SEC's New Crypto Rules FAQ Explained: Compliance Boundaries for Token Buybacks, Staking Receipts, and Network Upgrades

The U.S. Securities and Exchange Commission (SEC) Division of Corporation Finance published a frequently asked questions document on crypto assets on September 25, translating the framework interpretation from March of this year into specific scenarios. The market immediately took notice because the four matters touched on by this document happen to be the four things project teams have been most uncertain about—and most frequently questioned on—over the past two years: token buybacks, staking receipt tokens, continued development after network launch, and the legal status of secondary market trading platforms.

First, the nature of this document needs to be clarified. According to the original text published by the SEC, these answers represent the views of the Division of Corporation Finance staff, not rules, regulations, or official statements of the Commission. The Commission has neither approved nor disapproved their contents. The document itself has no legal force, does not modify existing law, and does not create new obligations for anyone. Therefore, reading any single item as meaning "a certain type of conduct is no longer a security" is an oversimplification. Its real value lies in the fact that, for the first time, it explains relatively clearly which facts the staff will look at when determining whether an investment contract relationship still exists.

Key Takeaways

Functionality is the dividing line for the entire analysis. Whether a network is already functional determines how the same action (for example, announcing a buyback) will be interpreted. The same announcement carries completely different legal meaning when placed on a functional network versus on a network that has not yet launched.

Buybacks do not automatically change the nature of a token, but the narrative does. On a functional network, the staff believes that announcing a buyback does not constitute a promise to undertake essential managerial efforts; where the network is not yet functional, if the project team packages the buyback as a means of creating income or returns for token holders, that announcement may be viewed as such a promise.

Staking receipt tokens have been placed within a strict "receipt" definition. A receipt can only prove ownership of deposited assets; it must not change any rights, obligations, or benefits of those assets, must not allow the issuer to transfer, lend, stake, or rehypothecate the deposited assets, and must not expose them to third-party claims.

Maintenance and upgrades after functionality is achieved are no longer viewed as essential managerial efforts. Ensuring security, maintaining, improving, or enhancing system functionality, or promoting network effects through sponsorships or funding development projects, do not fall on the managerial efforts side of the Howey test.

Trading platforms do not automatically become promoters merely by providing a secondary market. The test returns to the definition of "promoter" under Rule 405 of the Securities Act, and whether it applies depends on the facts themselves.

Why Functionality Became the Starting Point of the Entire Analysis

Who Holds the Power of Definition

The first set of questions in this document addresses a seemingly technical but actually critical issue: the March interpretive document provided definitions of "functional" and "decentralized," while also stating that when judging whether an issuer has fulfilled its promises, one should look at how the issuer itself originally defined or described these two terms, rather than the general market understanding. How can these two sets of standards coexist?

The staff's answer separates the two. The definitions provided by the Commission are unrelated to whether an issuer has fulfilled its promises, because the threshold for achieving functionality or decentralization is set by each issuer in its own statements; however, these definitions are directly relevant to how the Commission classifies crypto assets. In other words, classification looks at the official definitions, while performance looks at what the issuer originally said.

The practical significance of this distinction for project teams is quite direct. Wording in white papers, roadmaps, and fundraising materials regarding "mainnet launch is deemed functionality" or "governance transfer is deemed decentralization" is no longer merely market communication language; it will become the reference point for determining whether an investment contract has already terminated. The vaguer the wording, the harder it is to establish that a promise has been fulfilled; the more specific the wording, the more likely it is to form a verifiable endpoint.

Classification and Investment Contracts Are Two Separate Layers

To understand this point, one needs to return to the framework of March 17. According to the press release issued by the SEC at the time, the Commission acted in parallel with the Commodity Futures Trading Commission (CFTC) to provide a token taxonomy dividing crypto assets into digital commodities, digital collectibles, digital tools, stablecoins, and digital securities, and explaining how crypto assets that are not themselves securities may become subject to an investment contract, and how they may escape that constraint. The full text of the interpretive document forms the entire terminological basis for these FAQs.

Therefore, asset classification and investment contract analysis are two independent layers. A token can be a digital commodity while simultaneously being covered by an investment contract because of the manner of sale and the issuer's promises; when the promises are fulfilled or no longer exist, the investment contract may terminate without the token's classification changing. Almost all of the work in the September document unfolds on the second layer.

Under What Circumstances Token Buybacks Enter Investment Contract Analysis

Buybacks on Functional Networks

The document acknowledges that issuers of non-security crypto assets conduct buybacks for various reasons, including treasury management, supply reduction, protocol-funded burns, and rebalancing. In response to the question of whether announcing a buyback constitutes a promise to undertake essential managerial efforts, the staff's answer is conditioned on network status: where the crypto system is already functional, an issuer's announcement of a buyback program for non-security crypto assets does not constitute such a promise.

The Block's report noted that this item, together with network upgrades and marketing statements, formed the most closely watched part of the document, but also emphasized that its application is conditional and not a blanket statement about all buybacks.

Non-Functional Networks and Return Narratives

The other half of the condition deserves even more attention from project teams. Where the crypto system is not yet functional, if the issuer presents the buyback as a way to create income or returns for token holders, that announcement may constitute a promise to undertake essential managerial efforts, thereby falling within the scope of the Howey test analysis.

This effectively draws a line bounded by narrative. The same buyback announcement—if it only explains the source of funds, execution pace, and supply impact—carries different legal weight than describing it as a source of returns for holders. For projects still in the building phase that have not yet delivered full functionality, writing buybacks into an "investment return" narrative is the highest-risk form of expression.

Buybacks Are Becoming an Industry Norm—That Is Why the Document Drew Attention

The reason this item was amplified by the market is that buybacks have evolved in 2026 from an isolated experiment into a common method of capital allocation. According to a report by The Crypto Times citing Allium Labs data, crypto projects spent approximately $638 million on token buybacks in the first eight months of this year, compared with only about $366,000 for all of 2024, with Hyperliquid and Pump.fun together accounting for nearly 90%. The same report mentioned that Lido stated in August that it planned to conduct regular buybacks after reaching specific thresholds including $40 million in annualized revenue, while Jupiter invested nearly $14 million in buybacks during the year, yet its token still fell about 55% over the past year.

This data illustrates two things. First, buybacks have become a sufficiently large capital flow that any ambiguity in regulatory treatment will generate real costs. Second, there is no stable relationship between buybacks and price, and marketing them as a return promise is equally untenable commercially.

What Kind of Definition Staking Receipt Tokens Have Been Placed Into

The Strict Meaning of "Receipt"

The document devotes an entire question to defining the concept of a "receipt." In this context, a receipt is an instrument that proves a certain quantity of assets has been deposited with the custodian or depository issuing the receipt, and proves that the depositor owns the deposited assets. It does not change any rights, obligations, or benefits of the deposited assets, nor does it provide holders with any additional financial incentives or benefits.

More critically, it differs from other financial instruments in that a receipt does not transfer ownership or control of the deposited assets to the issuer of the receipt; the issuer may not transfer, lend, stake, rehypothecate, or otherwise use those assets for any reason, nor subject them to third-party claims. This is a fairly high threshold, strictly distinguishing "receipts" from "wealth management instruments issued on the basis of deposited assets."

Digital Tool or Digital Commodity

On the classification question, the staff offered two possibilities. When a staking receipt token is a receipt for a digital commodity not subject to an investment contract, it is itself a digital tool, because the actual function it performs is to prove the holder's ownership of the underlying digital commodity. However, if the receipt is issued by a protocol-based liquid staking provider, it may also be classified as a digital commodity, on the grounds that it derives value from an intrinsic connection to the programmatic operation of a functional crypto system, while also being affected by supply and demand.

The document's footnote further notes that staking receipt tokens generally do not possess their own intrinsic economic properties or rights; although holders are entitled to rewards generated by the underlying digital commodity, the receipt itself does not create this right and does not guarantee, generate, or determine the amount of the rewards.

This distinction carries considerable significance for the liquid staking sector. According to DefiLlama's liquid staking sector data, the locked value of such protocols has long ranked among the top sectors in decentralized finance, with Lido alone operating at a scale in the tens of billions of dollars. How receipt tokens are issued at the protocol level, their redemption mechanisms, and whether the underlying assets may be reused will directly affect whether they fall on the "digital tool" or "digital commodity" side, and these two categories are treated differently in the Commission's token classification framework.

Network Upgrades and Continued Development Have Been Moved Off the Managerial Efforts Side

Software Is Always Iterating—How Does the Law Treat This?

The document directly confronts a contradiction that has long troubled developers: software is in a state of continuous development due to maintenance and upgrades, and functional networks also need network effects to grow. So after a system becomes functional, what can issuers and other market participants still do without constituting essential managerial efforts?

The staff answered by citing the Commission's recent statements: once a crypto system is functional, services provided to ensure, maintain, improve, or enhance the system and its functionality, or to promote network effects, whether through sponsorships or funding development projects or similar activities, do not involve essential managerial efforts. Therefore, statements or promises by an issuer to provide or continue to provide (or arrange for the provision of) such services after the system becomes functional do not satisfy the Howey test. This statement is quoted from the August 18 Regulation Crypto Assets proposal, File No. 33-11434.

The practical effect of this answer is to distinguish the long-term evolutionary model of Ethereum-style development from the investment contract logic of "the issuer continues operating to create returns." Protocol upgrades, security audits, ecosystem funds, and developer incentives are no longer automatically evidence of security status.

Networks Without a Central Party

Another question goes further: when a functional crypto system has no central party, can an issuer's statements create a new investment contract? The staff believes that in such a case, the issuer's statements about the system are unlikely to create a new investment contract, on the grounds that neither the issuer nor anyone else has control over the system and cannot take actions affecting the system's success or failure.

This answer effectively provides a relatively safe space for teams that continue to speak after decentralization, but its preconditions are very strict: both functionality and the absence of a central party must be satisfied simultaneously.

Investment Contracts Do Not Disappear Merely Because Someone Else Takes Them Over

The document also closes an obvious workaround. In response to whether a non-security crypto asset separates from an investment contract and is no longer subject to it when the issuer's statements or promises are taken over by another party, the answer is no: separation does not occur, whether through active assumption or operation of law. This means that packaging promises and transferring them to a foundation or new entity does not automatically clear an existing investment contract relationship.

Whether Trading Platforms Count as Promoters

The March interpretive document expanded "issuer" to include affiliates and agents of the issuer or promoter, and this wording had led many secondary market platforms to worry that they might be drawn into investment contract determinations. This document responds to that concern: a trading platform that provides a secondary market for a crypto asset will be deemed a promoter only if it meets the definition of "promoter" under Rule 405 of the Securities Act.

The meaning of this statement is to send the question back to the existing general definition rather than creating a broader new standard for the crypto industry. The concept of a promoter under Rule 405 refers to a role involved in founding and organizing an enterprise and receiving securities or consideration as a result, rather than a venue that merely provides matching and liquidity. For operators listing assets on platforms such as MEXC, the real risk to manage is not "whether a trading pair was provided," but whether statements and promotional activities during the listing process crossed that line.

Practical Impact on Project Teams and Trading Platforms

The Value of Wording Has Risen

Taking the six questions together, the most consistent signal is that in the staff's analysis, facts and statements carry very significant weight. Promoting existing features and capabilities generally does not constitute a promise to undertake essential managerial efforts; describing potential features in uncertain, visionary language, if it contains no content about profit potential, generally does not constitute one either. Conversely, as long as materials clearly and specifically connect the issuer's efforts with purchasers' expected profits, the analysis may change.

For project teams, this means market communication documents need to be aligned with legal positions rather than handled separately. For trading platforms, wording in listing announcements, campaign pages, and research content also falls within the scope requiring review.

The Rules Are Still on the Way

It should be emphasized that these answers are built on a proposal, and the proposal has not yet become a rule. According to the SEC's rule page, Regulation Crypto Assets was published on August 18, appeared in the Federal Register on August 21, and the comment period closes on October 20. The proposal includes two registration exemptions—one allowing offerings of up to $5 million within four years, and another allowing offerings of up to $75 million every 12 months—along with a conditional safe harbor to define when certain crypto assets are no longer considered subject to an investment contract.

White & Case's analysis noted that the proposal addresses only the issuance side, leaving trading, custody, and exchange regulation to other rulemakings still on the agenda.