Skip to main content
Request a demo
Physical assets

Art & Collectibles Tokenization

Unique, non-income-producing objects where provenance, authentication and insurance carry the entire investment case.

Standards, ordered by control over a transferFour token standards as rungs, from one where anyone may hold up to one where a transfer can be refused by the contract itself.ERC-20anyone may holdERC-1155batched, still openERC-4626a vault around oneERC-3643a transfer can be refused

Definition

Art and collectibles tokenization issues fractional interests in a unique object — a painting, a sculpture, a rare instrument, a classic car — held by an owning entity. The object is not fungible and produces no income, so the whole return depends on eventual sale price and on the object being what it is claimed to be.

What it solves

  1. Extreme minimum ticketBlue-chip works trade in the millions; a fractional interest opens exposure at a different scale.
  2. Concentration for collectorsAn owner can release capital from a work without selling it outright.
  3. Provenance record-keepingProvenance is the asset. A durable, verifiable chain of custody records is genuinely useful.

How it works

  1. The work is authenticated and appraisedBy recognised experts, with the documentation retained.
  2. An entity takes titleAnd arranges storage, conservation and insurance.
  3. Units are issuedAgainst the appraised value, with the appraisal and its date disclosed.
  4. The work is held until saleSale proceeds are distributed and the units retired.

Architecture

An owning entity; a specialist storage facility with climate control and security; conservation and insurance arrangements; an authentication and provenance file held in the data room with content-hashed versions; and a register over the entity.

How the platform is arrangedFour stages — asset, compliance, offering and register — connected left to right, all enclosed by a single transaction boundary that rests on a double-entry ledger.AssetStructured and documentedCompliancePolicy in forceOfferingA book that is derivedRegisterHolders of recordOne transaction boundaryA movement and the entries behind it commit together, or neither doesDouble-entry ledgerEvery movement, both sides, in minor unitsBalanced at COMMIT
Four stages inside one transaction boundary, on one ledger. A register that disagrees with the cash is not a state the software can reach.

Tokenization lifecycle

  1. Authenticate and appraiseExpert opinion, provenance research, condition report.
  2. Acquire and insureTitle transferred, storage and cover arranged.
  3. IssueUnits offered and issued.
  4. Hold and conserveStorage, conservation, periodic revaluation, occasional exhibition.
  5. SellRealisation and final distribution.

Supported token model

Permissioned fungible token over a single-work entity. The work itself is unique and could be modelled as a non-fungible record, but what investors hold are equal economic interests in one entity, and those are interchangeable. Two works are two entities — never one pooled series, because the provenance risk is per work.

Asset requirements

What must be true before this can responsibly be tokenized at all.

  • Authentication by a recognised authority, and the catalogue raisonné entry where one exists.
  • A documented provenance chain, including any gaps.
  • A recent independent appraisal with a stated basis.
  • Specialist storage with environmental control and security.
  • Insurance at appraised value, including transit cover if the work moves.
  • Import, export and cultural-property clearance where applicable.

Compliance considerations

  • Cultural property and export restrictions can prevent a sale entirely and vary by country of origin.
  • AML rules for art dealing are now stringent in most major markets.
  • Title disputes and restitution claims are a live risk for works with wartime-era provenance gaps.
  • The offering itself remains a securities question.
A compliance policy as ordered rulesRules are evaluated in sequence and the first match decides. A subject matching no rule is denied, and a fact the platform does not know never satisfies a rule.Subjectan investor's facts#1Screening hit is openreject#2Country in the blocked listreject#3Professional or institutional, verifiedallowMatched no ruledenyFirst matchdecides. A laterallow cannot undoan earlier reject.Eligibility comesfrom a rule saying so.
Rules are data, evaluated in sequence, and the first match decides. A subject matching nothing is denied — eligibility comes from a rule saying so, never from no rule objecting.

Investor workflow

  • Verify identity and eligibility.
  • Review the authentication, the provenance file and the appraisal.
  • Subscribe and fund by reference.
  • Hold — there is no income.
  • Receive proceeds on sale.

Issuer workflow

  • Authenticate, research provenance and appraise.
  • Acquire, store, conserve and insure.
  • Publish the documentation and issue units.
  • Revalue periodically and report condition.
  • Sell and distribute.

Payments

There are two cashflows: the subscription in and the sale proceeds out. Storage, insurance and conservation costs accrue against the entity in between and reduce the eventual distribution.

The payment railMoney is matched to a subscription by its reference and no other attribute, then screened and settled. Provider adapters for card and crypto rails are not built, and are drawn as an absent component.ReferencechecksummedFunds arrivebank or custodyReconcilereference or nothingScreenAMLSettlesecond authoriserSuspense (2900)unidentified, and visibleNo reference matchProvider adaptersCard, local rail, stablecoinNot built — the registry ships empty
A reference is the only thing that matches money to a payment. Everything else is an exception for a person, and unidentified credits post to suspense where they stay visible.

Lifecycle servicing

Conservation and insurance, plus occasional revaluation. A work that deteriorates in storage loses value irrecoverably, so conservation is not a discretionary cost.

How a distribution is splitA funded pool is divided among holders of record as at the record date using largest-remainder allocation, then withholding is deducted from each holder's gross rather than from the pool.Funded poolone exact amountRegister as atthe record dateRebuilt from confirmedmovements, not today’sbalancesNet to the holderWithheld, from that holder’s grossThe lines sum to exactly what was fundedLargest-remainder allocation, so no minor unit is created or lost. Rounding each slice independently leaves the issuer a few units out every cycle.There is no per-jurisdiction withholding matrix in this build — one rate is entered per run.
Holders of record as at the record date, split by largest remainder so the lines sum exactly, with withholding taken from each holder’s gross rather than off the top of the pool.

Secondary transfer

Transfers are permitted subject to eligibility, but pricing a fractional interest between appraisals is genuinely hard and the buyer base is thin.

The transfer gateA transfer request passes through eight compliance checks. Any single failure refuses the transfer; the same gate is evaluated off-chain and on-chain.Senderholds unitscanTransfer( )Sender holds the unitsNeither party frozenLockup expiredRecipient eligible under policyJurisdiction permittedInvestor type permittedHolding limit not breachedSanctions screening clearRecipientunits move, or none doOne implementation. The Solidity module and the register evaluate the same rules.
One implementation of the gate, not two. The function the register calls is the same one that mirrors the Solidity compliance module check for check, so an off-chain gate and an on-chain gate cannot drift.

Risks

Named plainly. An instrument whose risks are only in a footnote has been mis-sold before it has been issued.

  1. AuthenticityAttribution can be revised. A reattributed work can lose most of its value overnight, and this has happened repeatedly.
  2. No incomeThe asset costs money to hold and pays nothing until it is sold.
  3. Valuation is an opinionAppraisals between sales are estimates, and the art market is illiquid and taste-driven.
  4. Title and restitutionProvenance gaps can surface as claims decades later.
  5. Physical loss and damageFire, water, light and handling all degrade works; insurance pays money, not the object.

How we support it

  • A data room with content-hashed document versions, so the authentication an investor relied on is provably the one on file.
  • Valuation records naming the method and the valuer.
  • Single-work entities so provenance risk is never pooled across pieces.

Questions

Where is the work kept?

In specialist storage named in the offering document. It may be exhibited, which is disclosed because it changes the risk.

When do I get paid?

On sale, and not before. There is no income from holding art.

What if the attribution changes?

The value changes, potentially drastically. This is the defining risk of the asset class and it cannot be insured away.

Next steps

Bring an instrument you are actually considering. Structuring something real is the only way to judge whether the model fits.

Request Enterprise DemoAll tokenization topics