A production RWA deployment is not one smart contract — it's a stack of ~10 providers working together. Custody holds keys. Compliance verifies investors. Oracles push valuations. Settlement moves money. Cross-chain moves the token. Automation triggers rebalances. Funders provide capital. If any layer breaks, the whole workflow does.
This page maps every provider category and names the specific companies / protocols in each. Contracts in this repo integrate with a subset of these directly (marked Integrated) or through documented design contracts (marked Design contract). The rest are named so you know what to reach for when a deal pulls that need.
Live connection state of the local / self-hosted stack the library ships against. These are the tools Unykorn Studio drives from a local workstation — custody hand-off (BitGo), IPFS pinning (Helia), local EVM (Anvil), static analysis (Slither), and the agent LLM router (Ollama). Status pill reflects the last runtime probe.
OCC-chartered qualified custody for signing hand-off. Studio's sign_external and bitgo_wallet_create step kinds terminate here. See custody section for full profile.
To connect: set BITGO_ACCESS_TOKEN + BITGO_ENVIRONMENT + BITGO_ENTERPRISE_ID in Studio's .env, then run pnpm run bitgo:ping.
Content-addressed storage for compile artifacts, LPS-1 provenance receipts, offering document PDFs, and off-chain evidence bundles referenced by contract hashes (mortgage note hash, deed hash, UCC-1 filing hash). Helia is the modular JS/TS successor to js-ipfs — sovereign, embeddable in the Studio process, no Kubo daemon required.
To connect: pnpm add helia @helia/unixfs, initialize on Studio boot, expose via
/api/ipfs/pin. Falls back to
Kubo node at
http://127.0.0.1:5001 if configured.
Foundry's local EVM test chain. Studio's deploy_local step kind targets Anvil at http://127.0.0.1:8545 with chain id 31337. Every contract in this library ships against Anvil first, then graduates to a testnet / mainnet deployment through sign_external.
To connect: anvil --host 127.0.0.1 --port 8545 --chain-id 31337. Studio auto-detects. Version pinned via foundryup.
Static analyzer for Solidity. Studio's pre-deploy quality gate runs Slither over the compiled sources and refuses deploy_local / sign_external if any high-severity finding surfaces. Required before mainnet deployment; recommended before every testnet push.
To install: pipx install slither-analyzer (requires Python 3.10+). Studio auto-detects slither on $PATH.
Local LLM runtime for Studio's intent compiler and tier classifier. Runs the deal-parsing + capability-matching + risk-tiering models without leaving the workstation — sovereign by construction, no OpenAI/Anthropic dependency for the routing layer. Cognitive Router upstream (see Finn Provider Layer memory) picks between Ollama, Anthropic, and Google based on TaskClass × Policy.
To connect: ollama serve at http://127.0.0.1:11434. Preload a coding-capable model: ollama pull qwen2.5-coder:14b (or deepseek-coder-v2, llama3.1). Studio's OLLAMA_HOST env defaults to the local endpoint.
Why local-first for these five
Each of these lives on the workstation, not in a hosted service. The design rationale is the same across the stack: the operator does not need to trust an external SaaS for any step in the deploy chain. Custody hand-off is signed on hardware controlled by the operator (BitGo Enterprise). Compile artifacts and offering-document evidence are content-addressed on IPFS via a local Helia node. Test chains run in-process (Anvil). Security analysis runs on the operator's disk (Slither). Even the routing / intent-compilation LLM runs locally (Ollama) — with hosted providers as an opt-in upgrade, not a default.
This is the same "sovereign infrastructure" pattern the Finn Cognitive Layer and Sovereign Infrastructure v2.0 build established: durable local state, no unexplained network calls, every dependency reproducible from source.
Non-custodial by design — our contracts never hold private keys. But every real deployment needs a qualified custodian holding the operational wallets. Studio's sign_external step kind is the abstract hand-off point.
Primary custody stack for the UnyKorn / LDX ecosystem. OCC-chartered qualified custody with per-tenant enterprise profiles, m-of-n multisig cold storage, webhook-triggered sweeps, spend-approver hierarchies with velocity limits, and mandatory Video ID above configurable thresholds. Every SPV in the LDX book (M Helen Hotel, Water Park at Helen, Miguel Alexandrite Gem, etc.) sits as an isolated child enterprise profile under the UNYKORN 7777 INC master account.
| Studio step kinds | bitgo_wallet_create · sign_external (both IRREVERSIBLE in gate policy) |
|---|
| Env vars (planned) | BITGO_ACCESS_TOKEN · BITGO_ENVIRONMENT (prod|test) · BITGO_ENTERPRISE_ID |
|---|
| Reference | bitgo.com · Kevan's UnyKorn BitGo Bot at scratch/unykorn-bitgo-bot/ |
|---|
Alternative qualified custodian, federally-chartered. Used by Goldfinch Prime as the qualified custodian for its institutional wrapper. Best fit when a deal counterparty requires an established federal-charter custodian and BitGo isn't already in their diligence stack.
| Integration path | Same sign_external step kind; adapter is a separate file — anchorage-adapter.ts sibling to bitgo-adapter.ts. |
|---|
MPC-based enterprise wallet infrastructure. Widely used across institutional DeFi flows including Maple Pool Delegate operations and Ondo's fund administration. Especially strong on policy-engine granularity (rate limits, whitelisted destinations, workflow approvals).
Additional qualified custodians used by different investor bases. Fidelity dominant with US traditional asset managers. Coinbase Custody dominant with crypto-native funds. Standard Custody (a subsidiary of PolySign) used by structured-credit issuers. Adapter is the same shape as BitGo — the sign_external step kind is agnostic.
Compliance layers separate cleanly into three tiers: identity providers (raw KYC), on-chain claim registries (identity → chain), and AML monitoring (post-transfer surveillance).
Bridges verified off-chain identity data to on-chain smart contracts. "Write Once, Read Many" reusable identity — a user verifies once with a trusted provider, receives a portable cryptographic credential, any whitelisted dApp can instantly query it. Cross-Chain Identity (CCID) means verification on Ethereum carries to Arbitrum without re-verification. Plug-and-play with ERC-3643 (works directly with our PermissionedToken shape).
| Our integration path | Replace the direct IdentityRegistry.eligibleFor() call in PermissionedToken with an ACE credential lookup. Or keep both, using ACE as an alternative issuer for the same claim topics. |
|---|
Open standard from the Tokeny T-REX suite for on-chain identity. Each investor deploys an OnChainID contract; trusted issuers write signed claims to it. Portable across issuers — same investor identity carries across every ERC-3643 issuance they participate in.
| When to use | When the same investor base holds multiple UnyKorn issuances. For a single-issuer SPV, our direct IdentityRegistry pattern is simpler; ONCHAINID becomes worth the added complexity at the 2nd or 3rd issuance. |
|---|
General-purpose RWA issuance and transfer-agent platform. Used by BlackRock BUIDL, Apollo tokenized credit fund, Goldfinch Prime. When a US-domestic offering needs an SEC-registered transfer agent of record, Securitize is the market default.
| Integration model | Deploy our PermissionedToken (ERC-3643 shape) in parallel with a Securitize-registered offering. Studio's compile + deploy receipts sit alongside Securitize's legal records. |
|---|
Standard KYC providers whose attestations feed the on-chain registries above. Persona, Onfido, Jumio, Trulioo, Sumsub, iComply. Each has different geographic coverage, doc-verification quality, and per-verification pricing.
Post-transfer surveillance for sanctioned addresses and suspicious flow patterns. Chainalysis (KYT — Know Your Transaction), TRM Labs, Elliptic. Typical integration: pre-transfer hook that queries the provider's REST API before allowing a large or new-counterparty transfer through.
Privacy-preserving oracle using Zero-Knowledge Proofs. Investors cryptographically prove facts ("I am an accredited investor," "I hold X assets at Y broker") from a web session without exposing the underlying PII to oracle nodes or the public ledger. When it launches publicly, DECO becomes the preferred identity primitive for privacy-sensitive claims — cleaner than exposing claim booleans on-chain.
Decentralized oracle networks for market data. Data Feeds for standard rate/price data (SOFR, LIBOR, gold spot, FX). Data Streams for high-frequency sub-second updates needed for complex trading products.
| Our integration | RWAOracle.sol — safety-guarded AggregatorV3 consumer |
|---|
| Live feeds directory | data.chain.link/feeds |
|---|
Continuous cryptographic verification of off-chain reserves. Replaces quarterly PDF attestations with automated feed updates on deviation or heartbeat thresholds. Wired into token mint paths as a circuit breaker.
Embeds fund NAV, AUM, and reserve status directly into token metadata so it travels with the token wherever it moves on-chain. Complements PoR (reserve solvency) with valuation data (worth per share).
| Best pairing | TokenizedTreasury's NAV per share comes from a SmartData feed in production |
|---|
Pyth Network (pull-based, high-frequency, publisher-first), RedStone (modular data with custom feeds), API3 (first-party oracles from data providers themselves), Umbrella Network. Each has different security assumptions and price points. Our RWAOracle wrapper's AggregatorV3-shape interface adapts cleanly to any of them via provider-specific adapter contracts.
The unit of settlement inside our contracts. Every distribution, subscription, and redemption is denominated in one of these.
Circle's regulated stablecoin. Available on Ethereum, Polygon, Base, Arbitrum, Optimism, Avalanche, Solana, and more. First choice for institutional flows — MiCA-compliant in Europe, transparent monthly attestations, redemption to fiat at Circle Mint.
Largest stablecoin by volume. Preferred by non-US and Asia-Pacific counterparties, and by any deal where the counterparty's existing USDT liquidity is already in place.
UnyKorn's own stablecoin (issuer: GBYLA6VHX4UWIFEEC2KAOJK57RUKIR2CKO7TGVRDWMG2A3B2W4ZHJEPI on Stellar). Single-sig, fully controlled. Used for UnyKorn-native settlement flows where the counterparty is inside the stack.
Newer regulated stablecoins from established payment companies. PYUSD is available on Ethereum + Solana; RLUSD launched late 2024 with focus on cross-border settlement. When a deal specifically requires one of these (regulatory-driven preference), swap it in for USDC by changing one address in the deploy config.
Universal messaging + burn-and-mint transfer layer. 70+ chains. Programmable transfers can bundle tokens + data + instructions atomically. First choice for institutional flows because of the Swift/UBS/ANZ pilots and the risk-management architecture.
Alternative cross-chain messaging protocols. LayerZero has the widest chain coverage and lowest fee tier for high-volume routes. Wormhole dominant in the Solana ecosystem. Axelar strong on Cosmos-EVM bridges. Same integration shape as CCIP — a burn-and-mint token contract with per-provider adapter, peer whitelist per destination chain.
Decentralized keeper network for triggering time- or condition-based on-chain actions. Rebalances the CashManagementVault when reserves drift, triggers TokenizedTreasury NAV updates at market close, rolls over InvoiceFactoringPool invoices at maturity. Alternative to running your own crontab-driven bot with a hot wallet.
All-in-one orchestration for the full Chainlink stack — Data Feeds + PoR + ACE + CCIP composed into unified workflows. Reduces a 5-integration deployment to one workflow definition. Once CRE APIs stabilize, becomes the natural upstream orchestrator for Studio's plan executor.
Post-deploy monitoring, alerting, and administrative automation. OZ Defender for proposal-based multisig ops. Forta for real-time transaction risk monitoring. Tenderly for simulated-execution debugging + Web3 Actions for scheduled tasks. Studio does not replace these — they run alongside for the runtime observability layer.
Named counterparties whose capital sits behind the tokenized RWA market as of 2026. Presence here does not imply a UnyKorn relationship — this is the landscape.
BlackRock (BUIDL tokenized Treasury fund, integrated with UniswapX). Franklin Templeton (BENJI tokenized MMF, 5 tokenized ETFs with Ondo). Apollo (tokenized credit fund via Securitize + Figure mortgage integration). Janus Henderson ($880.7M JTRSY on Centrifuge). State Street (institutional tokenization pilots). Fidelity (Fidelity Digital Assets institutional custody + tokenized fund pilots).
Swift (CCIP pilot with UBS for tokenized fund subscription automation). UBS Asset Management, ANZ Bank, HSBC, Standard Chartered, DBS, SBI Digital Markets, Ant Group. Canton Network consortium: DTCC, LSEG, Euroclear, Tradeweb, Citadel Securities, Societe Generale. Carbonplace settlement consortium (BNP Paribas, CIBC, Itaú, NatWest, NAB, Standard Chartered, SMBC, UBS).
LD Capital / The Loan Depot Lending Co. Inc. — commercial debt + REIT securitization platform led by Niraj Sheth. M Helen Hotel LLC SPV — reference construction-draw deployment ($25M senior + $4.1M mezz). Water Park at Helen SPV — child SPV under M Helen structure. UnyKorn 7777 INC — Delaware parent holding IP and BitGo enterprise accounts.
Institutional credit managers underwriting on-chain private-credit pools. The Pool Delegate pattern on Maple and the issuer / senior-capital partner pattern on Centrifuge both map to roles our contract library already ships (PoolDelegatePool · BridgeLoanTranchePool). Below is per-firm coverage of the largest active credit managers and the senior-capital providers behind them.
Institutional credit fund; one of the most prominent operators bridging traditional corporate debt with on-chain stablecoin liquidity. Operates simultaneously as a Pool Delegate on Maple Finance and as an asset originator on Centrifuge. Was among Maple's early institutional customers during the 2021-2022 low-collateral phase and transitioned alongside Maple into the overcollateralized RWA-backed model after the 2022 restructuring.
| On Maple — role | Pool Delegate managing structured-credit vehicles for a mix of investment-grade and non-investment-grade corporate borrowers. Collateral is real-world assets, specifically receivables and equipment (not crypto). |
|---|
| On Maple — underwriting | Off-chain due diligence on borrower balance-sheet resiliency, liquid reserves, historical default rates, cash-flow timelines, operational sophistication. Negotiates pool-level LTV limits, minimum interest rates, collection tenors, collateral buffers. Not algorithmic — professional credit officer role. |
|---|
| On Maple — first-loss capital | Deposits own funds into the junior/first-loss tranche. Typically 2-10% of pool NAV. Absorbs writedowns before senior lenders take any loss. Compensated with leveraged variable yield: after senior fixed rate is paid, all residual cash flows overflow into the junior tranche. |
|---|
| On Centrifuge — scale | Oct 2022: first institutional credit fund to bring collateralized lending operations on-chain at massive scale. Funded $220M of real-world assets through Centrifuge pools, backed by $150M in senior capital from MakerDAO (see below). |
|---|
| On Centrifuge — mechanism | Holds junior equity tranche (Centrifuge's "TIN" tokens). Same first-loss structure — TIN absorbs writedowns before "DROP" (senior tranche) is touched. This is the exact pattern our BridgeLoanTranchePool ships (originator retains junior, on-chain investors buy senior). |
|---|
| Our contract match |
- PoolDelegatePool — same shape as BlockTower's Maple vehicles (whitelisted lenders, Pool Delegate underwrites, first-loss tranche, per-borrower concentration cap, cooldown redemptions)
- BridgeLoanTranchePool — same shape as BlockTower's Centrifuge originations (senior fixed APY + junior first-loss, ongoing origination, senior tranche freely transferable so it composes with Sky protocol for USDS collateral)
|
|---|
| Reference | blocktower.com |
|---|
Institutional credit manager operating as a Pool Delegate on Maple. Same operational shape as BlockTower — off-chain credit underwriting of corporate borrowers, first-loss capital posted, pool-level LTV / tenor / concentration limits set by the delegate. Different borrower book and risk appetite from BlockTower.
| Our contract match | PoolDelegatePool — assign Room40's operating address to POOL_DELEGATE role; whitelist their target lender base via LP_WHITELIST |
|---|
Credit manager operating as a Pool Delegate on Maple, focused on retail-facing yield distribution wrapped around institutional pool exposure. Also participates in the crypto-native institutional credit ecosystem more broadly.
| Our contract match | PoolDelegatePool for the pool itself · retail wrappers layer on top (analogous to Maple's syrupUSDC / syrupUSDG pattern) |
|---|
Not a Pool Delegate — instead, the largest on-chain senior capital provider into RWA credit pools. MakerDAO (rebranded Sky in 2024) mints USDS (formerly DAI) stablecoin against real-world-asset collateral posted by originators. This is the mechanism that made Centrifuge's private-credit book viable at scale: the originator retains the junior tranche as first-loss, on-chain investors buy some senior, and Sky lends USDS against the rest of the senior tranche via its RWA vault system.
| Scale of participation | Provided $150M in senior capital backing BlockTower's $220M Centrifuge origination in Oct 2022. Priority investor across many Centrifuge pools including real-estate bridge loans, structured credit, and accounts receivable. Historically funded 85%+ of Centrifuge-originated loans this way. |
|---|
| Mechanism | Originator posts senior tranche token (e.g. Centrifuge DROP) as collateral in a Sky RWA vault → Sky mints USDS against it up to the vault's debt ceiling → originator uses USDS to fund borrowers → repayments retire the USDS + return the senior tranche to the originator. |
|---|
| Our contract match | BridgeLoanTranchePool's senior tranche is explicitly designed to be freely transferable so it composes with Sky protocol the same way Centrifuge DROP does. Any originator using our pool can deploy the senior tranche as Sky vault collateral without contract modifications. |
|---|
| Reference | sky.money · makerdao.com · Sky RWA vault framework |
|---|
Other on-chain credit venues where our contract shapes apply: Centrifuge (structured pools for trade finance, invoices, consumer credit — our InvoiceFactoringPool, BridgeLoanTranchePool, and InventoryFinancingSPV map to their three product surfaces). Goldfinch Prime (emerging-market debt via Securitize wrapper + Anchorage custody). Ondo Finance (tokenized bond funds — our TokenizedTreasury shape). Nori (soil carbon marketplace with on-chain retirement). Solid World (structured products on tokenized voluntary carbon).
Clearpool — permissioned lending pools with dynamic interest rates driven by pool utilization; institutional borrowers include Wintermute, Amber, Auros. TrueFi — one of the earliest on-chain lending protocols; pivoted to structured RWA products (TrueFi Capital Markets) with tokenized credit portfolios. Both use the same "curated pool + delegated underwriter + first-loss capital" pattern our PoolDelegatePool ships.
Robinhood (Robinhood Chain hosts Maple's syrupUSDG for Earn product). Kraken (Maple warehouse facility for OTC lending desk; Nasdaq+Kraken "equities transformation gateway"). Binance (tokenized stock trading via Ondo). OKX (ICE strategic investment for tokenized equity distribution). Public.com, Stripe Climate, Ripio, Neutral, Chipper Cash (all use Klima Infinity's permissionless retirement API for their carbon offset flows).
Foundry (canonical build + test framework — this repo is a Foundry project). Anvil (Foundry's local EVM test chain — Studio's deploy_local target). Hardhat (alternative build framework — supported via toolchain, not preferred). Etherscan / Sourcify (source verification against deployed bytecode; our compile settings with metadata.bytecodeHash: ipfs make verification straightforward). Tenderly (simulated execution + debugging).
No contract in this repo has been externally audited. Before any deployment holding real funds, pick one of: Trail of Bits, ConsenSys Diligence, OpenZeppelin, Sherlock (competitive audit), Code4rena (competitive audit), Spearbit, Halborn, Runtime Verification. Selection depends on capability complexity and budget.
Post-audit ongoing coverage: Immunefi or HackenProof bug bounty programs commensurate with TVL. Continuous static analysis via Slither and Mythril — no external dependency.
| Provider category | Status | Contract / Adapter |
|---|
| Chainlink Data Feeds | ✅ Integrated | RWAOracle.sol |
| Chainlink Proof of Reserve | ✅ Integrated | ProofOfReserveConsumer.sol |
| Chainlink CCIP | ✅ Integrated | CCIPBridgedToken.sol |
| Chainlink ACE | 🟠 Design | IEligibilityCheck interface hook in PermissionedToken/TokenizedTreasury |
| Chainlink SmartData | 🟠 Design | INAVOracle interface hook in TokenizedTreasury |
| Chainlink Automation | 🟠 Design | Keeper-triggered rebalance for CashManagementVault |
| Chainlink DECO | 🟠 Design (SDK gate) | Alternative privacy-preserving IEligibilityCheck impl |
| Chainlink CRE | 🟠 Design (API gate) | Upstream orchestrator for Studio's plan executor |
| BitGo Enterprise | 🟠 Design | Studio sign_external + bitgo_wallet_create step kinds |
| Anchorage / Fireblocks / Fidelity / Coinbase Custody | 🟠 Design | Adapter siblings to bitgo-adapter |
| Securitize (transfer agent) | 🟠 Design | Deploy alongside; no direct contract integration |
| ONCHAINID | 🟠 Design | Alternative IEligibilityCheck impl reading OnChainID contracts |
| Chainalysis / TRM Labs / Elliptic | 🟠 Design | Pre-transfer hook via off-chain API in Studio's compliance_check step |
| USDC / USDT (settlement) | ✅ Integrated | ChainConstants.sol · every deposit/subscribe/fund step |
| LayerZero / Wormhole / Axelar | 📌 Reference | Same adapter shape as CCIPBridgedToken |
| Pyth / RedStone / API3 | 📌 Reference | Same AggregatorV3-shape adapter as RWAOracle |
| Foundry | ✅ Integrated | This whole repo |
| Etherscan / Sourcify verification | 🟠 Design | Studio verify_source step kind (unwired) |
| BlockTower (Maple Pool Delegate + Centrifuge originator) | 📌 Reference shape | PoolDelegatePool.sol (Maple side) · BridgeLoanTranchePool.sol (Centrifuge side, senior tranche composes with Sky) |
| Room40 · AQRU · other Maple Pool Delegates | 📌 Reference shape | PoolDelegatePool.sol — assign delegate address to POOL_DELEGATE role |
| MakerDAO / Sky (senior capital via RWA vault) | 📌 Reference shape | BridgeLoanTranchePool.sol senior tranche freely-transferable so it composes with Sky RWA vaults for USDS collateralized borrow |
| Clearpool · TrueFi (institutional credit venues) | 📌 Reference shape | PoolDelegatePool.sol — same curated-pool + delegated-underwriter + first-loss pattern |
| BitGo Enterprise (runtime) | 🟠 not-connected | Set BITGO_ACCESS_TOKEN + BITGO_ENVIRONMENT + BITGO_ENTERPRISE_ID in Studio env |
| IPFS Helia (runtime) | 🟠 not-connected | Install helia + @helia/unixfs, expose /api/ipfs/pin in Studio |
| Anvil local EVM (runtime) | 🟠 not-connected | Start with anvil --host 127.0.0.1 --port 8545 --chain-id 31337 |
| Slither (runtime) | 🟠 not-installed | pipx install slither-analyzer |
| Ollama agent LLM (runtime) | 🟠 not-connected | ollama serve at 127.0.0.1:11434 + ollama pull qwen2.5-coder:14b |