Digital Asset Clearing Center (DACC) says CertiK has completed a security audit of specified smart-contract code supporting components of its ChainFusion platform, adding another security-assurance layer as Hong Kong accelerates the development of tokenized bonds and regulated digital-asset infrastructure.
Digital Asset Clearing Center is putting smart-contract security under greater scrutiny as it develops DACC ChainFusion, a platform designed to connect traditional financial infrastructure with public and private blockchain networks.
The Hong Kong-based company said CertiK, a blockchain security firm, has completed an audit of the in-scope smart-contract code supporting specified ChainFusion components. The review examined areas including privileged functions, role-based permissions and access-control logic, with findings and recommendations documented in CertiK’s final report.
The announcement comes at a strategically important point for Hong Kong’s digital-asset market. The city is moving beyond experimentation with tokenisation toward regulated infrastructure that can support issuance, distribution and potentially secondary trading of blockchain-based financial products.
Hong Kong’s Monetary Authority (HKMA) has already overseen several government tokenized-bond issuances. Its latest 2026 market review said the government’s November 2025 tokenized bond issuance reached approximately HK$10 billion, with subscriptions exceeding HK$130 billion. The HKMA has also said it intends to support regular tokenized-bond issuance and improve interoperability between digital and traditional financial infrastructure.
That makes security architecture more than a technical consideration. If tokenized securities are eventually used at institutional and retail scale, weaknesses in smart contracts, custody systems or transaction controls could create risks that extend beyond a single blockchain application.
What the DACC audit actually means
A smart-contract audit is essentially a specialist review of blockchain code designed to identify vulnerabilities and logic problems before or during deployment.
CertiK says its audit methodology combines manual code review with automated analysis and, where appropriate, formal verification. Its audits can examine issues such as access-control weaknesses, reentrancy, arithmetic errors and implementation flaws.
For DACC, the stated audit scope is narrower than the entire ChainFusion ecosystem. The company says CertiK reviewed specified components and in-scope smart-contract code, rather than presenting the exercise as a comprehensive security assessment of every part of its infrastructure.
That distinction is important for institutional buyers.
A smart-contract audit can identify vulnerabilities in the reviewed code, but it does not automatically validate the security of surrounding infrastructure, wallets, APIs, blockchain networks, operational procedures or future code changes. CertiK itself notes that an audit is not a guarantee against every possible security issue.
For financial institutions, security assurance therefore has to operate as a layered process rather than a one-time certification.
Tokenized bonds are becoming a real infrastructure market
DACC’s announcement is taking place against a rapidly changing regulatory environment in Hong Kong.
The SFC introduced a framework in April 2026 for the tokenisation of SFC-authorised investment products, defining tokenisation as creating blockchain-based tokens that represent ownership in an investment product. The regulator identified potential benefits including operational efficiency, reduced reliance on intermediaries and new distribution channels.
The SFC also introduced a framework for the potential secondary trading of tokenized SFC-authorised investment products through licensed virtual-asset trading platforms. As of March 2026, the regulator said 13 tokenized products were publicly offered in Hong Kong, with assets under management in tokenized classes rising to US$10.7 billion, roughly seven times the level a year earlier.
That creates a different technology requirement from the early blockchain experiments of the previous decade.
The industry is increasingly looking for infrastructure that can connect traditional securities workflows—issuance, investor eligibility, settlement, custody and compliance—with blockchain-based ownership and transaction records.
DACC positions ChainFusion in that intersection.
Compliance becomes part of the technology stack
The company’s description of ChainFusion includes bank-grade hot-and-cold wallet segregation and real-time Know Your Transaction (KYT) and anti-money-laundering screening.
Those capabilities point to an important reality for institutional tokenisation: blockchain transparency does not eliminate the need for regulated controls.
A public blockchain may provide an immutable transaction record, but financial institutions still need to know who is transacting, whether a transaction is permissible, how assets are safeguarded and how suspicious activity is handled.
This is particularly relevant as Hong Kong expands regulated access to digital assets. In May 2026, the Financial Services and the Treasury Bureau and SFC concluded consultations on proposed regulatory regimes for virtual-asset advisory and management services, with legislative proposals expected to move forward in 2026.
The direction is clear: Hong Kong wants digital assets to operate within increasingly defined financial-market rules rather than outside them.
For platforms such as DACC, that means technology has to satisfy both blockchain-native requirements and conventional financial-market controls.
The institutional opportunity—and the hard part
Tokenisation promises to automate parts of asset issuance and settlement, improve transparency and potentially make financial instruments more programmable.
But institutional adoption depends on more than putting a bond on a blockchain.
Banks, asset managers and investors need reliable custody, identity controls, legal certainty, interoperability and predictable settlement. They also need confidence that smart contracts cannot be manipulated through administrative privileges or poorly designed access controls.
That is why DACC’s decision to commission an external audit is relevant, even though an audit should not be treated as proof that the complete platform is risk-free.
The broader market is moving toward exactly this kind of layered infrastructure. HKMA’s Project Ensemble has progressed from sandbox experimentation toward real-value pilot transactions involving tokenized deposits and digital assets, with use cases spanning fixed income, investment funds, liquidity management, green finance and trade finance.
In that environment, DACC is attempting to position ChainFusion as an interoperability and clearing layer connecting conventional finance with multiple blockchain environments.
The commercial test will be whether that architecture can support regulated transactions at meaningful scale.
DACC also says Juniper Research named it a Gold Winner in the Banking-as-a-Service Innovation category at the 2026 Fintech Payments Awards. That recognition is useful as an industry signal, but the more consequential validation will come from institutional deployments, regulatory acceptance, transaction volumes and independent security testing over time.
For Hong Kong’s tokenized-finance ambitions, those are the metrics that will determine whether blockchain infrastructure moves from promising pilot technology to dependable financial-market plumbing.
Market Landscape
Hong Kong is increasingly positioning tokenisation as part of mainstream financial-market infrastructure rather than a standalone crypto initiative.
The HKMA’s work on tokenized bonds and Project Ensemble, combined with the SFC’s frameworks for tokenized investment products and secondary trading, is creating a regulated environment in which blockchain infrastructure can interact with banks, asset managers and capital markets.
That creates opportunities for infrastructure providers spanning custody, compliance, token issuance, settlement and interoperability.
DACC’s ChainFusion proposition fits into this emerging category. Its challenge is that institutional-grade infrastructure has a much higher bar than a conventional Web3 application. Security audits, access controls, operational resilience, compliance monitoring and governance all become part of the product.
Competition will also come from established financial-market infrastructure providers, banks developing their own tokenisation platforms and blockchain networks building institutional settlement capabilities.
For enterprise financial teams evaluating tokenization infrastructure, the critical questions will be broader than whether a smart contract has been audited. They will need to assess audit scope, code-change governance, key management, permissioning, identity and AML controls, interoperability, disaster recovery and the legal treatment of tokenized assets.
Top Insights
- DACC says CertiK audited specified ChainFusion smart contracts, focusing on access controls, privileged functions and other security-sensitive code supporting tokenized-asset workflows.
- Hong Kong’s tokenized-bond market is moving toward institutional scale, with the HKMA reporting a record HK$10 billion government issuance in November 2025.
- The SFC is expanding regulated tokenization frameworks, including potential secondary trading of tokenized investment products through licensed virtual-asset platforms.
- Smart-contract audits can strengthen security assurance but do not replace broader testing, operational controls, custody safeguards or continuous monitoring across financial infrastructure.
- DACC is positioning ChainFusion as a bridge between traditional finance and blockchain networks as Hong Kong develops regulated digital-asset market infrastructure.
Get in touch with our fintech expert
