KETJU Research

← The Register

tokenized-commodity

xU3O8 uranium token (uranium.io)

Adverse research finding
Research assessment
adverse
Firm shelf
excluded by policy
Model-client eligibility
not assessed
Selection
not considered
Action and amount
Not set by research
Reviewed
2026-09-23 · v1
Next review
2026-12-23
Research basis
Individual research
Chains
Etherlink
Symbols
xU3O8
Eligibility file
What the holder owns and who may hold it

Research, firm shelf, model-client eligibility, and advisor selection are recorded separately. The scheduled date is the outside bound; new evidence can reopen the file sooner.

xU3O8 is a token for a share of physical uranium oxide concentrate (U3O8, “yellowcake”). Trilitech Design Limited, a British Virgin Islands company in the Tezos ecosystem, offers it. Archax Ltd, an FCA-regulated London firm, holds the uranium as bare trustee in a storage account at Cameco’s Canadian conversion facility and keeps the register. The token contract on Etherlink is that register: a balance is a beneficial co-ownership share in the trust pool. On 31 July 2026 Cameco’s statement showed 38,464.626 kgU in the Archax account against 1,600,000 tokens, about one troy ounce of U3O8 per token, worth about $9 million. The legal claim is better than most tokens in this class: property on trust, not a promise. The assessment is adverse for three reasons. First, the holder cannot take the uranium. Only a party regulated by a national nuclear regulator, with its own account at a licensed facility, can redeem, so for an advisory client the only exit is a sale on the uranium.io interface or an exchange, with no peg and no issuer bid. Second, one externally owned address holds every admin role on the Etherlink contract: it can mint, pause, upgrade the code, blacklist, and wipe any holder’s balance, and on 2026-09-23 it had 159 addresses on the blacklist. Third, the only reserve evidence is a one-page monthly balance statement from Cameco, not an attestation, and beneficiary status turns on Archax deciding “in its absolute discretion” that a buyer may be one.

The research file

What the holder owns

The white paper says the structure “uses English trust law to underpin ownership and transfer” and describes a two-layer ledger: one layer records the ounces Archax holds on trust, the other each wallet’s fraction of that pool. The MiCAR white paper calls Archax a “bare trustee on behalf of token holders” holding the uranium “in a storage account with Cameco Corporation.” The help center puts it plainly: “Each xU3O8 represents a unit of ownership of U3O8 held by Archax as a custodian for investors.” The holder owns a share of a pool, not identified drums: a converter account at Cameco is a book-entry balance in kilograms of uranium, and the July 2026 statement is exactly that, a “Contract Balance Statement” for Archax with a beginning and ending balance of 38,464.626 kgU and no transactions. The token count matches the metal: 1,600,000 troy ounces of U3O8 is 45,359 kg of oxide, and at 84.8% uranium by weight that is 38,465 kgU.

Two terms weaken the claim. The MiCAR paper says a buyer becomes a beneficiary only once Archax “has decided, in its absolute discretion,” that the buyer is able to be one. And fees come out of the pool: up to 1.1% a year for storage and administration, collected by minting new tokens to a treasury wallet so each token stands for less uranium. Supply was still exactly 1,600,000 on 2026-09-23, so no fee had yet been taken this way.

Who controls the contract

The token is an ERC-1967 proxy at 0x79052Ab3…B1fD on Etherlink, the Tezos layer-2 EVM chain, pointing at an ERC20PoolToken implementation whose source is verified on the Etherlink explorer. The implementation defines roles for admin, minting, pausing, upgrading, wiping, KYC approval, and blacklisting. `wipe(address, amount)` burns tokens from any address and needs only the wiper role. Two switches govern transfers: when the blacklist is on, a listed address cannot send or receive; when the KYC switch is on, only approved addresses can. On 2026-09-23 the blacklist was on and the KYC switch was off. Role events show one externally owned address, 0x04009bc7…c807, holding the admin, minter, pauser, wiper, and upgrader roles, after an earlier holder handed them over. The blacklist held 159 addresses (288 additions, 129 removals). There is no multisig and no timelock in front of any of these powers.

The MiCAR paper says Archax, as registrar, “retains administrative keys to the smart contract allowing it to rectify errors or amend entries.” The site terms describe the process that fills the blacklist: Provenance Ltd screens each wallet on first use and continuously after; a “Redlight” wallet is frozen until the holder passes enhanced due diligence, and stays frozen if it fails. The Ketju control reader confirms the powers on chain: allowlist (the KYC switch), freeze, pause, clawback (`wipe`), and upgrade.

How a holder gets out

There are two exits, and an advisory client can use only one. A regulated holder with an account at a licensed conversion or storage facility can ask for a book-entry transfer of its uranium to that account; the help center says delivery to anyone else “is not feasible,” and no minimum, fee, or timetable is published. Everyone else sells: on the uranium.io interface against USDC on Etherlink, or on a centralized exchange (the MiCAR paper names Kraken, and Anchorage Digital began institutional custody on 2026-09-16). The white paper says “There is no formal peg to the spot price of uranium”; market makers are expected to keep the token near the OTC spot market, and nothing forces them to. The spot uranium market itself is thin and quoted by brokers, and the white paper says physical lots normally trade in 100,000 lb blocks among qualified buyers. The token lets a small holder in; it does not give that holder a way to make anyone buy the uranium back.

Who may hold it

The help center says there are “no geographical access limits other than based on AML/CFT and/or sanctions screening,” and the MiCAR paper targets retail and professional holders alike. There is no minimum purchase. uranium.io does not list excluded countries or US states. The white paper says only wallets of approved venues or wallets whitelisted in the app may acquire the token, but with the KYC switch off the contract enforces no such list. uranium.io says it is becoming Metals.io, and its terms were last updated 5 September 2025.

Comparison and decision

Against the listed alternatives, xU3O8 gives a cleaner claim than a uranium miner and a more direct one than a closed-end physical uranium fund, but less protection than either. A physical uranium trust listed on an exchange publishes audited financial statements, holds its uranium at the same converters, and can be sold through any brokerage account; the token relies on a monthly one-page statement, an issuer in the BVI, and a single key that can erase any balance. The assessment reopens if control of the Etherlink contract moves to a multisig with a timelock, if an independent attestation of the Cameco account is published, if a redemption path for unregulated holders appears, or if the deed of trust is published and removes the trustee’s discretion over who is a beneficiary.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The most administered layer sets the position’s effective control grade; that is a control description, not a quality or suitability score.

ChainVerdictGradeControl constraint
The memo is public. Monitoring connects the research to positions clients actually hold and flags evidence changes for advisor review. $49 per advisor per month, first 14 days free. Start the trial.