The U.S. Securities and Exchange Commission’s Division of Corporation Finance issued a crypto asset FAQ on Sept. 25, moving the agency’s March interpretive framework into a set of concrete operating scenarios. The market focused on the release almost immediately because it addressed four questions that have sat at the center of compliance debates for much of the past two years: token buybacks, staking receipt tokens, continued development after a network goes live, and the legal status of secondary trading platforms.
The first point is what the document is not. Under the SEC’s own text, the answers reflect the views of Division staff, not rules, regulations, or formal statements of the Commission. The Commission neither approved nor disapproved the content. The FAQ has no legal force, does not alter existing law, and creates no new obligations. Read that way, the document does not declare that any given category of conduct is no longer a security. Its value is narrower and more practical: it shows which facts staff say matter when they assess whether an investment contract relationship still exists.
Functionality sits at the center of the analysis
The sharpest line in the FAQ is whether the network is already functional. That condition changes how the same conduct can be read under securities analysis. A buyback announcement on a functional network is not treated the same way as a buyback announcement made before the network has reached functionality.
The FAQ also tackles a tension in the March guidance. That earlier release defined both “functionality” and “decentralization,” while also saying that, when assessing whether an issuer has fulfilled its promises, the agency would look to how the issuer itself described those concepts rather than to the market’s general understanding. Staff resolved the issue by separating the two uses. The Commission’s definitions matter for classification. The issuer’s own earlier statements matter when evaluating whether its commitments have been met.
That distinction carries direct consequences for issuers. Language in white papers, roadmaps, and fundraising materials—such as saying a mainnet launch marks functionality, or that governance transfer marks decentralization—can become part of the reference point for judging whether an investment contract has ended. Vague language makes it harder to show that promises were satisfied. Specific language creates a more testable endpoint.
Asset classification and investment contract analysis are separate layers
The FAQ rests on the framework the SEC released on March 17. According to the agency’s press release at the time, the SEC and the Commodity Futures Trading Commission acted in parallel and introduced a taxonomy that sorts crypto assets into digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. The March framework also explained how a crypto asset that is not itself a security can still be sold subject to an investment contract, and how that tie can end.
That makes classification and investment contract analysis distinct questions. A token can be classified as a digital commodity and still be covered by an investment contract because of how it was offered or what the issuer promised. If those promises are fulfilled or no longer exist, the investment contract can fall away while the asset’s classification stays the same. The September FAQ works almost entirely at that second level.
Token buybacks: the act itself is not decisive, the framing can be
Buybacks on a functional network
The FAQ recognizes that issuers of non-security crypto assets can conduct buybacks for several reasons, including treasury management, supply reduction, protocol-funded burns, and rebalancing. On the question of whether announcing a buyback amounts to a promise of essential managerial efforts, staff gave a conditional answer: if the crypto system is already functional, announcing a buyback plan for a non-security crypto asset does not constitute such a promise.
The Block said this point, along with the sections on network upgrades and marketing language, drew the most attention in the document. Its report also stressed that the answer turns on the condition attached to it and is not a blanket conclusion for every buyback.
Non-functional networks and return language
The other side of the condition may matter more in practice. If the crypto system is not yet functional and the issuer presents the buyback as a way to create gains or returns for token holders, staff said the announcement may amount to a promise of essential managerial efforts. In that case, the conduct can move into Howey analysis.
That draws a line around narrative. The same buyback announcement can carry different legal weight depending on whether it simply explains funding sources, timing, and supply effects, or whether it is pitched as a source of return for holders. For projects still in buildout and not yet fully functional, writing buybacks into an “investment return” story is the highest-risk version of the message.
Why the market paid attention
The focus on buybacks also reflects what the market has been doing. Citing Allium Labs data, The Crypto Times reported that crypto projects spent about $638 million on token buybacks in the first eight months of 2026, compared with roughly $366,000 in all of 2024. Hyperliquid and Pump.fun together accounted for nearly 90% of that total.
The same report said Lido stated in August that it planned regular buybacks after hitting certain thresholds, including $40 million in annualized revenue. It also said Jupiter had spent nearly $14 million on buybacks this year, while its token was still down about 55% over the past year. Those figures point in two directions. Buybacks are now large enough to create real compliance costs when the regulatory line is unclear. They also show that buybacks do not have a stable link to price, which weakens the commercial case for presenting them as a return promise.
Staking receipt tokens are placed inside a narrow “receipt” definition
What counts as a receipt
The FAQ uses an entire question to define “receipt.” In this context, a receipt is evidence that a specified amount of assets has been deposited with the custodian or holder that issues the receipt, and that the depositor retains ownership of the deposited assets. The receipt does not alter any right, obligation, or economic return tied to those assets, and it does not provide any added financial incentive or benefit.
The harder edge is what the issuer cannot do. Ownership or control of the deposited assets cannot pass to the receipt issuer. The issuer cannot transfer, lend, pledge, repledge, or otherwise use those assets for any reason, and the assets cannot be exposed to third-party claims. That is a high bar. It sharply separates a “receipt” from a financial product built on top of deposited assets.
Digital tool or digital commodity
On classification, staff laid out two paths. If a staking receipt token is a receipt for a digital commodity that is not subject to an investment contract, the token itself is a digital tool because its practical function is to evidence the holder’s ownership of the underlying digital commodity.
But if the token is issued by a protocol-based liquid staking provider, it may also be classified as a digital commodity. Staff said that is because the token is inherently tied to the programmatic operation of a functional crypto system, derives value from that relationship, and is also affected by supply and demand.
A footnote adds another important limit: staking receipt tokens usually do not carry independent intrinsic economic attributes or rights of their own. Holders may be entitled to rewards generated by the underlying digital commodity, but the receipt token itself does not create that right and does not guarantee, generate, or determine the amount of those rewards.
That matters for the liquid staking segment. DefiLlama’s liquid staking data has shown the category holding one of the largest total value locked positions across decentralized finance, with Lido alone measured in the tens of billions of dollars. How a receipt token is issued, how redemption works, and whether the underlying assets are reused can all affect whether it falls on the digital tool side or the digital commodity side of the framework.
Maintenance and upgrades after launch are moved away from the managerial-efforts side
Ongoing software work on a functional network
The FAQ addresses a long-running tension for developers. Software is updated continuously, and even a functional network still needs maintenance, security work, and ecosystem growth. Staff responded by citing recent Commission language: once a crypto system is functional, services provided to secure, maintain, improve, or enhance the system and its functionality, or to promote network effects—including sponsoring or funding development projects or similar efforts—do not involve essential managerial efforts.
As a result, statements or commitments by an issuer to provide, continue to provide, or arrange for those services after the system is functional do not satisfy Howey, according to the FAQ. The language is drawn from the Regulation Crypto Assets proposal released on Aug. 18, identified as Release No. 33-11434.
In practical terms, that separates the long-term evolution model seen in networks such as Ethereum from the investment-contract logic that focuses on an issuer operating a business to generate returns. Protocol upgrades, security audits, ecosystem funds, and developer incentives are no longer treated as automatic evidence in favor of a securities conclusion.
What if there is no central party?
The FAQ goes one step further in another question. If a functional crypto system has no central party, could statements by an issuer create a new investment contract? Staff said they likely would not, because neither the issuer nor any other person controls the system or can take actions that determine its success or failure.
That answer gives teams that continue speaking after decentralization a more workable space, but only if both conditions are present at the same time: the system must be functional, and there must be no central party.
Shifting promises to another entity does not erase the tie
The FAQ also closes off an obvious workaround. Asked whether a non-security crypto asset separates from an investment contract once another party takes over the issuer’s statements or commitments, staff answered no. That remains true whether the assumption of those commitments is voluntary or happens by operation of law.
In other words, moving the promises to a foundation or a new entity does not automatically sever the existing investment contract relationship.
Secondary trading platforms are not promoters by default
The March framework expanded the idea of “issuer” to include affiliates and agents of the issuer or promoter. That language raised concern among some secondary-market venues that they could be pulled into investment contract analysis. The new FAQ responds by pointing back to existing law: a trading platform that provides a secondary market for a crypto asset is treated as a promoter only if it meets the Rule 405 definition under the Securities Act.
That sends the issue back to a general standard rather than creating a crypto-specific one. Under Rule 405, the promoter concept points to a person involved in founding and organizing an enterprise and receiving securities or consideration in return. It does not simply mean a venue that offers matching services and liquidity.
For operators listing assets on platforms such as MEXC, the more important line is not whether the venue offered a trading pair, but whether the listing process and promotional activity crossed into the type of conduct captured by that definition.
What the FAQ changes for issuers and platforms
Across the six questions discussed in the document, one signal is consistent: facts and wording carry unusual weight in staff analysis. Describing existing functionality and present capabilities will usually not amount to a promise of essential managerial efforts. Using uncertain, forward-looking language about possible features will also usually not change the analysis if it does not contain statements about profit potential.
The result can change, though, when materials explicitly and concretely tie the issuer’s efforts to profits that purchasers may expect. For issuers, that means market-facing materials and legal positioning can no longer move on separate tracks. For trading platforms, listing notices, campaign pages, and research content now sit more clearly inside the review perimeter as well.
The rulemaking process is still unfinished
The answers in the FAQ rest on a proposal that has not yet become a final rule. According to the SEC’s rulemaking page, Regulation Crypto Assets was released on Aug. 18, published in the Federal Register on Aug. 21, and has a comment deadline of Oct. 20.
The proposal includes two registration exemptions: one for offerings up to $5 million over four years, and another for offerings up to $75 million in any 12-month period. It also includes a conditional safe harbor intended to mark when certain crypto assets are no longer viewed as subject to an investment contract.
White & Case said the proposal addresses issuance only, leaving trading, custody, and exchange oversight to future rulemaking. Paul Hastings, in its policy tracking, said the Federal Reserve made recommendations on stablecoin issuer rules in the same week and the CFTC updated frequently asked questions tied to tokenized investments. The broader point is that several regulatory tracks are moving at once.
That means the current clarity is provisional. The path from proposal to final text, and then through possible litigation, remains long.
James Mitchell: the key variable is not the act, but what was said and when
James Mitchell argued that the real importance of the FAQ is not that it loosens the rules, but that it shifts the focus of analysis from what an issuer did to what it said, and at what stage of network development it said it. In his view, buybacks, upgrades, and receipt-token issuance have largely been stripped of automatic legal color. The decisive variables are whether the network is functional and whether the issuer’s language ties its own efforts to purchaser profit expectations.
He pointed to two likely sources of market misreading. One is treating the buyback answer as a universal conclusion while ignoring the functionality condition and the explicit opposite case where a non-functional network markets buybacks as a return source. The other is treating staff views as if they were binding rules. The FAQ itself says otherwise, and the Regulation Crypto Assets text it relies on remains a proposal with comments open until Oct. 20.
Mitchell said the next issues to watch are the feedback submitted during the comment period, especially disagreements among the industry, banks, and investor-protection groups over safe-harbor conditions; whether issuer disclosure language actually changes, including how often buyback announcements still use terms such as “yield” or “return”; and whether the liquid staking sector adjusts its structure around asset reuse, redemption timing, and exposure of underlying assets to third-party claims.
He also argued that the FAQ reflects a method that looks increasingly familiar in mature financial markets: less focus on what a product is called, more focus on the economic function it serves in a specific transaction and the commitments made to the counterparty. For issuers, that points to disclosure discipline as a growing competitive advantage rather than a pure compliance cost. For trading platforms, it suggests listing standards and content review may become a clearer point of differentiation. None of that, he noted, amounts to a price call.
Key takeaways from the FAQ’s own questions and answers
Does this mean token buybacks no longer raise securities-law issues?
No. Staff attached a clear condition. If the crypto system is already functional, announcing a buyback plan for a non-security crypto asset does not amount to a promise of essential managerial efforts. If the system is not functional and the issuer presents the buyback as a way to create gains or returns for holders, the announcement may enter investment contract analysis. The result turns on network status and the wording used, not on the existence of a buyback alone.
What is a staking receipt token and how can it be classified?
A staking receipt token is evidence that the holder owns the deposited underlying asset. Under the FAQ, it is a digital tool when it is a receipt for a digital commodity that is not subject to an investment contract. If it is issued by a protocol-based liquid staking provider, it may instead be classified as a digital commodity because of its internal tie to the programmatic operation of a functional crypto system. The receipt itself does not create reward rights and does not determine the amount of rewards.
What kind of token does not qualify as a true “receipt”?
The standard is strict. A receipt must evidence that a set amount of assets has been deposited with a custodian and that the depositor retains ownership. It cannot alter rights, obligations, or returns tied to the assets, and it cannot offer additional financial incentives. Most importantly, the issuer cannot take ownership or control of the assets, cannot transfer, lend, pledge, repledge, or otherwise use them, and cannot expose them to third-party claims. If any of those conditions fails, the instrument does not qualify as a receipt in this context.
Does continued development after launch count as essential managerial efforts?
According to the Commission language cited by staff, once the crypto system is functional, services provided to secure, maintain, improve, or enhance the system or to promote network effects—including sponsored or funded development work—do not involve essential managerial efforts. Related statements or commitments do not satisfy Howey, as long as the functionality condition is met.
Will a trading platform be treated as a promoter just because it offers a secondary market?
No. The FAQ says a platform offering a secondary market for a crypto asset is a promoter only if it meets the Rule 405 definition under the Securities Act. The test turns on the role the platform actually played in forming, organizing, or promoting the enterprise, not on the simple fact that it listed the asset.
How does this FAQ relate to the March interpretive release?
The March 17 release created the broader framework, classifying crypto assets into five categories and explaining when a non-security crypto asset can become subject to an investment contract and when that tie can end. The September FAQ is not a new framework. It is a staff-level application of the March framework to specific fact patterns, using the same terms unless otherwise defined.
What regulatory date comes next?
The next immediate date is Oct. 20, the close of the comment period for Regulation Crypto Assets. The proposal was released on Aug. 18 and published in the Federal Register on Aug. 21. It includes two issuance exemptions and a conditional safe harbor. Because it addresses issuance only, more rulemaking on trading, custody, and exchanges still lies ahead, and the final text could change before adoption.