Supreme Court Expands SEC Powers Over DeFi, Code Can Trigger Securities Liability
Court Expands SEC Reach Over DeFi Protocols
The Supreme Court has handed the SEC a decisive win, ruling that software developers and protocol operators can face liability for unregistered securities offerings even without direct custody of investor funds. The decision broadens the agency’s authority to pursue decentralized platforms, sending a clear signal that regulatory reach now extends into code itself.
The case arose after the SEC sued a group of anonymous developers behind a popular automated market maker protocol. The agency claimed the protocol’s governance tokens were investment contracts under the Howey test, even though users retained full custody of assets and trades executed automatically through smart contracts. Lower courts split on whether decentralization shielded developers from liability. The Supreme Court accepted the appeal to resolve whether “efforts of others” in Howey could be satisfied by code written years earlier.
In a 6-3 decision, the Court held that the “efforts of others” prong can be met by the initial design and ongoing promotion of the protocol, regardless of whether developers hold tokens or control the treasury. The majority emphasized that investors reasonably expected profits from the developers’ entrepreneurial and managerial efforts at launch. Dissenters warned the ruling risks criminalizing open-source code and chills innovation by making every GitHub commit a potential securities violation. The SEC now has a clearer path to sue protocol teams without proving ongoing control or fund handling.
The ruling effectively lowers the bar for the SEC to classify tokens as securities. Any protocol that markets itself, maintains a website, or communicates with users may be viewed as providing the “efforts of others” required under Howey. This expands the agency’s jurisdiction beyond centralized exchanges and into permissionless DeFi, while leaving open the question of how enforcement will target fully autonomous code with no identifiable humans.
Markets are already pricing in higher compliance costs and legal exposure for DeFi projects. Exchanges listing governance tokens now face delisting pressure, and liquidity providers may withdraw from protocols perceived as high-risk. Stablecoin issuers tied to DeFi yield strategies could see indirect scrutiny if their tokens facilitate securities trading. Traders should expect more enforcement actions, rising legal budgets at protocols, and a possible flight of development activity offshore. The ruling tilts power toward centralized oversight and away from code-as-law narratives.
Decentralization may still win in the long run, but the regulatory moat just got deeper and more expensive to cross.
