 3 years building interfaces for AMMs and yield aggregators. Making DeFi accessible to regular people has been my mission. But when I see the RWA numbers—$12B and growing toward $2-4T—I wonder if I’ve been working on the wrong problems.
Here’s what confuses me:
When I explain DeFi to non-crypto friends:
When I explain RWAs:
The RWA pitch is WAY easier to explain to normal people. Is that because RWAs are the actual use case and DeFi is just for crypto natives?
Brian’s technical breakdown of the hybrid model is exactly what makes me excited about this space.
If we can build:
That’s a $5T+ market where my frontend skills actually matter.
Right now, tokenized RWAs have terrible UX. I’ve looked at some of the institutional platforms:
There’s a MASSIVE opportunity for devs who can build:
If RWAs are going to $2-4T, someone needs to build the UIs that make this accessible to non-institutions.
Diana asked if devs should pivot to RWA infrastructure. Here’s my version:
Should frontend developers focus on:
I’m leaning toward Option C. If Brian’s hybrid model works technically, we need developers who can:
That’s the composability opportunity, but from a UX perspective.
This is what keeps me up at night. If RWAs are just “traditional assets with blockchain settlement,” did we really innovate? Or did we just make TradFi 10% more efficient?
DeFi invented NEW things:
RWAs took EXISTING things and put them onchain. That’s valuable, but is it revolutionary?
Maybe the answer is: DeFi proved blockchain could do finance. RWAs prove blockchain SHOULD do finance at scale. Both matter.
I’m cautiously optimistic that the next phase combines both—RWA assets flowing through DeFi protocols, with UX that doesn’t require a PhD in cryptography to use.
Would love to hear from others building in this space, especially on the product/UX side.
Everyone’s excited about the $2-4T opportunity, but as a security researcher, I need to inject some necessary caution into this discussion.
DeFi has spent years learning painful security lessons—$3B+ in hacks taught us about:
RWAs introduce ENTIRELY NEW attack surfaces:
Unlike DeFi where assets are in smart contracts, RWAs represent claims on EXTERNAL assets. Questions:
Example: If a tokenized bond exists on Ethereum but the underlying bond is also trading in TradFi systems, which is the “real” one? Reconciliation failures = security nightmare.
DeFi uses oracles for price feeds. RWAs use oracles for:
One compromised oracle could:
Rachel mentioned compliance frameworks. But regulatory compliance does NOT equal technical security.
An RWA protocol can be:
Fully compliant with SEC regulations KYC/AML embedded in smart contracts Proper custodial arrangementsAND STILL:
Have exploitable smart contract bugs Vulnerable to oracle manipulation Susceptible to governance attacksBrian mentioned cross-chain RWAs. From a security perspective, this is TERRIFYING.
Historical data: Bridge hacks account for $2.8B+ in losses since 2022. If RWAs go multi-chain, we’re creating:
Institutions are moving FAST into RWA tokenization. From security audits I’ve done:
What I’m seeing:
What worries me:
If this market is going to hit McKinsey’s projections, we MUST:
DeFi learned (the hard way) that security is not optional. RWA builders need to:
Emma asked about building bridges between RWAs and DeFi. From a security perspective:
This is the HIGHEST VALUE work you can do right now.
Why? Because:
If you can:
You’re incredibly valuable. But please, PLEASE prioritize security over speed-to-market.
I’m optimistic about RWAs long-term. Bringing trillions in TradFi assets onchain is valuable.
But I’m TERRIFIED about the next 12-24 months. If we rush RWA infrastructure without proper security:
We have ONE CHANCE to get this right. DeFi could afford to break things and iterate. RWAs can’t—institutional capital has zero tolerance for “move fast and break things.”
Build secure infrastructure. Audit everything. Assume attackers are smarter than you. Learn from DeFi’s mistakes.
The opportunity is real. But only if we don’t blow it with preventable security failures.