SEC/CFTC Crypto Asset Classification 2026?

SEC/CFTC Crypto Asset Classification 2026?

SEC/CFTC Crypto Asset Classification 2026?

🇺🇸 US Crypto Regulation · March 2026

SEC/CFTC Crypto Asset Classification:
What the 2026 Framework Means for Your Business

On March 17, 2026, the SEC and CFTC jointly published Release 33-11412 — the first formal crypto asset taxonomy in US history. Five categories, 16 named assets, and the end of a decade of enforcement-by-ambiguity. Here is what it means in practice.

📋 5 sections · ~8 min read
🇺🇸 Release 33-11412
Effective March 23, 2026

1
What Release 33-11412 actually is — and what it is not
Interpretive release, not statute — what this distinction means

2
The five-category taxonomy explained
Digital commodities, collectibles, tools, stablecoins, securities

3
16 named digital commodities — and the Howey test
BTC, ETH, SOL, XRP confirmed — what changed and what did not

4
Safe harbours: staking, mining, airdrops, wrapping
What is now explicitly cleared — and the conditions that apply

5
What this means for your business: practical implications
Exchanges, token issuers, DeFi, stablecoin operators, non-US businesses

📄 Section 1

What Release 33-11412 Actually Is — and What It Is Not

Before analysing what the framework says, it is important to understand what kind of legal instrument it is — because that determines how durable and enforceable the clarity it provides actually is. Most coverage of Release 33-11412 understates this distinction.

What it is: an interpretive release
Significant, but not statute
Effective March 23, 2026
Supersedes 2019 Framework
📄
Joint SEC–CFTC interpretive release
Release Nos. 33-11412 and 34-105020 is a joint interpretive release — it represents the agencies’ official interpretation of how existing federal securities law (Securities Act 1933, Exchange Act 1934) applies to crypto assets. It became effective March 23, 2026, upon publication in the Federal Register. It is the highest-authority regulatory guidance on this topic that exists in the US today — above SEC staff guidance, above CFTC staff letters, and above prior enforcement positions.
📌
Supersedes the 2019 FinHub Framework
The release explicitly supersedes the SEC staff’s 2019 “Framework for Investment Contract Analysis of Digital Assets” — the Gensler-era document that was used to justify treating virtually every crypto asset as a potential security. The 2019 Framework was staff-level guidance, not a Commission release. Release 33-11412 carries significantly more legal weight and formally replaces the prior approach.
👥
Jointly issued with CFTC
The CFTC joined the release, confirming it will administer the Commodity Exchange Act consistently with the SEC’s interpretation. This coordination resolves years of SEC–CFTC jurisdictional overlap — formalising the principle that digital commodities fall under CFTC oversight for spot markets, while digital securities remain within SEC jurisdiction. Both agencies signed an MOU on overlapping jurisdiction one week before release (March 11, 2026).

What it is not: statute or permanent law
Four important limitations
Revocable by future administration
US federal law only
⚠️
Revocable: a future administration can reverse it
An interpretive release can be revised or withdrawn by a future SEC Commission without Congressional action. The clarity Release 33-11412 provides is real and significant — but it is the current administration’s position, not codified law. The CLARITY Act (passed the House in July 2025, pending Senate) would codify a statutory framework. Until it passes, the interpretive release is the ceiling of legal certainty, not the floor.
🌎
US federal law only — does not affect non-US jurisdictions
The release addresses the application of US federal securities and commodities law only. It does not preempt US state securities laws (money transmission, state blue sky laws) or state regulatory requirements. It has no effect on EU MiCA obligations, UK FCA requirements, or any other non-US jurisdiction. A token classified as a digital commodity under Release 33-11412 may still be a security in another jurisdiction. Non-US crypto businesses operating in the US market must understand the release — but it does not resolve their non-US regulatory obligations.
💵
Does not alter tax, AML, or state law obligations
Classification as a digital commodity does not change IRS tax treatment (crypto is still property for US tax purposes), FinCEN AML/BSA obligations, or state money transmission licensing requirements. Exchanges and custodians that are not securities firms still need money transmission licences. Tax obligations on mining rewards, staking income, and disposals are unaffected by the securities/commodity classification.

💡
The honest framing
Release 33-11412 is the most significant US crypto regulatory document since the approval of spot Bitcoin ETFs in January 2024. It provides genuine, durable clarity on the foundational question of whether major crypto assets are securities. But it is an administrative interpretation, not a statute. Build your legal strategy on it, but monitor the CLARITY Act and future Commission appointments. For non-US businesses, note that the release has no direct effect outside the United States — your obligations under MiCA and other non-US frameworks are entirely separate.

📊 Section 2

The Five-Category Taxonomy Explained

The core of Release 33-11412 is a five-category taxonomy for classifying crypto assets under US federal law. Only one of the five categories — digital securities — is subject to SEC securities law obligations. The other four are outside securities law. Here is what each category means in practice.

The five categories — and which regulator governs each
Release 33-11412
1
Digital Commodities — under CFTC jurisdiction Not SEC securities

The largest category by market cap and the most commercially significant. A digital commodity is a crypto asset whose value is intrinsically linked to and derives from the programmatic operation of a functional crypto system, supply and demand dynamics, and network effects — rather than from the expectation of profits from the essential managerial efforts of others (the Howey test). 16 assets are explicitly named as digital commodities, including Bitcoin, Ethereum, Solana, XRP, Cardano, Chainlink, Avalanche, Polkadot, and others. Digital commodities are subject to CFTC jurisdiction for derivatives markets and CFTC anti-fraud authority for spot markets. They are not subject to SEC securities registration, disclosure, or broker-dealer requirements.

Key practical consequence: Exchanges and platforms that only handle digital commodities are not required to register as securities exchanges or broker-dealers with the SEC. They remain subject to CFTC requirements and state money transmission licensing.
2
Digital Collectibles — case-by-case analysis NFT category

NFTs and similar unique digital assets that represent ownership of a specific digital or physical item. Digital collectibles are generally outside securities law where they function as genuine collectibles — but the release notes that fungible NFT collections with profit-sharing or yield features may be securities under the Howey test. The collectibles category provides clarity for genuine art and collectible NFTs while preserving SEC oversight for NFT structures designed as investment vehicles.

3
Digital Tools (Utilities) — generally outside securities law Utility tokens

Tokens that function as genuine access keys or payment mechanisms for a functional product or service — what the industry has historically called “utility tokens”. The release clarifies that a digital tool token is not a security where purchasers acquire it primarily for its utility value rather than as an investment. The key test is whether the network or platform is actually functional at the point of sale — a pre-launch token sold on the expectation of future functionality remains potentially a security. This resolves significant ambiguity for token projects with live, functioning platforms.

The functionality requirement is real: A token sold before its platform is live does not automatically qualify as a digital tool. The release distinguishes carefully between tokens sold into a functional system (digital tools) and tokens sold on the promise of future development (potentially securities).
4
Stablecoins — separate framework under GENIUS Act Payment infrastructure

Stablecoins pegged to fiat currencies and backed by qualifying reserve assets are not securities under the release, provided they comply with the GENIUS Act (enacted July 2025, implementing regulations expected November 2026). Non-compliant stablecoins — those that do not meet GENIUS Act reserve and issuer requirements — may be analysed as securities depending on their structure. Algorithmic stablecoins without qualifying reserves are the most exposed category. For funds and platforms using stablecoins for liquidity, confirm counterparty issuers meet GENIUS Act requirements now.

5
Digital Securities — full SEC jurisdiction Securities law applies

Tokens that meet the Howey test — where purchasers invest money in a common enterprise with the expectation of profits from the essential managerial efforts of others — are digital securities and subject to full SEC securities law: registration or exemption requirements, disclosure obligations, broker-dealer registration for intermediaries, and ongoing reporting for issuers. Equity-like tokens, tokens sold through ICOs into non-functional platforms, and yield-bearing tokens structured as investment contracts are the primary candidates. The release applies the Howey test to transactions rather than to the asset itself — meaning the same token may be a security in some transactions and not in others.

Transaction-level analysis: This is a significant doctrinal development. The same token may be a security in an initial offering context (expectation of profits from issuer’s efforts) but not a security in secondary market trading of the same token on a functional network.

📌 Section 3

16 Named Digital Commodities — and the Howey Test

For the first time in regulatory history, the SEC has named specific crypto assets and confirmed their status outside securities law. The explicit naming resolves individual asset uncertainty — but the framework also clarifies the Howey test analysis that applies to all other assets. Understanding both is essential.

16
Crypto assets explicitly named as digital commodities in Release 33-11412
68
Pages in the full interpretive release — effective March 23, 2026
4/5
Categories outside SEC securities law — only digital securities are in SEC scope
2019
Year of the FinHub Framework — formally superseded by Release 33-11412
The 16 named digital commodities
Explicitly confirmed as non-securities
CFTC jurisdiction
Not SEC securities
📌
The full list as named in the release
Bitcoin (BTC), Ethereum (ETH), Solana (SOL), XRP, Cardano (ADA), Chainlink (LINK), Avalanche (AVAX), Polkadot (DOT), Hedera (HBAR), Stellar (XLM), Litecoin (LTC), Dogecoin (DOGE), Shiba Inu (SHIB), Tezos (XTZ), Bitcoin Cash (BCH), and Aptos (APT). The release also notes Algorand (ALGO) and LBRY Credits (LBC) as examples illustrating the commodity analysis, even though neither underlies an existing CFTC futures contract.
💡
Why naming specific assets matters
Prior to Release 33-11412, the SEC’s enforcement-by-ambiguity approach meant that even BTC and ETH faced periodic challenges regarding their legal status in specific contexts. The explicit naming removes that ambiguity for these assets. Exchanges, custodians, and funds that hold these assets now have formal confirmation from both agencies that they are not securities — removing a significant legal risk from their compliance frameworks.
⚠️
Naming is asset-specific, not transaction-specific
The 16-asset list confirms that these assets are digital commodities based on their characteristics as of the release date. The transaction-level analysis still applies — an issuer selling newly-created tokens in a fundraising context may still trigger securities analysis even for assets on the list if the specific sale involves investment contract features.

The Howey test under the new framework
How to classify everything not on the list
Transaction-level analysis
Functionality is key
⚖️
The Howey test now applies to transactions, not assets
The most significant doctrinal development in Release 33-11412 is the clarification that Howey analysis applies at the transaction level, not the asset level. The same token may be a security in one transaction (initial offering on an unbuilt platform, expectation of issuer effort) and a non-security in another (secondary market trading on a functional, decentralised network). This eliminates the “once a security, always a security” interpretation that dominated Gensler-era enforcement.
🛠️
Decentralisation and functionality are the key factors
The release focuses on two factors that move a crypto asset out of securities analysis: (1) the network is functional — the token has utility value on a live, operational platform rather than a value derived purely from issuer development efforts; and (2) the network is sufficiently decentralised — no single person or group has essential managerial control over the value of the asset. Both factors must be assessed at the point of the relevant transaction.
🕑
Tokens can transition between categories over their lifecycle
The release explicitly addresses the “maturation” of a token — a token may launch as a digital security (pre-functional platform, centralised development team) and transition to a digital commodity or digital tool as the network becomes functional and decentralised. This provides a pathway for token projects to migrate out of securities regulation — though the timing and conditions of that transition require careful legal analysis.

💡
The core principle
The 16 named assets are the most commercially significant outcome of Release 33-11412 — they represent the majority of global crypto trading volume. For assets not on the list, the Howey transaction-level analysis applies. The critical variables are functionality of the network, decentralisation of control, and whether purchasers are acquiring for utility vs investment return. Token projects should obtain legal analysis of their specific classification under the new framework — the 2019 FinHub approach no longer applies, and the new standards are materially different.

✅ Section 4

Safe Harbours: Staking, Mining, Airdrops, Wrapping

Beyond the five-category taxonomy, Release 33-11412 resolves several specific activities that have been legal grey areas in the US for years. The explicit clearance of protocol staking, mining rewards, certain airdrops, and token wrapping is as commercially significant as the taxonomy itself for many businesses.

🔒
Protocol staking
On-chain staking of digital commodities
Cleared

On-chain protocol staking of digital commodities — where a holder stakes tokens directly to validate transactions and earn protocol rewards — does not constitute a securities transaction under the new framework. This directly removes one of the largest legal risks hanging over proof-of-stake networks, validators, and staking service providers.

The clearance applies to protocol-level staking where the staker participates directly in network validation. It does not automatically extend to liquid staking protocols, pooled staking arrangements, or staking-as-a-service products where additional features (yield enhancement, liquidity tokens, third-party management) may introduce investment contract characteristics. Those products require separate analysis.

  • Direct on-chain staking of digital commodities: cleared
  • Liquid staking protocols: requires separate securities analysis depending on structure
  • Staking-as-a-service with third-party management: may involve investment contract features
  • Staking of digital securities: remains subject to SEC oversight

Mining rewards
Proof-of-work mining of digital commodities
Cleared

Receiving digital commodity tokens as mining rewards does not constitute a securities offering or securities transaction. Miners operating proof-of-work networks are free to operate without SEC registration concerns. This removes a persistent theoretical risk that had occasionally been raised in enforcement contexts — though in practice it had never been the basis for action against major miners.

The clearance covers the receipt of mining rewards as protocol compensation for validation services. It does not cover situations where mining is structured as a managed investment product — cloud mining arrangements or mining investment funds that pool investor capital and distribute returns may involve investment contract features and require separate analysis.

  • Solo mining of proof-of-work digital commodities: cleared
  • Mining pool participation receiving proportional rewards: generally cleared
  • Cloud mining investment products with passive investor returns: requires analysis
  • Mining of tokens not classified as digital commodities: Howey analysis applies

🎁
Airdrops and token wrapping
Distribution and cross-chain mechanics
Conditionally cleared

Protocol airdrops of digital commodities — where tokens are distributed for free to wallet holders, typically for network participation or community building — do not constitute securities offerings where recipients provide no investment of money. The release clarifies that the Howey test requires an investment of money — a free distribution does not satisfy this element.

Token wrapping — converting a digital commodity into a wrapped version on another blockchain (e.g., wrapping BTC as WBTC on Ethereum) — does not create a new securities relationship where the underlying asset is a digital commodity and the wrapping maintains a 1:1 backing relationship. Wrapping arrangements with additional features, yield, or centralised management may be analysed differently.

  • Free airdrops of digital commodities to existing holders: cleared (no investment of money)
  • Airdrops requiring purchase, lock-up, or consideration: may trigger Howey analysis
  • 1:1 backed wrapping of digital commodities across chains: generally cleared
  • Wrapped tokens with yield or management features: requires separate analysis

⚠️
The edge cases remain unresolved
Release 33-11412 resolves the foundational questions but explicitly acknowledges that multi-functional tokens — those that shift classification over their lifecycle — present unresolved edge cases. The release is a bridge pending Congressional legislation (CLARITY Act), not a complete code. A formal rulemaking proposal expected to exceed 400 pages is expected within weeks of the release — it will include safe harbour provisions and an innovation exemption. Monitor the SEC website and CLARITY Act Senate progress for the next phase of implementation.

🎯 Section 5

What This Means for Your Business: Practical Implications

The five-category taxonomy and the activity-specific safe harbours have different practical implications depending on your business model. Here is the practical assessment for the main business categories affected by Release 33-11412.

Release 33-11412: Business Impact by Category
Effective March 23, 2026
🏠
Crypto exchanges and trading platforms (US)
Exchanges that only handle the 16 named digital commodities and other non-security tokens are no longer at risk of being characterised as unregistered securities exchanges. This removes the primary SEC enforcement risk that had driven some exchanges to delist assets or restrict US users. However, the CFTC’s market-conduct oversight of digital commodity spot markets applies — and FinCEN AML obligations and state money transmission licences remain unaffected. Exchanges that also list tokens classified as digital securities must maintain appropriate securities exchange registration or broker-dealer status for those assets.
Review token listings against five-category taxonomy
CFTC spot market oversight now applies to digital commodities

📌
Token issuers and Web3 projects
Token issuers need to classify their token under the new taxonomy at the point of each relevant transaction — initial offering, secondary market, and as the network matures. Tokens sold into a functional, decentralised network qualify as digital tools or digital commodities and are outside securities law. Tokens sold in early-stage fundraising rounds on pre-launch platforms remain subject to Howey analysis and may be digital securities. The pathway from digital security to digital commodity as a network matures and decentralises is now formally articulated — but requires legal advice to navigate. The 2019 FinHub Framework analysis no longer applies — existing legal opinions based on that framework should be reviewed.
Obtain updated token classification opinion under 33-11412
Existing 2019-framework legal opinions are now outdated

🔨
DeFi protocols and staking services
Protocol-level staking and on-chain DeFi operations involving digital commodities are outside securities law under the new framework. This removes the Howey risk that had made it difficult for US persons to participate in or build proof-of-stake validator services. DeFi protocols involving digital commodities — lending, liquidity provision, automated market-making — are generally outside securities law where no investment contract features are present. Protocols that offer managed yield, governance tokens sold as investments, or structured products backed by digital securities remain subject to analysis. The CFTC’s anti-fraud authority over commodity spot markets applies to DeFi involving digital commodities.
Assess each protocol feature against commodity vs security analysis
CFTC anti-fraud authority applies to DeFi on digital commodities

💲
Stablecoin operators and payment platforms
Compliant stablecoins meeting GENIUS Act reserve and issuer requirements are outside securities law. The GENIUS Act implementing regulations are expected November 2026. Stablecoin operators should confirm GENIUS Act compliance now — the release makes clear that non-compliant stablecoins may be analysed as securities. For platforms and funds using stablecoins for liquidity management or payment rails, confirm counterparty stablecoin issuers are GENIUS Act-compliant. Algorithmic stablecoins without qualifying reserves are the most exposed category under the new framework.
Confirm GENIUS Act compliance for all stablecoin issuers you use
Non-compliant stablecoins may be securities under the new framework

🌎
Non-US businesses with US users or US market exposure
Non-US crypto businesses that have US users or access the US market need to understand Release 33-11412 even though it is US law only. If you offer services involving the 16 named digital commodities to US persons, your regulatory framework for those assets under US law is now clearer — you are dealing with commodities, not securities, and CFTC anti-fraud rules apply. However, registration requirements for non-US firms providing services to US persons remain governed by existing SEC and CFTC frameworks. The release does not provide a safe harbour from US registration requirements — it clarifies which regulator’s requirements apply. For non-US businesses primarily operating under MiCA or other non-US frameworks, Release 33-11412 is a US-specific development that does not alter your non-US obligations. See our guide on MiCA CASP licensing for EU requirements.
US-law only — does not alter MiCA, FCA or other non-US obligations
Review US user access policy against new commodity/security classification

Classifying Your Token or Business Under Release 33-11412?

WCR Legal advises crypto businesses on token classification, regulatory strategy, and compliance under the new SEC/CFTC framework — including updated token classification opinions, exchange regulatory assessment, and cross-border compliance covering US, EU MiCA, and other jurisdictions.

No commitment required · Confidential initial consultation · Response within 1 business day

Oleg Prosin is the Managing Partner at WCR Legal, focusing on international business structuring, regulatory frameworks for FinTech companies, digital assets, and licensing regimes across various jurisdictions. Works with founders and investment firms on compliance, operating models, and cross-border expansion strategies.

Post Comment