ST0x tokenized stocks (S01 Issuer GmbH)

Research, firm shelf, model-client eligibility, and advisor selection are recorded separately. The scheduled date is the outside bound; new evidence can reopen the file sooner.

An ST0x token is not a share. It is a debt claim on S01 Issuer GmbH, a Berlin company with EUR 25,000 of share capital and no licence, issued under a base prospectus the FMA Liechtenstein approved on 30 March 2026. The holder may ask the issuer to deliver one share of the named stock or ETF to a brokerage account, and may receive dividends the issuer actually collects, paid in stablecoin. The shares the issuer holds are its own hedge: not held in trust, not pledged, not segregated. If S01 Issuer fails, holders rank with its other unsecured creditors. The prospectus bars US persons. What trades is one step further removed. CoinGecko lists 20 wt-tokens worth about $1.65 million on 23 September 2026; each is an ERC-4626 vault share holding the issued t-token. Almost all issued tSPYM sits inside the wtSPYM vault, so the vault contract, not the person who bought wtSPYM, holds the claim the prospectus describes, until the buyer unwraps. One 3-of-6 Safe owns every t-token, can freeze all transfers, can swap the contract that decides who may transfer, can upgrade both the t-tokens and the wrappers through two shared beacons, and administers the role that confiscates any balance. A single externally owned key holds the certifier role, and letting certification lapse stops every holder transfer. We reject it for client portfolios: US clients may not hold it, and a non-US holder gets an unsecured claim on a thinly capitalised issuer wrapped in contracts that one small group of keys can stop.

Research triggers: events that reopen the assessment or shelf decision
• S01 Issuer pledges or segregates the hedge shares for holders, or appoints a security agent
• The owner freezes a token, replaces the authorizer, upgrades a beacon, or anyone is granted a confiscation role
• A certifier forces certification backwards or lets it lapse
• The issuer suspends exchanges, exercises the call option, or announces a Security Event
• The prospectus lapses on 29 March 2027 without a successor

The research file

What a holder owns

The prospectus calls the products ”Token (debt instruments)” under German law with no ISIN. Each token ”solely confers a contractual right to redeem Tokens … against one such Share,” and grants ”No voting rights, dividend rights … rights to participate in rights issues or Shareholder meetings.” The right is to a share of the same class, never to a specific share, and ”The Issuer is not obliged to acquire, maintain, or hold any specific Share for the benefit of Investors.” The ST0x FAQ puts it plainly: ”Holders are unsecured contractual creditors of the Issuer,” and the position the issuer keeps with a US broker-dealer is ”held for the Issuer, not on trust for holders.” Under the SEC staff statement of January 2026 that is a synthetic tokenized security: a note that refers to a stock, with physical settlement on request.

Dividends reach holders only as far as the issuer receives them. The terms promise Distributions in ”USS” (USDC or another authorised stablecoin) from a claim vault with a Merkle entitlement list, less any distribution or management fee the Final Terms set. The issuer has published no Final Terms on its site, so the fee rates for any filed token are not known.

Two contracts per stock

Each stock has a t-token and a wt-token on Base. The t-token (tSPYM at 0x8fdf…debfbb) is a Rain OffchainAssetReceiptVault that S01 Issuer mints when shares reach its broker account and burns when it delivers shares back. The wt-token (wtSPYM at 0x31C2…c2d8) is a plain ERC-4626 vault whose only asset is the t-token. Its source says the wrapper ”never produces yield or rebases,” so dividends and splits that change the t-token show up as a rising exchange rate: on 23 September 2026 the wtSPYM vault held 9,749.6 tSPYM against 9,705.2 wtSPYM. The ST0x markets, the CoinGecko listings and the DEX liquidity are all in the wt-tokens. The site’s token list names 54 pairs; the eight largest by market value are filed, and all 54 share one t-token beacon, one wt-token beacon, one owner and one authorizer.

The prospectus describes only the t-token. A wt-token holder has a claim on the vault’s t-tokens by code alone. To reach the issuer, the holder must redeem the wt-token for t-tokens, then use the issuer’s Core Bridge interface.

Who controls it

Read on 23 September 2026. Every t-token is owned by Safe 0xe70d…d611 (3 of 6 signers, names not published). The owner can call ownerFreezeUntil, which stops all transfers until a date it cannot bring forward, with exceptions for addresses it marks as always allowed; it can replace the authorizer contract that approves every transfer, deposit, withdrawal and confiscation; and as owner of both beacons it can replace the code of all t-tokens and all wrappers at once. The shared authorizer (0x315b…f0cd) lets anyone transfer while certification is current. The certifier role is held by the Safe and by one externally owned address (0x3d0c…e8ae), and certify accepts a forced earlier date, so one key can end certification and halt holder transfers. Confiscation moves any holder’s t-tokens to the caller. No address held that role on the read date; the Safe administers it and can grant it. The prospectus warns of both: ”a confiscation functionality enabling the transfer of Tokens from any Investor to a designated Wallet” and a ”smart contract-based freeze function” on a security event, after which the issuer may airdrop replacement tokens and leave out wallets it links to the event.

A confiscation or freeze aimed at the wtSPYM vault address would hit every wtSPYM holder at once, because the vault is the only holder of record for nearly all tSPYM.

Who may hold, and the exit

The prospectus says the products ”may not be offered, sold or delivered within the United States to, or for the account or benefit of, U.S. Persons” and names public offers in Liechtenstein, Germany, Luxembourg, France, Spain and Italy. Holding needs no onboarding; the st0x.io site sells its SGOV token with ”No KYC.” Minting and redeeming do: the holder must name an account at a broker the issuer designates, and ”Should an Investor be unable to maintain or open an Account with any Eligible Broker,” the issuer owes no alternative. The smallest redemption is tokens worth US $10.00. The Core Bridge ”may require several hours to multiple weeks,” and the issuer may suspend exchanges on a broker insolvency, a trading halt, a corporate action or regulation, in which case it ”may be entitled to sell all the Shares it holds” and pay stablecoins. It may also end a token on 30 business days’ notice under its call option. For most holders the exit is a sale on the Raindex order books on Base, where liquidity depends on arbitrageurs.

Against the other tokenized stocks on file

ST0x sits beside Robinhood’s Jersey tokens and Backed’s xStocks: debt of a small issuer, approved in Liechtenstein, closed to US persons, with an admin that can freeze and seize. It is weaker than both on security for the holder. xStocks and Robinhood pledge the hedge to a security agent for each series; S01 Issuer pledges nothing and keeps the shares in its own estate. It adds a layer neither has, the ERC-4626 wrapper, which separates the token people trade from the instrument the prospectus governs.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• S01 Issuer GmbH, Base Prospectus, Program on the Issuance and Offer of Token (30 March 2026) · primary · accessed 2026-09-23
  Supports: debt instruments, no ISIN, German law, no rights in a specific share, no vote, Distributions in USS from a claim vault, unsecured, unsegregated hedge, US persons barred; six offer countries, broker account needed to redeem; minimum US $10.00, Core Bridge delays, suspension, sale of shares, confiscation and freeze functions; replacement tokens, Issuer Call Option, EUR 25,000 share capital
• ST0x FAQs · primary · accessed 2026-09-23
  Supports: unsecured contractual creditors, hedge held for the issuer, not on trust, markets trade wrapped vault shares
• ST0x home page · primary · accessed 2026-09-23
  Supports: SGOV sold with no KYC
• S01 Issuer GmbH, Prospectus page · primary · accessed 2026-09-23
  Supports: only the base prospectus is posted; no Final Terms
• StoxReceiptVault implementation on Base (Sourcify exact match) · primary · accessed 2026-09-23
  Supports: ownerFreezeUntil, setAuthorizer, confiscateShares, certify with forceUntil, authorizer role model
• StoxWrappedTokenVault implementation on Base (Sourcify exact match) · primary · accessed 2026-09-23
  Supports: ERC-4626 wrapper; revaluations in price
• Blockscout, Base: role grants and revocations on authorizer 0x315b16faa6ee413fabca877d3851b3818369f0cd · secondary · accessed 2026-09-23
  Supports: CERTIFY held by the Safe and 0x3d0cd66e…e8ae, no CONFISCATE_SHARES holder; Safe is its admin

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The most administered layer sets the position’s effective control grade; that is a control description, not a quality or suitability score.