Is a Crypto Token a Security? Howey, Commodities and the Debate

Whether a digital asset is a security depends on if it functions as an investment contract, determined in the US by a legal standard called the Howey Test. Tokens sold to fund a centralized enterprise with the expectation of profit are generally securities, while those operating on sufficiently decentralized networks may be classified as commodities. As of Oct. 3, 2026, the boundary between these classifications remains the subject of active litigation and regulatory rulemaking.

The Foundation of US Securities Law

The US regulatory framework for financial assets is rooted in the Securities Act of 1933 and the Securities Exchange Act of 1934. Congress designed these laws to protect investors following the 1929 stock market crash. The core philosophy of these statutes is disclosure.

Regulators assume that the entity issuing an asset possesses more knowledge about the underlying business than the public purchasing the asset. This dynamic is known as information asymmetry. Securities laws mandate that issuers file detailed financial and operational disclosures so that investors can make informed decisions.

If an asset is classified as a security, the issuer must register the offering with the Securities and Exchange Commission (SEC) or qualify for an exemption. The platforms that facilitate the trading of these assets must register as national securities exchanges or alternative trading systems. The individuals selling them must register as broker-dealers.

The Howey Test Explained

The statutes from the 1930s define a security through a long list of traditional instruments, such as stocks, bonds, and notes. The list also includes a catch-all term: the investment contract.

In 1946, the US Supreme Court established the definitive framework for identifying an investment contract in SEC v. W.J. Howey Co. The case involved a Florida company selling tracts of citrus groves to out-of-state buyers, coupled with a contract for Howey to cultivate the land and sell the fruit. The Court ruled that this arrangement constituted a security.

The resulting Howey Test determines that an investment contract exists if there is an investment of money in a common enterprise with a reasonable expectation of profits to be derived from the efforts of others.

The SEC applies this exact framework to digital assets ¹.

First, an investment of money requires the buyer to provide capital. The SEC notes this can include fiat currency, digital assets, or even the provision of services in exchange for tokens ¹.

Second, a common enterprise means the fortunes of the investors are linked to each other or to the success of the promoter.

Third, the expectation of profit means buyers purchase the asset seeking a financial return, rather than purchasing it solely to consume a good or service.

Fourth, the profits must be derived from the efforts of others. This prong is the most heavily scrutinized in crypto markets. If a core development team is responsible for building the network, driving adoption, and maintaining the code, the SEC generally views the investors as relying on the managerial efforts of that team ¹.

The Token vs. The Transaction

A critical distinction in modern securities law is that the digital token itself—the underlying code—is not inherently a security. The security is the transaction, scheme, or contract in which the token is sold.

The SEC established this precedent in its 2017 investigative report on The DAO, a decentralized autonomous organization built on the Ethereum network. The DAO sold tokens to investors to fund a venture capital pool. The SEC concluded that the tokens were securities because the investors relied on the managerial efforts of the DAO's curators to select profitable projects ².

However, the SEC's analysis focused on the nature of the offering. A token can be sold as an investment contract in an initial coin offering (ICO) and later function differently if the network matures. Evaluating the technical realities of an asset requires examining its underlying code and distribution mechanics, a process detailed in How to Check a Token Contract: Explorers, Honeypots, and Liquidity Locks.

Commodities and CFTC Jurisdiction

Assets that do not meet the criteria of the Howey Test may fall under the jurisdiction of the Commodity Futures Trading Commission (CFTC). The CFTC regulates derivatives markets and holds anti-fraud and anti-manipulation authority over spot commodity markets.

The Commodity Exchange Act defines a commodity broadly. The statutory definition includes agricultural products, natural resources, and a catch-all for all services, rights, and interests in which contracts for future delivery are presently or in the future dealt in ⁴.

The CFTC has consistently classified Bitcoin ($BTC) as a commodity. Because the Bitcoin network operates without a central issuer, central development team, or corporate board, buyers do not rely on the efforts of a specific third party for profit. The absence of a central promoter removes the information asymmetry that securities laws are designed to fix. There is no CEO of Bitcoin to file quarterly earnings reports.

The Decentralization Threshold

The transition of an asset from a security to a commodity relies on the concept of decentralization.

In 2018, William Hinman, then-Director of the SEC's Division of Corporation Finance, delivered a speech outlining how a digital asset transaction might no longer represent an investment contract if the network becomes sufficiently decentralized ³.

Hinman argued that when a network is decentralized to the point where there is no central party whose efforts are a key determining factor in the enterprise's success, the information asymmetries recede. In such cases, applying the disclosure requirements of the Securities Act provides little value to investors ³.

This concept suggests a morphing theory: a token might be sold as a security during its initial fundraising phase but trade as a non-security commodity years later if the network achieves broad, decentralized participation. Regulators evaluate this on a case-by-case basis, looking at who controls the protocol's governance, who holds the administrative keys, and how the token supply is distributed.

Why Classification Matters: The Cost of Compliance

The distinction between a security and a commodity dictates the legal and financial obligations of the issuer.

Securities registration requires filing an S-1 registration statement, producing audited financial statements, and adhering to strict communication rules during the offering period. Most crypto startup teams lack the capital and infrastructure to meet these requirements.

Failing to register a security carries severe penalties. The SEC can mandate rescission, which forces the issuer to refund investors.

Assume a hypothetical development team raises $20 million by selling tokens to US investors to fund a new protocol. The team spends $10 million on engineering and marketing over two years. The SEC subsequently classifies the initial sale as an unregistered securities offering. During this time, the token's market value drops by 90% due to market conditions.

Under rescission rules, the issuer must refund the original purchase price to investors, plus statutory pre-judgment interest. The issuer is liable for the full $20 million plus interest, despite only having $10 million remaining in its treasury and the tokens themselves being worth only $2 million on the open market. This dynamic effectively bankrupts non-compliant projects.

Furthermore, if a token is a security, centralized exchanges operating in the US cannot list it without registering as national securities exchanges. This limits the asset's liquidity and restricts retail access.

International Context: EU and UK Frameworks

While the Howey Test governs the US market, other jurisdictions use different frameworks to classify digital assets.

In the European Union, the Markets in Crypto-Assets (MiCA) regulation provides a bespoke legal framework for digital assets ⁵. MiCA categorizes assets into Asset-Referenced Tokens (stablecoins backed by multiple assets), Electronic Money Tokens (stablecoins backed by a single fiat currency), and other crypto-assets (such as utility tokens).

Crucially, MiCA explicitly excludes assets that qualify as traditional financial instruments. If a token functions like a stock or bond, it falls under the EU's Markets in Financial Instruments Directive (MiFID II), subjecting it to traditional securities regulations ⁵.

In the United Kingdom, the Financial Conduct Authority (FCA) categorizes tokens into three buckets: security tokens, e-money tokens, and unregulated tokens. Security tokens provide rights and obligations akin to specified investments, such as shares or debt instruments, and are fully regulated by the FCA. Unregulated tokens, which include cryptocurrencies like Bitcoin and various utility tokens, fall outside the regulatory perimeter for traditional securities, though firms handling them must still comply with anti-money laundering rules.

Common Misconceptions

Several misunderstandings persist regarding token classification:

• Utility shields an asset from securities laws: Many market participants believe that if a token has a use case—such as paying for computation on a network—it cannot be a security. The SEC has stated that an asset can have utility and still be sold as an investment contract if purchasers are primarily buying it to speculate on the efforts of the developers ¹.
• Code is law means regulators lack jurisdiction: Decentralized finance (DeFi) protocols operate via smart contracts. However, regulators target the human developers, promoters, and governance token holders who deploy and manage the code, applying traditional legal frameworks to their actions.
• Tokens are permanently classified: The classification of an asset applies to the specific transaction and context. A token sold to venture capitalists in a presale might be a security, while the same token distributed to users via an airdrop years later might not be, depending on the network's evolution.

What to Watch

As of Oct. 3, 2026, the regulatory landscape remains heavily reliant on enforcement actions rather than bespoke legislation in the US. Market participants should monitor ongoing federal appellate court decisions, which establish binding precedents on how the Howey Test applies to secondary market trading on crypto exchanges.

Additionally, comprehensive market structure legislation periodically moves through legislative chambers. These proposals generally attempt to codify the boundary between the SEC and the CFTC, often proposing specific decentralization thresholds that would allow a token to transition from a security to a digital commodity.

Investors evaluating the risks of centralized platforms listing these assets should also demand transparency regarding asset backing, a practice explored in Proof of Reserves: What It Shows and What It Hides.

Disclaimer: This article is for informational purposes only and does not constitute legal, tax, or investment advice. Regulatory frameworks vary by jurisdiction and are subject to change. Consult a qualified professional regarding specific legal or tax obligations.