Key Takeaways
- • The SEC classifies a cryptocurrency as a security when it meets the legal definition under federal securities law, subjecting it to regulatory oversight, disclosure requirements, and anti-fraud protections; Bitcoin remains the sole widely recognized exception as a non-security asset.
- • The SEC's primary framework for determining security status relies on whether a blockchain project achieves "sufficient decentralization," though this theory has proven impractical to apply consistently to real-world projects and lacks strong judicial precedent support, including under the foundational Howey Test.
- • A cryptoasset can transition from security status to non-security status as a project evolves; initial coin offerings (ICOs) and token sales are typically regulated as securities offerings even when the underlying asset may not be classified as a security once trading begins.
- • Stablecoins may be classified as securities if they lack compliance with frameworks like the GENIUS Act and contain security-like characteristics, while most utility tokens depend on their functional use case for classification determination.
- • Institutional and younger investor demand for regulatory clarity and banking-like protections—including security guarantees, lending products, and integrated platforms combining crypto with traditional financial assets—is driving financial institutions to adopt crypto offerings within established regulatory structures.
Summary
The SEC's framework for distinguishing securities from non-securities centers on the concept of "sufficient decentralization." Under this approach, if a blockchain project achieves adequate decentralization, the associated cryptocurrency avoids security classification. However, legal scholars and practitioners have increasingly critiqued this theory as impractical and lacking support from established judicial precedent, particularly the landmark Howey Supreme Court decision that defines investment contracts. According to analysis from Harvard Law's corporate governance resources, the decentralization test has "not aged well" and struggles to apply meaningfully to contemporary blockchain projects operating in real-world conditions.
A critical nuance in classification involves temporal dynamics: a cryptoasset can begin its existence as a security—typically during initial coin offerings when sponsors sell tokens to raise capital—and later transition to non-security status as the underlying project matures and decentralizes. This distinction carries substantial implications for token sales, which are generally subject to securities regulations regardless of the ultimate classification status of the traded token. Stablecoins present an additional layer of complexity, potentially qualifying as securities if they fail to meet specific compliance frameworks and embed security-like characteristics.
The regulatory clarity around security classification is increasingly important to institutional investors and younger cohorts entering crypto markets. According to EY research and investor interviews, the next wave of crypto participants views regulatory oversight and banking-like protections—including integrated platforms offering crypto, traditional equities, lending services, and security guarantees—as essential to confidence in digital assets. Financial institutions across both traditional banking and crypto-native sectors are actively responding to this demand by developing compliant offerings that combine digital assets with established financial infrastructure, positioning security classification and comprehensive regulation as potential catalysts for mainstream institutional adoption rather than barriers to market participation.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.