The SEC's Proposed Crypto Offering Framework: A Good First Step or Too Little Too Late?

On August 18, 2026, the Securities and Exchange Commission (“SEC”) proposed Regulation Crypto Assets (“Reg CA”) — the agency's first standalone offering framework designed specifically for crypto assets. The proposal arrives at an inflection point. Congress has not yet moved the Digital Asset Market Clarity Act (“CLARITY Act”) to the Senate floor, and the crypto industry remains starved for regulatory certainty. Reg CA is the most consequential SEC rulemaking in this space since the SEC stood up the Crypto Task Force in January 2025.

The proposal builds on the Commission's March 2026 interpretive guidance, which classified crypto assets into five categories and clarified how the Howey investment contract analysis applies to digital tokens. SEC Chairman Paul Atkins framed the rule as part of a broader modernization agenda:

“Advancing this regulatory framework is a key element in our strategy to advance the rule books for the modern era and another step by the Commission to onshore innovation in crypto asset markets for generations to come.”

The proposal does real work. It creates tailored offering exemptions (up to $75 million), establishes a principles-based disclosure regime, introduces a conditional safe harbor from “investment contract” status, and broadly preempts state blue sky laws. These are not trivial developments for an industry that has operated under regulatory ambiguity since the first ICO wave in 2017.

But Reg CA is also more limited than its press coverage suggests. It addresses primary offerings only. It leaves exchanges, brokers, and dealers without a clear path. And its safe harbor mechanism relies on issuer self-certification, which is a structure that creates meaningful exposure for market intermediaries who must decide whether to trust that certification. The key question is whether Reg CA can actually onshore digital asset innovation after years of regulatory uncertainty. This alert examines the proposal's substance, its gaps, and what clients should do now.

The Regulatory Backdrop

The SEC's authority over crypto assets turns on the term “investment contract”, which is a category of security under the Securities Act of 1933 and the Securities Exchange Act of 1934, but one that neither statute defines. The Supreme Court supplied the definition in SEC v. W.J. Howey Co., 328 U.S. 293 (1946): an investment contract exists where there is an investment of money, in a common enterprise, with a reasonable expectation of profits derived from the efforts of others. Since 2017, the SEC has applied this four-part test to token sales, taking the position that most digital asset offerings constitute securities transactions.

This approach was widely criticized. The Commission pursued enforcement actions (most notably against Ripple Labs, Coinbase, and a succession of smaller token issuers) without adopting rules tailored to digital assets. Industry participants characterized this as “regulation by enforcement,” and several Commissioners publicly agreed.

The shift began in early 2025. The Crypto Task Force launched a series of roundtables and solicited extensive public comment. Staff statements followed throughout the year — on meme coins (February 2025, concluding they are generally not securities because they function more like collectibles than investment vehicles), proof-of-work mining, stablecoins, protocol staking, and tokenized securities. Then, on March 17, 2026, the Commission issued a comprehensive interpretive release classifying crypto assets into five functional categories: digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. The first four categories are generally not securities.

Critically, the March 2026 interpretation established the principle that an investment contract can terminate. Once an issuer has fulfilled its representations or promises to engage in essential managerial efforts — or once purchasers can no longer reasonably expect those efforts to continue — the crypto asset separates from the investment contract and is no longer subject to federal securities law obligations. This concept provides the intellectual foundation for Reg CA's safe harbor.

The Three Exempt Offering Pathways

Reg CA would create a standalone offering framework organized around “covered investment contracts.” That term is defined precisely: it applies where the only asset offered or sold is a crypto asset that is not itself a security, that crypto asset is subject to an investment contract, and no other asset (whether a security or otherwise) is subject to that investment contract. Three exemptions would apply.

The Startup Exemption (Rule 200) provides a one-time exemption from Securities Act registration, permitting offerings of up to $5 million over a four-year period. Think of it as a development window — the issuer distributes tokens to participants while building out its blockchain network or application. The issuer may be an entity, an individual, or a group. It must file a notice of reliance on the new Form NOR, provide principles-based narrative disclosures publicly (at a website, not on EDGAR), and certify its intent to complete the essential managerial efforts it has promised. The exemption permits general solicitation, imposes no accredited investor requirement, and produces unrestricted securities — critical for achieving the network effects that crypto projects depend on.

The Fundraising Exemption (Rules 300–307) establishes two larger capital-raising tiers modeled partly on Regulation A:

Tier 1 permits offerings of up to $20 million over a 12-month period, including no more than $6 million from affiliated selling securityholders.

Tier 2 permits offerings of up to $75 million over a 12-month period, including no more than $22.5 million from affiliated selling securityholders.

Unlike the startup exemption, the fundraising exemption involves SEC staff review, qualification of an offering statement filed on new Form 1-CRYPTO, financial statements, and ongoing periodic reporting (annual, semiannual, and current reports). Eligibility is narrower: the issuer must be organized in the United States, with a majority of executive officers or directors who are U.S. citizens or residents, more than 50% of assets located domestically, and principal business administration in the United States. Tier 2 financial statements must be audited; Tier 1 financial statements do not require an audit.

The Investment Contract Safe Harbor (Rule 400) is the proposal's most consequential provision for the existing crypto market. If an issuer has completed or permanently ceased all essential managerial efforts it represented or promised, and is not making (and does not intend to make) any new such representations, the issuer may file Form TR certifying those conditions. Upon filing, the SEC would deem the covered investment contract to have ceased to exist — meaning the crypto asset would no longer be regulated as a security.

The safe harbor is non-exclusive. It does not require prior use of a Reg CA exemption. This means that issuers of tokens already circulating — tokens that were sold years ago without the benefit of any exemption — could potentially file Form TR if they can honestly certify that their essential managerial efforts have concluded. For the thousands of tokens currently in legal limbo, this creates a concrete off-ramp from securities regulation.

Principles-Based Disclosure

Both the startup and fundraising exemptions require issuers to provide narrative disclosures across ten prescribed topics: the investment contract's material terms; the offering details; the crypto asset's characteristics; management and conflicts of interest; the development plan for the network or application; security and source code; tokenomics and allocations; governance mechanisms; the token ecosystem; and risk factors. The SEC deliberately chose a principles-based approach, acknowledging that rigid line-item disclosure frameworks designed for equity offerings would produce compliance burdens without corresponding informational value for token purchasers.

State Law Preemption

Proposed Rule 500 would preempt state securities registration and qualification requirements for offerings conducted under Reg CA, as well as for secondary market transactions by any person other than an issuer, underwriter, or dealer — provided the issuer remains current with its disclosure and reporting obligations. States retain anti-fraud and notice-filing authority. For an asset class that is inherently borderless and global, elimination of the 54-jurisdiction blue sky compliance patchwork is a substantial practical benefit that should not be overlooked.

Where the Proposal Falls Short

No Exemption for Secondary Market Participants. The proposal’s most significant omission is its silence on trading infrastructure. Reg CA addresses how tokens enter the market. It does not address how they trade (or how they are regulated) once they are there. Until an issuer files Form TR, any platform listing or facilitating trades in those tokens may still face registration requirements as an exchange, broker, dealer, or clearing agency.

This gap is not academic. It sits at the center of the most significant litigation in recent crypto enforcement history. In SEC v. Ripple Labs (S.D.N.Y.), Judge Torres concluded that secondary market sales of XRP on exchanges did not constitute securities transactions because those purchasers did not have the same contractual relationship with Ripple that direct purchasers had. In SEC v. Coinbase (S.D.N.Y.), Judge Failla reached the opposite conclusion, holding that secondary market purchasers of third-party tokens could form the same expectations as direct purchasers because they were attracted by the same issuer promises communicated to the investing public. The SEC dismissed the Coinbase action in February 2025 without obtaining a definitive appellate ruling, leaving these conflicting district court analyses unresolved.

Reg CA does not resolve this conflict. An exchange evaluating whether to list a token that has not yet obtained Form TR certification still faces the same legal uncertainty it faced before the proposal. The SEC acknowledged this gap in its press release, stating only that it “will continue to consider whether further action with respect to covered investment contracts beyond the proposed rules in this release is warranted.” For a framework intended to bring crypto activity onshore, the absence of intermediary relief is a significant limitation. Secondary markets are indispensable to token liquidity, protocol adoption, and the network effects that Reg CA's own economic analysis identifies as critical to project success.

The $75 Million Ceiling. Offerings exceeding $75 million in a 12-month period would need to register through the existing process — a process the Commission itself acknowledges is ill-suited to crypto assets — or rely on another exemption such as Regulation D. Regulation D would effectively restrict sales to accredited investors, undermining the broad distribution that most crypto projects require to build a functional network. For large-scale projects that require significant capital formation, $75 million may prove insufficient. The Commission has asked for comment on whether this limit is appropriate.

Self-Certification Risk. The safe harbor's Form TR mechanism relies on issuer self-certification. The Commission has confirmed it may challenge a certification at any time. The proposal provides no express reliance protection to third parties (exchanges, brokers, asset managers) who transact in a token based on an issuer’s filing. An exchange listing a token after Form TR faces a binary choice: either the certification holds and the token trades freely, or the SEC later disagrees and the exchange has been operating as an unregistered securities venue. For institutional intermediaries accustomed to regulatory certainty as a predicate for business decisions, this is a material concern.

Investment Company Act and Advisers Act. The safe harbor applies only to the Securities Act and Exchange Act definitions of “security.” It does not extend to the nearly identical definitions under the Investment Company Act of 1940 or the Investment Advisers Act of 1940. Entities that accumulate substantial positions in tokens may still face Investment Company Act exposure even after the issuer files Form TR. This exclusion is significant for funds, advisers, and other pooled vehicles operating in the crypto ecosystem.

The Continued Centrality of the Howey Test

A structural observation: the entire Reg CA framework continues to rest on the Howey investment contract concept — a 1946 judicial standard developed in the context of Florida orange groves. To enter the framework, a developer must determine that its transaction involves an investment contract. To comply, it must identify what constitutes “essential managerial efforts.” To exit, it must determine that those efforts have been “completed or otherwise permanently ceased.” Each determination is a facts-and-circumstances judgment.

This matters because Howey is inherently subjective. The proposal does not eliminate that subjectivity. It channels it into a procedural framework — Form NOR at entry, disclosures during the offering, Form TR at exit — but the underlying legal judgments remain contestable. For a multi-trillion-dollar asset class with standardized, negotiable instruments trading on organized venues globally, the continued use of a judicial catchall as the definitional boundary raises a legitimate question: should this asset class be defined by objective characteristics rather than case-by-case judicial analysis?

Competitive Dynamics and Timing

The proposal arrives after years of U.S. regulatory uncertainty during which competing jurisdictions — the UAE, Singapore, Switzerland, Hong Kong, and the EU (through MiCA) — implemented comprehensive regulatory frameworks for digital assets. U.S. developer share in blockchain has declined materially, centralized exchange volume is concentrated overwhelmingly offshore, and major stablecoin issuances are structured outside U.S. jurisdiction.

Chairman Atkins has explicitly stated that a goal of the proposal is to “onshore innovation in crypto asset markets” and “reduce incentives for issuers to create and operate offshore.” The question is whether a proposed rule in August 2026 — which realistically may not produce final rules until the first half of 2027 — can reverse migration patterns that have been compounding for years. The United States retains structural advantages: deep capital markets, a large institutional investor base, and the world's strongest venture capital ecosystem. The safe harbor's availability to already-circulating tokens is a meaningful draw. But entrepreneurs today face a choice between a proposed (not final) U.S. framework and operational frameworks elsewhere.

Looking Ahead: What This Means for Clients

Firms engaged in crypto capital formation should evaluate the proposed exemptions now. The startup exemption accommodates crypto-specific distributions, including airdrops, staking rewards, and governance token distributions that traditional offering frameworks do not address. The fundraising exemption’s $75 million ceiling, while limiting for larger projects, covers the capital needs of most early- and mid-stage crypto ventures.

Issuers with crypto assets already in circulation should assess the safe harbor. The certification requirements will require careful review of what the issuer previously represented or promised. Issuers that made aggressive promises during their initial token distribution may find it difficult to certify that they have completed those commitments.

Intermediaries, including exchanges, brokers, dealers, and asset managers face a different calculus. The proposed framework does not provide them with express legal comfort. They should evaluate their existing token listings and approval frameworks in light of the proposal's silence on secondary market registration and the absence of reliance protection for Form TR certifications.

Comments are due October 20, 2026. Firms with views on the secondary market gap, the scope of the safe harbor, disclosure standards, or the $75 million ceiling should prepare submissions.

Reg CA represents genuine institutional progress but whether it proves sufficient depends on what comes next: intermediary relief, resolution of the Howey-test boundary questions, and either final agency action or Congressional legislation through the CLARITY Act. This is particularly relevant because the proposed framework does not address past conduct. Anti-fraud and anti-manipulation provisions continue to apply in full.

The United States retains a disproportionate share of blockchain-related private capital and institutional infrastructure. A final rule that resolves the secondary market question alongside the primary offering framework would constitute a compelling package. Without that second piece, Reg CA creates a path for token distributions while leaving unresolved the regulatory status of the markets in which those tokens trade.

Subscribe To Viewpoints