FRM Exam Part II · Tokenization and Financial Market Inefficiencies

Risks and Challenges of Tokenization for FRM Part II

Updated 11 October 2026 · Fact-checked

Tokenization puts claims on assets onto a shared ledger. Its main risks are smart contract flaws, cyber attacks, fragmented liquidity, poor interoperability, legal uncertainty over ownership and settlement, and leverage that speeds up runs. To answer, name the risk, give the channel, and state the systemic effect.

Understand Risks and Challenges of Tokenization

A token is a digital record on a distributed ledger that represents a claim on an asset, such as a bond, a fund share or a deposit. Tokenization aims to cut frictions: settlement can be near-instant, and rules can be coded into smart contracts, which are programs that run automatically when conditions are met. The same features create new risks. You must be able to say which feature causes which risk.

Smart contract risk comes from code. A bug, a flawed design or a bad oracle (the data feed that tells the contract a price or an event) can trigger wrong payments. Code executes as written, not as intended. Errors can be fast, hard to reverse and copied across every platform using the same code. Cyber risk adds theft of private keys, attacks on wallets, bridges and exchanges, and compromise of the platform operator. A stolen key can mean a lost asset with no easy recovery.

Liquidity fragmentation happens when tokenized assets sit on many separate platforms or chains that do not connect. Each pool of buyers and sellers is small, so spreads widen and prices differ across venues. Interoperability is the ability of platforms to work together. Poor interoperability leaves assets stuck, and bridges used to move tokens become weak points. Tokenizing an asset does not make an illiquid asset liquid. The underlying asset is still as illiquid as before.

Legal uncertainty is a major challenge. Questions include: does the token give legal title to the asset or only a claim on an issuer? Which law applies across borders? Is on-chain settlement final in law? How does insolvency treat tokens held by a custodian? Unclear answers raise credit and operational risk. Regulatory treatment may also differ by jurisdiction, which invites arbitrage.

Leverage and run dynamics link tokenization to financial stability. Programmable collateral and instant settlement make it cheap to re-use assets and add leverage. Automatic margin calls and liquidations can fire together, which forces sales and pushes prices down. Tokens that promise redemption at par, such as stablecoins, face runs if reserves are doubted. Speed means a run can finish before authorities can act. Concentration in a few platforms, cloud providers or validators adds common-point failure.

How to solve Risks and Challenges of Tokenization questions

Use the same sequence for any scenario question on tokenization risks. It keeps you from picking an answer that is true in general but wrong for the case.

1Read the scenario and identify the feature at work: code, ledger, platform, bridge, legal wrapper, redemption promise or leverage.
2Classify the risk: smart contract or technology risk, cyber risk, liquidity or fragmentation risk, interoperability risk, legal or regulatory risk, or leverage and run risk.
3Trace the channel: how the feature turns into a loss, such as a bug triggering wrong payouts or a bridge hack locking assets.
4Check whether the risk is firm-specific or systemic. Look for common code, common platforms, correlated collateral and fast runs.
5Separate the token from the underlying asset. Ask whether the asset's own credit, market or liquidity risk is unchanged.
6Match the mitigant to the risk: audits and formal verification for code, key management for cyber, standards for interoperability, legal clarity for title and finality, haircuts, limits and reserve rules for runs.
7Eliminate options that overclaim, such as saying tokenization removes a risk entirely, then choose the most precise answer.

Quickest way: Feature-to-risk matching

When to use it: Use this when a question gives four plausible risks and you have under a minute.

Underline the trigger word: bug or code, hack or key, many platforms, cannot transfer, ownership or court, redemption or margin.
Map it: bug or code to smart contract risk; hack or key to cyber risk; many platforms to fragmentation; cannot transfer to interoperability; ownership or court to legal risk; redemption or margin to run and leverage risk.
Pick the option that names the channel, not just the label.
Reject any option claiming tokenization eliminates intermediaries' risks or guarantees liquidity.

Common mistakes in Risks and Challenges of Tokenization

Assuming tokenization makes an asset liquid.
Faster settlement and 24-hour trading sound like liquidity.
Fix: Remember that liquidity depends on buyers, sellers and the underlying asset. Fragmented venues can make tokenized markets thinner.
Treating smart contract risk as the same as cyber risk.
Both involve technology and both can cause loss of funds.
Fix: Smart contract risk is a flaw in code that works as written. Cyber risk is an attacker, such as key theft or a bridge hack. A hack can exploit a bug, but name the root cause the question points to.
Assuming a token gives legal ownership of the underlying asset.
The token looks like a title deed.
Fix: Check the legal wrapper. A token may only be a claim on an issuer. Ownership, finality and insolvency treatment depend on law, which can vary by jurisdiction.
Ignoring systemic effects and describing only firm-level loss.
Candidates focus on a single hack or bug.
Fix: Add the spread channels: shared code, shared platforms, common collateral, automatic liquidations and fast runs.
Saying atomic settlement removes all counterparty risk.
Atomic settlement removes settlement timing risk between legs, so the claim is overextended.
Fix: State that it reduces settlement risk. Issuer credit risk, custody risk, legal risk and operational risk remain.

Worked examples

Example 1

A tokenized money market fund pays out redemptions through a smart contract that reads the fund's net asset value from a single price feed. A feed error overstates the NAV by 3%, and the contract pays out at the wrong value before anyone intervenes. Which risk is the primary cause of the loss, and what is the best mitigant? A) Liquidity fragmentation; wider spreads B) Smart contract and oracle risk; independent data feeds with controls such as pause mechanisms and code audits C) Legal uncertainty; a clearer insolvency regime D) Interoperability risk; a common bridge standard

Show the solution

Identify the feature: automatic payout driven by an external data feed.
Classify the risk: a wrong input made the code execute a wrong payment, so this is smart contract and oracle risk.
Trace the channel: no human check, instant execution, so the error is paid out before it can be reversed.
Check the options: A concerns many venues, C concerns ownership and courts, D concerns moving tokens between platforms. None match the trigger.
Match the mitigant: multiple independent feeds, sanity checks, circuit breakers and audits address the cause.

Answer: B

Example 2

A regulator warns that tokenized collateral could raise systemic risk. Which statement best explains how? A) Instant settlement removes all counterparty exposure, so firms hold less capital B) Programmable collateral and automatic margin calls can trigger simultaneous liquidations, and common platforms spread the shock quickly C) Tokenized assets always trade at higher liquidity, so prices become more stable D) Legal uncertainty disappears once collateral is on a ledger

Show the solution

Identify the topic: leverage and run dynamics.
Test A: atomic settlement reduces settlement risk but not all counterparty exposure, so A overclaims.
Test C: tokenization does not guarantee liquidity, and fragmentation can reduce it, so C is wrong.
Test D: legal title and finality still depend on law, so D is wrong.
Test B: cheap re-use of collateral raises leverage, coded margin calls fire together, forced sales lower prices, and shared infrastructure speeds contagion. This is the systemic channel.

Answer: B

Exam tips

Expect scenario questions that describe a feature and ask you to name the risk or the mitigant. Practise the feature-to-risk mapping until it is automatic.
Watch for absolute words like always, eliminates and removes. They usually mark the wrong option.
Keep the token and the underlying asset separate. Many wrong answers confuse a technology benefit with a change in the asset's own risk.
For systemic questions, look for speed, common code or platforms, correlated collateral and run behaviour.
Know the link to current issues: concentration in ICT and cloud providers and digital resilience come up in the same reading group.

Practice questions from Tokenization and Financial Market Inefficiencies

Risks and Challenges of Tokenization: frequently asked questions

What is smart contract risk in tokenized assets?

It is the risk that code contains a flaw, a bad design or a faulty data input, so the contract executes in a way nobody intended. Execution is automatic and often irreversible, and the same code may be used on many platforms. Audits, testing and pause controls reduce it.

What is liquidity fragmentation in tokenized markets?

It means trading is split across many platforms or chains that do not connect well. Each venue has fewer participants, so spreads widen and prices can differ. Tokenization alone does not fix the illiquidity of the underlying asset.

What are the main legal challenges of tokenization?

The main questions are whether the token gives legal title or only a claim on an issuer, which jurisdiction's law applies, whether on-chain settlement is legally final, and how tokens are treated if a custodian or issuer becomes insolvent. Rules can differ across countries, which creates uncertainty and arbitrage.

How can tokenization increase systemic risk?

It can speed up leverage build-up and runs. Programmable collateral and automatic liquidations can trigger together, and common platforms, code and service providers spread shocks fast. Redemption promises at par, as with some stablecoins, can lead to rapid runs if reserves are doubted.