The Cardano Foundation announced on October 7, 2026 that its CIP-0113 programmable token standard is live on mainnet after development with community contributors and multiple independent security audits. The standard allows issuers of selected regulated tokens—such as stablecoins, tokenized funds, bonds or shares—to bind compliance logic to the asset and have that logic checked when the asset is transferred, minted or burned.
This is a major market-structure and custody-control change. It is not a hack, and it is not an announcement that all Cardano funds can now be confiscated.
What the standard introduces
Cardano has long supported native assets. CIP-0113 adds configurable compliance behavior for a token whose issuer opts into the programmable architecture. Rule modules may express KYC eligibility, allowlists, denylists, sanctions screening, freeze functions, seize/reassignment powers and restrictions on who can receive or hold tokens. The issuer chooses the modules and may update them as laws or product requirements change.
The Foundation says compliance checks are enforced by Cardano's ledger rather than by a proprietary custodial wrapper. This means an issuer can issue a native Cardano token with programmable behavior while still using normal network infrastructure. The release required no hard fork.
What happens on an attempted transfer？
The relevant policy is evaluated when an affected programmable token is transferred, minted or burned. A fund token might be prevented from reaching a wallet without the required KYC status. A stablecoin issuer might prevent a sanctioned address from receiving tokens. An administrative recovery module could, if the token's governance grants that authority, move or seize an asset without the owner's fresh transaction authorization.
The final behavior is asset- and module-specific. A token using simple transfer restrictions does not necessarily enable every recovery or clawback feature. Conversely, a user cannot assume that possession of a token's private key guarantees unconditional transferability if the token's rules permit administrative intervention.
ADA and legacy asset boundary
CIP-0113 does not give the Foundation universal control over ADA and does not retroactively attach freezes to all previously issued native assets. It provides a framework that individual issuers can adopt. The distinction protects against the incorrect headline that the Cardano network has introduced centralized seizure authority over every address.
Why regulated issuers want these controls
Institutional tokenization imposes requirements that ordinary bearer-style crypto tokens may not satisfy: restricted investor categories, sanctions compliance, court-order enforcement, redemption controls, transfer-agent reconciliation and sometimes recovery of erroneously transferred assets.
The new architecture gives funds, bond issuers, stablecoin operators and securities tokenizers a way to express some of those requirements as ledger-enforced logic. Cardano Foundation CEO Frederik Gregaard emphasized that the rules must travel with the asset on every transfer, rather than relying on one exchange or custodian's initial account screening.
Security trade-offs: issuer administrators become privileged parties
A rule system can lower legal/compliance risk and enable asset recovery. It also creates an additional attack surface: policy administrators, module upgrades, allowlist databases and privileges to freeze, seize or move tokens. A compromised issuer signing key or malicious rule update could make legitimate balances untransferable or redirect assets without needing to compromise a holder's wallet private key.
A regulated holder must therefore review who can change the rules, whether updates are timelocked, whether freezes are reversible, whether an appeal process exists and how authority is audited. 'On-chain' does not make issuer governance automatically decentralized.
DeFi collateral implications
A lending platform accepting a programmable asset as collateral must consider whether an authorized issuer can freeze or seize that collateral at a time when the lender needs to liquidate it. A protocol may value a token correctly yet still be unable to realize collateral if a compliance module rejects transfers to liquidators. Custodians and exchanges face analogous risk during withdrawals and insolvency.
External integration and audits
The Foundation announced integrations or ecosystem support from Eternl, GeroWallet, CardanoScan and BloxBean, supporting wallet display, indexers and developer tooling. It says the mainnet release followed multiple independent security audits; the completion of audits supports readiness but does not guarantee that every future issuer module or asset configuration will be bug-free.
Swiss certification context
The Foundation also announced that the Capital Markets and Technology Association (CMTA) recognized CIP-113 programmable asset tokens as a smart-contract equivalent to its CMTAT standard for certification purposes. That may reduce some technical diligence barriers for tokenized Swiss ledger-based equity securities.
Certification-framework recognition is not the same thing as regulatory approval of every future securities offering. Investor eligibility, prospectus/issuance law and custody safeguards remain asset- and jurisdiction-specific.
Timeline
March 2026 — Preview and architecture
The Foundation publicly released programmable-token tooling and identified formal audits and integration as next steps.
October 7, 2026 — Mainnet launch
CIP-0113 was announced live after independent audits with ecosystem support and Swiss CMTA recognition.
After launch — Asset-by-asset adoption
Issuers choose modules, integrate custody and disclose token-specific powers. No universal migration of existing Cardano assets was announced.
Evidence Status
Confirmed — Cardano Foundation
Mainnet launch October 7, configurable KYC/AML/sanctions controls, possible freeze/seize restrictions for configured assets, native-asset ledger enforcement, no hard fork, audited framework, named ecosystem tooling and CMTA recognition.
Developing
Number and identity of live issuer tokens using each module, administrator design, timelocks, court-order processing, collateral acceptance, module-specific security testing and real-world freeze incidents.
Risk Assessment
High issuer-control, privileged-access and asset-transfer risk for holders of participating programmable tokens. This is not a protocol exploit. The new controls can improve regulatory compliance but change the rights and threat model of an asset holder, including the possibility of freezes or reassignments under issuer-defined rules.
What to Watch Next
The first high-value production issuances, module audit reports, custody integration, issuer governance disclosures, liquidation behavior, compliance-policy updates and any actual freeze/recovery actions.
FAQ
Can Cardano now freeze everyone's ADA？
No. CIP-0113 does not add universal freeze authority over ADA.
Who can freeze a programmable token？
It depends on the token's selected modules and authorized issuer or policy administrators.
Can token holders lose control even without a stolen private key？
An authorized freeze or seizure module may limit transfers or move assets under its defined policy.
Does every programmable token support seizure？
No. Functionality is chosen and configured by the issuer.
Was a Cardano hard fork required？
No; the Foundation says the standard uses existing ledger capabilities.
Is CMTA recognition equivalent to a securities licence？
No. It concerns a technical certification framework, not blanket authorization for securities products.
