Regulatory compliance & Shariah frameworks
Forging trust within Malaysia's elite fintech frameworks
SNFTX is proposed to the Securities Commission Malaysia under the ICM Innovation Lab (FIKRALab), aligned to the Capital Market Masterplan 2026–2030.
CMP 2026–2030 alignment
Outcome Theme 1 — Vibrancy
Unlocking alternative asset liquidity and deploying T+0 Delivery-versus-Payment settlement.
Outcome Theme 2 — Inclusivity
Living out "Now Everyone Can Invest" by democratizing access at retail ticket sizes.
Outcome Theme 3 — Sustainability
Channeling transition capital into NETR-aligned green projects.
Outcome Theme 4 — Regional Gateway
Attracting RM100–110 billion of assets with foreign underlying into Malaysia.
ICM Leadership
Positioning Malaysia as the global reference point for Halal-Toyyib digital securities.
Halal-Toyyib compass
A dual-filter ethical screen
Halal — legal compliance
Zero exposure to non-permissible activities including gambling, interest-based banking, alcohol and adult content.
Toyyib — wholesomeness & impact
Mandatory ESG screening ensuring every tokenized asset contributes positively to social or environmental well-being.
Operational risk register
10-pillar risk allocation framework
| Risk category | Threat identification | Risk owner | Control & mitigation safeguard |
|---|---|---|---|
| 1. Cyber Risk | Protocol exploitation, key compromise or platform intrusion. | CTO / Cyber Lead | Independent smart contract audits, multi-signature custody and real-time anomaly detection. |
| 2. Operational Risk | Process failure across issuance, custody or settlement. | COO | Documented control procedures, segregation of duties and continuous monitoring. |
| 3. Market Risk | Devaluation of underlying commercial property or solar asset default. | Risk Committee | Mandatory independent quarterly valuation; minimum 125% collateralization on private credit. |
| 4. Liquidity Risk | Secondary trading illiquidity causing redemption delay. | CCO / CFO | Liquidity reserve pool of 5% of tranche volume; designated regulated liquidity providers. |
| 5. Legal Risk | Insolvency of the operator impacting investor token ownership. | Legal Counsel | Bankruptcy-remote SPVs registered with SSM; token holders hold direct beneficial title. |
| 6. Vendor Risk | Third-party custody, cloud or oracle provider failure. | CTO | Multi-vendor redundancy, contractual SLAs and periodic provider due diligence. |
| 7. Key Person Risk | Loss of critical executive or technical personnel. | Board | Documented succession mandates, knowledge redundancy and retention structures. |
| 8. Disaster Recovery | Infrastructure outage or data-centre loss. | Cyber Lead | Encrypted off-site backups, automated failover and rapid restoration procedures. |
| 9. Business Continuity | Prolonged disruption to exchange operations. | COO | Tested BCP playbooks, circuit breakers and orderly wind-down provisions. |
| 10. Shariah Drift | Operational activities non-compliant post-issuance. | Shariah Advisory Board | Automated smart contract filtering, mandatory annual Shariah audit and cleansing engine. |
Independent Risk Committee
Meets quarterly to review the operational risk register, liquidity buffers and counterparty risk.
Technology & Cyber Committee
Meets monthly to audit protocol changes, cloud dependencies and disaster recovery readiness.
Independent Shariah Board
SC SAC-accredited pre-issuance screening, continuous programmatic auditing and annual purification.