How Does a Regulated UCITS Fund Tokenize on a Public Chain?
On 29 July 2026 Aviva Investors launched a tokenised share class of its US Dollar Liquidity Fund — an Irish UCITS money market fund holding around $1.23 billion across all share classes — on the XRP Ledger, following approval from the Central Bank of Ireland. The structure is a digital twin: each token represents and is directly linked to a corresponding traditional share, the off-chain book-entry record remains authoritative, and daily reconciliation runs between the two. The tokens are non-transferable and can only be minted or redeemed. BNY Mellon custodies the underlying assets, Komainu holds the digital assets, Licuido supplies the tokenisation infrastructure, and Ripple provided the ledger. This guide examines what the regulator approved, what the constraints reveal about why, and what other institutional issuers should take from it.
TL;DR — Key Takeaways
- ✓What Launched: A tokenised share class of an Irish UCITS money market fund on the XRP Ledger, live 29 July 2026, approved by the Central Bank of Ireland. Minimum investment £1 million.
- ✓The Model: Digital twin. Each token is directly linked to a corresponding traditional share, the off-chain record governs, and reconciliation runs daily between the two.
- ✓The Constraint That Matters: Tokens are non-transferable — mint and redeem only. Collateral mobility benefits are explicitly limited as a result.
- ✓What Did Not Change: Same investment objective, risk profile, daily liquidity and regulatory protections as the conventional share class. BNY Mellon still custodies the assets.
- ✓The Lesson: Approval came fastest to the design that changed least. No on-chain settlement finality, no secondary trading, no new transfer surface.
Read the Constraints, Not the Announcement
Aviva Investors launched a tokenised share class of its US Dollar Liquidity Fund on the XRP Ledger on 29 July 2026, with approval from the Central Bank of Ireland. The tokens are non-transferable, mirror traditional shares one for one, and are reconciled daily against the off-chain register. Those three constraints describe the deal more accurately than the word “tokenised” does.
It is worth reading launches of this kind from the restrictions inward. Any regulated tokenisation is an agreement between an issuer and a supervisor about which properties of the existing product may change, and the restrictions are where that agreement is written down. A press release describes ambition; the transfer rules describe what was actually permitted.
“Each Digital Token represents, and is at all times directly linked, to a corresponding traditional share” — and cannot operate independently of it.
— Structure of the Aviva Investors tokenised share class, XRP Ledger, July 2026
“Cannot operate independently” is the operative phrase. The token is not a bearer instrument that happens to be backed by a share; it is a representation that has no existence apart from the share it mirrors. That is the digital twin model in its strictest form, examined generally in digital native vs digital twin tokenization models.
What Was Built, and Who Holds What
The underlying product is unchanged: an Irish UCITS money market fund launched in 2020, holding around $1.23 billion across all share classes, with the same investment objective, risk profile, daily liquidity and investor protections in the tokenised class as in the conventional one. What tokenisation added was a second record and two service providers.
| Party | Role | New or existing |
|---|---|---|
| Aviva Investors | Fund manager | Existing |
| BNY Mellon | Custody of the underlying fund assets | Existing |
| Komainu | Regulated digital asset custody | Added for tokenisation |
| Licuido | Tokenisation infrastructure | Added for tokenisation |
| Ripple | XRP Ledger; supported the launch | Added for tokenisation |
| Central Bank of Ireland | Approved the tokenised share class | Existing supervisor |
The split between the two custody roles is the structurally interesting part. BNY Mellon holds the fund's actual assets exactly as before; Komainu holds the digital representations. Two custodians, two different things held, and neither displaces the other — which is what allows the fund's existing custody arrangements and their regulatory treatment to survive the tokenisation untouched.
Why Non-Transferability Is the Whole Design
The tokens can be minted and redeemed but not transferred between holders. That single restriction eliminates most of the questions a regulator would otherwise have to answer about a fund share circulating on a public ledger — and it also removes most of the benefits usually claimed for tokenising a money market fund.
The honest framing is a trade. Free transferability is what makes a tokenised MMF useful as collateral: posting the fund directly instead of redeeming into cash, substituting intraday, re-using across obligations. Without transfer, none of that is available, and the collateral mobility case documented by the GDF and ISDA working group does not apply to this structure. What remains is wallet-based holding and operational efficiency in subscription and redemption.
| Question a transferable token raises | How non-transferability answers it |
|---|---|
| How is investor eligibility enforced on transfer? | There is no transfer; eligibility is checked at subscription as it always was |
| What if a token reaches an ineligible holder? | It cannot — holdings only originate through the existing process |
| When is an on-chain transfer legally final? | The question does not arise for transfers that cannot occur |
| How do the two records stay aligned? | Daily reconciliation, with no intraday transfers to create drift |
| What secondary market forms around it? | None, by construction |
Key Insight
Non-transferability also disposes of the digital twin model's central weakness. In a twin, an on-chain transfer is provisional until the authoritative off-chain record agrees, which opens a window where the two records disagree and a holder relying on the chain is relying on a copy. Remove transfers and the window closes: the only events that change holdings are subscriptions and redemptions, which already run through the fund's off-chain process and reach both records in the same operation. Daily reconciliation is sufficient here precisely because nothing can happen between reconciliations.
What This Establishes, and What It Does Not
The launch establishes that a European UCITS supervisor will approve a tokenised share class of a regulated fund on a public chain, where the fund's economics, protections and processes are unchanged and the token carries no independent transfer capability. That is a genuine precedent and a narrow one.
It does not establish that a regulator will approve on-chain settlement finality, a chain-native register, secondary trading of fund tokens, or the use of those tokens as collateral. Those remain open questions, and a firm citing this launch as evidence for any of them is citing it for something it does not support. The precedent covers the design that was approved.
Established
- A UCITS share class can be mirrored on a public chain
- An EU supervisor will approve the twin model
- Existing custody arrangements survive tokenisation
- Daily reconciliation suffices where transfers are absent
Not established
- On-chain settlement finality for fund shares
- A chain-native authoritative register
- Secondary trading or transfer between holders
- Use of the tokens as posted collateral
Open questions
- What a transferable version would require
- Whether reconciliation stays daily at scale
- How eligibility would work on a real transfer
- Whether other NCAs follow the Irish approach
The £1 million minimum keeps the share class institutional, which matters for the precedent's reach. A design approved for professional investors subscribing at that size is not automatically a design approved for retail distribution, and the eligibility questions that non-transferability defers would return in a broader offering.
What Other Issuers Should Take From It
The pattern worth copying is the sequencing. Aviva shipped a live product on a public chain by asking for the narrowest possible change to an existing regulated fund, rather than seeking approval for the full set of benefits tokenisation could theoretically deliver. A working structure with limited benefits is a better position than an ambitious design still in discussion.
1. Change one layer at a time
The record-keeping layer changed; the fund, its custody, its liquidity terms and its protections did not. A supervisor assessing one change against an otherwise familiar product has a tractable question in front of it.
2. Let the restriction do the compliance work
Non-transferability removed eligibility-on-transfer, finality and secondary-market questions in a single stroke. A constraint that eliminates a class of risk is often cheaper than a control that manages it.
3. Keep the incumbent providers
Retaining BNY Mellon for asset custody meant the fund's existing arrangements and their regulatory treatment carried over. Adding a digital asset custodian alongside is a smaller ask than replacing a custody model.
4. Be explicit about what you gave up
The collateral mobility case does not apply to a non-transferable token, and the structure says so rather than implying otherwise. Overstating benefits is how a launch becomes a disclosure problem later.
The natural next step for a structure like this is transferability within a whitelisted set of eligible holders, which reopens exactly the questions non-transferability closed — eligibility enforced at transfer, finality across two records, and what happens when the chain permits a move the register has not recorded. Those are the problems examined in when a tokenized transfer is actually final, and they are the reason the first version does not attempt it.
How Blockmaze Supports the Step After This One
A non-transferable twin is a sound first structure and a deliberate ceiling. The moment an issuer wants transferability — the point at which the collateral and secondary-market benefits become available — it needs eligibility, finality and reconciliation to be properties of the system rather than assumptions the restriction was covering for.
Eligibility Enforced at Transfer
Holder eligibility is evaluated at the protocol level before a transfer settles, so a token cannot reach an ineligible holder — the risk non-transferability currently avoids by prohibition.
Reconciliation State Observable
Where an off-chain register governs, whether the two records currently agree is visible, so drift between reconciliation cycles surfaces as a condition rather than a surprise.
Provisional Positions Marked
A holding transferred on-chain but not yet confirmed at the authoritative record is distinguishable from a settled one, which is what a twin needs once transfers exist.
Model Declared per Instrument
That an instrument is a twin, and which record is authoritative, is recorded against it, so counterparties can complete their own perfection and finality analysis.
None of this argues against the design Aviva shipped. Prohibiting transfers is the right answer when the alternative is transfers you cannot police. The argument is that the prohibition is a stage, and the infrastructure that makes the next stage possible is worth having in place before the business case for transferability arrives.
Planning a Transferable Tokenized Share Class?
Blockmaze provides the compliance layer that enforces holder eligibility before a transfer settles, marks provisional positions, and keeps reconciliation state observable — the controls a twin needs once transfers are permitted.
Frequently Asked Questions
What exactly did Aviva Investors launch?
A tokenised share class of the Aviva Investors US Dollar Liquidity Fund, an Irish UCITS money market fund launched in 2020 holding around $1.23 billion across all share classes. The tokenised share class went live on 29 July 2026 on the XRP Ledger, a public chain, following approval from the Central Bank of Ireland. The minimum investment for the tokenised shares is £1 million, placing it firmly in institutional territory. The launch converted a tokenisation partnership between Aviva Investors and Ripple, disclosed in February, into a live product.
Are the tokens transferable?
No, and this is the most instructive detail in the structure. The tokens can only be issued or minted and redeemed — they cannot be transferred between holders. Each digital token represents, and is at all times directly linked to, a corresponding traditional share, and cannot operate independently of it. That single constraint means the collateral mobility benefits usually cited as the reason for tokenising a money market fund are explicitly limited here, because an asset that cannot move between parties cannot be pledged onward or substituted in a margin workflow.
What is a digital twin structure in this context?
A model in which the authoritative record of ownership stays off-chain and the on-chain token mirrors it. In the Aviva structure, the traditional book-entry share remains the share, the token is directly linked to it, and daily reconciliation runs between the token and book-entry versions. The chain functions as a record-keeping and transfer layer over an unchanged fund, rather than as the register itself. This is the middle of the three tokenisation models, and its defining property is that on-chain state is derivative of an off-chain record that governs.
Who does what in the structure?
BNY Mellon custodies the underlying fund assets, in the same role it would hold for any conventional fund. Komainu, a regulated digital asset custodian, holds the digital assets. Licuido supplies the tokenisation infrastructure. Ripple provided the XRP Ledger and supported the launch. Aviva Investors remains the fund manager. The division is worth noting: the tokenisation added two service providers — a digital asset custodian and a tokenisation platform — without displacing the traditional custodian or changing who manages the fund.
Why did the regulator approve this particular design?
Because it changes the record-keeping layer while leaving the fund untouched. The tokenised share class carries the same investment objective, risk profile, daily liquidity and regulatory protections as the conventional share class. Non-transferability removes the secondary-market questions a freely transferable token would raise — who may hold, how eligibility is enforced on transfer, what happens if a token reaches an ineligible holder. A structure that only mints and redeems keeps every transfer inside the existing subscription and redemption process the fund already operates under.
What does this tell other institutional issuers?
That the fastest route to a regulator-approved tokenised fund is to minimise what changes. Aviva did not seek approval for on-chain settlement finality, for secondary trading, or for the chain to be the authoritative register. It sought approval for a mirror of an existing share class with the same protections and no new transfer surface. The trade-off is explicit: fewer benefits, materially lower regulatory and operational risk, and a live product on a public chain rather than a pilot. Later designs can expand from a working base.
Related Articles
Digital Native vs Digital Twin: Which Tokenization Model?
The three models and what each costs — the framework this launch is a live instance of.
Can Tokenized Money Market Funds Be Used as Margin Collateral?
The collateral mobility case that non-transferable tokens deliberately leave on the table.
How Does the UK Regulate Tokenized Funds?
The neighbouring regime, and how a UK fund tokenisation route differs from the Irish UCITS one.
How Asset Managers Launch Compliant Tokenized Money Market Funds
The general playbook for launching a tokenized MMF and keeping it compliant.