Gold’s entire history as a store of value is, at its core, a trust problem. The metal itself is inert. It doesn’t produce cash flows, pay dividends, or compound. Its utility as money and as a reserve asset has always rested on a social agreement — that the thing you hold is what you were told it is, in the quantity you were told, and that no one else has a prior claim on it. Every layer of the modern gold market is an institutional answer to some aspect of that trust problem. And every one of those institutions charges for the privilege of manufacturing that trust on your behalf.
The London Bullion Market Association (LBMA) sets standards for good delivery bars. Custodians like HSBC and JP Morgan vault physical metal in London and Zurich. Exchange-traded products like SPDR Gold Shares (GLD) offer investors exposure without direct custody, but add another layer of intermediation — the fund manager, the authorized participants, the depository. Futures markets traded on the CME allow price exposure without any metal changing hands, backed by COMEX warehousing infrastructure. Each layer solved a real problem. Each layer extracted a fee and introduced new counterparty risk.
Tokenized gold doesn’t replace the metal. What it changes is the audit trail — and, eventually, the structure of custody itself.
The Current Market and Its Structural Problems
The global gold market is large and opaque in roughly equal measure. Total above-ground gold stocks are estimated at around 212,000 metric tonnes, with a market value north of $13 trillion at current prices. Of that, central banks hold roughly 36,000 tonnes. Exchange-traded products account for another 3,000-odd tonnes. The rest is split between jewelry, industrial uses, and private investment holdings of varying verifiability.
The opacity is not incidental. It is structural. Physical gold markets have operated for centuries on allocated and unallocated account systems where the same metal can support multiple claims simultaneously — legally, in the case of unallocated accounts where a bank holds gold “on behalf of” a client but commingles it with the bank’s own inventory. In an unallocated account, you are an unsecured creditor of the bank, not the owner of specific bars. If the bank fails, you join the queue.
This is not a theoretical risk. MF Global’s 2011 collapse revealed the fragility of commodity account structures. In gold specifically, the LBMA’s own data on clearing volumes — averaging around 24 million ounces per day in recent years — implies that the same physical ounce is being traded many times over on any given day. The gold market runs on fractional reserve principles that would be immediately recognizable to anyone who has studied how banks manufacture money from deposits.
In an unallocated gold account, you are an unsecured creditor of the custodian, not the owner of specific bars. If the institution fails, your claim on the metal joins the general creditor queue. The entire premise of gold as a safe haven depends on a legal structure that undermines it.
What Tokenized Gold Actually Offers
The two most established tokenized gold products currently operating are Paxos Gold (PAXG) and Tether Gold (XAUT). Both work on a similar model: physical gold is held by a custodian (Brink’s, in Paxos’s case), and each token represents a claim on a specific quantity of allocated metal — typically one fine troy ounce. The tokens are redeemable for physical delivery above minimum thresholds, or can be sold on secondary markets.
The combined market capitalization of these products remains modest relative to the broader gold market — PAXG and XAUT together represent well under $1 billion in gold at current prices, a rounding error against the $13 trillion total market. The infrastructure exists. The adoption has not yet followed.
But the architecture is instructive regardless of current scale. A tokenized gold system built on a public blockchain creates an audit trail that traditional gold custody does not. Every transfer is recorded, every wallet balance is verifiable, and — critically — the token supply can be compared against independently verifiable custodian attestations of physical holdings. This doesn’t eliminate custodian risk entirely. The metal still has to sit somewhere, and that somewhere is still an institution. What it does is make the gap between claimed holdings and actual holdings publicly detectable rather than something you have to take on faith.
The Audit Problem That Traditional Gold Markets Ignore
Traditional gold ETFs publish holdings data, but the audit process is slower and less granular than their marketing suggests. GLD, for example, publishes a daily list of gold bars held, identified by bar number and weight. In principle, any investor can cross-reference this list against a physical audit. In practice, full independent audits of GLD’s holdings are infrequent, conducted by KPMG, and rely on HSBC as sub-custodian providing access to its vaults. The audit is of the custodian’s records, not of every bar. The chain of trust runs through institutions, not mathematics.
The gold market has also never fully recovered from the reputational damage of the tungsten-core bar scandals — periodic discoveries of gold bars drilled out and filled with tungsten, which has nearly identical density. These incidents are rare, but their existence points to the fundamental verification problem: once gold enters a vault, the assertion that it is what it is becomes a function of the vault operator’s credibility, not any continuous verification process.
A properly designed tokenized gold system, combined with IoT-enabled provenance tracking and third-party attestation on-chain, could change that. It doesn’t require trusting that the custodian’s records are accurate; it requires that the process of attestation is transparent enough that any discrepancy becomes visible. That is a structurally different trust model.
Commodities Beyond Gold
Gold is the most legible example because it has the deepest existing market and the most established history of custody opacity. But the same logic applies, with variations, to other commodity markets.
Silver markets have historically suffered from more severe manipulation allegations than gold, partly because the market is shallower and the concentrated positions held by a small number of major banks are harder to obscure. Oil markets have a different custody model — physical delivery at specific locations, denominated in barrel-equivalents — but the intermediation structure between producer, trader, bank financier, and end buyer is equally layered with institutions charging for trust manufacturing.
Tokenized commodity receipts — warehouse receipts, in traditional finance terminology — have existed in paper form for centuries. Translating them on-chain is not conceptually novel. What changes is the composability: a tokenized commodity receipt on a public blockchain can be pledged as collateral in a DeFi lending protocol, traded on a decentralized exchange, or bundled into a structured product without any of those operations requiring an intermediary to verify or transfer the underlying claim. The commodity becomes programmable money in a way that a warehouse receipt in a filing cabinet is not.
The Custodian Problem Remains
It would be convenient to end here with a clean argument that tokenization has solved the commodity trust problem. It hasn’t, and it won’t until one specific issue is addressed: the oracle problem at the physical layer.
A token on a blockchain is only as reliable as the attestation linking it to the physical asset it represents. If that attestation is provided by a single custodian making periodic claims — even with cryptographic signatures — the fundamental trust problem has been relocated, not eliminated. You now trust the custodian’s on-chain assertions rather than their paper records. The improvement is real but modest.
More durable solutions require either continuous physical monitoring (credible but expensive and technically challenging at scale) or a network of attestors whose collective fraud would be prohibitively difficult to coordinate (structurally sounder but organizationally complex). Neither exists today in the commodity tokenization market at any meaningful scale.
This is not a reason to dismiss the direction. It is a reason to be precise about where the current generation of tokenized commodity products sits on the spectrum between “marginally better than the status quo” and “fundamentally different trust model.” PAXG is closer to the former. A future in which continuous IoT-enabled monitoring, multi-party custodian networks, and on-chain proof-of-reserve systems converge would be closer to the latter.
Why Institutions Are Moving Slowly and Why That Will Change
Central banks, the largest holders of physical gold, have shown essentially zero interest in tokenized gold products. This is unsurprising. Central banks hold gold precisely because it is outside the financial system’s digital infrastructure — a hedge against the failure of the systems that tokenization runs on. Asking a central bank to put its gold on Ethereum is asking it to abandon the hedge.
Institutional asset managers face a different calculus. For a family office or pension fund seeking gold exposure, the question is not ideological. It is operational: does tokenized gold offer a better risk-adjusted access path than GLD or allocated physical? Currently, liquidity, regulatory clarity, and counterparty due diligence all favor the traditional products, despite their structural opacity. That balance will shift as tokenized gold scales, as regulatory frameworks mature, and as the audit advantages of on-chain provenance become more institutionally legible.
The $13 trillion gold market did not build its infrastructure overnight. It accumulated over decades of institutional habit, regulatory entrenchment, and the compounding of network effects. The tokenized version will not displace it quickly. But the direction is identifiable: every financial market that runs on trust eventually encounters the question of whether that trust needs to be manufactured by institutions or whether it can be embedded in code. Gold, which exists precisely as an answer to institutional trust failure, is not exempt from that question. It is, if anything, the most natural place to ask it.