Written by Pablo Gómez
Founder & CEO at Metlabs · Reviewed on October 11, 2026
A forced transfer deliberately breaks the basic rule of most tokens, where only the holder of the private key moves their funds. In the ERC-3643 (T-REX) standard it is executed by addresses with the agent role, which invoke the operation while the contract records it on-chain, with checks specific to the administrative operation, which differ from ordinary transfer checks. In the ERC-1400 family, the equivalent is controllerTransfer, defined in ERC-1644: the token declares whether it is controllable via isControllable(), and when a controller intervenes it emits a ControllerTransfer event alongside the standard Transfer, leaving an auditable trail.
A regulated asset, a security token, needs an issuer or registrar able to honor legal mandates without giving up the public ledger. The standards themselves anticipate the use cases: court orders, reversal of fraudulent transactions, inheritance, sanctions and token recovery when an investor loses access to their wallet. As a best practice, controllability can often be disabled permanently, a progressive-decentralization commitment the issuer documents.
In the European context, where MiCA and capital-markets practice demand traceability, this primitive is the base on which freeze, recovery and embedded compliance are built. Tokeny's T-REX engine implements it for institutional issuers, and platforms such as Securitize or ERC-1400 deployments from Polymath apply equivalent controller logic when issuing tokenized debt, funds or equity.
Also known as
- force transfer





