Every prospective allocation at WhiteKnightOS is run through this list. Common red flags first, then the concrete on-chain or off-chain verification that disproves them — with the lookup source linked live.
| Common red flag | Disprove it | Look up |
|---|---|---|
|
Unaudited reserves
Marketing claims $XB in reserves, but no recent independent audit report and no live proof-of-reserve feed.
|
Verify reserves on-chain via a live Chainlink Proof of Reserve feed (or equivalent) on Etherscan, and pair the supply with the issuer's most recent audit from a top-tier firm (OpenZeppelin, Trail of Bits, Spearbit, Cantina). | Chainlink Proof of Reserve · OpenZeppelin audits · Trail of Bits · Spearbit · Cantina · |
|
Single-writer oracle
NAV, redemption rate, or reserve value is set by one address that can move it unilaterally.
|
Read the oracle contract's transmitters / aggregator addresses on Etherscan and confirm the multisig threshold plus signer count. For Chainlink feeds, look the feed up on data.chain.link and verify the heartbeat and deviation thresholds. | data.chain.link (Chainlink feed explorer) · Etherscan contract page · |
|
Opaque legal wrapper
The issuer names a Cayman SPV or BVI company but no public registry record, no filed accounts, and no real address.
|
Look up the issuing SPV on its jurisdiction's company registry — BVI Registry, Cayman Registry, Delaware Division of Corporations, CNV Argentina (PSAV registry), or CVM Brazil — and confirm directors, registered agent, and current standing. | BVI Registry · Cayman Registry · Delaware Division of Corporations · CNV Argentina PSAV registry · CVM Brazil · |
|
Jurisdictional ambiguity on real estate
A parcel or building is tokenized but the SPV jurisdiction does not actually cover the parcel — or the registry cannot find the parcel ID.
|
Pull the parcel ID from the public registry for the asset's country (IBGE Brasil, SII Chile, INDEC Argentina) and cross-reference against the SPV's stated jurisdiction. Mismatch = red flag. | IBGE Brasil · SII Chile · INDEC Argentina · |
|
Custodial concentration risk
All assets sit with one custodian, no SOC 2 Type II, no segregation of client assets.
|
Verify the listed custodian against its SOC 2 Type II report (AICPA) and cross-check the on-chain asset custody contract — Fireblocks MPC, BitGo Trust, Anchorage — on the relevant chain explorer. | AICPA SOC 2 · Fireblocks · BitGo Trust · |
|
Unverified minting authority
A single EOA can mint or burn the supply — supply cap is theoretical, not enforceable.
|
Read the contract's owner / mint role on Etherscan's Read Contract tab. Reject single-EOA authority. Demand a Safe (Gnosis) multisig with public signer visibility. | Etherscan Read Contract · Safe (Gnosis) signers · |
|
Stale or unreliable NAV
NAV updates monthly (or never) while the underlying real-world metric moves daily — and there is no on-chain oracle injecting the new NAV.
|
Compare NAV update cadence to the underlying real-world data source (rent rolls, commodity index, fund AUM feed). Demand an external oracle pushing NAV on-chain; NAV updated only by issuer PDFs is a red flag. | — |
|
Smart-contract upgrade centralization
The contract is upgradeable but the upgrade key is held by one team or one EOA with no delay.
|
Read the proxy contract's upgradeTo access control and ownership pattern. Demand a Timelock + multisig (Safe, OpenZeppelin Defender) with public signer visibility. No timelock = veto. | OpenZeppelin Defender · Safe (Gnosis) · |
|
Off-chain counterparty not registered
The trustee, operator, or fund manager is not listed on any financial regulator registry.
|
Verify the operator/trustee on its regulator: SEC EDGAR / IAPD (US), FINRA BrokerCheck (US), FCA Register (UK), MAS (Singapore), or the local regulator in the issuer's jurisdiction. No match = no-go. | SEC EDGAR / IAPD · FINRA BrokerCheck · FCA Register (UK) · MAS (Singapore) · |
|
AML / KYC gaps
No clear transfer agent, no named KYC provider, no Travel-Rule compliance — secondary market is unmetered.
|
Confirm the issuer runs through a named transfer agent / KYC provider (Sumsub, Onfido) and that record-keeping meets FATF Travel Rule. Unmetered peer-to-peer transfers across borders is a hard red flag. | Sumsub · Onfido · |
Before any allocation lands in a client portfolio, the WKOS advisor walks each line of this list against the issuer's public artefacts. Anything that doesn't disprove the red flag is a no-go — not a hedge.
Brief chat, no pitch. Bring an issuer you want to underwrite and we'll run the list together.
Open the dashboard →Onboarding opens in waves. Drop your email to hold a slot.
Join the waitlist →Be first when we open RWA advisory onboarding — drop your email.