Cardano just added the kind of token controls Wall Street wants and DeFi may hate

Cardano’s newly proposed programmable-token standard introduces functionality that could allow a freeze on a single asset to temporarily block unrelated tokens located within the same transaction output.

Merged into Cardano’s main improvement-proposal repository on Sept. 29, CIP-113 aims to incorporate issuer-controlled transfer rules directly into native assets while preserving the network’s extended unspent transaction output (eUTXO) architecture.

The Cardano Foundation promotes these programmable tokens as essential infrastructure for regulated financial products, such as real-world assets, securities, and stablecoins that often demand compliance controls, freezes, and transfer restrictions.

Consequently, while this framework enhances Cardano’s appeal to institutional issuers, it simultaneously creates new operational dependencies for decentralized finance (DeFi) applications and wallets whenever multiple assets are bundled into a shared output.

That being said, the milestone has not yet reached full activation. The official CIP-113 page continues to designate the proposal as “Proposed,” noting that its progression to Active status depends upon mainnet and Preview issuance, thorough end-to-end testing, and adoption by a widely used wallet.

Even so, Matteo Coppola, a contributor to CIP-113 and the CEO of Fluid Tokens, celebrated the milestone by pointing out that the merge represents the culmination of years of development and places the new framework directly into the hands of Cardano builders.

“This means the official standard for programmable tokens on Cardano, including securities, is out,” Coppola stated, adding that contributors worked diligently to ensure the framework is production-ready.

Compliance rules can spill across a shared output

However, this institutional-grade flexibility introduces a structural complication: on Cardano, the operational rules governing a single programmable token can directly impact other assets bundled alongside it.

Due to the eUTXO model, a transaction output may hold several distinct tokens alongside ADA. Because spending an output consumes it entirely as a single unit, a restriction linked to one programmable asset can ultimately dictate whether the entire transaction succeeds.

For instance, if a single output holds ADA, an unrelated token B, and a restricted token A, any denylist or freeze rule targeting asset A can prevent the user from spending that output to transfer token B. While neither the ADA nor token B has been independently frozen, both become temporarily inaccessible simply because they share an output with token A.

To address this, CIP-113 introduces a restructuring mechanism known as “unfracking” to help break such dependencies.

This process allows a specific token policy to be isolated from the remainder of an output without altering ownership. Assuming the transaction is authorized, token A can be moved into its own dedicated output, leaving token B in a separate output controlled by the same user. While token A remains restricted, token B is no longer subjected to token A’s transfer restrictions during subsequent spending.

Crucially, the holder does not possess unilateral control over this asset separation.

Executing an unfracking transaction requires both the holder’s authorization and compliance with the affected token’s registered separation guidelines. These rules may demand an extra signature, enforce specific script conditions, or block the restructuring process entirely.

As a result, a holder cannot always free unrelated assets merely by signing a transaction. If token policies for asset A prohibit separation, the ADA and token B bundled with it may stay inaccessible until those conditions are modified.

The proposal carefully distinguishes this type of temporary blockage from actual asset seizure. An issuer’s control over token A does not grant ownership over token B or other assets within the same output, and the reference implementation is built to safeguard balances belonging to unrelated token policies during authorized third-party actions.

For DeFi protocols and wallets, the practical takeaway is that mere asset ownership may no longer guarantee immediate spendability. The specific grouping of tokens inside an output, alongside the separation permissions permitted by each policy, transforms into a distinct risk factor when holding or accepting those assets.

Wallets and DeFi protocols inherit the design risk

Mitigating this dependency for wallets and DeFi protocols may necessitate altering how assets are packaged prior to the activation of any restriction.

Although the CIP-113 reference implementation advocates for single-policy outputs as the ideal construction, the validator does not strictly mandate developers to use them. Keeping programmable assets isolated limits the risk that one issuer’s regulatory action might restrict an unrelated token from moving.

ADA remains vulnerable to this exact constraint. Because Cardano outputs carrying tokens also hold ADA, a portion of the native network asset can become temporarily blocked when sharing an output with a restricted programmable token.

This dynamic increases friction for wallets. A visible user balance may reflect total ownership without indicating what is immediately spendable. Applications supporting CIP-113 will likely need to monitor which policies share a specific output, evaluate current permissions on each asset, and determine whether a blocked token can be successfully separated.

For lending protocols, this introduces a serious collateral-management risk.

Any decentralized finance platform accepting a programmable token must evaluate whether the issuer holds the power to freeze transfers, whether the protocol itself can authorize asset separation, and whether these controls might interfere with liquidations or withdrawals. A sudden compliance restriction during a market downturn could prove deeply damaging if a lender finds itself unable to move collateral to close out an undersecured position.

These challenges grow increasingly pressing as Cardano works to expand its stablecoin and tokenized-asset ecosystem. The introduction of USDCx—backed one-for-one by USDC via Circle’s xReserve infrastructure—has already brought additional dollar liquidity to the network.

While CIP-113 could further expand this market by delivering the compliance mechanisms demanded by regulated securities, stablecoins, and tokenized assets while preserving Cardano’s native asset model, the compromise is clear.

Wallets and DeFi protocols may be forced to treat an asset’s unique permission structure as an additional layer of financial risk.

In response, wallet developers could choose to segregate programmable policies by default, whereas lending protocols might apply tighter parameters, lower collateral valuations, or outright reject tokens whose separation and freeze rules introduce uncertainty around liquidations.

Ultimately, attention shifts to the first production integrations. As various projects implement CIP-113, their choices regarding issuer permissions and output design will dictate whether regulated assets can cleanly integrate into Cardano DeFi markets or if protocols must begin pricing in the risk that compliance actions could restrict access to collateral precisely when it is needed most.

?Frequently Asked Questions

01What is CIP-113 on Cardano?

CIP-113 is an improvement proposal merged into Cardano’s repository that introduces a programmable-token standard with issuer-controlled transfer rules, such as freezes and compliance checks, while maintaining the eUTXO model.

02How do compliance rules affect unrelated tokens?

Because multiple tokens and ADA can share a single transaction output, a freeze on one programmable asset can temporarily block the transfer of other unrelated assets contained within that exact same output.

03What is “unfracking”?

Unfracking is a restructuring mechanism provided by CIP-113 that allows a restricted token policy to be separated from other assets in an output without changing ownership, provided the action satisfies registered separation rules.

04Why does this matter for DeFi and wallets?

DeFi protocols and wallets must account for permission structures and output groupings as financial risks, since collateral could potentially become locked and unspendable during market downturns if an issuer triggers a compliance freeze.