AMM Design in 2026: When the Curve Lists a Stock

For most of its life, an automated market maker had one social rule: it had none. A constant-product pool would quote a price to anyone, settle a trade for anyone, and let anyone deposit liquidity, because the contract never looked past the wallet in front of it. That indifference was the point. It is also, in 2026, the thing that is changing.

Two events this year turned the permissionless curve into something it was never built to be. In July, Uniswap Labs shipped Permissioned Pools on v4, a way for a token issuer to decide who is allowed to trade and provide liquidity in a given pool. In September, the US Securities and Exchange Commission handed that design a legal home, publishing a five-year exemption that lets tokenized shares of real companies trade on an AMM without the venue registering as a stock exchange. Put together, they describe a new kind of market: a curve that asks who you are before it will quote you a price, and that is now allowed to list Apple or Nvidia next to a memecoin.

This piece walks through that inversion: how a permissioned pool works, what the SEC actually granted, why a tokenized stock behaves nothing like the assets AMMs were designed for, and who ends up carrying the risk when the curve starts quoting equities.

The formula that never asked who you were

The mechanism at the center of decentralized trading is almost embarrassingly simple. A constant-product pool holds a reserve of two tokens and enforces a single rule: the product of the two reserves must stay constant, written x times y equals k. Every swap moves along that curve, and the ratio of the reserves is the price. Nobody posts a bid or an ask; the formula is the market maker. Vitalik Buterin sketched the idea in a March 2018 ethresear.ch post about front-running resistance, crediting the formulation to the Gnosis team, and Hayden Adams turned it into Uniswap later that year.

What made the design spread was not the math but the absence of a gatekeeper. Uniswap v1 (November 2018) paired every token against ETH at a flat 0.30% fee. v2 (May 2020) allowed any ERC-20 pair and added an on-chain price oracle. v3 (May 2021) introduced concentrated liquidity, letting providers bunch capital into price ranges for far better capital efficiency. v4, live since January 2025, wrapped all of it in a single pool contract with hooks: small pieces of code that run at set moments in a swap. Through all four versions, one assumption held: a pool is open to the world. Any address can swap, any address can become a liquidity provider, and the contract never checks a name, a jurisdiction, or a license.

That openness is why DEXs became a structural force rather than a novelty. By October 2026, on-chain spot venues cleared a record of more than $600 billion in a single month, with Uniswap alone leading near $170 billion, according to The Block. The curve won because it never asked permission. The irony of 2026 is that its next act depends on learning how.

The 2026 inversion: a curve that checks your ID

The pressure to gate the curve came from the assets people most wanted to put on it. Money-market funds, private credit, US Treasuries and, increasingly, listed equities are all regulated instruments. They cannot legally change hands between arbitrary wallets: a tokenized Treasury fund has to know its holders, an equity carries voting and dividend rights, and the issuer is on the hook for who ends up owning it. A permissionless pool, which by definition sells to anyone, is the wrong container for any of them.

Uniswap Labs answered on 23 July 2026 with Permissioned Pools on v4. The feature uses a hook to enforce an issuer-controlled allowlist: before any swap settles, and before anyone can mint a liquidity position, the pool checks whether the address is approved. If it is not, the transaction reverts. Everything else about the pool, the constant-product or concentrated-liquidity math, the fee logic, the routing, works exactly as before. The only thing added is a bouncer at the door.

Crucially, the feature is opt-in. Standard v4 pools stay permissionless and unchanged, and developers can still deploy them without anyone’s approval, as Uniswap was careful to stress at launch (Crypto Briefing). The launch partners signal the intended use: Superstate and Securitize, two issuers of tokenized funds and securities, plus Dowgo, helped shape the standard. Securitize alone is among the largest tokenization issuers, administering several billion dollars of assets. The curve did not lose its openness; it grew an optional lock.

The compliance logic lives in the hook

To see why this is a design story and not just a policy one, it helps to know where the rule lives. In v4, a hook is a contract attached to a pool that the pool calls at defined points, for example just before a swap or just before a liquidity position is created or destroyed. A Permissioned Pool points its hook at an allowlist that the asset issuer, or a compliance provider acting for the issuer, controls. The hook has a narrow job: answer yes or no to whether an address is cleared to transact here, at the moment of the trade.

That is a meaningfully different approach from the older way of restricting a regulated token, which was to bake transfer rules into the token contract itself, the model behind many security-token standards. Putting the check in the pool’s hook keeps the token clean and moves the gate to the trading venue, where it belongs. It also means the same underlying token could, in principle, trade in a gated pool for cleared participants and sit untradeable in a standard pool for everyone else, with the venue, not the asset, drawing the line.

The tradeoff is that someone now holds administrative keys over who can trade, and that someone is a legal entity with obligations. An allowlist has to be maintained, addresses added after know-your-customer checks and removed when a holder is sanctioned or offboarded. The permissionless ideal of a market that runs itself gives way to a market with an operator, an operator who can be served with a subpoena. That is not an accident of the implementation; it is the entire point, and it is what makes the next piece, the SEC’s blessing, matter.

The SEC opens a narrow door

On 17 September 2026 the SEC gave the permissioned pool a legal category to live in. It issued what it called an innovation exemption: a pair of five-year, conditional reliefs that let tokenized shares of listed US companies trade through AMM liquidity pools without the usual registration machinery. One relief exempts the venue from the definition of a securities exchange, so a so-called Tokenized Securities Venue can run AMM pools without registering as a national exchange. The other, flagged by firms including Morgan Lewis, exempts certain liquidity providers in those pools from the definition of a dealer. The order took effect on 17 September 2026 and expires on 17 September 2031 (SEC).

The detail that matters most for AMM design is the scope. The relief is written for automated market makers and liquidity pools specifically and, as several law firms noted, it does not extend to a standalone central limit order book. The regulator effectively picked the AMM as the on-chain trading mechanism it was willing to bless first. A pure order-book venue, the design most crypto perpetual exchanges such as Hyperliquid use, falls outside the door. It is a useful reminder that order-book venues are not AMMs, and would not fit the same exemption.

SEC Chairman Paul Atkins framed it as modernization. The commission, he said, “is taking a significant step forward … to bring America’s capital markets into the digital age by facilitating onchain trading” (CoinDesk). Markets read it as a win for the venue most likely to host the activity: UNI, near $7.70 and a top-25 token by market value in early November (CoinGecko), jumped roughly 28% in the sessions around the announcement, even though Uniswap itself received no exemption and simply happens to offer the pool type that fits the category (CoinCentral).

Rights-backed versus synthetic: the line that decides who is in

The exemption is conditional, and the conditions are where design meets law. A venue has to give at least 30 days of notice before tokenizing a given company stock, and the issuer of that stock can object and block it. The contracts have to be public and auditable. And, most consequentially, only real-ownership tokens qualify: the token has to pass through the economic and governance rights of the underlying share, so a holder actually receives dividends and can vote. Synthetic or derivative tokens that merely track a price are not covered.

That single condition sorts the field. Rights-backed tokenized securities, the kind issuers such as Securitize and Ondo have built, carry the shareholder’s economic rights and fit inside the perimeter. The synthetic stock tokens that some offshore venues have offered, price-tracking wrappers that do not convey ownership, sit outside it. It is a deliberate choice to privilege the version of tokenization that keeps the investor’s rights intact over the version that is merely a price feed with a ticker.

For an AMM, honoring those rights is not free. A pool holding a real equity token has to cope with the mechanical reality of being a shareholder of record somewhere: dividends have to reach holders, votes have to be routable, and corporate actions have to be handled. None of that exists for a memecoin, and none of it was ever part of the constant-product design. The exemption, in other words, did not just permit tokenized stocks on AMMs; it imported the entire apparatus of corporate ownership into a contract that was built to do one arithmetic operation.

Why a stock is not a memecoin

Drop a listed equity into a pool designed for free-floating tokens and a list of mismatches appears immediately. Each one is a design problem that the pool, the hook, or the venue has to solve:

• Dividends. A share pays cash periodically. A pool holding that share has to decide how the dividend reaches liquidity providers without distorting the reserve ratio, and therefore the price.
• Corporate actions. Splits, reverse splits, mergers and spinoffs rewrite the share itself. The token and every pool holding it has to be adjusted in lockstep, or the on-chain price detaches from reality.
• Trading halts. Exchanges halt a stock on news or volatility. An AMM has no halt; the curve keeps quoting. A gated pool has to be able to pause, or it will trade through a halt that the rest of the market is honoring.
• An off-chain reference price. The real price of the stock forms on Nasdaq or the NYSE, not in the pool. The pool is a satellite market that has to be tethered to that price by arbitrage and by an oracle.
• Market hours. Equities trade during set hours and the primary market closes. A 24/7 pool quotes a price all weekend for an asset whose anchor market is shut.
• Voting and rights. Shareholders vote. A token sitting in a pool is held by a contract, so the venue has to route governance rights back to the economic owner.

Each of these is why just put the stock in a pool was never a one-line change. The permissioned hook handles who may trade; it does nothing about dividends, halts or splits. Those fall to the issuer, the oracle and the venue’s operational rules, which is exactly why the SEC’s conditions read like a description of a brokerage rather than a description of a smart contract.

Permissionless versus permissioned, feature by feature

The two pool types share a code lineage and almost nothing else in their social contract. The table sets the differences side by side.

Read down the right-hand column and a pattern emerges: almost every property that made AMMs radical, openness, censorship resistance, permissionless composability, is deliberately switched off. What remains is the efficient pricing engine. The permissioned pool is a bet that the curve’s mechanism is valuable enough to keep even after you strip away the ideology that first carried it.

The oracle problem when the market is closed

An AMM does not know what anything is worth. It only knows its reserve ratio, and it relies on arbitrageurs to drag that ratio toward the real price. For a free-floating token, the pool often is the real price. For a tokenized stock, the real price lives on a regulated exchange that the pool cannot see, which makes the oracle, the mechanism that imports the off-chain price, the most load-bearing part of the whole design.

This is a known failure surface. AMMs have long doubled as price oracles through time-weighted averages, and thin pools have been manipulated with flash loans and short bursts of volume throughout DeFi history. A tokenized-stock pool inherits all of that and adds a new wrinkle: the reference market closes. Overnight and over weekends there is no fresh Nasdaq print to arbitrage against, so the on-chain price can drift, gap at the open, and invite exactly the kind of stale-price exploitation that lending markets have learned to fear. Any venue serious about listing equities has to lean on external feeds, trading pauses outside market hours, and conservative handling of the close.

There is also the quieter tax of oracle extractable value: every time a price feed updates, someone can race to trade or liquidate against the new number, and value leaks out of the pool. For regulated assets, where the venue is responsible for orderly markets, that leakage is not just a liquidity provider’s problem, it is a compliance question. The oracle, not the curve, is where a tokenized-stock AMM will most plausibly break.

What the numbers actually say

The activity is real and growing fast, even if it is still a slice of the whole. Tokenized-stock trading on DEXs reached $48.7 billion in cumulative volume by late September 2026, a year-over-year jump of more than 10,000%, with Uniswap handling $17.1 billion of it across v4 and v3 (Crypto Briefing). In the trailing 30 days at that point, Uniswap held about 60% of a $20.9 billion market. Tokenized equities went from roughly 0.1% of all DEX spot volume at the end of 2025 to more than 4% in 2026.

The number to distrust is depth. The underlying market of tokenized equities is worth only a few billion dollars, far less than the trading volume churning through it, which means liquidity is thin and fragmented across venues. Large orders can move these pools hard. The headline growth is genuine; the plumbing is not yet deep enough to pretend these are liquid markets. That gap between volume and depth is the single most important caveat for anyone reading the tokenized-stock story as finished. Robinhood Chain, a dedicated venue that runs its own sequencer economics, passed $3 billion in cumulative volume within three months of its July launch, which shows how fast attention is arriving even as depth lags.

The liquidity provider still eats the loss

Regulatory blessing does not repeal arithmetic. A liquidity provider in a tokenized-stock pool is still a passive, systematically short-volatility market maker: when the stock moves, arbitrageurs rebalance the pool against the provider, who ends up holding more of the loser and less of the winner. The classic framing is impermanent loss, the gap between holding the two assets and providing them to a pool, and it widens as the price diverges.

Those figures, derived from the constant-product formula and tabulated by Binance Academy, are symmetric: a stock that doubles costs the provider the same 5.7% as one that halves. The sharper modern lens is loss-versus-rebalancing, or LVR, which measures what the pool gives up to arbitrageurs against a trader who could rebalance at the true price. The researchers who formalized it, Jason Milionis, Ciamac Moallemi, Tim Roughgarden and Anthony Lee Zhang, put the design constraint bluntly: “An AMM can be successful only if it has happy LPs, which means that fee revenues need to scale with LVR” (a16z crypto).

Here the SEC exemption changes one thing in the provider’s favor. By offering relief from the dealer definition for liquidity providers in a qualifying pool, the order removes a legal threat that would otherwise hang over anyone market-making a security on-chain. It does not remove LVR, impermanent loss, or the opportunity cost of parking capital that could be earning the risk-free rate in Treasuries; it just means the provider is no longer risking a registration violation on top of those. The economics stay hard; the legal overhang gets lighter.

Fees, the burn, and the protocol’s cut

Fees are the provider’s only compensation for all of that, and in 2026 they no longer flow entirely to the provider. Uniswap’s long-debated fee switch went live after governance approved it at the end of 2025, turning on a protocol cut that is used to buy and burn UNI. On many pools the provider now hands a slice of fee revenue, reported in roughly the 10% to 25% range depending on the pool, to the protocol itself (Blockworks).

The pattern deepened in late October, when Uniswap shipped aggregator hooks that route orders into outside liquidity sources and send the external-routing fee into the same UNI burn (Crypto Briefing). The protocol is increasingly a toll operator on its own and others’ liquidity, which is a very different business from the neutral, fee-light utility the first AMMs resembled. Whether that revenue is a durable real yield or just a buyback dressed as one is a live argument across DeFi, and tokenized-stock pools sit inside it like any other.

For a provider weighing a tokenized-stock pool, the stack of claims on gross fees now reads: LVR and impermanent loss first, then the protocol’s cut, then the opportunity cost of the capital. Fees have to clear all three before the position beats simply holding the stock. That is the same squeeze every Uniswap provider faces, with the added twist that the asset is an equity whose own volatility sets the LVR bill.

Who answers when a tokenized stock breaks

The permissionless AMM had a convenient defense: there was arguably no one to hold responsible. A permissioned pool deletes that defense on purpose. Someone maintains the allowlist, someone runs the know-your-customer checks, someone can be identified as the Tokenized Securities Venue, and that someone has obligations to the SEC. The design converts the open-ended question of who answers for a DeFi protocol into a named operator with a compliance department.

That is, in part, why the SEC was willing to grant the exemption at all. It also fits the regulator’s recent posture. In February 2025 the SEC dropped its investigation into Uniswap Labs without an enforcement action (CoinDesk), a signal that the permissionless core was not the agency’s target. The innovation exemption is the constructive counterpart: here is a lane, with conditions, where the agency will tolerate on-chain trading of securities so long as there is an operator who can be held to account.

The conditions themselves read like compliance obligations: the 30-day notice, the issuer’s right to object, auditable contracts, pass-through of shareholder rights. Each is a thing someone has to do, and a thing someone can be penalized for failing to do. For a market structure that spent half a decade arguing it was just software, the shift is profound: the price of listing a real stock is admitting there is a responsible party behind the curve.

The risks the rally is not pricing

The optimism around tokenized equities has outrun some uncomfortable questions. The first is composability, the property that made DeFi more than a collection of apps. A permissioned token that only cleared addresses can hold cannot flow freely into lending markets, vaults and structured products the way an open token can. Gate the asset and you also gate everything downstream, which strips out much of the reason to put a stock on-chain rather than in a brokerage account in the first place.

The second is re-intermediation. An allowlist run by a compliance provider, a venue with a legal operator, KYC at the door: this is a good deal of the old financial plumbing rebuilt inside a smart contract. Investors who already have cheap, liquid access to the same stocks through brokerages and, increasingly, through spot crypto ETFs may reasonably ask what the tokenized version adds once it carries the same gatekeeping. The honest answers, continuous settlement, programmability, global reach, are real but narrower than the marketing suggests.

The third is surveillance and reversibility. An allowlist is a record of who is allowed to hold an asset, which is also a record that can be filtered, frozen or handed over. And the SEC relief is an exemption, not a rule: it runs five years and can be narrowed or withdrawn. Building market structure on a temporary order is its own risk. Permissioning is, after all, just friction reintroduced on purpose, and friction that a regulator can tighten or remove is a fragile foundation for a market that is supposed to be permanent.

The curve as neutral infrastructure

Step back and the deeper story is that the AMM is being treated as infrastructure rather than as ideology. The same constant-product mechanism now underpins memecoin casinos and SEC-sanctioned equity venues, with only a hook deciding which. Curve founder Michael Egorov has predicted that the market will come to view on-chain money as “an assumed layer of financial infrastructure, with the main topic of interest being how to build on top of them” (FinTech Weekly). He was describing stablecoins, but the framing fits the curve itself: a neutral settlement engine that can be dressed for any regulatory context.

Eight years after Uniswap v1 shipped in late 2018, its founder is unbowed about the mechanism’s runway. Hayden Adams has long rejected the idea that AMMs are a transitional hack, arguing they are “only just getting started” thanks to cheaper capital and composability (CryptoPotato). The tokenized-stock experiment is a test of exactly that claim, in the hardest possible arena: regulated securities, where the mechanism has to earn its place against incumbents with decades of trust.

Whether it works will not be settled by the curve. It will be settled by the oracle that keeps the price honest, the operator who keeps the allowlist clean, the depth that is still missing, and a five-year exemption that has to survive a change of political weather. The formula that never asked who you were has learned to ask. The open question for 2026 and beyond is whether the markets it gates are better than the ones it replaced, or merely more familiar.

Frequently Asked Questions

What is a permissioned AMM pool?

A permissioned pool is an automated market maker that only approved, identity-verified addresses can trade in or provide liquidity to. Uniswap launched the design on v4 in July 2026 using a hook that checks an issuer-controlled allowlist before every swap and before anyone mints a liquidity position. The pricing math is unchanged from a normal AMM; the only addition is a gate that reverts transactions from addresses that are not cleared, which is what lets regulated assets like tokenized funds and stocks trade on a curve.

Did the SEC approve trading tokenized stocks on an AMM?

Not quite in those words. On 17 September 2026 the SEC issued a five-year innovation exemption that lets tokenized shares of US-listed companies trade through AMM liquidity pools without the venue registering as a national securities exchange, and it relieved certain pool liquidity providers from dealer registration. Uniswap itself received no exemption; its v4 permissioned pools simply fit the new Tokenized Securities Venue category. The relief is conditional and expires on 17 September 2031.

What is the difference between a rights-backed and a synthetic tokenized stock?

A rights-backed tokenized stock passes the underlying share’s economic and governance rights through to the holder, so you actually receive dividends and can vote. A synthetic token merely tracks the stock’s price and conveys no ownership. The SEC’s exemption covers only real-ownership tokens, which places rights-backed issuers inside the framework and leaves price-tracking synthetic wrappers outside it. The distinction is the main reason some existing offshore stock-token products would not qualify.

Why is a tokenized stock harder for an AMM to handle than a regular token?

Because a stock carries obligations a token does not. It pays dividends, undergoes splits and other corporate actions, can be halted, trades only during set market hours, and has a real price that forms on an exchange the pool cannot see. An AMM quotes continuously and knows only its own reserve ratio, so a tokenized-stock venue has to add an oracle to the real price, pauses for halts and the overnight close, and machinery to pass through dividends and votes. None of that was part of the original constant-product design.

Do liquidity providers still face impermanent loss on tokenized-stock pools?

Yes. The SEC exemption changes the legal treatment of liquidity providers, not the math. A provider is still systematically short volatility and still loses to arbitrageurs when the price moves, roughly 5.7% versus holding when the stock doubles, and still gives up fees to loss-versus-rebalancing, the protocol’s fee cut, and the opportunity cost of the capital. The exemption’s dealer relief removes a registration threat, but the underlying economics of providing liquidity are unchanged.

Yuki Tanaka covers DeFi market structure and on-chain trading for HOGE Wire.