When I was working in Jefferies' DCM group, we regularly fielded calls from LPs asking about liquidity options for private credit positions. The honest answer, most of the time, was: there are none that work at your deal size. Broker-dealer facilitation requires minimum face values that most individual instruments do not reach. Bilateral negotiation takes months and often ends without a transaction. The LP holds to maturity.
The tokenized secondary window model changes this — not by creating a deep, liquid exchange, but by solving the operational problem that makes small-size secondary transactions economically inviable today. This piece is a structured overview of how that model works: what the issuer controls, what the compliance architecture enforces, and what the realistic economic improvement looks like.
The Core Concept: A Controlled Bilateral Trading Window
A tokenized secondary window is not a public exchange. It is a time-limited, permission-gated trading mechanism that an issuer opens for a defined pool of whitelisted investors. Think of it as a structured bilateral market — similar in structure to a Dutch auction for a private bond, except the price is set by bilateral matching between investors rather than by the issuer.
The mechanics at a high level:
- The issuer designates a liquidity window: a specific period (72 hours, 5 business days, one week) during which secondary trading is open.
- Investors who hold tokens and want to sell post ask prices — how many tokens they want to sell and at what price relative to the most recent NAV.
- Investors who want to buy post bid prices — how many tokens they want to acquire and at what price.
- Where bids and asks match, trades execute automatically via smart contract.
- Settlement is immediate and atomic — the token moves from seller to buyer, the cap table updates, and a signed transaction record is written on-chain, all in a single transaction.
- The window closes. Any unmatched orders expire. The cap table reflects the new ownership state.
The issuer does not intermediate the trade. They set the parameters — window timing, eligible counterparty pool, pricing constraints — and the smart contract enforces them.
What Issuers Control
The issuer's control surface in the secondary window model is broader than most people initially expect. This is not a mechanism where once the window is open, anything goes. The issuer configures:
Eligible counterparty pool. Only wallet addresses that are on the issuer's whitelist — and that hold current compliance attestations in the ERC-3643 identity registry — can participate in the window. The smart contract checks eligibility at the moment of trade execution, not at the moment of order placement. If an investor's attestation expires mid-window, their pending orders do not execute.
Window timing and frequency. Issuers set when windows open and how often. A common configuration for a 2-year term loan: one secondary window at month 12 and another at month 18, each lasting 5 business days. Some issuers open quarterly windows for active funds with higher LP turnover. The schedule is set at issuance and disclosed in the offering documents.
Pricing band constraints. To prevent distressed pricing that would impair non-selling LPs, issuers can set a floor on ask prices — for instance, no asks below 92% of the most recent monthly NAV. Ceiling constraints can also limit how high buyers can bid relative to NAV, preventing a buyer from effectively overpaying in a thin market where a large buyer faces no competition. These are configurable parameters, not hardcoded limits.
Maximum position transfer per window. Issuers may limit what percentage of any LP's position can be sold in a single window. A 25% position transfer cap prevents a single LP from liquidating their entire holding in one window, which could signal distress information to remaining LPs or destabilize the instrument's investor base.
How Compliance Is Enforced at Trade Execution
The compliance architecture is worth examining carefully because it addresses the concern most commonly raised by LP counsel: "What prevents an ineligible buyer from acquiring tokens in a secondary trade?"
Every trade in the secondary window must pass the ERC-3643 compliance module's canTransfer check before executing. This check runs at the moment of settlement, not at order placement. It verifies:
- The buyer's wallet holds a current accreditation attestation (not expired)
- The buyer's jurisdiction passes the issuer's eligibility rules (for example, only US accredited investors for a Reg D 506(c) instrument)
- The buyer's AML status is not flagged (no active sanctions hit in the identity registry)
- The transfer amount does not violate position concentration limits set in the compliance module
- The minimum seller holding period has been satisfied
If any condition fails, the trade reverts. Not "is flagged for review" — reverts. The token does not move. This is the architectural guarantee that distinguishes on-chain compliance from off-chain compliance: there is no race condition between the check and the settlement. They are atomic.
The secondary window does not create new compliance risk — it creates a compliance-enforced trading mechanism where previously the only option was negotiated bilateral transfers with manual compliance review. From a regulatory examination standpoint, the on-chain record is cleaner than the paper trail from a series of bilateral negotiations.
The Economics: Why This Works at Instrument Sizes Where Broker-Dealers Won't
Return to the core problem. A $15 million term loan with an LP holding a $2 million position. Broker-dealer facilitation requires a minimum deal size that this does not meet. The LP has no secondary exit path.
With a tokenized secondary window, the issuer's marginal cost of running the window is the gas fee for the smart contract execution — at current Polygon rates, a few cents per transaction — and the platform fee for the secondary window infrastructure. There is no intermediary who needs to earn a 150-basis-point fee to make the economics work. The matching and settlement are automated. The compliance check is automated. The cap table update is automatic.
The LP who wants to sell their $2 million position can post an ask in the window. If another whitelisted investor — an existing LP in the fund, or an approved new investor the issuer has pre-whitelisted — wants to buy at that price, the trade executes. Total time from window open to settlement: hours, not months.
We've seen funds in early-stage discussions report that the availability of a structured secondary window changes how they price primary subscriptions. LPs who would previously require a higher yield to compensate for illiquidity — a liquidity premium baked into the investment terms — are willing to accept tighter pricing when a credible, contractually-specified secondary window exists. The premium that was implicit in the yield becomes explicit as a negotiating point, and funds with strong LP relationships often find that the actual liquidity demand is lower than the implied premium they were paying.
What the Window Does Not Provide
Honest expectations matter. The secondary window model has real limitations that issuers should communicate clearly to LPs at subscription:
It is not guaranteed liquidity. If no whitelisted investors want to buy at the asking price, the order does not execute. A seller in a thin market may not find a buyer at NAV. Price discovery in a small pool can be imprecise, particularly for instruments with complex underlying credit or limited recent NAV movement to anchor pricing.
It is not continuous liquidity. Windows open on the issuer's schedule. An LP who needs to exit in month 8 of a 2-year instrument with windows only at months 12 and 18 still has no immediate exit option. Some fund structures allow the issuer to open emergency windows at their discretion for hardship cases, but this is at issuer discretion, not LP right.
It is not a substitute for instrument quality. A tokenized instrument with poor credit performance will have thin secondary demand in a window, regardless of the compliance and settlement mechanics. The window solves the operational problem; it does not solve the underlying credit problem if one exists.
Designing Windows for Your Investor Base
The design decisions that matter most for secondary window effectiveness are investor pool size and disclosure clarity.
Pool size is the practical liquidity determinant. A window with 80 whitelisted investors generates more potential matching than a window with 20. Issuers who intend to offer secondary windows should think about secondary liquidity pool construction at the point of primary distribution — not as an afterthought six months into the fund's life. Pre-whitelisting secondary buyers who have expressed interest in the instrument but did not participate in primary issuance is a common approach.
Disclosure clarity determines LP expectations. The offering documents should specify, precisely: window schedule, pricing constraints, position transfer limits, and what happens if an LP's attestation has lapsed when a window opens. LPs who subscribed with accurate expectations about secondary mechanics are less likely to raise concerns mid-fund than LPs who assumed liquidity was more accessible than it is.
The tokenized window model is a genuine structural improvement on the status quo for the instrument sizes and market segment where Capkindle operates. It is not a claim that private credit is now as liquid as public markets — it is a claim that the operational barriers to small-size secondary transactions are solvable, and that solving them has measurable effects on fund pricing, LP satisfaction, and capital deployment velocity.
