Static analysis revealed what human eyes missed: the absence of on-chain settlement logic. Backpack, a centralized exchange with a reputation for crypto-native risk management, announced it would offer 24/7 trading for US equities—including publicly traded stocks like Micron and SanDisk, and private equity from SpaceX. The narrative writes itself: round-the-clock access, tokenized real-world assets, a bridge between TradFi and DeFi. But the code—or rather, the lack thereof—tells a different story. This is not a smart contract breakthrough; it is a service expansion built on top of a traditional off-chain orderbook, with tokenization layers that remain opaque to on-chain verification. The hype will focus on 24/7 liquidity. The silent risk lies in the unverifiable state of asset custody and regulatory exposure.
Context: Backpack is a centralized exchange that has previously focused on spot and derivatives trading for cryptocurrencies. Its move into tokenized stocks places it in the RWA (Real World Assets) narrative—a trend I have tracked through multiple DeFi audits. Unlike pure on-chain protocols (e.g., Ondo Finance or Centrifuge), Backpack’s model is a hybrid: it relies on traditional settlement rails, custody partners, and a central orderbook. The service is live, but the documentation reveals no smart contract code for the tokenization mechanism. The implicit assumption is that Backpack holds the underlying equities in a custodial account and issues synthetic token representations to users. This is not new—Robinhood and eToro have done similar things for years, albeit without 24/7 trading. The novelty is the combination of extended hours and private equity access.
Core Insight: The technical architecture of Backpack’s stock trading is a black box for on-chain analysis. Unlike a DeFi protocol where I can parse bytecode to verify invariants (e.g., total supply vs. collateral ratio), here the only invariants are off-chain—centralized databases, bank accounts, and legal agreements. “Code does not lie, but it does omit,” and what is omitted here is the entire settlement layer. Based on my experience auditing institutional custody systems in 2024—where I uncovered a role-based access control flaw that could allow unilateral fund draining—the absence of open-source code is a red flag, not a green light. Users must trust Backpack’s internal controls, its compliance with securities regulations, and the liquidity providers for private equity.
The 24/7 claim warrants scrutiny. Continuous trading requires a resilient matching engine and market makers willing to quote around the clock. On-chain orderbook DEXs have failed to capture meaningful volume for this exact reason—latency and front-running make it uneconomical for professional market makers. Backpack, as a CEX, avoids the front-running problem by keeping orders in a centralized database. But that same centralization introduces a single point of failure: if Backpack’s database is corrupted or its operators go rogue, the tokenized stocks become worthless entries. The security model is probability-based, not code-enforced. “We build on silence, we debug in noise,” and here the silence from Backpack regarding its tokenization contracts is deafening.
Contrarian Angle: The market will frame this as a win for RWA tokenization, but the greatest blind spot is not technical viability—it is regulatory arbitrage. Private equity tokenization, especially for high-profile companies like SpaceX, almost certainly qualifies as a security under US law (Howey test). Backpack must either restrict access to non-US accredited investors or secure an exemption under Reg D/Reg S. The article itself mentions “regulatory challenges,” but the cursory treatment underestimates the existential risk. If the SEC issues a Wells notice, the 24/7 uptime becomes irrelevant—the platform could be forced to freeze assets or delist the tokens. I have seen similar promises from projects like tZERO and BSTX; none have achieved mainstream adoption due to the burden of compliance.
Furthermore, the valuation of SpaceX shares is opaque. Unlike public stocks with real-time price discovery, private equity trades over the counter with wide spreads and infrequent transactions. Backpack’s liquidity model likely relies on a designated market maker (probably itself or a partner) to provide quotes. This creates a conflict of interest: the same entity that sets the spread also controls the custody. In DeFi, such centralization would be flagged as a critical risk—a single oracle or admin key. Here, it is the product design.
Takeaway: Backpack’s 24/7 stock trading is a clever commercial move that exploits the current bull market euphoria around RWA. But the absence of on-chain audits, the reliance on off-chain custody, and the looming SEC scrutiny make this a fragile experiment. For traders, the question is not whether the service works today, but whether the underlying invariants—solvency, regulatory compliance, and liquidity—can hold when market conditions deteriorate. The curve bends, but the logic holds firm—except when the logic is hidden in a legal contract rather than a smart contract. Watch for the first enforcement action; it will determine whether this is a new asset class or a regulatory trap.
