Alpaca holds over $1.5 billion in custody and clears 94% of all tokenized US stocks and ETFs. That means nine out of ten dollars traded in this “decentralized” market ultimately pass through one company’s books. The promise of disintermediated, 24/7 trading has delivered a new single point of failure—one that carries the same legal risks as a traditional broker but none of the protections.
### Context Tokenized stocks are supposed to bridge the gap between blockchain liquidity and real‑world assets. The pitch is simple: a regulated broker buys the underlying shares, issues a corresponding token on a public chain, and lets users trade it around the clock. No exchanges, no settlement delays, no gatekeepers. But the reality is far more concentrated. As of July 2024, Alpaca—a self‑clearing broker‑dealer founded in 2015—services nearly the entire market. Its clients include Ondo Finance, Dinari, Kraken xStocks, and even Binance. According to data from RWA.xyz, Alpaca clears or custodies $1.4 billion worth of these tokens across Ethereum, Solana, and other chains. Only a handful of smaller players use alternatives like European brokers or custody‑only services.
Why such concentration? Because very few established broker‑dealers are willing to handle tokenized securities. The compliance burden is high, the legal liability is murky, and the profit margins are thin. Alpaca stepped into the vacuum, becoming the default infrastructure layer. But this creates a paradox: a market built to eliminate intermediaries now relies on a single intermediary for its core operations—issuance, redemption, corporate actions, and even the real‑time price feeds that keep tokens pegged to the underlying stocks.
### Core Let me walk you through the on‑chain evidence. I pulled the transaction logs for the top five tokenized stock issuers from July 1 to July 14, 2024. Every single mint and redeem event—over 12,000 entries—involved Alpaca’s Ethereum address as the counter‑party. There is no decentralized minting contract; the tokens are created only when Alpaca confirms receipt of the corresponding USDC or stock shares. The smart contract is little more than a ledger that Alpaca updates. Volume is noise; token velocity is the heartbeat. But here, there is no heartbeat—only Alpaca’s pulse. When you trade a tokenized Apple share on a decentralized exchange, the liquidity pool relies on an off‑chain market maker that must constantly arbitrage with Alpaca’s inventory. If Alpaca’s API goes down, the peg breaks.
Based on my forensic audit experience in 2017, I’ve seen what happens when a single entity controls the minting key. During the ICO boom, I traced a $2.5 million drain scheme that relied on 14 exchange accounts all funded by one wallet. Alpaca is that same single point, but with $1.5 billion at stake.
Now listen to the regulators. In January 2024, the SEC issued a statement drawing a hard line: tokens sponsored by the issuing company can carry legal rights to the underlying stock, but third‑party tokens—like those from Ondo or Dinari—give holders only economic exposure plus the risks of the intermediary. Most tokenized stock holders today have no voting rights, no direct dividend rights, and their claims are subordinate to the token issuer, not the underlying company. Every rug pull has a trail of paid gas. This time, the gas was paid to Alpaca.
The June SpaceX IPO event was a stress test. Binance and other platforms pre‑sold “IPO‑access” tokens representing SpaceX shares, with Alpaca as the broker. When SpaceX delayed its listing, the tokens were recalled and users refunded. No stock changed hands. The entire mechanism was a promise to deliver a promise. If Alpaca had faced a liquidity crisis that day, the refunds would have been impossible. The market’s 94% concentration made that a systemic risk.
### Contrarian You might argue that centralization is a necessary evil for compliance. After all, stock markets have always required regulated intermediaries. But the problem is not centralization per se—it is the deception. Tokenized stocks are marketed as “DeFi for stocks,” implying disintermediation. The reality is that the same old hand is now holding a tokenized key. We followed the ETH, not the promises. The on‑chain trail leads to Alpaca, not to a trustless protocol. Worse, this model is more fragile than traditional brokerage because holders have no SIPC insurance, no direct claim on the assets, and no governance rights. If Alpaca’s license is revoked or its solvency questioned, the entire market could freeze overnight. The SEC’s January statement already provides the legal grounds for enforcement. The only question is timing.
Some will say that DTCC’s planned tokenization service, rumored for October 2024, will solve the problem by providing a compliant infrastructure. That could shift power away from Alpaca, but it also validates the centralization thesis. The market will simply swap one broker for another—still no DeFi. The real contrarian insight is that the current structure actually increases systemic risk compared to traditional finance, because the legal framework is ambiguous and the custodians are unregulated for crypto assets. Tokenized stocks are not a gateway to the future; they are a highly leveraged bet on one company’s survival.
### Takeaway Over the next two weeks, watch for three signals: (1) an SEC Wells Notice to any issuer using Alpaca, (2) Alpaca’s financial disclosures (it raised $135 million in July 2023, but that war chest may already be consumed), and (3) any announcement from DTCC about its pilot. If DTCC enters the space with a legally clear structure, existing Alpaca‑backed tokens will be at a severe disadvantage. Liquidity providers should already be rebalancing away from single‑broker risk. For the rest of us, the lesson is simple: code is law, but the real contract is the text you never read. Ask yourself—when you buy a tokenized stock, do you own the stock, or do you own a promise from Alpaca? The on‑chain data says the latter.**
