Policy Friday #6: SEC and CFTC Declare Most Crypto Assets Are Not Securities — What It Means for Enterprise Ethereum

March 17, 2026: The Day US Crypto Regulation Changed

Three coordinated regulatory actions landed on the same day last week — and together they represent the most significant shift in US crypto policy since the original Howey decision. For enterprise teams building on Ethereum, the implications are immediate and material.

The EEA’s Policy Friday series tracks weekly regulatory developments across seven US federal agencies. This week, we reviewed 29 documents from the SEC, CFTC, Federal Reserve, OCC, Treasury, and FinCEN. Three items passed our editorial filter — all from March 17.

1. SEC and CFTC Joint Crypto Token Taxonomy

The SEC and CFTC jointly declared that most crypto assets are not securities. The agencies published a binding token taxonomy with four non-security categories:

• Digital commodities — fungible tokens traded on commodity markets
• Digital collectibles — NFTs and unique digital assets
• Digital tools — utility tokens with functional use cases
• GENIUS Act stablecoins — payment stablecoins under the new legislative framework

Only “digital securities” — tokenized versions of traditional securities — remain under SEC jurisdiction. The interpretation also establishes, for the first time, clear rules for when an investment contract terminates, giving token issuers a defined path out of SEC oversight.

SEC Press Release | CFTC Press Release

2. Regulation Crypto Assets: Chairman Atkins’ Three-Tier Safe Harbor

SEC Chairman Paul Atkins proposed Regulation Crypto Assets — a structured safe harbor framework designed to give crypto projects regulatory certainty during development and fundraising:

• Startup exemption: raise up to $5 million over four years without registration
• Fundraising exemption: raise up to $75 million annually with streamlined disclosure
• Investment contract safe harbor: tokens exit SEC oversight once project teams deliver on their stated objectives

For enterprises evaluating token-based models — whether for supply chain, identity, or financial products — this framework removes a major source of legal uncertainty.

Full remarks from Chairman Atkins

3. CFTC Clears Self-Custodial Wallet Infrastructure

The CFTC granted Phantom Technologies a no-action letter allowing self-custodial wallet software to connect users directly with registered futures brokers and exchanges — without the wallet provider needing to register as an introducing broker.

This is the first formal regulatory blessing of DeFi wallet infrastructure by a US federal agency. For enterprise applications that rely on non-custodial architectures, this sets a precedent.

CFTC Press Release

What This Means for Enterprise Ethereum

These three actions, taken together, do something that years of enforcement-driven regulation never could: they give enterprises clear categories, defined exemptions, and predictable outcomes.

Companies that have been waiting for regulatory clarity before launching Ethereum-based products now have a framework to work within. The token taxonomy tells you what category your asset falls into. The safe harbor tells you how to fundraise legally. And the wallet no-action letter tells you that self-custodial infrastructure is not a registration trigger.

The door for institutional Ethereum adoption opened wider this week than at any point in the past decade.

Related reading: From Code to Capital: What It Will Take for Tokenized Collateral to Scale | How Public and Permissioned Networks Are Converging

Stay Ahead of Regulatory Shifts

EEA members get early access to regulatory intelligence like this through our weekly Policy Friday series, working groups, and direct engagement with policymakers. If your organization is building on Ethereum and navigating the regulatory landscape, join the EEA today.