Skip to content
Back to Blog

Responsible DeFi: How WisdomTree Manages Risk While Building Onchain

May 4, 2026

Screenshot 2026-02-20 at 4.42.56 PM
Rohan Ranadive

Rohan Ranadive

Chief Risk Officer, WisdomTree Digital Assets

Onchain finance is maturing. That requires more than access and composability. It requires legal clarity, disciplined issuance, continuous monitoring, and controls designed for real markets operating in real time.

Every cycle in digital assets reminds the market of the same truth: innovation does not eliminate risk. It changes where risk lives.

Recent events across DeFi, onchain lending, cross-chain infrastructure, and tokenized collateral have made that point especially clear. The lesson is not that onchain finance is broken, it’s that onchain finance is becoming real enough, important enough, and interconnected enough that participants can no longer treat risk as an afterthought.

That is particularly true as tokenized real-world assets move deeper into onchain commerce.

At WisdomTree, we do not see this as a reason to step back from DeFi. We see it as a reason to approach it the same way serious financial institutions have always approached new markets: with clear structure, disciplined controls, continuous monitoring, and a willingness to distinguish durable infrastructure from fragile design.

WisdomTree has long used the term Responsible DeFi to describe a broader ethos of engaging onchain in a mature, regulated, and risk-managed way.

To me, responsible DeFi does not mean avoiding innovation. It means bringing familiar principles of risk management, investor protection, legal clarity, and operational resilience into a new environment where settlement is programmable, markets operate 24/7, and risk can move quickly across interconnected systems.

DeFi’s promise is real. So is the need for discipline.

Onchain finance and DeFi are related, but not identical

We use the terms onchain finance and DeFi deliberately.

Onchain finance refers broadly to the use of blockchain infrastructure for issuance, recordkeeping, settlement, transfer, and investor access. DeFi refers more specifically to protocols and applications that use smart contracts to facilitate activities such as lending, borrowing, trading, liquidity provision, and other financial activities.

WisdomTree is deeply engaged in onchain finance. Our approach to DeFi is measured: we focus on structuring and providing access to regulated tokenized assets in a manner that maintains issuer controls, investor protections, compliance obligations, and operational integrity within the product itself, recognizing that these safeguards may not extend in the same way to external decentralized environments. Users should independently evaluate any external decentralized protocols, including associated risks and controls.

DeFi is powerful because it makes assets, liquidity, and logic interoperable. But interoperability is not the same thing as safety. Composability can create efficiency, but it can also propagate weak assumptions across a stack very quickly. A strong base asset can still encounter problems if the wrapper is weak, if the bridge design is weak, if the oracle design is weak, or if the market structure around that asset is improperly configured.

That is why we think about risk not just at the asset level, but across the full lifecycle of issuance, movement, access, monitoring, and settlement.

That is also why I would draw a line between participating in DeFi and endorsing every protocol or downstream use case that may emerge around an onchain asset.

Those are not the same thing.

Making a regulated tokenized fund available onchain does not mean every leverage loop, vault strategy, or collateral structure built around that fund automatically inherits the same control environment. In traditional finance, investors can lever a safe asset in unsafe ways. The same is true onchain. Responsible participation means being clear about that distinction.

This distinction is important for reputational as well as operational reasons. When a regulated tokenized asset is available onchain, third parties may attempt to use it in ways that WisdomTree does not sponsor, control, or endorse. Responsible participation requires making that boundary clear while also monitoring how the asset is being used across supported environments.

Structure still matters onchain

For WisdomTree, responsible DeFi starts with structure.

Our digital funds are built within a regulated ’40 Act framework, with independent oversight, segregated assets, and integrated recordkeeping. The shareholder record is maintained through our regulated recordkeeping framework, with onchain and off chain records aligned and reconciled daily.

Tokenized assets need to preserve a clear connection between the onchain token, the underlying legal rights, and the official books and records that define ownership and investor entitlements.

That distinction matters because token integrity and legal structure are related, but not identical. Legal structure helps define the rights and obligations associated with the product. Token integrity asks whether the onchain representation continues to map cleanly and truthfully to those rights and records over time.

In onchain finance, both questions matter.

That is why we believe durable tokenization requires more than simply putting an asset on a blockchain. It requires preserving the legal, operational, and accounting chain of trust around that asset.

Issuance must remain controlled

That chain of trust must extend into issuance and access controls as well.

WisdomTree’s Token Issuance Platform (TIP) is designed to coordinate onchain actions such as mint, burn, transfer, pause, freeze, and clawback with regulated issuance and redemption workflows, helping ensure that onchain tokens and transactions map cleanly to the relevant legal, operational, and financial records.

Importantly, minting and burning of fund tokens is controlled by WisdomTree, not by bridges or third parties. We do not rely on bridges to create fund shares, replicate issuer functions, or introduce confusion around who the issuer is. That distinction matters. It helps preserve a single source of truth around supply, ownership, and reconciliation, and it reduces the risk that token movement could be mistaken for token issuance.

In practice, that means we are not outsourcing core issuance logic to wrapped-asset mechanics. Issuance remains governed by WisdomTree’s own workflows, controls, and oversight.

Access is permissioned. Monitoring is continuous.

Access control matters too.

Our token standards extend beyond basic token functionality to include pause and freeze controls, whitelisting, and compliance-oriented features. In our EVM-based architecture, wallet whitelisting is implemented using a soulbound token (SBT), a non-transferable token designed to bind eligibility and access control to a specific wallet. That means access to our digital funds is not simply a matter of possessing a wallet. It is tied to onboarding, review, and permissioning.

This reflects the fact that our products are regulated securities with investor protections, eligibility requirements, and controlled access features. That structure is intentionally different from open commodity-like crypto assets designed for unrestricted transferability, because the legal and regulatory frameworks are different.

Monitoring is the other half of the equation.

Responsible DeFi is not just about designing controls at launch. It is about maintaining visibility after launch.

That includes wallet screening, transaction monitoring, smart contract monitoring, behavioral alerts, and ongoing risk assessments designed to identify unusual activity or deteriorating conditions. It includes continued monitoring of blockchain telemetry, settlement conditions, infrastructure dependencies, and other signals that can indicate stress before a problem becomes a loss event.

It also includes monitoring expected behavior. That means understanding what normal looks like for wallets, flows, token usage, subscriptions, redemptions, and transfers, and paying close attention when reality diverges from that expectation. In onchain systems, even small anomalies can matter, whether they appear as unusual transaction patterns, spoofing attempts, dusting activity, or unexpected smart contract interactions.

The goal is not simply to observe the market. It is to translate onchain intelligence into action.

When necessary, controls can be tightened, flows can be reviewed, tokens can be paused or frozen, and response measures can be escalated. That ability to act matters just as much as the ability to monitor.

Code matters. So do configuration, governance, and real-world operations.

The same is true for smart contracts.

Responsible participation in DeFi requires not just reviewing smart contract audits, but continually evaluating how smart contracts behave in production, how integrations evolve, and where new dependencies are introduced. Code is important, but so are configuration, governance, upgrade paths, access controls, and the surrounding infrastructure that makes the code function in the real world.

Many onchain incidents do not result from a single line of code failing in isolation. They can arise because a system behaves exactly as configured, but the configuration, governance process, validation assumptions, oracle design, liquidity parameters, or absence of operational speed bumps leaves too much room for stress to propagate.

In traditional markets, controls such as review processes, settlement discipline, trading halts, collateral rules, and human escalation paths can slow down or contain certain failures. Onchain systems need their own version of those guardrails.

In a market that increasingly prizes seamless user experience, the technology underneath still has to reconcile back to authoritative records. Our view is that customer experience should feel simpler than the underlying architecture, not the other way around.

The complexity of multi-chain issuance, subscriptions, redemptions, and distributions should not become operational fragility for the end user. It is our job to handle those intricacies safely, securely, and at scale.

One fund, multiple chains, one source of truth

That philosophy becomes even more important in a multi-chain world.

The future of tokenized finance is unlikely to be one chain, one wallet, or one venue. The real challenge is preserving a single fund, a single integrated shareholder record, and a single source of truth while allowing investors to interact through different supported blockchain environments in a way that feels seamless to the customer.

That does not mean creating different economic products on every chain, and it does not mean relying on uncontrolled bridge-based replication of fund shares. It means using governed issuance and redemption workflows across supported environments so that movement across those environments does not compromise recordkeeping, reconciliation, distributions, or shareholder rights.

The goal is straightforward: make access simpler for the customer while preserving the integrity of the fund, the shareholder record, and the operational controls that sit behind both.

“The goal is not to create different economic products on every chain. The goal is to allow one fund’s AUM to be represented across chains and wallets while preserving the shareholder record, reconciliation, and distributions in a secure and scalable way.” — Rohan Ranadive

That is where I believe institutional DeFi is heading.

  • Not toward less control, but toward better-designed control.
  • Not away from composability, but toward composability with guardrails.
  • Not toward hiding risk, but toward understanding where risk sits and building around it deliberately.

Responsible DeFi, in that sense, is not a slogan. It is a design discipline.

It means being willing to say that some uses of onchain assets are more mature than others. It means distinguishing access from endorsement. It means recognizing that a well-structured fund can still be used in a poorly structured market, and that risk management must account for that.

It means treating blockchain analytics, smart contract monitoring, legal structure, wallet controls, reconciliation, and dynamic response not as isolated features, but as one integrated operating model.

The technology will keep evolving. So will the market.

Our job is to make sure the principles that matter most do not get lost in the speed of that evolution.

About the contributor

Rohan Ranadive

Rohan Ranadive

Chief Risk Officer, WisdomTree Digital Assets

Mr. Ranadive joined WisdomTree in April 2024 to lead Risk Management for the firm’s Digital Assets business. With 25+ years of experience at the intersection of Risk, Technology, and Regulatory Change, Rohan has led enterprise transformation initiatives across top-tier U.S. financial institutions. His leadership at BB&T, Truist, and U.S. Bank delivered strategic business and risk programs that addressed evolving supervisory expectations, cyber resilience, and complex tech modernization efforts. Rohan brings deep domain expertise in digital asset compliance, blockchain risk frameworks, and cyber/digital governance. He is AWS-certified in Solutions Architecture and Machine Learning/AI, and a TRM Labs–certified Advanced Crypto Investigator—demonstrating his commitment to innovation and regulatory readiness in emerging technologies. Rohan holds an MBA from Wake Forest University and completed executive programs at the Stonier School of Banking and Wharton’s Executive Leadership Program.

Thought Leaders