# Investor Protections

This document walks through every realistic failure scenario within Tortuga's structure and explains the protections in place at each level. It is written for sophisticated investors and their counsel. The structure is designed to isolate risk at the asset level, insulate investors from company-level events, and provide orderly resolution mechanisms that have been tested across thousands of vehicles and decades of practice under Luxembourg law.

Every Tortuga bond is an ABS — a direct legal claim to physical collateral, not synthetic or derivative exposure. Recovery in any failure scenario is tied to the physical asset, not a counterparty's ability to pay.

LTV 70–80% means collateral value is 125–143% of outstanding debt at origination. The equity cushion must be substantially eroded before bondholder capital is at risk.

# Track Record

Estating Property Vault S.A. has maintained an unbroken zero principal-loss record since inception. Across every issuance, every compartment, and every market cycle over more than six years of operation, no investor has lost principal.

Metric	Record
Principal losses	Zero across all issuances since inception
Operating history	6+ years of uninterrupted operation
Asset classes covered	US real estate debt, preferred equity, land banking structures
Auditor	PricewaterhouseCoopers (~60% of Luxembourg securitization vehicles)
Securitization counsel	Allen & Overy (A&O Shearman) — largest Luxembourg securitization practice

# Scenario 1: Underlying Asset Default

# What Triggers It

Failure to pay scheduled interest, breach of LTV covenants, material asset deterioration, or local SPV insolvency. Each event triggers a defined response protocol specified in the bond documentation.

# Primary Defense: Over-Collateralization

The loan is secured by a property valued at 125–143% of the outstanding debt at origination (LTV 70–80%). The property's value must decline materially before the debt position is impaired. This cushion absorbs moderate market deterioration without triggering a principal loss.

# Resolution

The trustee and paying agent initiate foreclosure in the asset jurisdiction (typically US):

The collateral property is foreclosed upon through standard legal process
The property is sold on the open market or through negotiated disposal
Net proceeds after satisfying senior obligations are channelled through the securitization structure to bondholders
The paying agent distributes proceeds to investors via standard settlement infrastructure

This is not a novel mechanism — it is the same foreclosure and recovery process that applies to any real estate-backed debt instrument globally.

# Division of Responsibility

Smart contracts handle the token lifecycle: issuance, coupon distribution, NAV recording, and redemption. Collateral enforcement is executed through the legal and trustee framework under applicable law — not by smart contract. On-chain liquidation would introduce forced-sale risk at oracle-determined prices, oracle manipulation exposure, and jurisdictional enforceability uncertainty — none acceptable in an institutional product.

# Scenario 2: Securitization Vehicle (SPV) Distress

# Why the SPV Cannot Go Bankrupt

The securitization vehicle is a bankruptcy-remote passive vehicle under the Luxembourg Securitization Act of 2004. It has no independent commercial activity. All services are outsourced to separate entities. It carries no operational costs. A vehicle that cannot incur independent liabilities cannot become over-indebted. This is a structural characteristic of the Luxembourg legal form, not a contractual protection.

# Compartment Ring-Fencing

Inside the securitization vehicle, each individual asset occupies its own legally ring-fenced compartment. The ring-fencing is structural under the Luxembourg Securitization Act of 2004, not contractual. A default in one compartment has zero legal or financial impact on any other compartment. The investor holding one ISIN receives net recovery from that specific compartment. All other investors are entirely unaffected.

No cross-collateralization. No shared reserve pool. No contagion mechanism between compartments.

# Scenario 3: Estating Ceases Operations

# Resolution Framework

The securitization vehicle has a Luxembourg-based independent servicer — Apex Group — that provides director services to the SPV. This entity assumes fiduciary responsibility for SPV administration independently of Estating.

# If Estating Disappears

Apex continues executing Board of Directors responsibilities for the SPV. The vehicle does not require Estating's involvement to function.

# Orderly Wind-Down

The servicer either waits for underlying assets to mature at their contractual dates and repays investors as expected, or manages foreclosure proceedings if an underlying asset deteriorates, channelling all proceeds through to investors.

This is standard procedure in Luxembourg securitization — executed across hundreds of vehicles. The infrastructure exists, is understood, and is well-documented under Luxembourg law.

# Scenario 4: Smart Contract Failure or On-Chain Risk

# What ERC-3643 Contracts Do

Token lifecycle management: minting and supply management, on-chain identity registry, transfer restriction enforcement, coupon distributions, NAV updates, and redemption at maturity.

# What They Do Not Do

Hold collateral, execute enforcement, or determine legal ownership.

# Legal Ownership Established Off-Chain

Legal ownership is established through the signed subscription agreement, DvP settlement at SIX SIS, and the corresponding custodial record. The on-chain token is a representation of ownership — not the ownership itself.

# If the Contract Is Compromised

ERC-3643 permissioned transfers mean tokens cannot move to non-whitelisted wallets, significantly limiting the theft surface relative to unpermissioned tokens. Tortuga's administrative response: freeze the compromised contract, reissue tokens to verified wallets via a new contract, using the KYC registry as the ownership record.

# If the Tortuga Platform Becomes Unavailable

The underlying bond — the Swiss ISIN-listed, Luxembourg-securitized instrument — exists independently of Tortuga's platform. The bond continues to exist in the investor's custody record. Coupon payments and redemption at maturity are executed through the paying agent infrastructure, not the on-chain layer.

# Scenario 5: Portfolio Contagion

# Structural Isolation

Each asset is held in a legally ring-fenced compartment. There is no mechanism through which deterioration of one asset can impose costs on another. This is structural under the Luxembourg Securitization Act, not contractual.

# Intrinsic Value Pricing

No market-price propagation from distressed sales. A distressed transaction in one compartment does not generate a pricing signal that affects any other compartment. Each asset is valued on its own fundamentals, independently of what is happening in other positions.

# No Portfolio-Level Leverage

No liquidation cascade mechanism exists at the portfolio level. DeFi leverage (Morpho Blue, Phase 2) operates at the individual token position level, not portfolio level.

# Recovery Waterfall

The distribution of proceeds in any recovery scenario follows a defined waterfall established in the bond documentation at issuance.

Priority	Claimant	Notes
1	Senior secured debt	First claim on collateral proceeds. Tortuga's bonds typically occupy this position or preferred equity above common equity.
2	Preferred equity	Subordinate to senior debt. Higher risk; compensated by higher return profile.
3	Common equity / sponsor	Last to recover. Absorbs losses before debt or preferred equity positions are impaired.

The investment structure is disclosed in the Pricing Supplement at issuance and does not change post-issuance. Structure is the primary determinant of loss exposure — more important than asset type, geography, or market cycle. A senior debt position in a moderately distressed asset is safer than a preferred equity position in an outperforming one.

# Jurisdictional Framework

# Luxembourg

Luxembourg was selected because it offers the strongest investor protection framework in institutional securitization globally. The Luxembourg Securitization Act of 2004 is deeply ingrained in the country's legal and financial infrastructure. With more than 1,000 active securitization vehicles, the jurisdiction has extensive legal precedent and a mature ecosystem of service providers. Allen & Overy (A&O Shearman) is the largest securitization law practice in Luxembourg with direct legislative access — they help prepare the legal texts for the government.

# Switzerland

Swiss ISIN via FINMA-regulated paying agent, listed at SIX SIS. Universally settleable by every Swiss bank and global custodian. Switzerland is the world's leading wealth management hub — distribution infrastructure is directly aligned with the target client base.

# Institutional Partners

Partner	Role
Allen & Overy (A&O Shearman)	Securitization counsel — largest Luxembourg securitization practice
PricewaterhouseCoopers	Auditor — audits ~60% of Luxembourg securitization vehicles
Apex Group	Independent servicer — fiduciary backstop in wind-down scenarios
SumSub	KYC/AML verification provider

# Protection Summary

Scenario	Primary Protection	Secondary Protection	Investor Outcome
Asset default	Over-collateralization (70–80% LTV). Equity cushion absorbs initial losses.	Foreclosure and recovery via trustee/paying agent. Proceeds passed through compartment to bondholders.	Recovery tied to collateral value. Legal claim to physical asset survives default.
SPV distress	Bankruptcy-remote by design (Luxembourg Securitization Act). No independent liabilities.	Compartment ring-fencing. No cross-contamination between assets.	Not applicable — SPV cannot enter distress.
Estating failure	Independent Luxembourg servicer assumes SPV administration.	Orderly wind-down: assets mature or are liquidated; proceeds distributed to investors.	Full recovery of proceeds from underlying assets, managed by independent servicer.
Smart contract failure	Legal claim established off-chain. Token represents bond; does not replace it.	ERC-3643 permissioned transfers prevent token theft to anonymous wallets.	Legal position unaffected. Bond continues in custodial record. Reissuance possible.
Portfolio contagion	Compartment segregation eliminates cross-asset financial exposure.	Intrinsic value pricing prevents market-price contagion between compartments.	Impairment in one compartment cannot affect investors in other compartments.