The issuer signs a Risk Disclosure Statement, Stobox's technical, compliance, and legal teams run a final validation, and the STV3 security token is deployed through Stobox Compass — on Base, Arbitrum, or Canton — with a Token Deployment Report issued.
Phase 7 is where preparation becomes an operational, on-chain security. You formally acknowledge and disclose the risks of the offering, Stobox’s technical, compliance, and legal teams run a final validation of everything you have submitted, and the token is deployed through Stobox Compass under the STV3 protocol. When deployment completes, you receive a Token Deployment Report — the moment the offering moves from documentation to a live, transferable, compliance-enforced instrument.
Two things happen in sequence here, and the order matters: you sign the risk disclosures first, then Stobox validates, then the contract is deployed. Signing the disclosures is not a formality — it establishes transparency for investors and legal protection for both you and Stobox, and it is a precondition for validation.
Define Risk Disclosures and Legal Liability
Before deployment, you formally define, disclose, and accept the legal, financial, and operational risks associated with the tokenization project. These risks must be communicated to every relevant party — investors, service providers, and platforms — through a single, written statement.
Objective
The disclosure exercise ensures the issuer:
- Acknowledges all known risks related to the project and its legal structure.
- Discloses those risks clearly and transparently to all parties.
- Limits liability through assumption-of-risk and waiver provisions.
- Complies with regulatory standards for investor disclosures.
The Ten Risk Categories
A complete Risk Disclosure Statement addresses, at minimum, the following categories:
- Regulatory Risk — uncertain or changing classification of tokenized assets.
- Market Risk — price volatility, illiquidity, or token devaluation.
- Asset Risk — underperformance, legal claims, or encumbrances on the underlying asset.
- Technology Risk — smart contract bugs, exploits, or system failure.
- Legal Structuring Risk — jurisdictional enforcement gaps or breakdown of the SPV.
- Tax Risk — unclear or evolving investor tax obligations.
- Custody Risk — asset loss, mismanagement, or third-party failure.
- Force Majeure Risk — political, environmental, or economic disruption.
- Liquidity Risk — inability to resell or trade the tokens.
- Token Performance Risk — yields or returns may not materialize.
Required Document: The Signed Risk Disclosure and Liability Statement
The issuer uploads a signed Risk Disclosure and Liability Statement that includes:
- A complete list and description of the risks outlined above.
- A declaration that the issuer assumes responsibility for the risks within its control.
- A legal limitation of liability for market, technological, and external factors.
- Clauses indemnifying platform operators and investors against misrepresentation.
- A governing-law provision and the date of acceptance.
Why This Step Matters
- Investor Protection — token holders understand their full risk exposure before they commit.
- Issuer Protection — liability is limited for events outside the issuer’s control.
- Regulatory Compliance — satisfies disclosure requirements under applicable securities laws.
- Legal Integrity — establishes enforceable terms for dispute resolution.
Tip: Stobox can provide a customizable legal template for this disclosure, adapted by jurisdiction or token model. Confirm the final wording with qualified securities counsel before signing.
Final Validation and Smart Contract Deployment
Once Stobox receives your signed confirmation, its technical, compliance, legal, and client-success teams run a final validation of the offering.
Review Process
The final review covers:
- Technical review of the smart contract code, metadata accuracy, and STV3 protocol alignment.
- Validation of token classification, investor eligibility, and risk disclosures.
- Consistency checks across all submitted forms, uploads, legal agreements, and structured documentation.
- Final checklist compliance against both internal Stobox standards and jurisdictional requirements.
Stobox tokens are issued under the STV3 protocol — a programmable security-token architecture built on the Diamond Standard (EIP-2535), upgradeable, with compliance enforced at the transfer layer. Stobox is also a backer of the open ERC-7943 (uRWA) standard for compliant real-world-asset issuance, so tokens remain interoperable with the wider regulated-asset ecosystem.
Token Issuance Specification (TIS)
The Token Issuance Specification is a legally binding document that governs the terms and conditions of the tokenized issuance. It is typically referenced in, or attached to, the Board Resolution.
The TIS:
- Defines the nature of the tokenized asset being issued (for example, tokenized equity, real estate, or debt instruments).
- Outlines the rights and obligations of the issuer and token holders — profit-sharing, asset claims, or voting rights.
- Specifies the total token supply, allocation, and distribution mechanisms (private placement, public offering, or institutional sales).
- Includes provisions for lock-up periods, vesting schedules, or redemption rights tied to the underlying asset.
Its importance is twofold: it protects the issuer and token holders by clearly defining the legal and operational parameters of the asset, and it serves as a critical document for regulatory approval, demonstrating compliance with the relevant asset-tokenization laws in your jurisdiction.
Deployment Execution
When validation passes, the token is issued and managed through Stobox Compass, which is non-custodial — the issuer and investors hold their own keys, and Stobox never takes custody of funds or of the asset:
- The token smart contract is deployed on the selected blockchain. Stobox issues security tokens primarily on Base (the primary settlement layer), with Arbitrum and Canton also supported; Compass Lite raises run on Arbitrum One today. Because Base is OP-stack and portable, no single chain is a hard point of failure.
- The initial token supply is minted and assigned to the issuer’s designated wallet.
- Token rights and metadata are published on-chain under the STV3 protocol.
Warning: The validation of token minting by Stobox DOES NOT constitute a legal opinion, tax or financial advice, endorsement of the issuer, or confirmation of full or partial regulatory compliance. This approval merely confirms the absence of obvious omissions, consistency between sections, and alignment with Stobox’s internal standards. Issuers are encouraged to validate the offering structure with their tokenization and legal consultants before proceeding.
Similarly, any purchasers of tokens issued using the Stobox protocol should conduct their own independent due diligence, consult their own advisors, and NEVER rely on Stobox’s validation of the token mint as an endorsement of the issuer.
Token Deployment Report and Token Release
Upon successful deployment, the issuer receives an official Token Deployment Report, which documents:
- The smart contract address.
- The transaction hash and block number.
- The timestamp of deployment.
- The network explorer link (for example, Basescan or Arbiscan).
- The final confirmed token parameters.
- The contract controller and admin address (the issuer wallet).
The Token Is Now Live
- The token becomes fully active and operational on-chain.
- Investor onboarding and distribution may begin.
- Smart contract logic — transferability, whitelisting, yield — is enforced automatically via the protocol.
- Issuer responsibilities for compliance, reporting, and asset management begin immediately.
Notes on the Live Token
- Deployment is legally binding and irreversible.
- Any errors in submitted information must be resolved before final acceptance.
- The token’s enforceable rights and restrictions are now encoded on-chain.
- Stobox continues to provide post-launch support, including compliance updates, investor dashboards, and integration guidance.
Note: The Token Deployment Report is provided by Stobox as a record of the deployment. It is documentation of what was deployed — not a legal or regulatory certification of the offering.
Warning: The validation of token minting by Stobox DOES NOT constitute a legal opinion, tax or financial advice, endorsement of the issuer, or confirmation of full or partial regulatory compliance. This approval merely confirms the absence of obvious omissions, consistency between sections, and alignment with Stobox’s internal standards. Issuers are encouraged to validate the offering structure with their tokenization and legal consultants before proceeding.
Similarly, any purchasers of tokens issued using the Stobox protocol should conduct their own independent due diligence, consult their own advisors, and NEVER rely on Stobox’s validation of the token mint as an endorsement of the issuer.
What you carry into the next phase
You now hold a live, on-chain security token, a signed Risk Disclosure Statement, and a Token Deployment Report confirming exactly what was deployed. Phase 8 turns that live token into a running Security Token Offering — investor onboarding, distribution, and the ongoing compliance and reporting obligations that begin the moment the contract goes live.