Cardano puts issuer controls into token transfer rules

The Cardano Foundation put its CIP-0113 programmable token standard live on mainnet on October 7, giving issuers of regulated assets a way to build transfer checks and controls such as freezing or seizing into tokens. The Foundation announced the launch at TOKEN2049, following independent security audits.

How does CIP-0113 check a transfer?

A programmable token must pass a script check before it can change owner. The token sits at a shared smart contract address, while the holder’s stake credential identifies who owns it. When someone tries to transfer the token, Cardano runs the token’s transfer rules; the ledger accepts the transaction only if those rules pass. The Foundation says the standard uses Cardano’s existing extended UTXO system and requires no hard fork.

The Cardano Foundation’s launch announcement says issuers can use the standard for stablecoins, tokenized funds, bonds and other regulated assets. They can select existing rule sets, called modules, or write their own, and update them as regulation changes.

Who sets the rules for freezing or seizing?

CIP-0113 provides the framework; each token’s module defines what its rules allow. In the CIP-0113 specification, a token’s transfer script checks ordinary transfers, while a separate third-party script defines actions such as seizure or forced transfer and who may carry them out. That means freeze and seize powers depend on the rules chosen for a particular token, rather than applying automatically to every Cardano asset.

For example, a regulated fund could require a buyer to meet its identity checks before accepting a transfer. A stablecoin module could block transfers involving an address on its denylist. If the module allows it, an authorized party could also freeze or move a holder’s tokens without that holder’s approval. The specification advises services to check what actions a token’s module permits before accepting it.

What changes for holders and wallets?

Holders of programmable tokens must follow the rules attached to those tokens whenever they move them. The Foundation says the assets remain native Cardano tokens, and that wallets, explorers and applications can handle them like other Cardano assets once integrated. Eternl, GeroWallet, CardanoScan and BloxBean are among the tools it named as supporting the launch.

The change gives regulated issuers a way to apply compliance rules at the point of transfer, using the network to check them each time. It also means that holding one of these tokens can come with issuer controls that ordinary Cardano native tokens do not have. The token’s chosen module determines those controls and who can invoke them.

Sources and documents

• Cardano Foundation’s launch announcement — cardanofoundation.org
• CIP-0113 specification — cips.cardano.org