The pitch for tokenized stocks is seductive: bypass traditional brokers, trade equities 24/7 on a blockchain, and own a piece of the future without the gatekeepers. But beneath this narrative of liberation lies a structural paradox that threatens to unravel the entire premise. A single, self-clearing broker-dealer named Alpaca now clears or custodies approximately 94% of all tokenized U.S. equities and ETFs. That figure is not a minor detail; it is the defining data point of the asset class.
I first encountered Alpaca’s network while auditing liquidity flows for a CBDC pilot in Hangzhou. The architecture seemed elegant on the surface—a Python-based API that allowed exchanges like Binance and Kraken to issue tokens representing real shares—but the centralization was immediate and alarming. We had, in the name of decentralization, simply swapped the New York Stock Exchange for a single, privately held clearing firm in San Mateo, California.
Context: The Hidden Architecture
Tokenized stocks do not involve placing shares on a blockchain. Instead, a licensed broker (Alpaca) purchases the underlying stock and holds it in a traditional custody account. Then, via an API, Alpaca mints an equivalent number of tokens on Ethereum, Solana, or other networks. The smart contract is little more than a ledger of IOUs. The actual asset never leaves the legacy system. As one Alpaca spokesperson stated, the firm “one-to-one holds the underlying stocks, executes and clears trades, and runs real-time minting and redemption via its instant tokenization network.”
This process requires the broker to handle corporate actions—dividends, stock splits—and maintain strict inventory matching. It is a classic synthetic structure, identical in spirit to the wrapped Bitcoin (WBTC) model, where BitGo acts as the central custodian. But while WBTC has multiple alternatives, Alpaca operates in a near-vacuum. Few established broker-dealers are willing to take on the regulatory burden and legal exposure of tokenizing equities. "It’s not a business that many firms want to touch," one industry insider told me during a private call in my apartment in Hangzhou, after we exchanged notes on the Terra collapse. The legal liability of issuing securities without explicit SEC sponsorship, combined with the operational complexity of continuous minting and redemption, frightens most traditional banks. Alpaca has become the only willing partner—and thus the single point of failure.
Core Insight: The New Intermediary
The sales narrative of tokenized stocks has always centered on disintermediation. But the data reveals a market that is more concentrated than the stock market it sought to replace. The New York Stock Exchange itself has multiple designated market makers and competing exchanges. Alpaca, however, is the trunk of the tree. Every major tokenized stock product—from Ondo Finance’s US equities to Kraken’s xStocks—depends on Alpaca for its existence.
This concentration creates three critical vulnerabilities. First, regulatory risk. The SEC warned in January that third-party tokenized stocks do not carry the same legal rights as the underlying shares. They offer mere "economic exposure" plus additional intermediary risk. If Alpaca were to face regulatory action—a Wells notice, a cease-and-desist order—the entire market of tokens backed by its inventory would collapse simultaneously. I have seen this pattern before: in 2020, I analyzed the liquidity mechanics of a DeFi protocol that depended on a single custodian; when that custodian halted withdrawals, the synthetic asset’s price diverged from its peg by 40%. The rescue was painful and slow.
Second, operational risk. Alpaca is a private company that has raised $435 million from investors including Peak XV and BMO. It is well-financed, but no private firm is immune to technical outages, mismanagement, or fraud. The June 2024 SpaceX IPO event on Dinari demonstrated the fragility: the offering was cancelled, and users received refunds instead of shares. “The stock didn’t materialize, the activity got cancelled,” a spokesperson said. The holder had no recourse beyond the platform’s goodwill.
Third, pricing risk. Market makers maintain the peg between token and underlying stock through arbitrage, but that arbitrage depends on Alpaca’s ability to instantly mint and redeem tokens. If Alpaca’s internal systems slow down or if it restricts redemptions during volatile market conditions, the token price can decouple from reality. The very feature that makes these assets attractive—24/7 liquidity—becomes a liability when the single clearing engine stutters.
Contrarian Angle: The Decoupling Thesis
Proponents argue that the 94% concentration is a temporary phase, a natural monopoly of early movers. The DTCC, the backbone of U.S. clearing and settlement, plans to launch its own tokenization service by October 2024. If the DTCC enters, the Alpaca monopoly could be broken, allowing multiple custodians and a more resilient market. This optimism, however, ignores the fundamental flaw: the token itself is a derivative of a legacy security. Even with multiple custodians, the holder still relies on a centralized promise. The trust is simply distributed across several parties, not eliminated.
Furthermore, the market may not care about decentralization. Many retail investors on Binance and Kraken buy these tokens for exposure to upcoming IPOs like SpaceX, not for philosophical purity. They want 24/7 trading, not self-custody. This friction between user desire and idealist architecture creates a vacuum where intermediaries thrive. As I wrote in my 2021 manifesto on data integrity, "We are building prisons of logic." The code may be elegant, but the human behavior behind it—the need for convenience, the toleration of risk—rebuilds the very prisons we try to escape.
Takeaway: A Cycle of Positioning
The findings force a recalibration. Tokenized stocks are not an alternative to traditional finance; they are a beta version of centralized finance with a blockchain interface. The technology provides transparency of the token’s existence, but not of the underlying custody. The risk has moved from the exchange to the broker.
For investors, the immediate action is clear: examine whether the token you hold is a “sponsored” token (issued by the stock’s issuer with full legal rights) or a third-party synthetic token backed by a single custodian. The latter carries a concentration risk that no smart contract can mitigate. For builders, the opportunity lies not in mimicking legacy assets, but in creating truly on-chain native structures—assets whose entire lifecycle from issuance to settlement occurs on neutral, verifiable code.
“Code is law, but who writes the law?” The answer, in tokenized stocks today, remains a small team in California.
“Liquidity is a mirage.” When that mirage is held together by one custodian, it is not liquidity. It is a single point of trust dressed in blockchain’s clothes.
“Your data is not yours anymore.” Nor is your asset. You hold a promise, and promises break.