This is the research library: key papers on tokenization, summarised. Open a paper, or read the newsletter →
Papers tracker
New research on Tokenization & RWAs, AI in law and Smart contracts, cut down to what it means in practice. Papers so far: 3.
New Tokenization Papers
No new papers in the last 7 days.
Saisab Sadhu, Shreeyans Arora, Pratinav Seth · submitted 8 Oct 2026
Practical takeaway
- Across seven open-weight models, the AI named the correct statute or precedent in 66.7–100% of answers, yet swapping that authority for an unrelated one often did not change the verdict.
- A correct citation is therefore weak evidence that the conclusion actually rests on it.
- Hidden adversarial instructions in the case facts were followed 73–96% of the time, so untrusted documents fed to a model are a real attack surface.
- Do not use AI-generated legal reasoning as a compliance or audit artefact without independent human checking of the authority-to-outcome link.
Original abstract
Large language models increasingly justify legal decisions by naming the statute or precedent behind a verdict, treated as evidence that the decision follows from it. We test this directly: holding case facts fixed, we substitute the named legal authority for an unrelated one and decode a model's evolving verdict from its hidden states. Across seven open-weight models (8B-70B) and four benchmarks spanning judicial and contractual reasoning, when explicitly required to justify a verdict by naming the governing authority, models name the correct one in 66.7%-100% of generations, while the verdict changing when the authority changes is far less consistent: 0.0%-21.7% on CaseHOLD, 30.0%-76.7% on ECHR and SCOTUS, and 43.3%-50.0% on ContractNLI. Neither scale nor a purpose-built legal-reasoning model (a best-effort LoRA reproduction; Section 6) closes this gap. A red-teaming evaluation on five core models finds compliance with an adversarial instruction hidden in the case facts (73.3%-96.4%) exceeds verdict-swap sensitivity by a wide margin, holding without exception across model rankings. Naming a legal authority is thus a poor proxy for a verdict's dependence on it, while the same verdict remains separately vulnerable to adversarial manipulation. Both findings replicate across checks ruling out prompt-wording noise and confounded sampling, and bear directly on the use of generated legal explanations as compliance or audit artefacts.
Read the summary · Abstract page · PDF
M. Mikail Demir, M. Abdullah Canbaz · submitted 7 Oct 2026
Practical takeaway
- PARCEL tests whether a legal claim is really supported by the authority it cites, using 3,396 claims drawn from New York Court of Appeals decisions.
- Top models reach up to 0.97 accuracy, but still mark unsupported claims as supported, even with the full opinion in front of them.
- Missing support is harder to catch than outright contradiction, and fabricated but plausible citations cause the biggest drop.
- For legal RAG tools, check every citation for support at claim level; 'Not Found' is the failure mode to test for first.
Original abstract
Large language models are increasingly used in legal research and drafting, but they can still produce claims that sound convincing without being supported by the cited source. We introduce PARCEL, a benchmark for checking whether a legal claim is supported by the underlying authority. Using recent New York State Court of Appeals decisions, we build a dataset of 3,396 parenthetical-style claims labeled as Supported, Refuted, or Not Found. We cast this task as a three-way natural language inference problem and evaluate several state-of-the-art LLMs in a zero-shot setting. Although the strongest models reach up to 0.97 accuracy, the results also show an important weakness: models still incorrectly mark unsupported claims as supported, even when the full opinion text is provided. Across models, missing support is harder to detect than direct contradiction, and fabricated but plausible citations cause the largest drop in performance. Overall, PARCEL provides a practical benchmark for testing claim-level groundedness in legal RAG systems.
Read the summary · Abstract page · PDF
Emre Atay Tümer, Rischan Mafrur · submitted 5 Oct 2026
Practical takeaway
- On-chain transfer volume for tokenized funds mixes mints, burns, issuer operations and genuine investor trades, so headline turnover overstates real trading.
- Address concentration also misleads: one large wallet may be a pool or intermediary holding for many investors.
- When you read RWA dashboards or pitch decks, ask for turnover after removing issuance and issuer flows, and for holder counts that look through intermediaries.
- Transfer activity is evidence about liquidity-related activity, not a measure of market liquidity; do not treat it as a proxy for exit liquidity.
Original abstract
On-chain transfer volume is often used to describe activity in tokenized real-world assets (RWAs), although recorded transfers may reflect very different economic functions, including token creation, destruction, issuer-related operations, and movements between other addresses. Ownership measures face a similar problem because a large address balance may belong to a pool or intermediary that represents multiple investors. We address these two measurement problems by decomposing transfer activity and making ownership coverage explicit. Transfer turnover is calculated before and after observable event categories are separated, using the same asset, observation window, and supply denominator. For ownership, we compare concentration measured against total supply with concentration among the addresses that remain after identified intermediaries are excluded. Using Ethereum-based tokenized funds from December 2025 to August 2026, we find that transfer classification can materially change measured turnover. We also show that removing an intermediary can lower concentration when measured against total supply while concentration among the remaining addresses increases. Transfer activity and address concentration need to be interpreted with their underlying transaction functions and ownership coverage in mind. These measures provide evidence about liquidity-related activity, but they do not directly measure market liquidity. The code and data used in the analysis are available at this https URL.
Read the summary · Abstract page · PDF
Related editions of Tokenization Architect, in English.
Paid · PremiumBlock 3· 4 Sept 2026
Unlock Premium to read the full edition. Subscribe
Paid · PremiumBlock 3· 28 Aug 2026
Unlock Premium to read the full edition. Subscribe
Free · open to everyoneBlock 2· 3 Aug 2026
More research: latest from other sources
New items from central banks, standard-setters, IACR ePrint, journals and research teams. Headlines only, filtered for tokenization, stablecoins, post-quantum and agentic-economy topics. Full list on Sources.
Get Tokenization Architect in your inbox
Two editions a week on how tokenization is rebuilding ownership, trade and governance. New directory listings and papers are flagged there first. Subscribing is free and Blocks 1 and 2 are open to everyone; most editions from Block 3 onwards are for paid subscribers.
Subscribe on SubstackRead past editionsFollow on X @TokenizationArc
Education, not investment, legal or tax advice. Unsubscribe any time.