Permissioned vs permissionless.Who the contract lets in.
Every token is a smart contract, and the contract decides who may receive it. A permissionless token moves to any address. A permissioned token checks a list of approved wallets first. Most tokenized securities are permissioned, most stablecoins are not.
Reviewed October 19, 2026 · figures from our live data
The short answer
A permissionless token can be sent to any wallet and traded on any exchange or DeFi protocol that lists it.
A permissioned token checks each transfer against a whitelist or a set of rules. Transfers to unapproved wallets fail.
Issuers use permissions to meet securities rules: investor eligibility, country limits, holding periods and the ability to freeze or recover tokens.
Permissions affect liquidity. You can only sell to someone who is also approved, which usually means fewer buyers and fewer markets.
How transfer restrictions work
The rules live in the token contract or in a separate compliance contract it calls. The common patterns are similar across chains.
- 1
Whitelist
The issuer or its transfer agent keeps a list of wallets that passed KYC. A transfer only succeeds if both sender and receiver are on it.
- 2
Rule checks
Some standards, such as ERC-3643 on Ethereum, check identity claims and rules on each transfer: country, investor type, maximum holders, lockups.
- 3
Freeze and seize
Many permissioned tokens let the issuer freeze a wallet or move tokens by force, for example after a court order or a lost key. Many permissionless stablecoins also have a freeze function.
- 4
Native permissions
Some chains build permissions into the asset itself. Algorand and Stellar assets can require the issuer to approve each holder before they can receive tokens.
- 5
Wrappers
A third party can hold a permissioned token and issue a permissionless wrapper against it. You then hold a claim on the wrapper, not on the original issuer.
- 6
Off-chain register
For some securities, the legal register is kept by a transfer agent, and the token mirrors it. If the two disagree, the off-chain register usually wins.
What it means for you
Permissions are not good or bad. They change what you can do with the token after you buy it.
- 1
Selling
With a permissioned token you sell to the issuer, through its platform, or to another approved investor. Check whether a secondary market exists before you buy.
- 2
DeFi
Most lending protocols and decentralized exchanges cannot hold permissioned tokens unless the protocol itself is whitelisted. Some issuers approve specific pools.
- 3
Custody
Sending a permissioned token to an exchange deposit address or a new wallet can fail. Get the new address approved first.
- 4
Recovery
Permissions can help you. An issuer that knows your identity can reissue tokens if you lose your keys. A permissionless token lost is usually gone.
- 5
Issuer power
Whoever controls the whitelist and freeze keys can block your tokens. Read who holds those keys and under what rules they act.
- 6
Checking a token
Read the verified contract on a block explorer. Look for functions named whitelist, allowlist, isVerified, freeze, pause or forceTransfer.
Questions
What is a whitelisted token?+
A token whose contract only allows transfers between wallets the issuer has approved, usually after KYC. Transfers to other wallets are rejected by the contract.
Can I trade permissioned tokens on Uniswap?+
Usually not. A pool can only hold the token if its contract address is approved by the issuer. Some issuers approve specific pools or offer a permissionless wrapper instead.
Are stablecoins permissioned?+
Most large dollar stablecoins are permissionless for transfers, but their issuers can freeze addresses. Minting and redeeming with the issuer still requires KYC.
Is a permissionless token unregulated?+
No. Permissionless describes the transfer rules in the contract. The issuer can still be regulated, and the token can still be a security in some countries.
- RWA tokens without KYC →
- Tokenized treasuries without KYC →
- KYC for tokenized assets →
- How to verify a token contract →
- Tokenized assets an AI agent can buy →
This guide explains how these products work and is not investment advice or an offer of any security. Who may buy a product is set by its issuer; check the offering documents before investing.