What we deploy
What we deploy
and
and
who
who
owns each piece
owns each piece
This is the target architecture for a tokenized fund: the standards, the contract surface, the NAV pipeline and the integration slots. Written for the person who has to defend the design internally — a CTO, a head of operations, or the risk reviewer on the other side of a listing.
This is the target architecture for a tokenized fund: the standards, the contract surface, the NAV pipeline and the integration slots. Written for the person who has to defend the design internally — a CTO, a head of operations, or the risk reviewer on the other side of a listing.
IN BUILD
IN BUILD
Reference implementation targeting a public testnet. Addresses and walkthrough will be published when live.
Reference implementation targeting a public testnet. Addresses and walkthrough will be published when live.
Reference implementation targeting a public testnet. Addresses and walkthrough will be published when live.
Architecture
Every box below is yours — deployed under your brand, in a repository you own.
Tier 01
Access & Interface
Investor portal
subscribe · redeem · positions · documents
Admin console
mint · burn · whitelist · NAV · distributions
Tier 02
On-Chain Core
Fund vault
ERC-7540
Asset custody, vaults & native execution logic
Compliance token
ERC-3643
Standardized transfers & on-chain rules enforcement
Identity registry
On-Chain
Verifiable user claims & permission management
Compliance modules
Security
Dynamically updated transfer restriction modules
Tier 03
Data & Services
NAV oracle
signed feed + statement
Custody & fiat
MPC · qualified · rails
KYC / KYB
issuer of claims
Jurisdiction rules
defined by issuer
NAV oracle
signed feed + statement
Custody & fiat
MPC · qualified · rails
KYC / KYB
issuer of claims
Jurisdiction rules
defined by issuer
Tier 04
Distribution
Secondary venues
permissioned AMM / OTC swaps
Lending markets
collateral listing
Other chains
restrictions preserved
Control flow
Data feeds
Collateral path
Tier 01
Access & Interface
Investor portal
subscribe · redeem · positions · documents
Admin console
mint · burn · whitelist · NAV · distributions
Tier 02
On-Chain Core
Fund vault
ERC-7540
Asset custody, vaults & native execution logic
Compliance token
ERC-3643
Standardized transfers & on-chain rules enforcement
Identity registry
On-Chain
Verifiable user claims & permission management
Compliance modules
Security
Dynamically updated transfer restriction modules
Tier 03
Data & Services
NAV oracle
signed feed + statement
Custody & fiat
MPC · qualified · rails
KYC / KYB
issuer of claims
Jurisdiction rules
defined by issuer
NAV oracle
signed feed + statement
Custody & fiat
MPC · qualified · rails
KYC / KYB
issuer of claims
Jurisdiction rules
defined by issuer
Tier 04
Distribution
Secondary venues
permissioned AMM / OTC swaps
Lending markets
collateral listing
Other chains
restrictions preserved
Control flow
Data feeds
Collateral path
Token
Token
Permissioned share class. Mint, burn, forced transfer for court orders and lost keys, pause. One contract per share class.
Permissioned share class. Mint, burn, forced transfer for court orders and lost keys, pause. One contract per share class.
Identity registry
Identity registry
Maps wallets to verified identities and their claims (jurisdiction, accreditation, expiry). Claims are issued by your KYC provider, not by us.
Maps wallets to verified identities and their claims (jurisdiction, accreditation, expiry). Claims are issued by your KYC provider, not by us.
Compliance modules
Compliance modules
Composable rules evaluated on every transfer: country allow/deny, holder caps, per-investor caps, lockups, transfer windows, non-transferability during redemption.
Composable rules evaluated on every transfer: country allow/deny, holder caps, per-investor caps, lockups, transfer windows, non-transferability during redemption.
Vault
Vault
Request → fulfil lifecycle for subscriptions and redemptions. Cycle length is yours: T+1, T+7, monthly.
Request → fulfil lifecycle for subscriptions and redemptions. Cycle length is yours: T+1, T+7, monthly.
NAV adapter
NAV adapter
Consumes the signed price feed, enforces staleness and deviation bounds, halts fulfilment rather than settling on a bad price.
Consumes the signed price feed, enforces staleness and deviation bounds, halts fulfilment rather than settling on a bad price.
Distribution
Distribution
Coupons and dividends pushed pro-rata, or accrued into share price. Reporting export for your fund administrator.
Coupons and dividends pushed pro-rata, or accrued into share price. Reporting export for your fund administrator.
Architecture
Every box below is yours — deployed under your brand, in a repository you own.
Token
Permissioned share class. Mint, burn, forced transfer for court orders and lost keys, pause. One contract per share class.
Identity registry
Maps wallets to verified identities and their claims (jurisdiction, accreditation, expiry). Claims are issued by your KYC provider, not by us.
Compliance modules
Composable rules evaluated on every transfer: country allow/deny, holder caps, per-investor caps, lockups, transfer windows, non-transferability during redemption.
Vault
Request → fulfil lifecycle for subscriptions and redemptions. Cycle length is yours: T+1, T+7, monthly.
NAV adapter
Consumes the signed price feed, enforces staleness and deviation bounds, halts fulfilment rather than settling on a bad price.
Distribution
Coupons and dividends pushed pro-rata, or accrued into share price. Reporting export for your fund administrator.
Tier 01
Access & Interface
Investor portal
subscribe · redeem · positions · documents
Admin console
mint · burn · whitelist · NAV · distributions
Control flow
Tier 02
On-Chain Core
Fund vault
ERC-7540
Asset custody, vaults & native execution logic
Compliance token
ERC-3643
Standardized transfers & on-chain rules enforcement
Identity registry
On-Chain
Verifiable user claims & permission management
Compliance modules
Security
Dynamically updated transfer restriction modules
Data feeds
Tier 03
Data & Services
NAV oracle
signed feed + statement
Custody & fiat
MPC · qualified · rails
KYC / KYB
issuer of claims
Jurisdiction rules
defined by issuer
Collateral path
Tier 04
Distribution
Secondary venues
permissioned AMM / OTC swaps
Lending markets
collateral listing
Other chains
restrictions preserved
Standards, and why each one
Standards, and why each one
Standard
Standard
Role
Role
What it does
What it does
Why it, and not something simpler
Why it, and not something simpler
ERC-3643
ERC-3643
Permissioned token (T-REX)
Permissioned token (T-REX)
Eligibility is checked inside the transfer, not by an API after settlement. Identity registry + modular compliance rules.
Eligibility is checked inside the transfer, not by an API after settlement. Identity registry + modular compliance rules.
Balances cannot move to a wallet that fails your rules — including on a secondary venue you never approved.
Balances cannot move to a wallet that fails your rules — including on a secondary venue you never approved.
ERC-7540
ERC-7540
Asynchronous vault
Asynchronous vault
Subscription and redemption requests are queued, then fulfilled at the NAV of the settlement cycle.
Subscription and redemption requests are queued, then fulfilled at the NAV of the settlement cycle.
Funds do not price continuously. Synchronous vaults force a live price and break on any illiquid book.
Funds do not price continuously. Synchronous vaults force a live price and break on any illiquid book.
ERC-4626
ERC-4626
Vault accounting base
Vault accounting base
Share/asset conversion, the accounting layer ERC-7540 extends.
Share/asset conversion, the accounting layer ERC-7540 extends.
Integrators already read it. Free compatibility with existing tooling and dashboards.
Integrators already read it. Free compatibility with existing tooling and dashboards.
ERC-20
ERC-20
Transfer surface
Transfer surface
The token still looks like ERC-20 to every wallet, explorer and protocol.
The token still looks like ERC-20 to every wallet, explorer and protocol.
Compliance must not cost you the entire integration surface of the chain.
Compliance must not cost you the entire integration surface of the chain.
Standard
Role
What it does
Why it, and not something simpler
ERC-3643
Permissioned token (T-REX)
Eligibility is checked inside the transfer, not by an API after settlement. Identity registry + modular compliance rules.
Balances cannot move to a wallet that fails your rules — including on a secondary venue you never approved.
ERC-7540
Asynchronous vault
Subscription and redemption requests are queued, then fulfilled at the NAV of the settlement cycle.
Funds do not price continuously. Synchronous vaults force a live price and break on any illiquid book.
ERC-4626
Vault accounting base
Share/asset conversion, the accounting layer ERC-7540 extends.
Integrators already read it. Free compatibility with existing tooling and dashboards.
ERC-20
Transfer surface
The token still looks like ERC-20 to every wallet, explorer and protocol.
Compliance must not cost you the entire integration surface of the chain.
These are public standards with existing audits, tooling and integrator familiarity — not a proprietary format. If you replace us, the next team reads the same specifications.
These are public standards with existing audits, tooling and integrator familiarity — not a proprietary format. If you replace us, the next team reads the same specifications.
NAV pipeline
NAV pipeline
The single most common failure in a tokenized fund is not the token — it is the price. Five stages, each with an explicit failure mode.
The single most common failure in a tokenized fund is not the token — it is the price. Five stages, each with an explicit failure mode.
01
Source
Your fund administrator produces NAV on your existing schedule. Nothing about your accounting changes.
02
Sign
The value is signed off-chain by an authorised key set — usually the administrator plus one internal approver.
03
Publish
Pushed on-chain through RedStone or Chainlink, or a first-party feed you control. The choice is a cost/decentralisation trade-off, not a technical lock-in.
04
Guard
Staleness window, maximum deviation per publication, and a circuit breaker. If any bound is breached, fulfilment halts and nothing settles at a wrong price.
05
Consume
The vault fulfils the queue at the published NAV. Lending markets read the same feed — one price, one source of truth.
Integration slots, and who owns them
Integration slots, and who owns them
A tokenized fund is a stack of vendors, not one product. Here is the honest split — most of it stays yours, including the parts we build.
A tokenized fund is a stack of vendors, not one product. Here is the honest split — most of it stays yours, including the parts we build.
Slot
Slot
Typical provider
Typical provider
Owner
Owner
Note
Note
Investor verification
Investor verification
Sumsub · Persona · Onfido · your existing provider
Sumsub · Persona · Onfido · your existing provider
You
You
Claims are issued once and reused across every product you launch.
Claims are issued once and reused across every product you launch.
Custody
Custody
Fireblocks · BitGo · Copper · self-custody with MPC
Fireblocks · BitGo · Copper · self-custody with MPC
You
You
We never hold keys or client assets.
We never hold keys or client assets.
Price feed
Price feed
RedStone · Chainlink · first-party signed feed
RedStone · Chainlink · first-party signed feed
You
You
Feed choice affects which lending markets will list you.
Feed choice affects which lending markets will list you.
Fiat & stablecoin rails
Fiat & stablecoin rails
Your banking partner or PSP
Your banking partner or PSP
You
You
We build the reconciliation, not the licence.
We build the reconciliation, not the licence.
Fund administration
Fund administration
Your existing administrator
Your existing administrator
You
You
The NAV pipeline plugs into their output — no migration.
The NAV pipeline plugs into their output — no migration.
Transfer agent / registrar
Transfer agent / registrar
Licensed partner where your structure requires one
Licensed partner where your structure requires one
You
You
Required for most US structures. Scope it before contracts, not after.
Required for most US structures. Scope it before contracts, not after.
Legal & offering docs
Legal & offering docs
Your counsel
Your counsel
You
You
We encode the rules they define. We do not define them.
We encode the rules they define. We do not define them.
Contracts, portals, pipeline
Contracts, portals, pipeline
Woof
Woof
You, on delivery
You, on delivery
Source code, deployment keys and repositories transfer to you.
Source code, deployment keys and repositories transfer to you.
Slot
Typical provider
Owner
Note
Investor verification
Sumsub · Persona · Onfido · your existing provider
You
Claims are issued once and reused across every product you launch.
Custody
Fireblocks · BitGo · Copper · self-custody with MPC
You
We never hold keys or client assets.
Price feed
RedStone · Chainlink · first-party signed feed
You
Feed choice affects which lending markets will list you.
Fiat & stablecoin rails
Your banking partner or PSP
You
We build the reconciliation, not the licence.
Fund administration
Your existing administrator
You
The NAV pipeline plugs into their output — no migration.
Transfer agent / registrar
Licensed partner where your structure requires one
You
Required for most US structures. Scope it before contracts, not after.
Legal & offering docs
Your counsel
You
We encode the rules they define. We do not define them.
Contracts, portals, pipeline
Woof
You, on delivery
Source code, deployment keys and repositories transfer to you.
Ownership and operations
Ownership and operations
What transfers to you
What transfers to you
Full source: contracts, portals, NAV pipeline, deployment scripts
Repositories under your organisation, with history
Deployment and admin keys, in your custody setup
Runbooks: NAV publication, redemption cycle, incident response
Audit reports and the remediation trail
Operating policy
Operating policy
Upgradeability is a decision you make: immutable core, or proxy with a timelock and your multisig
Role separation: issuer, agent, compliance officer and pauser are distinct keys
External audit before mainnet — named firm, published report
Testnet deployment first, with a full redemption cycle rehearsed
Support after handover is a contract you can end without losing the product
No per-investor metering, no per-entity licence, no vendor token in your fee model.
No per-investor metering, no per-entity licence, no vendor token in your fee model.
Collateral readiness
Collateral readiness
Most tokenized funds stop at issuance and the asset sits idle. Lending markets have hard requirements before they list anything. This is the checklist, and it shapes the architecture from day one — retrofitting it later means redeploying the token.
Most tokenized funds stop at issuance and the asset sits idle. Lending markets have hard requirements before they list anything. This is the checklist, and it shapes the architecture from day one — retrofitting it later means redeploying the token.
A price a risk committee can mode
Signed NAV with a published staleness window and deviation bounds — not a manual multisig update.
Redemption that holds under stress
A documented queue, a defined cycle, and a reserve sleeve so redemptions clear without touching the illiquid book.
Liquidation logic that works off-chain hours
What a liquidator receives, how they exit, and what happens when the underlying market is closed.
An issuer who can answer the review
Risk teams ask about the administrator, the auditor, the custodian and the failure modes. We sit on that call with you.
A price a risk committee can mode
Signed NAV with a published staleness window and deviation bounds — not a manual multisig update.
Redemption that holds under stress
A documented queue, a defined cycle, and a reserve sleeve so redemptions clear without touching the illiquid book.
Liquidation logic that works off-chain hours
What a liquidator receives, how they exit, and what happens when the underlying market is closed.
An issuer who can answer the review
Risk teams ask about the administrator, the auditor, the custodian and the failure modes. We sit on that call with you.
We contribute to blue-chip lending protocols, so this list comes from the review side of the table, not from a vendor brochure. Listing is a decision of that protocol's risk process — we prepare the submission and answer it with you; we cannot promise the outcome.
We contribute to blue-chip lending protocols, so this list comes from the review side of the table, not from a vendor brochure. Listing is a decision of that protocol's risk process — we prepare the submission and answer it with you; we cannot promise the outcome.
Where we stop
Where we stop
CUSTODY
We are not a broker-dealer, investment adviser, transfer agent or law firm, and we do not custody client assets.
We are not a broker-dealer, investment adviser, transfer agent or law firm, and we do not custody client assets.
ISSUANCE
We do not issue your token — you do. We do not act as risk manager for your fund.
We do not issue your token — you do. We do not act as risk manager for your fund.
LEGAL
We do not provide legal or tax opinions on your structure, and we do not select your jurisdiction for you.
We do not provide legal or tax opinions on your structure, and we do not select your jurisdiction for you.
FEES
We do not resell a licence with our own token in the fee model. Fixed engagement fee, no basis points on your AUM.
We do not resell a licence with our own token in the fee model. Fixed engagement fee, no basis points on your AUM.
Take this to your architecture call
First scoping session is free. Bring your fund structure, jurisdiction and distribution plan — we map them onto this architecture and tell you which parts you do not need.
First scoping session is free. Bring your fund structure, jurisdiction and distribution plan — we map them onto this architecture and tell you which parts you do not need.
Book a call
Book a call
All Rights Reserved - Woof 2026.
Design by Bone
All Rights Reserved - Woof 2026.
Design by Bone
All Rights Reserved - Woof 2026.
Design by Bone