Skip to content
Reading depth

Each view includes the earlier layers; the complete engineer or auditor page is shown by default.

A token is a programmable ledger entry that represents units a blockchain system can track and transfer.

Circle category cue

A token is a ledger representation, not one fixed kind of economic asset.

Applications need a common way to identify balances and apply rules for transfer, issuance, burning, approvals, redemption, or governance. Token interfaces make those operations legible to wallets and other contracts. The economic meaning still comes from the token’s issuer, backing, protocol rules, and legal context.

An account entry, security certificate, currency unit, or membership record can all resemble a token. No single analogy is sufficient: two tokens with the same technical interface can represent a direct asset, redeemable claim, pooled share, debt claim, derivative exposure, or governance right.

The holder controls units under the token’s authorization rules. The issuer or protocol defines supply and entitlements. Administrators may pause, freeze, upgrade, or recover units. Operators receive allowances or approvals to act for a holder. Integrators decide how the token is valued and accepted elsewhere.

To interpret a token, ask two separate questions:

  1. What state does the contract or protocol record?
  2. What economic right does one unit represent?

The first question is technical. The second may require reserve reports, governance rules, legal documents, or another protocol’s accounting. The asset-versus-claim page joins the two.

These six labels are a starting taxonomy, not mutually exclusive token types. A layered token can be a pooled share with a redeemable claim, or a debt claim whose payoff is also a derivative exposure. Name every material right and the layer at which the token is a direct asset.

  1. Define the ledger unit and the economic right, if any, that one unit represents.
  2. Establish who may issue, transfer, approve, freeze, upgrade, burn, or redeem units.
  3. Mint units only under the documented supply, backing, or entitlement rule.
  4. Transfer units or delegate a bounded operator right while preserving authorization and balance accounting.
  5. Burn, lock, or redeem units when their ledger position or associated claim is settled.
  6. Reconcile balances, total supply, backing, and any external obligation after every operation.

An interface may omit, extend, or restrict these operations. “ERC-20” describes an API contract; it does not prove that minting is capped, transfers are permissionless, or redemption exists.

Capital flow occurs when token units or their underlying assets move. Claim flow occurs when minting or deposit creates an entitlement. Control flow runs through holders, spenders, administrators, and upgrade keys. Return flow exists only when a named payer, economic activity, or issuance program supplies value; a token balance alone is not a payer. Risk flow follows bugs, privileged actions, backing shortfalls, and integrations that assume the wrong token behavior.

A token balance has no automatic return. Borrowers may pay interest, users may pay fees, issuers may distribute asset income, and sponsors may fund incentives. Protocol issuance creates new units and can dilute non-recipients rather than paying from existing revenue. If token code, backing, custody, or an integration fails, holders or the dependent protocol’s users absorb the loss unless an explicit reserve, insurer, guarantor, or recovery process reallocates it.

Interpreting a token assumes that its contract identity, chain, decimals, authorization rules, supply controls, backing, and stated economic rights are the ones an integration actually observes. A familiar interface, name, or symbol does not establish those facts. Failure modes include unauthorized mint or transfer, accounting drift, frozen or unredeemable balances, compromised administration, backing shortfall, and dependent contracts applying the wrong behavioral assumptions. The affected holders or integration users bear the result unless a specifically funded recovery layer reallocates it.

Review balance and supply conservation, zero-value and boundary transfers, allowance races and operator scope, mint/burn authorization, fee-on-transfer or rebasing behavior, hooks, callbacks, pause/freeze/deny-list powers, proxy upgrades, event consistency, decimals, and non-standard return values. Integrations should check observed behavior rather than assuming every token implements a nominal standard identically.

  • “A token is the underlying asset.” Often it is a representation or claim.
  • “The symbol identifies the token.” Contract address, chain, and verified implementation matter; symbols can collide.
  • “A standard interface proves solvency.” Interface compatibility says nothing about backing or issuer performance.

The final ERC-20 specification standardizes balances, transfers, approvals, allowances, supply, and events so tokens can be reused by wallets and applications. It explicitly leaves room for implementations with different trade-offs; the interface is not an economic classification.

Machine-readable model

Key equations

Canonical expressions come from the structured concept record. KaTeX renders the notation, while the plain-text expression and variable table keep its meaning and units inspectable without JavaScript. Read the narrative above for the model's domain, assumptions, and rounding rules.

This concept does not require one canonical equation. Its mechanism and state transitions remain the authoritative explanation; do not invent a formula merely to make the topic look quantitative.

Assurance contract

Security properties

These structured statements define desired behavior. Their stable IDs can bind tests, invariants, specifications, audit findings, or proof results without turning descriptive review advice into an assurance claim.

Desired · not evaluated: No test, audit, or proof result is implied until scoped evidence is linked to this property.

  1. Transfers conserve units except when an authorized issuance or burn rule applies

  2. No account balance becomes negative

  3. Only authorized actors can mint, burn, transfer, or spend another holder's units

Knowledge check

Quiz

Answer in your own words, then open the model answer.

What problem does Token exist to address?

Model answer

Tokens let software identify ownership or entitlement and apply consistent transfer, issuance, and redemption rules.