Cardano developers merged CIP-113, a programmable-token standard that lets issuers attach transfer restrictions, freezes and denylist rules to native assets, into the network's main improvement-proposal repository on Sept. 29.

The proposal adds issuer-controlled transfer logic to Cardano's extended unspent transaction output (eUTXO) model without abandoning the architecture. The Cardano Foundation has framed programmable tokens as infrastructure for regulated financial assets, including stablecoins, securities and real-world instruments that may require transfer restrictions or compliance controls.

The milestone stops short of activation. The CIP-113 official page still lists the proposal as "Proposed." Its path to Active requires issuance on the Preview testnet and mainnet, end-to-end testing and support from a widely adopted wallet.

What does the merge actually deliver?

Matteo Coppola, chief executive officer of Fluid Tokens and a contributor to CIP-113, said the merged standard gives Cardano projects a production-ready specification for securities and other regulated instruments.

"This means the official standard for programmable tokens on Cardano, including securities, is out," Coppola said, adding that contributors had worked to make the framework production-ready.

The Cardano Foundation's framing points to stablecoins, tokenized securities and real-world assets as the primary use cases. Cardano's existing stablecoin market, which includes USDCx backed one-for-one by USDC through Circle's xReserve infrastructure, would gain a compliance layer for issuers that require freeze and denylist functionality.

How do compliance rules spill across a shared output?

The institutional flexibility carries a structural complication rooted in eUTXO. A Cardano transaction output can hold multiple tokens and ADA together, and spending that output consumes it as a unit.

If an output contains restricted token A, unrelated token B and ADA, a freeze or denylist rule on A can prevent the holder from spending the entire output. Neither B nor the ADA has been independently frozen, but both become temporarily inaccessible because they share the output with A.

CIP-113 addresses that dependency through a restructuring mechanism called "unfracking." The process lets one token policy separate from the rest of an output without changing ownership. If permitted, A moves into its own output while B stays in another output controlled by the same holder. A remains restricted, while B no longer falls under A's transfer rules on subsequent spends.

The separation is not automatic. An unfracking transaction requires the holder's authorization and must satisfy the affected token's registered separation rules. Those rules can demand an additional signature, impose script-level conditions or block restructuring entirely.

The proposal draws a line between blockage and seizure. An issuer's control over A does not transfer ownership of B, and the reference implementation preserves balances belonging to unrelated token policies during authorized third-party actions.

What does this mean for wallets and DeFi?

The practical effect is that asset ownership alone may no longer determine immediate spendability. How tokens group inside an output, and what separation permissions each policy allows, becomes part of the risk attached to holding or accepting them.

The CIP-113 reference implementation describes single-policy outputs as the preferred construction, although the validator does not require developers to use them. Wallets that segregate programmable policies by default would reduce the chance that one issuer's compliance action blocks unrelated tokens.

ADA is also exposed. Cardano outputs carrying tokens also carry ADA, meaning some of the network's native asset can become temporarily inaccessible when it shares an output with a restricted programmable token. A displayed balance may show what a user owns but not what they can immediately spend.

Lending protocols face collateral-management consequences. A platform accepting a programmable token would need to assess whether its issuer can freeze transfers, whether the protocol can authorize separation, and whether those controls could interfere with withdrawals or liquidations. A restriction arriving during a market downturn could be particularly consequential if a lender cannot move collateral when it needs to close an undersecured position.

Wallet developers may segregate programmable policies by default. Lending protocols may impose lower collateral values, tighter loan-to-value parameters, or reject tokens whose freeze and separation rules create uncertainty around liquidation.

What comes next?

Production adoption will test the trade-off. As projects adopt CIP-113, decisions on output construction and issuer permissions will determine whether regulated assets plug into Cardano's DeFi markets cleanly, or whether protocols must price in the risk that compliance controls restrict access to collateral when liquidity matters most.

The next measurable step is issuance on the Preview testnet, followed by mainnet deployment and integration into a widely used wallet before the standard moves to Active status.