Cardano has formalized a new standard for programmable Cardano token controls designed to attract institutional finance, but its architecture could create significant new risks for decentralized finance (DeFi) protocols and users. The feature, outlined in Cardano Improvement Proposal (CIP-113), was merged into the project’s main repository on September 29, 2026, paving the way for issuer-controlled assets with capabilities like freezing and transfer restrictions.
Spearheaded by contributors and supported by the Cardano Foundation, CIP-113 introduces a framework for regulated stablecoins, securities, and other real-world assets on the blockchain. However, a unique consequence of Cardano’s accounting model means a restriction placed on one token can temporarily render completely unrelated assets in the same wallet unusable, a complication that DeFi platforms will have to navigate carefully.
Understanding Cardano token controls for institutional adoption
The primary driver behind CIP-113 is to equip Cardano with the necessary infrastructure for institutional-grade financial products. The Cardano Foundation has explicitly positioned the new standard as a tool for issuers who need to comply with regulatory requirements, such as those governing securities and stablecoins. These rules often mandate compliance controls such as transfer restrictions and asset freezes.
By building these controls directly into the token standard, Cardano aims to lower the barrier for traditional financial institutions to issue assets on its network. This move aligns with a broader industry trend toward real-world asset tokenization, where everything from stocks and bonds to real estate is represented on-chain.
For Wall Street firms exploring blockchain, having native compliance features is not just a benefit—it’s a prerequisite.
Matteo Coppola, the chief executive officer of Fluid Tokens and a key contributor to the proposal, celebrated the merge as a major milestone following years of development. “This means the official standard for programmable tokens on Cardano, including securities, is out,” Coppola stated, noting the work done to make it production-ready.
While the proposal must still undergo further testing and mainnet activation, its inclusion in the official repository signals a clear strategic direction for the ecosystem.
The eUTXO complication: how one frozen token blocks others
This newfound flexibility for institutions comes with a significant trade-off rooted in Cardano’s unique architecture. The network uses an extended unspent transaction output (eUTXO) model. Unlike the account-based model of Ethereum where tokens are balances in a smart contract, Cardano bundles assets together in outputs. A single output can contain the native ADA currency as well as multiple different types of tokens.
Herein lies the risk. To spend any asset within an output, the entire output must be consumed in a transaction. CIP-113 allows an issuer to apply rules, like a freeze, to its specific token.
If a frozen token (Token A) is held in the same output as an unrelated token (Token B) and some ADA, the entire output becomes locked. The holder cannot move Token B or their ADA because the rule on Token A prevents the transaction from being validated.
It’s critical to understand that this is not a seizure. The issuer of Token A gains no control or ownership over Token B or the ADA. But from the user’s perspective, those assets are inaccessible until the freeze on Token A is lifted.
They are effectively paralyzed by an asset they happen to hold alongside them, creating a form of collateral damage that DeFi protocols have not previously had to consider on this level.
The ‘unfracking’ mechanism: a potential escape hatch
The designers of CIP-113 foresaw this issue and included a potential solution called “unfracking.” This mechanism is designed to allow a user to separate tokens from a bundled output into individual ones. In theory, a user holding the frozen Token A alongside Token B could initiate an unfracking transaction to move Token B into a new, clean output, thereby freeing it from the restriction.
However, the escape hatch comes with a major caveat: the holder does not have the final say. An unfracking transaction requires not only the holder’s signature but also must satisfy the separation rules defined by the issuer of the restricted token.
An issuer could, for example, program their token to require an additional signature from a third-party for separation, or simply block the process entirely. This means a user’s ability to free their unrelated assets is ultimately at the mercy of the rules set by the issuer of the problematic token.
New risks for wallets and DeFi protocols
The practical consequences for the Cardano ecosystem are profound, introducing a new layer of risk for wallet developers and DeFi applications. A user’s wallet balance may no longer reflect their immediate spending power.
An application might show a user owns 100 units of Token B, but it cannot know with certainty if those tokens are spendable without first analyzing every other asset sharing their transaction output.
For DeFi lending protocols, this represents a serious collateral management problem. Imagine a platform accepts a programmable token as collateral for a loan. If that token’s issuer freezes transfers during a period of high market volatility, the protocol may be unable to liquidate the collateral to cover a bad debt.
The risk could be catastrophic, potentially impacting the Cardano DeFi TVL as platforms grow more cautious.
Protocols will need to adapt. They might choose to reject programmable tokens with restrictive separation rules, or assign them much lower collateral values to account for the added risk. Wallets may also start segregating assets into single-policy outputs by default, though this could increase transaction costs and complexity for the user.
How these design choices play out will be critical for the usability of regulated assets within the existing DeFi landscape.
The road ahead: balancing institutional appeal and decentralization
While CIP-113 has been merged, it remains officially “Proposed.” It still requires full implementation on testnet and mainnet, along with support from major wallet providers, before its impact will be felt. Yet, its formalization marks a pivotal moment for Cardano, as it deliberately courts a class of user—regulated institutions—that operates under a fundamentally different ethos from the permissionless world of DeFi.
The first wave of projects to adopt CIP-113 will set important precedents. Their decisions on how to construct outputs and what permissions to grant issuers will be closely watched. If integrations are handled poorly, they could fragment the ecosystem, creating silos between regulated and unregulated assets and undermining the composability that makes DeFi powerful.
This could in turn affect metrics like Cardano DEX volume if liquidity becomes harder to access.
Ultimately, CIP-113 is a high-stakes gamble. By providing the tools Wall Street wants, Cardano is betting it can capture a significant share of the tokenized asset market. The challenge will be to do so without alienating its core DeFi community or introducing systemic risks that could destabilize the entire ecosystem.
The coming months will reveal whether Cardano can successfully bridge these two worlds or if it will be forced to choose between them.