BlackRock BUIDL: What the On-Chain Contract Actually Controls

BUIDL is the token of the BlackRock USD Institutional Digital Liquidity Fund Ltd., a British Virgin Islands fund. SEC filing On Ethereum mainnet it is an ERC-20 token at a single contract address. Observed on-chain This page analyzes that one contract — not every BUIDL share class, chain or deployment.

Evidence as of October 25, 2026, read from Etherscan and the fund's SEC filings.

The exact contract analyzed Observed on-chain

Because the token is a proxy, its implementation can be changed by whoever holds the upgrade authority — a later read may differ.

Standard and permissioning Observed on-chain

The implementation is a verified contract named DSToken — part of Securitize's DS Protocol for permissioned digital securities. It presents an ERC-20 interface, but it is a permissioned security token, not an open ERC-20, and it is not an ERC-3643 (T-REX) token.

Transfers are checked against external compliance and registry services the contract references (it calls a pre-transfer check before moving tokens). In practice, ordinary transfers succeed only between addresses that satisfy those registry and compliance checks.

Observed on-chain controls Observed on-chain

Functions the contract exposes, and what each means for a holder:

• Mint / issue. New tokens can be issued (issueTokens and related functions). Supply is not fixed by the contract.
• Burn. Tokens can be burned from a holder (burn / omnibus burn).
• Pause. All transfers can be paused and unpaused contract-wide.
• Seize (forced transfer). Tokens can be moved from one address to another without the holder’s signature (seize / omnibus seize).
• Transfer restriction. Each transfer must pass compliance + registry checks; non-approved addresses are blocked. Per-holder restrictions exist.
• Upgradeable implementation. The proxy can point to new logic, so the contract’s behaviour can change after deployment.

These are capabilities the contract exposes. Whether and how they are used is a separate question.

Privileged roles and controllers Observed on-chain Unknown

The implementation defines DSToken operational roles — including issuer, master, transfer agent and exchange — plus an owner. The operational controls above (mint, pause, seize, transfer restriction) are available to whoever holds the matching roles.

Upgrade authority is separate. The token is deployed behind an upgradeable proxy, so its implementation can change. The proxy's upgrade authority is a distinct mechanism and should be treated separately from the DSToken operational roles above; this analysis does not establish the exact upgrade admin from primary sources and does not map upgrade power to any named DSToken role — it is left as unknown.

A role's on-chain name is an observed fact. It does not by itself establish which real-world organization holds the keys. Mapping a specific address or controller to BlackRock, Securitize, a transfer agent or any named entity requires separate, independently grounded evidence, and is left as unknown where that evidence is not established.

Eligibility and redemption

On-chain gating. Observed on-chain Ordinary transfers are subject to the contract's compliance and registry checks; a transfer can be blocked when the recipient does not satisfy the configured eligibility checks.

Offering terms. SEC filing The fund's SEC Form D/A (filed 2026-07-27, CIK 0002013810) reports it is offered to qualified purchasers under Regulation D Rule 506(c) and Investment Company Act §3(c)(7), with a $100,000 minimum investment stated in that filing. The filing lists Securitize Markets, LLC as placement agent.

Subscription and redemption. Unknown Reading this contract does not establish the subscription or redemption process. OnChainRisk has not verified those mechanics or operators against current primary sources in this analysis, so they are left as unknown. The $100,000 figure above is only the minimum stated in the SEC filing; no other minimum is asserted here.

Issuer and legal evidence, by source

Learn more

• How OnChainRisk analyzes a tokenized asset — what the analysis looks at and how it reads a contract.
• The token is not the asset — what to verify before relying on a tokenized real-world asset.

Frequently asked questions