Compliance moves into the settlement layer

For regulated issuers, the barrier to public-chain liquidity was never really technical. Custody solutions exist, wallet infrastructure exists, connectivity is a project plan. The barrier was legal: securities law requires the issuer to enforce who may hold and trade the asset, and on a public venue that enforcement lived somewhere other than the venue, in transfer-agent records and app-layer gates that a court would squint at.

On 22 July 2026 Uniswap Labs introduced Permissioned Pools, built on Uniswap v4, with Securitize, Superstate and the European digital securities platform Dowgo as launch partners. The mechanics are the point: before a trade or a liquidity deposit executes, the pool itself checks the wallet against the issuer's approval list. Eligible investors trade through the automated market maker (AMM); everyone else is refused at the pool, not at an app in front of it. The issuer keeps control of eligibility throughout.

Superstate chief executive Robert Leshner put the shift plainly: "Until now, compliance for tokenized securities lived at the app layer; a gate standing in front of the market. Permissioned Pools move those rules into the pool itself, so a regulated asset can tap real AMM liquidity without the issuer giving up the controls securities law requires." That's the precedent regulated issuers were missing: access to the depth and composability of crypto's most liquid spot venue on the same infrastructure everyone else uses, with the compliance perimeter enforced at settlement rather than bolted on above it. The gateway isn't a separate permissioned venue standing apart from the market; it's the market, with the rules moved inside.

The groundwork predates the launch. BlackRock's BUIDL became tradable on Uniswap in February 2026, and BlackRock disclosed an investment in UNI, the protocol's governance token, at the same time. What July adds is standardisation: a one-off listing became a reusable framework any issuer can adopt, without building separate trading infrastructure of its own. Nor is Uniswap alone in the pattern. Aave, the largest decentralised lender, launched Horizon as an institutional lending venue for tokenised assets this year; the protocols built for permissionless flow are converging on the same architecture, permissioned enforcement inside permissionless plumbing.

The honest caveat is depth. A permissioned pool's liquidity is only what eligible wallets bring to it, and every eligibility set fragments the market a little further. AMM depth inside the velvet rope isn't the open pool's depth, and for thinly held tokenised funds the early pools will be shallow, serving buy-side rebalancing between known holders rather than genuine price discovery. The mechanism matters as precedent before it matters as venue: it establishes that the controls and the liquidity can share one layer, and depth is then a distribution problem rather than a structural one.

For any institution holding tokenised funds, or planning an issuance, the compliance objection has narrowed from "we cannot touch public-chain venues" to "under which pool parameters would we." That's a different conversation, held with different people: the eligibility registry, the approved wallet set and the pool configuration become product decisions, and product documents that assumed OTC-only secondary liquidity deserve a re-read.

The structural pattern is the one to watch. Compliance for tokenised securities has been migrating down the stack for a decade: from paper registers to transfer agents, from transfer agents to application gates, and now from the application into the settlement layer itself. Each step down makes the enforcement harder to route around and the venue above it more generic. Whoever maintains the eligibility registry sits at the choke point where that migration ends, and in this design that party is the issuer, which is exactly where a securities regulator wants the control to sit. The venues, in the end, become interchangeable; the registry doesn't.