SEC vs CFTC: Who Regulates Crypto?

The Turf War for Your Smart Contract

If you are building in crypto, you are living in a house with two landlords who hate each other. Neither can agree on the rules, but both expect you to pay the price if you break them. I am talking about the SEC and the CFTC. To the uninitiated, this looks like standard government overhead. To a founder, it is a persistent strategic risk that can kill a company before it finds product-market fit.

The Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) are currently locked in a struggle over who gets to govern the digital asset space. This isn't just about egos. It is about jurisdiction, budget, and the very definition of what we are building. One side views most tokens as investment schemes; the other sees them as raw materials for a new digital economy. For builders, the difference between being a security or a commodity is the difference between an affordable compliance budget and a multi-million-dollar legal wall.

The SEC Approach: Everything is an Investment

The SEC, led by Gary Gensler, relies heavily on the Howey Test. This is a framework from the 1940s designed to determine if a transaction qualifies as an investment contract. The logic is simple: if people put money into a common enterprise with the expectation of profit based on the efforts of others, it’s a security. In the SEC’s eyes, almost every ICO, pre-sale, or governance token fits this description.

For a founder, being under the SEC’s thumb means the disclosure requirements are massive. You have to register, provide audited financials, and follow strict rules about who can buy your tokens. This effectively kills the 'permissionless' dream that many crypto projects start with. The SEC argues they are protecting investors from fraud, but the reality for many startups is that the SEC's rules were never designed for decentralized networks where there is no central 'issuer' after a certain point.

The CFTC Approach: Markets and Materials

On the other side, we have the CFTC. They generally oversee commodities like gold, oil, and wheat, as well as the derivatives and futures markets built on top of them. The CFTC has historically taken a slightly more pragmatic view of crypto. They were quick to label Bitcoin and Ethereum as commodities, which provided a sliver of clarity in an otherwise murky decade.

If your asset is a commodity, the regulatory burden is usually lighter than it is for securities. The CFTC cares more about market manipulation and fraud in the spot markets rather than the granular registration of every single asset. Builders usually prefer the CFTC because it feels more like a light-touch regulator focused on market integrity rather than an existential gatekeeper. However, the CFTC’s reach is limited to specific types of assets and trading activities, leaving a lot of middle ground uncovered.

The Impact on Product Development

This split isn't just a legal curiosity; it dictates what you can actually build. If you want to launch a decentralized exchange (DEX), you have to worry about whether the SEC thinks you are an unregistered securities exchange. If you want to offer leverage or futures, you are squarely in the CFTC’s crosshairs. If you do both, you are fighting a two-front war.

I’ve seen founders spend more on legal opinions than on engineering. They are trying to thread a needle that doesn't exist yet. The lack of a unified framework means that even if you follow the CFTC’s rules, the SEC might still sue you six months later for a different facet of the same product. This 'regulation by enforcement' prevents the industry from maturing because everyone is too busy looking over their shoulder to actually innovate.

• The SEC focus: Investor protection, disclosures, and registration of investment contracts.
• The CFTC focus: Market integrity, prevention of manipulation, and oversight of derivatives/commodities.
• The Builder's reality: High legal fees, uncertain roadmaps, and the risk of being used as a test case for new enforcement theories.

The Political Stalling Point

Why hasn't this been fixed? Because a clear definition requires an act of Congress. Currently, there are several bills floating around that would give more power to the CFTC, which the crypto industry generally supports. However, the SEC is hesitant to give up its territory. This is a classic power struggle between agencies that creates a vacuum of leadership.

While the agencies bicker, the rest of the world is moving forward. Markets in Europe and Asia are creating tailored frameworks for digital assets. They aren't trying to force 21st-century code into 1930s legal buckets. The US risk is that we export all the talent and capital because we can't decide which agency gets to collect the filing fees.

What Builders Should Do

If you are founding a project today, you cannot ignore this. You have to pick a side and build accordingly, but you must also stay liquid enough to pivot if the rules change. Right now, the safer bet for long-term survival is to aim for decentralization as quickly as possible. The 'efforts of others' part of the Howey Test is the SEC’s strongest weapon. If your project truly runs itself, the SEC has a harder time claiming it is an investment contract.

Don't fall for the hype of 'complisnt' tokens that haven't actually checked with either agency. There is no such thing as 'partially' regulated in this environment. You are either fully in the box or you are a target. My advice is to engage with legal counsel that understands the nuances of both agencies, not just one. You need a map of the minefield, not just a shovel.

The Takeaway

The SEC and CFTC are not your friends, and they are not your enemies; they are competitors. They are competing for the right to regulate the most significant technological shift since the internet. Until there is a clear legislative winner, the burden of this competition falls on your shoulders. Build with the assumption that the rules will be applied retroactively, and prioritize transparency above all else. In a world of regulatory uncertainty, the only thing you can control is the integrity of your code and the honesty of your communication with your users.

Read the original at The Block →