How Tokenized Securities Trade

Secondary markets, ATSs, and the liquidity question, explained simply.

Tokenization is often sold with a one-word promise: liquidity. The pitch is that once a private asset is on-chain, it can trade around the clock, across borders, in tiny slices, on venues that never close. Some of that is true. Much of it is aspirational. And almost all of it depends on a piece of infrastructure most retail investors have never heard of: the secondary market where tokenized securities actually change hands.

This article walks through how that market works today. What counts as trading. Who is allowed to run a venue. Why an Alternative Trading System (ATS) is not the same as a stock exchange. How order books, RFQ, and peer-to-peer transfers each fit in. And what "liquidity" really means when the underlying asset is a private fund, a piece of real estate, or a slice of a bond.

Primary vs. secondary: the difference that matters

Every security has two lives. The primary market is issuance: an issuer sells new tokens to investors and receives capital. This is the STO or private placement. Money flows in, tokens flow out, and the cap table grows.

The secondary market is everything after. Investor A sells to Investor B. The issuer is not a party to the trade and does not receive new money. Only ownership changes.

For traditional stocks, secondary trading is where almost all activity lives — NYSE and Nasdaq are secondary markets. For private securities, secondary trading has historically been rare, slow, and expensive: bilateral negotiation, transfer agent paperwork, issuer consent, and settlement measured in weeks. Tokenization aims to compress that into minutes on a regulated venue.

Why you cannot just list on Coinbase

A security token is a security. In the U.S., trading securities requires the venue to be one of three things:

1. A national securities exchange registered under Section 6 of the Exchange Act (NYSE, Nasdaq).
2. An Alternative Trading System (ATS) operated by a registered broker-dealer under Regulation ATS.
3. An exempt venue (very narrow — mostly bilateral trades between qualified parties).

General crypto exchanges are none of those. That is why Bitcoin trades on Coinbase and a Reg D security token does not. Listing a security on an unregistered venue is an unregistered exchange offense for the venue and, often, an unregistered broker-dealer offense for anyone facilitating trades.

What an ATS actually is

An Alternative Trading System is a regulated trading venue that is not a full exchange. It matches buyers and sellers of securities, but it does not set listing standards, does not perform self-regulatory functions, and typically serves a narrower set of participants. Every U.S. ATS must be operated by a FINRA-registered broker-dealer, file Form ATS with the SEC, and follow order-handling, recordkeeping, and fair-access rules.

For tokenized securities, an ATS usually sits at the center of a stack:

• Broker-dealer onboards investors, runs KYC/AML, and holds the license.
• ATS matching engine takes orders (limit, market, RFQ) and pairs them.
• Transfer agent maintains the official ownership record and reconciles it with the on-chain state.
• Custodian holds the tokens (qualified custody or self-custody with whitelisting).
• Blockchain settlement layer executes the on-chain transfer once the trade matches and compliance checks pass.

Notable U.S. ATSs trading digital securities include tZERO, INX, Securitize Markets, Oasis Pro, and Templum. Outside the U.S., MTFs in Europe (e.g. Archax in the UK, BX Swiss's digital segment) and licensed venues in Singapore, Switzerland, and the UAE play similar roles under local rules.

How a trade actually settles

A tokenized security trade on a regulated venue looks like this:

1. Buyer and seller are already onboarded to the broker-dealer and whitelisted at the token level.
2. Both submit orders to the ATS. The matching engine pairs them.
3. The ATS confirms the match and instructs settlement.
4. The token's compliance contract runs its checks — is the buyer whitelisted, is the seller past any lock-up, does the jurisdiction rule allow it.
5. If every check passes, the token moves on-chain from seller's wallet to buyer's wallet, cash moves off-chain (or via stablecoin), and the transfer agent updates the register.

Settlement can be T+0 (same day, sometimes seconds) rather than the T+1 or T+2 of traditional markets — because the ledger and the settlement layer are the same system. That is the concrete efficiency gain tokenization delivers over legacy plumbing.

Order books, RFQ, and bilateral trades

Not every venue looks like Nasdaq. Tokenized securities trade in three broad shapes:

• Central limit order book (CLOB) — continuous matching of resting bids and offers. Best for tokens with real, ongoing two-sided interest. Rare today for private securities; more common for tokenized T-bills and money-market instruments.
• Request for Quote (RFQ) — the buyer asks market makers for a price on a specific size. Better for less-liquid, larger-ticket instruments where a public order book would move against the trader.
• Bilateral / peer-to-peer — negotiated off-venue, then settled via a broker-dealer or through a whitelisted transfer with issuer/transfer-agent sign-off.

Most tokenized private securities live in the RFQ / bilateral zone today. A CLOB is a signal of genuine liquidity, not a starting point.

The liquidity question, honestly

Liquidity is not a property of the token. It is a property of the market for that token — how many buyers and sellers show up, how tight the spread is, how deep the book is, and how quickly you can trade size without moving the price.

Tokenization removes some frictions that historically choked private-market liquidity:

• Ownership transfer is atomic and near-instant.
• Fractionalization lowers minimum ticket sizes.
• 24/7 venues expand the trading window.
• A shared ledger reduces reconciliation overhead.

It does not create demand. A tokenized stake in a single mid-market office building will not suddenly trade like Apple stock just because it lives on Ethereum. The underlying asset is still illiquid; tokenization changes the plumbing, not the fundamentals.

Where tokenization is producing measurable secondary liquidity today: tokenized U.S. Treasuries (BlackRock BUIDL, Franklin BENJI, Ondo OUSG) — instruments that are highly liquid to begin with and benefit from on-chain 24/7 settlement. Where it is not (yet): fractional real estate, single-asset SPVs, small-cap private equity — thin books, wide spreads, sporadic trades.

Lock-ups, holding periods, and who can trade

Tokenization does not remove securities-law holding periods. A Reg D 506(c) token typically carries a one-year Rule 144 lock-up before it can be resold, and even after that, resales to non-accredited investors remain restricted. Reg S tokens have a 40-day or one-year distribution compliance period depending on the category. Reg CF tokens have a one-year lock-up with narrow exceptions (back to the issuer, to accredited investors, to family).

The compliance contract enforces these on-chain. A seller who tries to transfer before the lock-up ends gets rejected at the token level — not by the venue, by the asset itself. That is the deep difference from a traditional restricted certificate: the restriction travels with the token, not with a legend on paper.

Cross-border and interoperability

A tokenized security issued to U.S. accredited investors under Reg D generally cannot be sold to a retail investor in Germany, even if both use the same wallet software. The compliance contract knows both parties' jurisdictions (via the identity registry) and blocks the transfer.

This is a feature, not a bug — it lets an issuer offer one token to multiple jurisdictions under different exemptions simultaneously, with the on-chain rules keeping each buyer inside their own legal box. But it also means "global 24/7 liquidity" is bounded by the intersection of every applicable rule set, not the union.

What to look for in a venue

If you are evaluating where a tokenized security should trade — as an issuer, a market maker, or an investor — the practical checklist is short:

• Regulatory status — registered ATS / MTF / equivalent in the target jurisdiction; broker-dealer of record identified.
• Custody model — qualified custody, self-custody with whitelisting, or hybrid; who holds the keys and who is on the hook if they are lost.
• Settlement — T+0 on-chain, T+1 with off-chain cash, or delivery-versus-payment via stablecoin.
• Compliance stack — which token standard (ERC-1400, ERC-3643, other), which identity registry, how transfers are validated.
• Market structure — CLOB, RFQ, bilateral; presence of designated market makers.
• Reporting — trade reporting to the SEC/FINRA (or local equivalent), best-execution obligations, audit trail.

A venue that cannot cleanly answer all six is not a venue to trade real size on.

The near-term picture

Secondary markets for tokenized securities are real but early. The infrastructure works. The rules are (mostly) settled. The bottleneck is participation: enough investors, enough issuers, and enough market makers on the same venue to create the two-sided flow that turns a trading system into a market.

The instruments getting traction first are the ones that were already liquid off-chain — Treasuries, money-market funds, investment-grade credit. The harder categories — private equity, real estate, private credit — will follow more slowly, and the honest answer is that some of them may never be truly liquid, because the underlying asset is not. Tokenization is a distribution and settlement upgrade, not an alchemy that turns illiquid assets into liquid ones.

What it does deliver, unambiguously, is a cleaner secondary market for the securities that deserve one: faster settlement, lower minimums, programmatic compliance, and a shared ledger between issuer, custodian, transfer agent, and venue. That is the market that is being built right now, one ATS and one whitelisted token at a time.