regulation sec defi

The SEC stopped suing crypto and started regulating it

bitcoinindex.net · · 6 min read
The SEC stopped suing crypto and started regulating it

For three years, the SEC treated crypto like an enemy. 125 enforcement actions. $6 billion in penalties. Gary Gensler’s philosophy was simple: regulate through lawsuits, not rules. If you wanted clarity on whether your token was a security, you got a Wells notice.

Then Paul Atkins took over in April 2025, and the lawsuits stopped. On February 18, 2026, at ETHDenver, Atkins and Commissioner Hester Peirce delivered what crypto never got from Gensler: an actual regulatory roadmap. Innovation exemptions for tokenized securities. Custody rules for stablecoins. A framework for when tokens stop being securities.

For the first time since Bitcoin launched, U.S. crypto regulation looks less like a threat and more like infrastructure.

The Gensler era: regulation by lawsuit

Between 2021 and 2024, the SEC under Gary Gensler filed 125 crypto enforcement actions. The pattern was consistent: sue first, clarify never.

2021: 24 actions. 2022: 30 actions, up 50%. 2023: 47 actions, up another 53%. Even as Gensler prepared to leave in 2024, the SEC filed 33 more cases. Total penalties across those four years: $6.05 billion, with Binance’s $4.3 billion settlement accounting for most of 2024’s haul.

The theory was “regulation by enforcement.” No formal rulemaking. No guidance on what made a token a security. Just case law built through lawsuits. Coinbase got sued for operating an unregistered exchange. Kraken got sued for offering staking services. Uniswap Labs faced allegations that its protocol was an unregistered broker-dealer.

Gensler’s position was clear: everything except Bitcoin is a security until proven otherwise. His departure on January 20, 2025, ended the most aggressive crypto enforcement campaign in SEC history.

Atkins’ first ten months: the lawsuits stop

Paul Atkins, a former SEC commissioner under George W. Bush and founder of regulatory consulting firm Patomak Global Partners, was confirmed as SEC chair on April 9, 2025, in a 52-44 partisan Senate vote. He was sworn in on April 22.

In the ten months since, the SEC has filed virtually zero new major crypto enforcement actions. Most of Gensler’s pending cases were dropped or settled. Coinbase’s lawsuit settled in March 2025. Kraken’s case was dismissed. Uniswap Labs’ case was dropped in February 2025. Consensys reached a settlement over MetaMask.

The fiscal year 2025 SEC enforcement report showed the lowest total enforcement actions in a decade: 313, down 27% from 2024. Crypto cases, which dominated Gensler’s docket, nearly disappeared.

Atkins’ approach is the opposite of his predecessor’s. Instead of lawsuits, he’s offering rulemaking. Instead of case-by-case enforcement, he’s building frameworks. The ETHDenver speech on February 18, 2026, laid out seven specific initiatives.

The seven pillars of crypto clarity

Atkins and Peirce’s ETHDenver speech outlined the SEC’s 2026 crypto agenda. Here’s what’s actually on the table.

1. Investment contract framework

The biggest question in crypto regulation: when is a token a security? Atkins promised guidance clarifying when crypto assets meet the Howey test (expectations of profit from others’ efforts) and, more importantly, when tokens shed securities status as networks mature.

Example: Ethereum’s ICO in 2014 was arguably a security. By 2018, with a decentralized network of validators and developers, the SEC and CFTC effectively treated it as a commodity. That transition has never been formally documented. Atkins wants to codify it.

2. Innovation exemptions for tokenized securities

This is the breakthrough. The SEC will issue pilot programs allowing tokenized securities to trade on novel platforms, including automated market makers like Uniswap, under temporary conditional relief.

The exemption is narrow: limited scope, sunset provisions (likely 12-24 months), investor protections, disclosure requirements. But it means DeFi protocols can legally integrate tokenized securities without being forced into centralized broker-dealer models that kill decentralization.

It’s the same approach the SEC used for money market funds in the 1970s and ETFs in the 1990s. Controlled experimentation before full integration.

3. Broker-dealer custody of non-security crypto

Traditional broker-dealers like Fidelity and Schwab can now custody non-security crypto, including payment stablecoins, under clear rules. On February 19, 2026, the SEC issued an FAQ permitting broker-dealers to treat payment stablecoins as having a “ready market” with only a 2% haircut under net capital rules.

Translation: exchanges like Coinbase and Kraken can operate under broker-dealer licenses without prohibitive capital requirements for holding stablecoins.

4. Transfer agent modernization

The SEC is updating transfer agent rules to allow blockchain-based recordkeeping for tokenized securities. Current transfer agents use legacy systems incompatible with smart contracts. The update enables 24/7 settlement, programmable compliance, and instant dividend distribution.

5. No-action letters for wallets

Wallets and user interfaces like MetaMask and Phantom won’t require broker-dealer registration if they merely display information and don’t take custody. This eliminates a massive compliance cost that would have killed most consumer crypto apps.

6. “Super-app” licenses

One license allowing firms to offer crypto asset securities, non-security crypto, staking services, and traditional securities under a single compliance regime. Coinbase, Kraken, and Binance.US can offer everything without juggling separate registrations for each activity.

7. Integration of on-chain systems

The SEC is updating rules to support decentralized systems and AMMs in U.S. securities markets. DeFi protocols like Uniswap, Curve, and Aave can legally operate without being forced into centralized broker-dealer models.

The CFTC gets Bitcoin and Ethereum

While the SEC clarified securities, Congress is finalizing the commodity side. The Digital Asset Market Clarity Act, which passed the Senate Agriculture Committee on January 29, 2026 in a 12-11 vote, gives the CFTC primary oversight over Bitcoin, Ethereum, and other digital commodities.

The SEC keeps digital securities (tokens meeting the Howey test). The CFTC gets spot commodity markets. The agencies will conduct 18 months of joint rulemaking to clarify gray areas like DeFi governance tokens and staking yields.

In January 2026, the CFTC also launched a pilot allowing Bitcoin, Ethereum, and USDC as margin collateral for derivatives. Combined with the SEC’s stablecoin custody rules, this creates institutional on-ramps that didn’t exist under Gensler.

The stablecoin framework: GENIUS Act

The regulatory shift didn’t start with Atkins. On July 18, 2025, President Trump signed the GENIUS Act (Guiding and Establishing National Innovation for U.S. Stablecoins), the first federal stablecoin framework.

Key provisions: federal licensing for payment stablecoin issuers, 100% reserve backing in high-quality liquid assets, monthly attestations and audits, and guaranteed redemption rights at par.

USDC and USDT, which together control most of the stablecoin market, now operate under a clear legal framework. PayPal, Stripe, and Visa can issue stablecoins without navigating a state-by-state regulatory patchwork.

Caveat: the GENIUS Act favors centralized, fiat-backed stablecoins. Decentralized algorithmic stablecoins like DAI and Frax have no clear regulatory path.

What’s still broken

Atkins delivered a roadmap, but execution is pending. The innovation exemption criteria haven’t been published yet. The investment contract framework is guidance, not a formal rule. The 18-month CFTC-SEC joint rulemaking process hasn’t started.

DeFi remains a gray zone. How do truly decentralized protocols fit into broker-dealer frameworks designed for centralized entities? Can DAOs register as legal entities? The SEC’s framework assumes someone is running the platform, but many DeFi protocols have no identifiable operator.

International coordination is lacking. The EU’s MiCA (Markets in Crypto-Assets) framework is incompatible with U.S. rules in key areas. Regulatory arbitrage opportunities remain: issue in one jurisdiction, operate globally, and cross-border enforcement is unclear.

The GENIUS Act’s stablecoin framework centralizes the market. Circle and Tether control over 90% of stablecoin supply. Algorithmic stablecoins are excluded. The risk is a two-issuer monopoly backed by federal regulation.

And the 180-day implementation timelines in the Senate bill are aspirational. Federal agencies rarely meet those deadlines. Expect 12-24 months for actual rules to finalize.

From lawsuits to liftoff

For three years, crypto operated in a regulatory void punctuated by enforcement actions. Gensler’s SEC offered no path to compliance, only litigation. Atkins’ SEC is offering frameworks, exemptions, and guidance.

The question now is whether the industry can build on it. Innovation exemptions only matter if DeFi protocols apply. Custody rules only matter if broker-dealers integrate crypto. CFTC oversight only works if Congress passes the enabling legislation.

Atkins gave crypto a roadmap. The next twelve months will show whether it was enough.

Sources

Published February 24, 2026