Skip to content

Decentralized OTC & Secondary Market for Tokenized RWAs

In short

Decentralized OTC (dOTC) is a permissioned, peer-to-peer secondary market for tokenized RWAs where holders can exit positions on-chain with wallet-to-wallet settlement and no central asset pool to attack. It is the compliant secondary venue large RWA flows cannot find on public DEXes.

50+
tokenized RWAs available
$1M → $15M
monthly volume growth (Swarm)
7,000+
verified users (Swarm)
98%
fee reduction (Swarm)
Trusted by teams building on-chain

Protofire builds decentralized OTC and secondary-market infrastructure for tokenized real-world assets, productized as dOTC, our decentralized OTC venue, live on Polygon and BNB Chain. A secondary market for tokenized RWAs is where holders of tokenized stocks, bonds, commodities, ETF shares, and private credit exit and trade their positions: they buy and sell directly with each other, on-chain, instead of routing through a public DEX or an off-chain broker desk.

dOTC is that RWA secondary-liquidity layer, the place where a tokenized asset meets the capital that wants to trade it, with on-chain settlement and permissioning enforced at the venue. It is a production product Protofire built and runs: it operates today as the secondary market for Swarm Markets' tokenized RWAs, and we deploy the same infrastructure for EVM chains, RWA tokenizers, and RWA issuers who need a compliant venue where their assets can be exited and priced. It ships with an embeddable, AI-discoverable widget and an optional yield toolset that pays liquidity providers to keep the market open.

The problem it solves is specific: RWA trading volume on-chain stays low when there is no transparent, compliant place to sell. Listing on a CEX or running your own DEX is expensive, and a public DEX exposes large RWA flows to slippage, signaling, and MEV. dOTC is the inexpensive alternative: a venue where the asset meets liquidity, holders can see real bid/ask depth, and LPs earn a predictable reward for providing it.

The dOTC stack, from offer to settlement to yield

Every layer Protofire owns end to end, from the P2P order engine to the LP reward program that keeps the market open.

01

Embeddable Widget & AI-Discoverable UI

A customizable trading UI and an embeddable widget that drops into any issuer or tokenizer page, structured so AI search engines can surface live bid/ask and volume data per RWA.
02

Offer & Order Engine

The P2P matching layer where holders post and take offers, with configurable price bounds (plus or minus 0-20% of a dynamic reference price) and minimum offer durations per epoch to keep the book live.
03

KYC / Permissioning

Multi-tier access control enforced at the venue layer; KYC gates redemption of the underlying asset, not the trade itself, keeping the trading surface open while meeting compliance requirements.
04

On-Chain Settlement

Wallet-to-wallet trade execution via smart contracts with no central asset pool; each trade settles peer-to-peer so there is no concentrated target for attackers and holders keep self-custody.
05

Yield Toolset

An optional LP and market-maker reward program that pays weekly in a configured reward token to holders who keep active bid/ask offers live, the mechanism that bootstraps and sustains liquidity.
01

What we deploy

A dOTC is a permissioned, peer-to-peer trading venue with on-chain settlement. It is not a centralized order book that custodies everyone's assets, and not a fully discretionary off-chain broker desk. Participants make and take offers directly; the contracts handle matching and settlement; permissioning and KYC gating are enforced at the access layer.

Because trades settle wallet-to-wallet, the venue never aggregates user RWAs into a single pool, so there's no honeypot of deposited assets for an attacker to target, which is one of the reasons large holders and institutions prefer controlled private execution to a public AMM. The point is controlled, on-chain, permissioned execution for trades that are too large, too sensitive, or too regulated for a public venue, with the transparency and self-custody that a phone-and-email OTC desk can't offer. Benefits: on-chain settlement with no central asset pool to attack · permissioned, KYC-gated access · private execution without giving up self-custody.

02

How a dOTC engagement works

1

Define & Design

We define the access-control and permissioning model, the trade flow, and the settlement logic for your assets and participant types. Deliverable: a permissioning, trade-flow, and settlement design.
2

Build & Harden

We build and harden the contracts, the admin tooling, and the embeddable widget / customizable UI, and integrate RWA token and KYC support. Deliverable: audited dOTC contracts, admin tooling, and the AI-discoverable widget.
3

Launch & Onboard

We onboard access for your participants and hand the venue over. Deliverable: a live secondary market with onboarded participants and handover.
4

Yield Program

We configure the reward toolset that pays LPs and market makers to keep active offers, the mechanism that bootstraps liquidity at launch. This phase is optional and runs in parallel with or after launch. Delivered by a lean, senior team (smart-contract engineering, full-stack, and a compliance/product lead) that has shipped this venue in production.
03

What clients build with us

A permissioned RWA secondary (OTC) venue on their chain
A P2P market for tokenized stocks, bonds, commodities, ETFs & private credit
An embeddable, AI-discoverable RWA trading widget
A liquidity/yield reward program for LPs & market makers
KYC-gated, multi-tier permissioned trading
On-chain settlement with no central asset pool
Bid/ask, volume & trade-count transparency per RWA
Large-holder & block-trade settlement
A compliant alternative to a CEX listing or an own-DEX build
04

The team that ships RWA secondary infrastructure

Protofire is a blockchain engineering company with 250+ shipped projects across 60+ networks and 95+ protocols since 2016. dOTC is part of an RWA finance stack we built and run, alongside RWArmor (parametric protection for tokenized RWAs), VaultOS (client-owned vault infrastructure), and Arenas (white-label credit), so the secondary market we deploy is one we operate, not a reference design. We built the permissionless dOTC inside Swarm Markets, the first BaFin-licensed DEX for tokenized RWAs, and we maintain Solhint, the Solidity linter used by 1M+ developers.

We're also an official Safe Guardian, with Safe securing $2B+ across 120+ EVM networks, the kind of permissioned, institution-grade rails dOTC is built on. Our Swarm Markets engagement is the proof point: building that dOTC cut fees 98%, onboarded 7,000+ verified users, and lifted monthly volume from under $1M to over $15M in six months.

A compliant, AI-discoverable RWA secondary market that pays LPs to provide liquidity, not a public DEX, not an off-chain broker desk.

dOTC built in production
$1M → $15M monthly volumeRWA dOTC launch

Built the permissioned dOTC inside BaFin-licensed Swarm Markets, growing monthly RWA trading volume from under $1M to over $15M in six months alongside 7,000+ verified users and a 98% fee reduction.

Swarm MarketsView project →

RWA Trading Venue Options

Public DEXRun Your Own DEXOff-Chain Broker DeskdOTC Secondary Market
TransparencyNo per-asset visibility (bid/ask/volume hidden)High, but costly to operateOpaque, phone/email basedPer-RWA bid/ask depth and trade history visible
Asset pool riskLarge honeypot of pooled user assetsCentral asset target for attacksNo on-chain custodyWallet-to-wallet settlement, no central pool
Liquidity incentivesNone (LPs earn only spread)Manual incentive programsDesk dependentAutomated yield rewards for active market makers
Slippage & MEVExposed to slippage and sandwich attacksNetwork dependentMinimal (off-chain)Permissioned, peer-to-peer, no MEV
Deployment costIntegration only, but high slippageFull stack build (weeks to months)Per-trade markup2-4 week integration, managed operations

FAQ

What is decentralized OTC (dOTC) / an RWA secondary market?
Decentralized OTC (dOTC) is a permissioned, peer-to-peer venue where holders of tokenized real-world assets trade directly with each other on-chain, with settlement handled by smart contracts instead of a central order book or an off-chain broker. An RWA secondary market is exactly that: the place where a tokenized asset (a tokenized stock, bond, commodity, ETF share, or private-credit note) meets the capital that wants to buy or sell it after the primary issuance. dOTC provides that secondary market with permissioned, KYC-gated access enforced at the access layer, on-chain settlement, and a yield toolset that pays liquidity providers a competitive on-chain yield to keep it open. Because trades settle wallet-to-wallet, the venue never aggregates user assets into a single pool, so there's no honeypot for an attacker, and holders keep self-custody. It ships as a customizable UI plus an embeddable, AI-discoverable widget that drops into an issuer's own page.
How do holders exit (sell) tokenized RWAs?
Through the secondary market. A holder either takes an existing buy offer or posts their own sell offer on the dOTC, priced within ±0-20% of a dynamic market reference price; offers must stay live for a minimum duration per epoch so the book doesn't evaporate, and the trade settles on-chain, wallet-to-wallet. Creating an offer takes about five minutes, with a 100,000 USDC minimum starting amount, and a holder can also capture dividends the underlying RWA distributes during the holding window, plus spread and price movement. Separately, a holder can redeem the underlying real asset directly on the primary platform (in the live deployment, Swarm Markets), which triggers the broker to sell the actual security. That redemption path requires KYC/KYB, whereas trading on the dOTC itself does not. The dOTC exists precisely so holders have a transparent, compliant exit without forcing every trade through redemption or a public DEX.
Why not use a public DEX?
Four reasons large RWA holders don't. A public DEX gives no per-asset visibility (no clear bid/ask, volume, or trade count), which is exactly the information an allocator or a CDP liquidity provider needs to decide. It doesn't reward RWA holders or give market makers a business, so the market stays thin; dOTC's optional yield toolset pays a competitive on-chain yield to whoever keeps active bid/ask offers live. Public venues expose large flows to slippage, signaling, and MEV, and impose compliance limits that institutional RWA flows can't accept. And a DEX pool of deposited RWAs is a large, concentrated target for an attack; dOTC settles peer-to-peer and never pools everyone's assets in one place, so large holders keep self-custody and controlled, permissioned execution. Listing on a CEX or running your own DEX is expensive; dOTC is the inexpensive, compliant alternative.
We're an RWA issuer or ETF. How does dOTC help us?
It gives your token a visible, compliant secondary market, which is often what crypto-native investors want to see before they commit to the primary offering. dOTC embeds as an AI-discoverable widget on your own page, shows real bid/ask depth and trade history for your asset, and uses the yield toolset to pay LPs and market makers a competitive on-chain yield to keep that market liquid. The common starting point is significant RWA TVL but few transactions, no secondary venue, and no yield to reward the holders who would make one. The result is more on-chain transactions against your RWA TVL, a clearer price signal, and a distribution edge: when a buyer asks an AI assistant where to trade your asset, your live market can be the answer. We built this venue inside Swarm Markets, the first BaFin-licensed DEX for tokenized RWAs, so the stack is redeployable for your assets.
Which networks and tokenized assets does dOTC support?
dOTC is live in production on Polygon and BNB Chain, EVM networks where RWA tokenizers already issue assets. In the Swarm Markets deployment it covers 50+ tokenized RWAs, including AAPL, TSLA, NVDA, and tokenized T-Bonds, with weekly rewards paid in the SMT token. That deployment grew out of the dOTC we built inside Swarm Markets, the first BaFin-licensed DEX for tokenized RWAs, which shipped 50+ pairs including tokenized Apple and Tesla stock alongside KYC and multi-tier permissioning. To deploy it for a new client the integration surface is thin: an EVM-compatible chain, an RWA token issued on it, a web page for the embeddable widget, and a KYC provider integration where redemption requires one. The same venue supports tokenized stocks, bonds, commodities, ETF shares, and private credit across those networks.
Do users need KYC to trade on the dOTC?
No KYC/KYB is required to trade RWAs on the dOTC itself in the live Swarm Markets deployment. KYC/KYB becomes a requirement only when a holder wants to directly redeem the underlying real asset on the primary platform, because that step triggers a regulated broker to sell the actual security. The venue's permissioning and KYC gating are enforced at the access layer, and access tiers are configurable per deployment; in Swarm Markets the engagement delivered KYC and multi-tier permissioning across 50+ pairs. So a client can run the dOTC open to trade with redemption gated, as in the live deployment, or tighten access for a fully permissioned institutional venue. Because trades settle wallet-to-wallet and the venue never pools assets in one place, participants keep self-custody and there is no central asset pool to attack, whichever permissioning model applies.
How long does it take, and what does it cost?
A dOTC deployment runs in three phases. Design defines the access-control and permissioning model, the trade flow, and the settlement logic for your assets and participant types. Implementation builds and hardens the contracts, the admin tooling, and the embeddable AI-discoverable widget, and integrates RWA token and KYC support. Launch onboards access for your participants and hands the venue over. An optional fourth phase configures the yield-reward toolset that pays LPs and market makers to keep active offers, the mechanism that bootstraps liquidity at launch. The work is delivered by a lean, senior team (smart-contract engineering, full-stack, and a compliance/product lead) that has shipped this venue in production. Engagements are scoped to your assets, participant types, and how much of the stack you need, so we size the timeline and a fixed estimate on the first call before any work starts.

Reviewed by Luis Medeiros, Field CTO at Protofire. Last reviewed: June 2026.

Book a call with Alejandro Losa

Schedule a call with our Business Development Manager to receive practical recommendations and a prompt proposal for upgrading your solution.

Protofire 2026. All rights reserved