recovery explanation suggestion

Author: ozgunozerk

content/stellar-contracts/tokens/rwa/rwa.mdx

@@ -506,6 +506,8 @@ When implementing RWA tokens, consider the following security aspects:
 2. **Identity Verification**: Always verify identities before allowing token operations
 3. **Compliance Validation**: Ensure compliance rules are properly configured before enabling transfers
 4. **Freezing**: Use freezing mechanisms carefully as they lock user funds
-5. **Recovery**: Recovery operations should have strict authorization and verification
+5. **Recovery**: There are two distinct recovery flows, both requiring strict authorization:
+   - **Identity Recovery**: Managed by the Identity Registry Storage, transfers the identity contract reference and profile (including country data) from old wallet to new wallet, and creates a recovery mapping
+   - **Balance Recovery**: Managed by the RWA Token, transfers tokens from old to new account after verifying the identity recovery mapping exists (via `recovery_target()`)
 6. **Pausability**: The pause mechanism should only be accessible to authorized administrators
 7. **Contract Upgrades**: Consider following a secure upgrade strategy for your contracts. See: [Contract Upgrades](/stellar-contracts/utils/upgradeable)