Verified Platforms
Quick Links
Where to Stay Secure
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
A depositary receipt is not the share. It is a claim on the bank that holds the share.
That sentence is almost a hundred years old, and it just became the one thing you have to understand about tokenized private shares. This is a Kodex walkthrough with Lilith, a twenty-year cybersecurity veteran who reads every new product for where power and custody settle once the press release fades. Today she takes apart Citi's tokenized private shares, layer by layer, because the wrapper is new and the structure underneath is not.
Lilith does not start with the blockchain. She starts with the question the launch is built to skip: when you hold one of these tokens, whose balance sheet are you actually trusting?
If you have ever held a foreign stock through a US brokerage, you have probably owned a depositary receipt without noticing. You bought "Nestlé" or "Toyota," but the real shares sat in a custody account at a bank overseas. What landed in your account was an American Depositary Receipt: a certificate saying a bank holds the actual shares for you and will pass along what they pay.
The receipt tracks the share. It is not the share.
That distinction sounds academic until something breaks. The bank holding the underlying stock is your counterparty. If it fails, mishandles the custody, or sits in a jurisdiction that freezes the assets, your receipt is only ever as good as that bank and that arrangement. For decades this stayed invisible plumbing, because the depositary banks were large and the underlying stocks were public: priced every second, filed on a schedule, easy to value.
The risk was real but quiet.
Citi just took that same instrument and pointed it at a far less forgiving asset.
On June 11, 2026, Citi launched Digital Depositary Receipts for private-company shares, issued on SIX Digital Exchange's regulated chain. The first trade involved Kaleido, a company Citi Ventures had backed. Access went to Citi's wealth clients, the foreign ones first, with the US left for "if regulatory conditions allow." The shares move on a permissioned institutional venue now, with a public-blockchain version flagged for later.
The headline wrote itself: pre-IPO unicorns, on-chain, finally reachable.
That framing is wrong in two places, and both matter.
First, this is not retail access. It is accredited and largely non-US to start. Second, and this is the part CoinDesk noted in a single line before moving on: you own the depositary receipt, not the underlying shares directly. You are not buying a slice of the company. You are buying a claim on Citi that references a slice of the company.
The novelty is not the token. It is who stands behind it. For the first time, a global bank is acting as issuer and custodian for tokenized private shares at the same time. One name does both jobs, and partners the venue besides. Citi pitches that as simplicity: one trusted party instead of a chain of intermediaries. Lilith reads it the way she reads any consolidation of control.
One trusted party is also one point of failure.
You log into the wealth portal. The Kaleido position shows a price, a line that moves, a button that says sell. It looks exactly like the screen where you hold a public stock. The interface is doing a lot of quiet work to make a claim feel like ownership.
Here is what the screen will not tell you: if everything went wrong tomorrow, who owes you, and what do they owe?
The answer changes with how the exposure is built, and the token looks identical in every case. So Lilith lays the options out side by side, because the structure is the only thing that separates them.
| Structure | What you hold | Who fails first | Do share rights pass through? |
|---|---|---|---|
| Direct private share | The equity, on the company's cap table | The company itself | Yes, you are the holder of record |
| Citi tokenized DR | A receipt, a claim on Citi | Citi, issuer and custodian in one | Only what Citi chooses to pass through |
| Third-party SPV | A unit in a fund that owns the shares | The fund sponsor or administrator | Indirectly, through the fund's rights |
| Synthetic token | A derivative tracking the price | The counterparty that wrote it | No, there is no share behind it |
Four rows, one blinking number, four different things to own. A direct share puts you on the company's register. The Citi receipt takes the diversity an SPV spreads across a sponsor, an administrator, and a separate custodian and collapses it into a single firm.
A synthetic has no share anywhere, only a promise priced off one.
The wrapper hides which row you are in. That is exactly the moment you need to know it.
A share is a bundle of rights: a vote, a claim on dividends, the information a shareholder is owed, and the freedom to sell to whom you choose. A token is a claim whose contents depend entirely on what its issuer wrote into it.
None of those rights ride along by default.
With a private-company receipt, the live questions are easy to ask and hard to answer from a marketing page. Do you vote your shares, does the custodian vote them, or does nobody? When the company runs a down round or a recapitalization that dilutes early holders, does your receipt adjust, and on whose math? When the company sends shareholders material information, does it reach you, or stop at the bank?
For public ADRs, those answers are standardized and disclosed. For a private share, there is no standard and far less disclosure. Bitget's breakdown of the mechanics notes that a tokenized stock can carry the economic exposure while voting and other rights may not transfer unless they are explicitly passed through. On a public name, that is a footnote. On a private one, where governance terms decide whether early holders see anything in an exit, it is the whole game.
You can hold the receipt and still not hold the thing that makes a share worth owning.
Here is the trap the technology sets without meaning to. A token transfers in seconds. The private share underneath it can take months to sell, if it sells at all.
Public stocks have a price because thousands of people trade them all day and the company files audited numbers on a clock. A private company has neither. Its last "price" might be an eighteen-month-old funding round negotiated by a handful of venture backers.
No tape, no quarterly filing, no crowd. The token can change hands instantly, but that speed is borrowed from the blockchain, not earned by the asset.
So the quote on your screen is not a market price. It is a mark, and a thin one.
That mismatch, a fast wrapper around a slow asset, is where holders get hurt. It feels like you can leave whenever you want. You can move the token whenever you want. Whether you can turn it back into real value, at a real price, on the day you actually want out, is a separate question, and transfer restrictions, eligibility rules, and the simple absence of a buyer decide it. Kodex works through the public-name version of this in are tokenized stocks legal, and the settlement rail beneath the token in how tokenized stocks settle. A private share takes every constraint in those pieces and tightens it.
This is the layer Lilith was waiting for.
A tokenized claim is permissioned. Someone can act on it after you hold it. We have already watched this with stablecoins, where the issuer can write an address out of the system and a balance can be frozen by the party that issued it. A depositary receipt sits in the same family. The issuer is not a neutral pipe. It is a regulated bank carrying obligations to act on legal orders.
Walk it forward. A sanctions designation lands on a holder. A court issues an order. A regulator changes who may own these in your country. Citi is issuer, custodian, and the venue's partner, so the firm that sold you the receipt is the firm that can immobilize it, and the firm whose own solvency stands between you and the shares. If Citi hits an insolvency event, your receipt becomes a claim inside that process, and how senior a claim depends on legal structure few holders ever read.
Concentration is efficient right up to the moment it is the problem. One firm doing every job is one subpoena, one balance-sheet shock, one policy reversal away from being the single thing that decides whether you still own anything.
That is not a reason to never hold one. It is the risk you are being paid, or not paid, to take.
Strip away the chain and the branding and a short list is left, the same one Lilith runs on anything that calls itself ownership.
Who is the issuer of record, and is that the same firm as the custodian and the venue? What does the receipt actually entitle you to: the economics only, or the votes and the information too? What is the underlying worth, and who priced it? Can you redeem for the real share, and who decides whether you are eligible? And if the issuer fails or is ordered to act, where does your claim stand in line?
Run any tokenized private share through those five and the smooth quote stops being the point. The structure becomes the point. Kodex treats this as a survival habit rather than a trading tip in the Survival Framework: read what you are trusting before you trust it.
The token is new. The receipt is old. What you own is whatever the bank behind it says you own.
For accredited and institutional investors in permitted jurisdictions, yes. Citi opened its receipts to foreign and wealth clients first and flagged US access as conditional on regulatory clarity. A tokenized private share is still a security, and the rules that govern private securities still apply. Wrapping it in a token does not change what it legally is.
Not at launch. The first offering targets accredited and largely non-US clients. The "pre-IPO for everyone" framing is the part to set aside. Access is gated, and the gating is built into the structure on purpose.
Only if the issuer passes them through, and with private-company receipts that is not a given. You may hold economic exposure to the share's value while voting and information rights stay with the custodian or never transfer at all. Confirm it before you buy, not after.
Your receipt is a claim on Citi, so a Citi insolvency event pulls your position into that process. Because Citi serves as issuer and custodian at once, the cushion that comes from splitting those roles across separate firms is absent. How your claim ranks depends on the legal structure of the specific receipt.
A depositary receipt is a direct claim on the issuing bank that holds the shares. An SPV is a fund unit, one step removed, with the shares held by the fund. A synthetic is a derivative with no shares behind it at all. Each shows a similar price and carries a different counterparty and a different set of rights. Ask which one you hold before the number on the screen convinces you it does not matter.
