# Web3 / Institutional Tokenization Resources

Curated, high-trust sources for an engineering leader designing tokenized-asset infrastructure.
Retail-DeFi marketing content is deliberately excluded.

## Knowledge

### Foundations (EVM, Solidity, accounts)
- [Ethereum.org — Developer Docs](https://ethereum.org/en/developers/docs/)
  Canonical, vendor-neutral reference for accounts, transactions, gas, the EVM, and smart contracts.
  Use for: grounding any base-layer concept.
- [Solidity Official Documentation](https://docs.soliditylang.org/)
  The language spec. Use for: syntax refresh, security patterns, contract structure.

### Institutional tokenization standards
- [ERC-3643 (T-REX) Whitepaper — Tokeny](https://tokeny.com/wp-content/uploads/2023/05/ERC3643-Whitepaper-T-REX-v4.pdf)
  Primary source for the dominant permissioned security-token standard. Use for: identity registry,
  compliance modules, transfer restrictions — directly relevant to Marketnode.
- [ERC-3643 Official Docs](https://docs.erc3643.org/erc-3643)
  Standard maintainers' reference. Use for: the modular architecture (token / identity / compliance split).
- [Chainalysis — Intro to ERC-3643](https://www.chainalysis.com/blog/introduction-to-erc-3643-ethereum-rwa-token-standard/)
  Clear high-trust explainer contrasting ERC-3643 vs ERC-20. Use for: a fast first read on permissioned tokens.

### Security & custody
- [OWASP Smart Contract Top 10](https://owasp.org/www-project-smart-contract-top-10/)
  The canonical vulnerability taxonomy (access control #1, reentrancy, logic errors, oracle manipulation).
  Use for: reading audit reports, security interview questions, design-review checklists.
- [Fireblocks — MPC vs Multi-Sig](https://www.fireblocks.com/blog/mpc-vs-multi-sig)
  Clear comparison of custody key-management models from the market leader. Use for: custody decisions,
  understanding the agent-key protection problem.
- [OpenZeppelin Contracts Docs](https://docs.openzeppelin.com/contracts/)
  The de-facto secure-contract standard library (proxies/upgradeability, access control, ERC standards).
  Use for: what "good" looks like; what your team will actually build on.

### Solana & non-EVM tokenization
- [Solana — Token Extensions (Token-2022) docs](https://solana.com/docs/tokens/extensions)
  Primary source for Solana's compliant-token features: transfer hooks (the ERC-3643 analog),
  confidential transfers, transfer fees. Use for: any Solana tokenization design or chain comparison.
- [QuillAudits — Solana Token-2022 Guide](https://www.quillaudits.com/research/rwa-development/non-evm-standards/solana-token-2022)
  Practitioner walkthrough of Token-2022 for RWAs, including the hook/confidential-transfer incompatibility.
  Use for: implementation-level understanding and review gotchas.
- [PANews — Private-equity tokenization platforms compared](https://www.panewslab.com/en/articles/u3i9p0t6)
  Clear breakdown of the SpaceX tokenization structures (backed vs SPV vs synthetic). Use for: the
  backing-spectrum due-diligence lens. See [[tokenization-backing-spectrum]].
- [MetaMask — How tokenized securities work](https://metamask.io/news/how-tokenized-securities-work)
  Clear explainer of the mint/redeem/custody cycle for backed tokens. Use for: the reserve-backed model.
- [Chainlink — Proof of Reserve](https://chain.link/proof-of-reserve)
  The "secure mint" mechanism wiring reserve checks into mint logic. Use for: enforcing the backing
  invariant; preventing infinite-mint. Solana primitives: [Permanent Delegate](https://solana.com/docs/tokens/extensions/permanent-delegate),
  [Default Account State](https://solana.com/developers/guides/token-extensions/default-account-state),
  [DvP on Solana](https://solana.com/developers/guides/advanced/dvp).

### Industry & regulatory context
- [IOSCO — Tokenization of Financial Assets (FR/17/25, Nov 2025)](https://www.iosco.org/library/pubdocs/pdf/IOSCOPD809.pdf)
  Regulator's framing of risks and architecture for tokenized assets. Use for: compliance/regulatory grounding.
- [WisdomTree — Blockchain-Enabled Transfer Agent](https://ir.wisdomtree.com/news-events/press-releases/detail/737/wisdomtree-wins-best-digital-asset-processing-solution-for)
  A Marketnode partner; real-world dual book-entry + on-chain registry model. Use for: transfer-agent architecture.

## Wisdom (Communities)
- [r/ethdev](https://reddit.com/r/ethdev)
  Practitioner subreddit for Ethereum development. Use for: architecture sanity-checks, hiring-question calibration.
- [ERC-3643 Association](https://www.erc3643.org/)
  Industry body around the permissioned-token standard. Use for: who's-who and real institutional adopters.
- Ethereum Stack Exchange (https://ethereum.stackexchange.com/)
  High-signal Q&A. Use for: precise technical questions when interviewing or reviewing designs.

## Gaps
- No vetted source yet comparing chains (public L1 vs L2 vs permissioned/Canton/Fabric) for regulated
  finance — to be filled in Lesson 7 (chain selection).