Real World Asset (RWA) protocols bridge traditional finance and DeFi, bringing unique considerations that differ from evaluating pure DeFi protocols. This guide provides a comprehensive framework for conducting due diligence on RWA investments, from tokenized treasuries to private credit platforms.
Why RWA Due Diligence is Different
Unlike pure DeFi protocols where risk is primarily technical (smart contracts), RWA protocols introduce:
- Counterparty Risk: Trusting issuers to manage off-chain assets
- Legal Risk: Complex regulatory and jurisdictional considerations
- Operational Risk: Real-world custody and asset management
- Verification Challenges: Off-chain assets are harder to verify than on-chain
A thorough evaluation must address both crypto-native and traditional finance concerns.
The Due Diligence Framework
This framework covers seven key areas for RWA evaluation:
- Asset Backing and Verification
- Issuer and Team Assessment
- Legal and Regulatory Structure
- Smart Contract Security
- Liquidity and Redemption Mechanics
- Track Record and Performance
- Risk-Adjusted Return Analysis
1. Asset Backing and Verification
The foundation of any RWA product is what backs it.
Questions to Answer:- What specific assets back the token?
- Where are assets custodied?
- Who are the custodians/trustees?
- How often are reserves verified?
- Who audits the reserves?
- Is there a real-time or frequent attestation?
- Independent third-party attestations (Armanino, The Network Firm)
- Clear asset composition disclosure
- Regulated custody solutions
- Regular (monthly or better) verification
- Vague or undisclosed backing
- Self-attestation only
- No regular audits
- Commingled funds with issuer
Ondo publishes monthly attestations from The Network Firm verifying USDY is backed by treasuries and bank deposits exceeding circulating supply.
2. Issuer and Team Assessment
Who is behind the protocol matters significantly for RWA.
Questions to Answer:- Who founded the protocol?
- What is their background (TradFi, crypto, legal)?
- Is the team public and accountable?
- What is their track record?
- Who are the investors/backers?
- Where is the company incorporated?
- Experienced team from relevant backgrounds
- Public, accountable leadership
- Strong investor backing (reputable VCs, TradFi institutions)
- Clear company structure and jurisdiction
- Anonymous or pseudonymous teams
- No verifiable experience
- Unclear corporate structure
- Previous failures or fraud
3. Legal and Regulatory Structure
RWA protocols must navigate complex regulations.
Questions to Answer:- What jurisdiction regulates the issuer?
- What licenses/registrations does the issuer hold?
- Is the product a security in your jurisdiction?
- What investor protections exist?
- How is bankruptcy handled?
- Clear regulatory status
- Proper licensing (securities, money services)
- Bankruptcy-remote vehicle structure
- Investor protection disclosures
- Operating in regulatory gray area
- No clear legal structure
- Aggressive claims about regulatory status
- Geographic restriction evasion
4. Smart Contract Security
While simpler than DeFi protocols, RWA contracts still carry risk.
Questions to Answer:- Are contracts audited?
- By whom and when?
- Are contracts upgradeable?
- Who controls admin keys?
- Is there a bug bounty?
- Multiple independent audits
- Immutable or minimal upgrade capability
- Multi-sig admin controls
- Active bug bounty program
- No audits or single audit
- Fully upgradeable by single party
- No admin control documentation
5. Liquidity and Redemption Mechanics
Understanding how you get out is as important as getting in.
Questions to Answer:- How can tokens be redeemed?
- What is the redemption timeline?
- Are there fees or minimums?
- Is secondary market liquidity available?
- What happens during market stress?
- Clear redemption process
- Reasonable timelines (T+1 to T+5)
- Multiple exit options (redemption + secondary market)
- Historical redemption data available
- Vague or long redemption process
- No secondary market liquidity
- Redemption gates or limits
- History of failed redemptions
6. Track Record and Performance
Historical data provides valuable insight.
Questions to Answer:- How long has the product operated?
- What is the track record on yields?
- Have there been any defaults/issues?
- How has the protocol handled stress?
- What is TVL trajectory?
- Years of operation
- Consistent yield delivery
- Transparent handling of any issues
- Growing or stable TVL
- Very new with no track record
- Yield significantly above peers (unsustainable)
- Hidden or minimized problems
- Declining TVL without explanation
7. Risk-Adjusted Return Analysis
Finally, evaluate if the return justifies the risk.
Questions to Answer:- What is the yield vs comparable products?
- What premium are you getting for added risk?
- Is the yield sustainable long-term?
- How does it fit your portfolio?
- Treasury baseline: ~5% APY (risk-free rate)
- Smart contract premium: +0.5-1%
- Counterparty premium: +0.5-2%
- Credit risk premium: +2-10%
- Liquidity premium: +0.5-2%
If a product offers 12% but risk analysis suggests 8% is fair, the excess return may indicate hidden risk.
Due Diligence Checklist
Use this checklist for each RWA investment:
- [ ] Verified asset backing and attestations
- [ ] Researched team background and track record
- [ ] Understood legal structure and regulations
- [ ] Reviewed smart contract audits
- [ ] Tested redemption mechanics (small amount)
- [ ] Analyzed historical performance
- [ ] Calculated risk-adjusted expected return
- [ ] Sized position appropriately for risk