CertiK’s 2025 Skynet Report on RWA Security Highlights Leading Tokenized Projects

CertiK, the largest provider of Web3 security services, has released its 2025 Skynet Real World Asset (RWA) Security Report, outlining a comprehensive framework of structured criteria designed to help users conduct due diligence and assess the risks tied to various RWA protocols.

Real World Assets (RWAs) are becoming increasingly prominent within the Web3 ecosystem, as more participants aim to unlock additional value by tokenizing traditional assets and bringing them on-chain. This shift allows for greater efficiency and accessibility in asset transfers. However, as CertiK highlights, the fusion of traditional finance (TradFi) and decentralized finance (DeFi) in the creation of RWAs introduces a new layer of hybrid security risks that go far beyond conventional smart contract vulnerabilities.

These complex risks include oracle manipulation, failures in custody and counterparty obligations, legal framework limitations that can render agreements unenforceable, and fraudulent Proof-of-Reserve attestations. As such, RWA protocols must account for these multifaceted threats to ensure user trust and platform resilience.

The report also presents new data on the evolving RWA threat landscape. CertiK reports that direct losses stemming from RWA-specific exploits reached approximately $14.6 million in the first half of 2025. This follows fluctuating annual losses of $6 million in 2024 and $17.9 million in 2023. As with all decentralized financial products, the influx of users and capital into the RWA space makes it an increasingly attractive target for malicious actors—further reinforcing the need for enhanced security measures and proactive risk management.

According to CertiK’s RWA framework outlined in the report, the top-rated protocols—such as those operated by traditional finance giants BlackRock and Franklin Templeton—demonstrate robust security profiles by incorporating institutional-grade standards in compliance, asset custody, and operational transparency. Other notable projects rounding out the top five on the Skynet RWA Leaderboard include Ondo Finance, PAX Gold, and Tether Gold.

CertiK further notes that RWA adoption is heavily concentrated within a few key blockchains and protocols. Currently, a significant portion of RWA value is hosted on select networks like Ethereum. This concentration implies that the overall resilience and long-term viability of the RWA ecosystem depend largely on the security and operational soundness of a small group of platforms and their underlying infrastructures. As a result, CertiK stresses that proactive engagement with specialized security providers will be critical for both existing and emerging RWA projects to mitigate evolving threats and sustain growth.

Download the report: https://indd.adobe.com/view/53094d22-4dc8-4b7c-beb8-f72b863f4976

CertiK is the world’s leading provider of Web3 security services, leveraging advanced formal verification technology to safeguard and monitor blockchain protocols and smart contracts. Founded in December 2017 by professors from Yale and Columbia Universities, CertiK bridges academic innovation with enterprise-grade security solutions, enabling blockchain applications to scale safely and reliably.

As one of the fastest-growing and most trusted names in blockchain security, CertiK has established itself as an industry leader. The company has served over 5,000 enterprise clients, protected more than $600 billion in digital assets, and uncovered over 180,000 vulnerabilities across blockchain ecosystems. Its clientele includes high-profile projects such as Aptos, Ripple, The Sandbox, Polygon, BNB Chain, and TON.

Since its inception, CertiK has attracted investment from 12 top-tier firms, including Sequoia Capital, Coatue, Goldman Sachs, Shunwei Capital, and Insight Partners. The company is currently valued at over $2 billion.

Follow Discord, Telegram, and Twitter for the latest news and announcements.