ERC-3643 is a permissioned token standard on Ethereum, designed for regulated tokenized assets such as securities and fund shares. It is compatible with ERC-20, but every transfer first checks the recipient’s on-chain identity and compliance rules, so only approved investors can hold the token. The issuer also retains administrative powers such as freeze, forced transfer, and recovery.
How Is ERC-3643 Different from ERC-20?
An ERC-20 token can be sent to any address; the contract only checks whether the balance is sufficient. Regulated assets cannot work this way: securities law requires knowing who holds the asset, whether each holder is eligible, and whether a transfer would breach a lock-up period or a cap on the number of holders.
ERC-3643 keeps the standard ERC-20 interface, so wallets and block explorers can display balances just as they do for ordinary tokens. But it adds two checks at transfer time: whether the recipient address is linked to a verified identity, and whether the transfer complies with the compliance rules. If either check fails, the transaction fails. This is the contract-level difference between RWA tokens and ordinary cryptocurrencies.
How Does ERC-3643 Verify Holder Identity?
Each investor has an on-chain identity contract that stores claims issued by trusted parties, such as “KYC completed,” “accredited investor,” or “resident of a given country.” The verification itself happens off-chain; only the results and signatures are stored on-chain, not personal data.
The issuer sets the rules in three registry contracts: the Identity Registry records which wallet address belongs to which identity; the Claim Topics Registry lists the claims required to hold the token; and the Trusted Issuers Registry lists which issuers’ claims are valid. On each transfer, the contract follows this chain to check the recipient address, effectively bringing an RWA platform’s KYC results on-chain.
How Are Compliance Rules Enforced?
Beyond identity, ERC-3643 has a compliance contract to which the issuer adds rule modules as needed, such as restricting eligible countries or regions, capping the total number of holders, capping individual holdings, or setting a lock-up period. Every transfer calls these rules and goes through only if they are satisfied.
The benefit of writing rules into the contract is that enforcement does not depend on any single platform or intermediary: whichever wallet or application the token moves through, it passes the same checks.
What Administrative Powers Does the Issuer Retain?
ERC-3643 reserves a set of administrative functions for the issuer or its authorized agents: minting and burning tokens; freezing an address or part of its balance; forced transfers when required by law; recovery of tokens to a new wallet under the same identity when an investor loses their wallet; and pausing transfers of the entire token.
These powers let tokenized assets meet legal requirements, but they also make the keys that hold them highly sensitive. If those keys are stolen, an attacker could mint new tokens or move anyone’s balance. This is why RWA platforms need MPC wallets to protect privileged keys and enforce multi-party approval for sensitive operations.
What Should Businesses Watch for When Holding ERC-3643 Tokens?
A holding address must be linked to an identity with the issuer before it can receive tokens, and switching addresses requires re-registration. The issuer can freeze and force-transfer tokens, and lost private keys can also be recovered through the issuer, which makes wallet management for RWA investors very different from managing an ordinary crypto wallet. Before transferring, businesses should also check the recipient address and compliance rules to avoid failed transactions and wasted fees.
Conclusion
ERC-3643 builds on ERC-20 by adding on-chain identity, configurable compliance rules, and issuer administrative powers, allowing security tokens to circulate compliantly on public blockchains. For issuers, the key is protecting the administrative keys; for holders, the key is managing the identity-linked addresses. Safeheron’s MPC Wallet-as-a-Service provides businesses with MPC key management and a policy engine.
Want sensitive operations like minting, freezing, and forced transfers to require approval from multiple people?
Looking for a secure way to manage digital assets?
Talk to our experts and find the right solution for your business.
Request a DemoLooking for a secure way to manage digital assets?
Talk to our experts and find the right solution for your business.