Cardano CIP-0113: Issuer Freeze and Seize Powers Go Live

Quick answer: On October 7, 2026, the Cardano Foundation announced that CIP-0113, a programmable token standard, is live on Cardano mainnet. It lets the issuer of a regulated token attach rules that the ledger enforces on every mint, burn and transfer: KYC checks, sanctions blocking, transfer limits, and, where the token’s own rules allow it, freezing or seizing balances. It needs no hard fork. It does not touch ADA, and it doesn’t change any existing token unless the issuer opts into the framework. As of October 7, no named stablecoin, bond or fund had launched on it.

That’s the headline. The more interesting question is what it means when “your keys, your coins” meets a token that an admin can move without your signature, and how much of the launch story rests on the Foundation’s own word. We’ll take both in turn.

What CIP-0113 Actually Is

Cardano’s native tokens have always moved freely once minted. If you hold one, nobody can stop you sending it, and nobody can pull it back. That’s great for ordinary assets and awkward for regulated ones. A stablecoin issuer who must block a sanctioned wallet, or a tokenized fund that can only be held by verified investors, has had no way to enforce that on the ledger itself.

CIP-0113, formally titled “Programmable token-like assets,” is the fix. According to the proposal text, it defines tokens that require a script to execute successfully before they can change hands. The authors listed on the proposal are Michele Nuzzi, Matteo Coppola, Philip DiSarro and Giovanni Gargiulo, and the work dates back to January 2023.

The design has three layers:

• A registry. A shared on-chain list where programmable tokens are registered by policy ID. A token that isn’t registered is treated as an ordinary native token.
• Shared standard components. The core scripts that hold programmable tokens and check each transfer.
• Substandards. Per-token scripts where the issuer defines the actual rules: who can receive, what limits apply, who can act as an administrator.

The practical result, as several outlets describe it, is that the rules travel with the asset. Cardano Foundation CEO Frederik Gregaard put it this way: regulated assets need rules that “travel with the asset and be enforced every time it moves.”

The Timeline, and Where the Sources Disagree

Here’s the sequence we can piece together:

• March 9, 2026: The Cardano Foundation published a blog post describing a preview environment on a testnet. It called a professional audit of the core contracts “a necessary step before any production use can take place.”
• September 29, 2026: The CIP pull request (#444, 90 commits per several reports) merged into the official CIPs repository. The Cardano Forum’s September 30 digest listed it as completed, but quoted one community member calling it “another step toward Active status.”
• October 7, 2026: The Foundation announced at TOKEN2049 that CIP-0113 is live on mainnet, according to Crypto Briefing, The Cryptonomist and Blockonomi.

Now the wrinkle. When we checked the CIP page itself, its status still read “Proposed,” with an update date of September 29. In Cardano’s process, merging a CIP isn’t the same as it reaching “Active.” So “merged” and “live on mainnet” are two different claims, and the second one comes from the Foundation’s announcement rather than from the standard’s own status field. We haven’t independently verified mainnet deployments on-chain, and we’d treat “live” as “the Foundation says the framework is deployed and tools support it.”

There’s also a second, smaller conflict. Coverage describes the audit status as clean. The Cryptonomist and Blockonomi report that the Foundation’s September update said the first programmable-token module had no critical or high-severity findings, and that earlier audit findings were fixed or accepted as residual design limitations. But a cached version of the pull request discussion we read included a contributor arguing that an audit had missed multiple high-severity issues and that the release wasn’t ready. We couldn’t date that comment, and the Foundation’s reporting came later, so we don’t want to overweight it. It’s still a reason to read the actual audit reports rather than a headline. Separately, Blockonomi reports that a CMTA-based reference profile has not had a formal third-party audit yet, and its repository says one is planned.

Freeze and Seize: How It Works, and Who Holds the Keys

Two functions grab the attention here, and it helps to separate them.

Freezing pauses transfers. A stablecoin issuer might use it on a sanctioned address or in response to a court order. Seizure goes further: an authorized operator can move tokens out of a holder’s address without that holder signing. Per the proposal text, seizure is handled through a “third-party action” that must actually change the token’s balance while keeping the seized tokens inside the programmable-token system. The “Freeze and Seize” reference substandard is described as a simplified stablecoin contract whose third-party script requires signatures from a designated set of admin keys.

The limits matter just as much as the powers:

• Controls are optional modules chosen per token. The framework provides the plumbing; each issuer decides which rules to turn on.
• Permissions can be split among different operators, so one account needn’t hold every power.
• Nobody can freeze ADA, and the standard gives no one control over existing Cardano native tokens that haven’t been registered.

The proposal’s own security section is blunt about the trade-off. Third-party actions can move tokens without holder consent, the standard doesn’t restrict who can trigger them, and integrators have to review each substandard to see who can do what. Crypto Briefing reached the same conclusion in plainer words: holders are trusting the issuer as much as the code.

Why Issuers Want This, and Why Regulators Care

Tokenized funds, bonds and regulated stablecoins are where much of the institutional interest sits. Rules on who may hold an asset, and the ability to correct errors or comply with legal orders, are standard in traditional finance. Public chains have mostly lacked a native way to do it, which is why Base added similar issuer controls in its Cobalt upgrade, which we broke down in our Cobalt explainer. Cardano’s approach differs in one respect: it’s a standard built on top of the existing token model rather than a new native token type on a layer-2.

There’s one regulatory signal worth noting. The Swiss Capital Markets and Technology Association (CMTA) has reportedly recognized CIP-0113 as functionally equivalent, from a smart-contract standpoint, to its CMTAT framework for certification. That’s a useful credential for anyone issuing tokenized securities in Switzerland, though it isn’t a guarantee of anything elsewhere. For the wider backdrop, see our look at Wall Street’s tokenization push.

What Launched, and What Hasn’t

Launch-day support reportedly includes the Eternl and GeroWallet wallets, the CardanoScan explorer, and BloxBean developer tooling. Fireblocks is expected to support Cardano native tokens by March 2027, which is a forward-looking claim, not a current feature.

And here’s the part that’s easy to miss in the excitement. Three outlets noted that no named stablecoin, tokenized fund or bond had launched under the standard as of October 7. A framework without issuers is infrastructure waiting for customers. ADA traded near $0.271 that day, up about 2.5% over 24 hours according to CoinGecko data cited by Blockonomi and crypto.news, and both stressed the data doesn’t show the launch caused the move. We wouldn’t read price into this at all yet.

A Realistic Scenario

Imagine you hold a tokenized money-market fund on Cardano after a future issuer adopts CIP-0113. The fund’s rules say transfers only go to verified wallets. You try to send a portion to a friend whose wallet hasn’t been verified, and the transaction simply fails at the ledger level. That’s the standard working as designed, and for a regulated fund it’s a feature.

Now suppose the issuer receives a court order about a different holder. Under the fund’s rules, an administrator can freeze or move that holder’s balance. Your own tokens aren’t affected, unless your wallet bundles several assets in a single output. The Crypto Briefing piece flags exactly that risk: because Cardano’s eUTXO model lets one output carry multiple assets, restricting one token could complicate handling of others sitting beside it. The standard includes an “unfracking” mechanism so holders can reorganize their own outputs for a given policy, but wallets and DeFi apps will need to handle it carefully.

What Holders Should Check Before Buying a Programmable Token

1. Is it registered as programmable? If not, it behaves like any native token.
2. Which substandard does it use? The substandard determines whether freezing or seizure exists at all.
3. Who holds the admin keys? A single key, a multisig, or split operators? The proposal asks implementations to document upgrade authority and to use two-phase authority changes.
4. Has this specific token’s code been audited? The core framework having an audit isn’t the same as every issuer’s module having one.
5. Using it as DeFi collateral? The proposal warns that protocols accepting programmable tokens as collateral should verify the substandard, since seizure could affect that collateral.

This is the same discipline we covered after the SingularityNET bridge hack: when an admin key controls the asset, the key’s security is the asset’s security.

What It Means for the Cardano Ecosystem

Cardano has spent years trying to attract institutional use, including the push for a spot ETF we covered in our Cardano ETF piece. Programmable tokens are a bet that the next wave of on-chain value is regulated assets that need controls, not just permissionless ones. Whether that works depends on adoption: wallets integrating it cleanly, custodians following through, and above all an issuer actually shipping something.

There’s also a philosophical cost. Some Cardano users value its permissionless token model, and this standard introduces assets that deliberately aren’t. The opt-in design and the ADA carve-out soften that, but the debate over how much issuer power belongs on a public chain isn’t going away.

FAQ

Is CIP-0113 live on Cardano mainnet?

The Cardano Foundation announced on October 7, 2026 that it is, and several outlets repeated the claim. The CIP page itself still lists the status as “Proposed” after the September 29 merge, so we’d call it announced and supported by launch-day tooling rather than independently confirmed.

Can anyone freeze my ADA?

No. Multiple reports state that ADA is not made freezable and that the standard gives no one control over existing native tokens that haven’t been registered as programmable.

Does this require a hard fork?

No. Reports say it uses existing primitives, so tokens remain native Cardano assets with an added validation layer.

Which tokens use CIP-0113 today?

As of October 7, no named stablecoin, bond or tokenized fund had launched under it, according to Crypto.news, Blockonomi and The Cryptonomist.

Was the code audited?

The Foundation says the core framework was professionally audited, with findings fixed or accepted, and that the first programmable-token module had no critical or high-severity findings. A CMTA-based reference profile still awaits a formal third-party audit. Read the audit reports yourself before relying on any specific token.

Does this affect the ADA price?

There’s no evidence it does. ADA was near $0.271 on October 7, and reporting that day said the data doesn’t establish the launch as the cause of the move.

Key Takeaways

• CIP-0113 lets issuers of regulated Cardano tokens enforce KYC, sanctions, transfer limits, freezes and seizure at ledger level.
• The Foundation announced mainnet availability on October 7, 2026, after the CIP merged on September 29. The CIP page still showed “Proposed” status when we checked.
• It’s opt-in per token. ADA and unregistered native tokens are unaffected.
• No named stablecoin, fund or bond had launched on it as of launch day.
• Audit claims come mainly from the Foundation. One reference profile is unaudited, and a contributor disputed the audit in a PR thread we couldn’t date.
• For any programmable token, check the substandard, the admin keys and the token’s own audit.

Sources and References

• Cardano Improvement Proposals: CIP-0113, Programmable token-like assets
• GitHub: cardano-foundation/CIPs pull request #444
• Cardano Foundation: Programmable Tokens for Cardano (March 9, 2026)
• Cardano Forum: Digest September 30
• crypto.news: Cardano lets token issuers freeze and seize assets under new rules (Oct 7, 2026)
• Crypto Briefing: Cardano Foundation launches CIP-0113 token standard (Oct 7, 2026)
• The Cryptonomist: Cardano programmable tokens compliance (Oct 7, 2026)
• Blockonomi: Cardano token issuers can now freeze and seize assets under CIP-0113 (Oct 7, 2026)

Disclaimer: This article is for educational purposes only and isn’t financial, legal or tax advice. Crypto assets are volatile and tokenized assets carry issuer, smart-contract and regulatory risk. Always do your own research (DYOR) and consult a qualified professional before making decisions.

Want more on how tokenized assets and network upgrades are changing what “owning” a token means? Browse our latest upgrade explainers and subscribe for the next one.