Tokenized Assets: Recoverability of an exploit

The consequence of an exploit, not just its probability, depends on the token's transferability. Where a token is permissioned and an authoritative off-chain register (a regulated transfer agent's book) is the controlling record, a contract exploit disrupts the on-chain layer but is recoverable: the register can restore correct balances and permissioning blocks stolen units from escaping to the open market, so loss is bounded. Where a token is freely transferable and the chain itself is the record, theft is final and immediately fungible, so loss is unbounded. The real driver is whether an authoritative override, freeze, reverse, or reissue, exists and would survive the exploit; permissioning is the strongest form of it, though some freely-transferable issuers retain a freeze function that provides a partial equivalent. This recoverability distinction weights smart-contract exposure downward for permissioned, register-backed tokens and upward where the on-chain balance is the only record.