# RWA Daily Update - 2026-10-13

## Lesson title
Replacing a stolen token is not creating a second asset

Access date: October 13, 2026 (PDT), checked with the local system clock.
Publication: https://managingexpectations.net/rwa.html
Scope: educational review of established Hong Kong guidance, not breaking news or a guarantee about any specific product.

## Official source used
Hong Kong Securities and Futures Commission, Circular on tokenisation of SFC-authorised investment products, revised April 20, 2026, reference 26EC22.
https://apps.sfc.hk/edistributionWeb/gateway/EN/circular/doc?refNo=26EC22

The official page's substantive text was successfully retrieved with web_extract, including paragraphs 1-23 and footnotes. Paragraph references are used rather than PDF page numbers.

## Extracted facts and claim mapping
- Paragraph 10: providers 'remain and be ultimately responsible' for management, operational soundness and ownership record keeping, 'regardless of any outsourcing arrangement'. Supports the lesson's accountability point.
- Paragraph 11: proper records of token holders' ownership interests should be maintained and arrangements should be operationally compatible with service providers.
- Paragraph 12: providers should manage cybersecurity risks, privacy, outages and recovery, and maintain a robust business continuity plan.
- Footnote 2: 'Product Providers are not expected to issue tokenised SFC-authorised investment products in bearer form.' Supports distinguishing possession of a token from the complete ownership-record framework.
- Footnote 3: 'the tokenisation arrangement can incorporate a burning and re-issuance mechanism, with an aim to mitigating hacking risk and theft.' This is an example of a possible control, not a requirement that all products adopt it or a promise of successful recovery.

## Educational interpretation and open questions
Burning and re-issuance is explained as retiring the old token representation and issuing a replacement, not creating a second underlying asset or restoring a password. This is a plain-language interpretation of the cited mechanism, not a technical description of a named implementation.

The questions about authorisation, evidence of entitlement, contested claims and prevention of duplicate usable representations are editorial due-diligence prompts. The circular does not specify every investigation or replacement step. Readers need the particular provider's legal documents and recovery procedures to answer them.

## No-hype summary
An RWA product can include administrative recovery controls because the investor's legal and recorded interest need not depend solely on possession of one token. Recovery powers also need accountable operation. Neither the token wrapper nor the presence of a recovery mechanism guarantees compensation, successful recovery, liquidity or safety.

## Practical watch question
If my token is stolen, who can replace it, and what prevents two usable tokens from representing the same interest?

## Novelty check
Reviewed prior daily lesson titles through October 12 and searched prior notes for loss/recovery/re-issuance terms. Earlier entries discussed custody, DTCC controls, forks, network repair and audit scope. Today's distinct narrow lesson is the SFC's burning/re-issuance example, non-bearer records, and replacement-authority questions. The same source was used October 8 for audit scope; the existing official source link is retained without duplication.

## Other sources checked / access limitations
- BIS FSI executive summary, August 28, 2025: https://www.bis.org/fsi/fsisummaries/exsum_23905.htm . Retrieved; broad operational-risk context only, not used as the lesson's evidentiary anchor.
- SFC 26EC23, secondary-trading circular, April 20, 2026: https://apps.sfc.hk/edistributionWeb/gateway/EN/circular/doc?refNo=26EC23 . Search located it, but web extraction stopped during paragraph 9. The openFile route https://apps.sfc.hk/edistributionWeb/gateway/EN/circular/openFile?refNo=26EC23 returned only an e-Distribution shell, and Python urllib retrieval of the HTML returned a JavaScript-required shell. No secondary-pricing claims from the inaccessible remainder were used.
- Direct Python HTML navigation on 26EC22 exposed no secondary-trading link; authoritative content was available through web_extract as recorded above.

## Editorial boundaries
Hong Kong SFC-authorised investment-product example, not a universal legal rule or statement about Canadian products. Educational only; not investment or legal advice. No price forecasts, buy/sell directions, market-size estimates, product endorsement or compensation promise.