Coinbase Put Apple on a Public Blockchain and Kept the Freeze Switch
Four US stocks went onto a public blockchain this week in self-custodied wallets, issued by an Abu Dhabi special purpose vehicle whose prospectus reserves the power to freeze and confiscate them.
Summary: Coinbase is now issuing tokenized claims on four US stocks, Apple, Nvidia, Meta and Alphabet, as B20 tokens on Base. They sit in self-custodied wallets, they work with outside applications, and Base's own announcement says there are "no whitelisted wallets and no platform lock-in."
The prospectus, filed August 4 by Coinbase Onchain SPV Ltd in Abu Dhabi, describes the same instrument differently. The token carries "blacklist, freeze, and pause functions operable by the Tokenisation Entity," which "remain available throughout the Security lifecycle and operate without requiring counterparty cooperation."
The document also warns that the conditions a holder satisfies to become vested "may change even after a Holder has become a Vested Holder, which may result in the freezing or confiscation of the Securities."
In the same week, 39 state bankers associations announced BankChain Alliance without a technology vendor, BIS General Manager Pablo Hernández de Cos told Jackson Hole that "there are no multi-bank or inter-jurisdictional ecosystems issuing tokenised deposits in an interoperable framework."
Thesis: The fight over which rail carries regulated assets is finished, and the open one won it on the merits. What happened next is the part worth understanding. Once an issuer accepts that its asset will travel on a network it doesn't control, every control it wants has to be written into the asset itself, and that turns out to be a better deal than owning the network ever was.
Coinbase gets permissionless distribution and keeps the power to freeze, blacklist, pause and seize, all of it enforced by the same public infrastructure that makes the token portable. The banks spent the week building closed networks that would give them less. Which means the diligence question for anything tokenized has stopped being which chain it settles on, and become who holds the administrative keys on the contract and what the offering document lets them do with those keys.
What actually shipped
Four tickers, wrapped. NVDAc, METAc, AAPLc and GOOGLc are now live on Base, with Coinbase promising more "over the coming weeks." Eligible investors outside the United States buy them under Regulation S. Americans can't touch them, which is the first thing worth noticing about a product marketed on openness.
The plumbing is conventional, and Coinbase has been unusually clear about it. The issuer is Coinbase Onchain SPV Ltd, a company incorporated in the Abu Dhabi Global Market. The real shares sit with Alpaca Securities LLC, an SEC-registered broker-dealer and FINRA member that acts as both broker and custodian, holding the stock in segregated accounts on trust for the SPV in what Base calls a bankruptcy-remote structure. Your claim runs against the Abu Dhabi vehicle, not against Apple, and not against Coinbase Global.
What's genuinely new is the last mile. The token is a standard onchain asset in a wallet you control. It composes with lending protocols and exchanges that Coinbase didn't build and can't approve. It trades every hour of the week, 168 against the 32.5 hours of Nasdaq's regular session, and Base advertises trading on "weekends and US market holidays." Minting and redemption run through KYC-onboarded authorized participants on the same create-and-redeem model as an ETF, so the perimeter at the edges is familiar. The middle is not.
The controls live in the contract now
If you read the engineering blog and the prospectus together then the design details start to emerge.
B20, the token standard Coinbase built for this, is explicit that "each B20 token is deployed and configured by its issuer, who sets and controls all token parameters and administrative permissions." Among those permissions: token-level pause switches, transfer-scoped policies that "allow or block specific addresses from sending or receiving," and a seize role, where "an administrator with the seize role moves tokens from a policy-flagged address to an authorized destination, with a memo recorded."
Coinbase said the same thing in plainer words when it announced the Abu Dhabi hub in August: "Every transfer is subject to ongoing sanctions screening, and we can freeze or seize assets at the wallet level where required."
So the marketing claim and the risk disclosure are both true, and they're describing different layers. There is no allowlist, which is what "no whitelisted wallets" means, and it's a real property: you don't need Coinbase's permission to receive one of these tokens, and neither does the protocol you send it to. There is a blocklist, continuous chain analytics labeling addresses by risk, and a contract that reverts a blocked transfer. Openness at the transport layer, discretion at the asset layer, both enforced by the same code.
Vesting lets a holder redeem for the underlying, and it requires passing AML and KYC procedures. The prospectus then says those conditions "may change even after a Holder has become a Vested Holder, which may result in the freezing or confiscation of the Securities." Do everything the issuer asked, and the terms of what it asked can move afterward. A transfer that breaches the embedded restrictions, meanwhile, "could result in the Securities being frozen at the smart contract level, which would deny the Holder all economic benefit in respect of the Underlying."
Nobody hid this. It's on page one of the risk factors, which is more than most of this industry manages.
This design turned ninety-nine years old this year
JPMorgan launched the first American Depositary Receipt on April 29, 1927, for Selfridges Provincial Stores. A US bank held the British shares, issued a receipt against them, and the receipt traded freely in New York while the stock never left London. Investors got access to an asset behind a wall. The bank got a fee and a control point.
The deposit agreements have not softened much in a century. Look at any of them on EDGAR and you'll find that on termination the depositary "shall use its reasonable efforts to sell the deposited securities" and hold the cash for you, and that registration, transfer, and withdrawal "may be suspended" whenever "any such action is deemed advisable by the depositary." A depositary receipt has always been a freely circulating instrument with a discretionary institution at the center, and that has been the trade since 1927.
The analogy breaks in one direction, and the direction favors the token. An ADR's controls are exercised through a transfer agent and a court, on business days, after paperwork. Coinbase's controls are a function call that settles in two seconds, applied continuously by software that never sleeps. The instrument got faster in every respect, including the seizure.
The closed networks had a worse week
Set that against what the banks announced this week:
BankChain Alliance launched on August 25 with 39 state bankers associations, an interim chair in Kathy Kraninger of the Florida Bankers Association, and a ten-person board holding nine association executives and one technology founder. It has an anticipated 2027 launch date and is "in the process of selecting a technology partner." No chain, no vendor, no published membership or validator rules, no transactions. The headline figures, 3,283 banks and $21.8 trillion in assets, appear on the Alliance's own About page directly above the sentence that empties them: "The banks represented by these associations are not individually committed to or participants in the Alliance unless separately indicated." That number counts who the trade groups speak for, not who has joined anything.
Hernández de Cos supplied the epitaph from Jackson Hole, and he wasn't trying to. "At present," he said, "there are no multi-bank or inter-jurisdictional ecosystems issuing tokenised deposits in an interoperable framework."
Existing efforts are "typically limited to permissioned platforms or rely on designs better characterised as bank-issued stablecoins." He argued in the same speech that tokenized deposits should carry the bulk of day-to-day payments and wholesale settlement, settled in central bank money. The official sector's preferred instrument does not yet exist in the form the official sector prefers.
Almost none of this exists yet
Every tokenized stock on earth, across all eleven issuers rwa.xyz tracks, was worth $10.95 million when I checked on Thursday. Three hundred and twenty holders. Eighty-seven active addresses in a month. Monthly transfer volume of $566,930.
US listed companies were worth $76.9 trillion in the second quarter, per SIFMA. The tokenized share is roughly fourteen millionths of one percent, and that tracker doesn't yet include Coinbase's four tokens, so the real figure is somewhat higher and still a rounding error on a rounding error.
The argument here is about design. It's settled, and the volume hasn't arrived.
The honest case against this read
The strongest objection is that I've promoted a compliance feature into a thesis. Every regulated instrument has a freeze mechanism somewhere.
Your brokerage can restrict your account, a court can attach your shares, and OFAC can strand them. Coinbase wrote down in a prospectus what everyone else does through a phone call to an operations desk, and disclosure isn't the same as expansion. That's fair, and the disclosure is genuinely better than the industry norm.
What I'd say back is that discretion exercised at software speed, continuously, against a screened address rather than a named customer, is a different operational thing from a court order, even when the legal authority behind it is identical.
Second, four stocks and 320 holders is thin evidence for a structural claim, and I know it. The reason I'd still run the argument is that B20 is a standard rather than a product, and standards are where design choices calcify.
Third, I may be scoring the banks too harshly for being early. BankChain is days old and consortiums take years, and The Clearing House initiative I wrote about in June has an operator and named institutions. Judge BankChain in 2027 against what it said it would do, which is the only fair test.
What to watch
A published power that has never been exercised is a legal formality so the first freeze on a B20 token, and how Coinbase explains it, converts the clause into a precedent is the thing to watch.
Whether the tokens go anywhere Coinbase didn't build. The claim that separates this launch from a walled garden is composability. If these tokens show up as collateral in lending protocols with real balances, permissionless access did something. If the balances stay inside Coinbase's own applications, the openness was a specification rather than a fact.
Whether a named bank joins BankChain. The disclaimer says none has committed. The first bank to put its name on the thing is the signal that a trade association position became a business decision.
Strategic implications
For builders. Publish a control sheet for anything you tokenize, and publish it before a customer asks. Who holds the administrative keys, what functions those keys can call, who can pause the contract, who can block an address, what the upgrade path is, and what happens to a holder in each case.
Coinbase's prospectus is the current benchmark for this and it took a regulator in Abu Dhabi to produce it. If your controls are weaker than the incumbent's and you can't say so on one page, the diligence you're going to face will be worse than the disclosure you're avoiding. The product opportunity sits on the seam: reusable identity credentials that don't leak the underlying data, reserve and liability attestations, conversion that works across issuers, and reconciliation between a public ledger and a custodial book (sounds like a perfect use case for zero-knowledge proofs).
For capital allocators. Stop underwriting the rail and start underwriting the keys. A tokenized asset's risk lives in the offering document, and the questions are which entity holds the legal claim, what freeze and seize powers exist and who exercises them, whether redemption is contractual or discretionary, and whether a holder can leave the issuing platform without asking.
For policymakers. The gate stopped being the network some time ago, and the supervisory apparatus hasn't caught up. Regulating access to blockchains addresses a control point that issuers have already abandoned, while freeze, blacklist, pause, seize and upgrade powers now sit in contract code that no disclosure regime requires anyone to describe in a standard form.
The harder question is the one Coinbase's vesting clause raises: an instrument whose terms can change after a holder has satisfied them needs a rule about when an onchain transfer becomes final and what recourse a holder has when the answer changes. Hernández de Cos was right that money "is more than a technology; it is an institutional achievement." The institution is in the smart contract now, and it should be legible to somebody other than the entity that deployed it.
Daniel McGlynn
Last week's read.
Sources
[1] Base. "Tokenized stocks on Base." August 2026. https://blog.base.org/tokenized-stocks
[2] Base. "B20: tokenized stocks on Base." Engineering blog. https://blog.base.dev/b20-tokenized-stocks-on-base
[3] Coinbase. Tokenized stocks product page and linked prospectuses, Coinbase Onchain SPV Ltd, dated August 4, 2026. https://www.coinbase.com/tokenize
[4] Coinbase. "Coinbase establishes its tokenization hub in Abu Dhabi." August 11, 2026. https://www.coinbase.com/blog/coinbase-establishes-its-tokenization-hub-in-abu-dhabi
[5] Base. Verified tokenized stock list. https://www.base.org/stocks
[6] BankChain Alliance. "State bankers associations announce industry-owned blockchain network." August 25, 2026. https://bankchainalliance.com/press/state-bankers-associations-announce-industry-owned-blockchain-network
[7] BankChain Alliance. About page, membership figures and participation disclaimer. https://bankchainalliance.com/about
[8] Bank for International Settlements. Pablo Hernández de Cos, "Pushing the monetary frontier: stablecoins and tokenised deposits." Jackson Hole Economic Symposium, August 28, 2026. https://www.bis.org/speeches/sp260828.htm
[9] European Central Bank. Isabel Schnabel, "Central banks on-chain." Jackson Hole Economic Symposium, August 28, 2026. https://www.ecb.europa.eu/press/key/date/2026/html/ecb.sp260828~fe9afc86e8.en.html
[10] European Central Bank. Piero Cipollone, "From vision to delivery: building Europe's tokenised financial market." Deutsche Bundesbank Symposium, August 26, 2026. https://www.ecb.europa.eu/press/key/date/2026/html/ecb.sp260826~3641116314.en.html
[11] European Central Bank. Pontes project page, initial launch planned for Q3 2026. https://www.ecb.europa.eu/paym/target/pontes/html/index.en.html
[12] European Central Bank. TARGET Services Annual Report 2025, T2S daily average settlement. https://www.ecb.europa.eu/press/targetservar/html/ecb.targetservar2025.en.html
[13] DCP, GMO Aozora Net Bank and ABeam Consulting. Tokenized deposit interbank settlement verification, FSA FinTech proof-of-concept hub. August 26, 2026. https://gmo-aozora.com/company/news/2026/20260826-01.html
[14] Zengin-Net. System participant counts, as of August 3, 2026. https://www.zengin-net.jp/zengin_system/member/index.html
[15] Fireblocks. "Fireblocks Flow: accept across any wallet." August 28, 2026. https://www.fireblocks.com/blog/fireblocks-flow-accept-across-any-wallet
[16] Fireblocks. "The Fireblocks Network for Payments is here." September 4, 2025, source of the $200 billion monthly figure. https://www.fireblocks.com/blog/the-fireblocks-network-for-payments-is-here
[17] RWA.xyz. Tokenized stocks tracker, retrieved August 28, 2026. https://app.rwa.xyz/stocks
[18] SIFMA. Research Quarterly, Equity and Related, 2Q26 US listed market capitalization. https://www.sifma.org/research/statistics/research-quarterly-equity-and-related
[19] JPMorgan Chase. "JPMorgan Chase celebrates 75th anniversary of the ADR." https://jpmorganchaseco.gcs-web.com/news-releases/news-release-details/jpmorgan-chase-celebrates-75th-anniversary-adr
[20] US Securities and Exchange Commission. Description of American Depositary Shares, deposit agreement termination and suspension provisions. https://www.sec.gov/Archives/edgar/data/314590/000104746919005924/a2239924zex-2_2.htm