SEC Crypto Asset Securities Law Interpretation: 2025 Guide

The SEC's April 2025 staff bulletin rescinding SAB 121 and replacing it with SAB 122 marked the most concrete policy reversal the agency had made on digital assets in years. Pair that with the Commission's February 2025 statement clarifying that proof-of-work mining and certain stablecoins fall outside the securities framework, and compliance teams suddenly have more official text to work with than at any point since the 2017 DAO Report. The question is no longer whether the SEC will speak; it's whether your legal team has correctly mapped what it said to your specific token structure.

TL;DR

• SAB 122 (effective March 2025) eliminated the SAB 121 requirement for banks to record crypto custody obligations as balance-sheet liabilities, removing a major barrier to institutional custody.
• The SEC's February 2025 staff statement confirmed that proof-of-work mining rewards and certain fiat-backed stablecoins are not securities under current federal law.
• The Howey test still governs token classification; the SEC has not abandoned it, and enforcement actions against unregistered securities offerings continue.
• The Division of Corporation Finance issued updated guidance in early 2025 on when digital asset disclosures are required in registered offerings and Exchange Act reports.
• No congressional legislation has passed as of mid-2025; the SEC's interpretive statements carry significant weight but are not binding rules.

What This Regulation Actually Requires

The Howey Test Remains the Anchor

Federal securities law defines a "security" to include an "investment contract." Since SEC v. W.J. Howey Co. (1946), courts have applied a four-part test: (1) an investment of money, (2) in a common enterprise, (3) with an expectation of profits, (4) derived from the efforts of others. The SEC has never abandoned this framework for crypto assets, and its 2025 guidance reinforces rather than replaces it.

What changed is the agency's willingness to articulate which token structures clearly fall outside the test. The February 2025 staff statement on proof-of-work mining concluded that miners who receive block rewards are not investing in a common enterprise with an expectation of profits from others' efforts. They're performing computational work. That's a meaningful carve-out for mining operations and mining pool operators who had been operating under legal uncertainty since at least 2021.

SAB 122 and Custody Accounting

Staff Accounting Bulletin 122, issued in January 2025 and effective for fiscal years beginning after December 15, 2024, rescinded SAB 121's controversial requirement that entities safeguarding crypto assets for others recognize a liability (and corresponding asset) on their balance sheets. SAB 121 had effectively made bank custody of crypto economically punitive under capital rules. SAB 122 returns to general GAAP principles: custodians assess whether they control the asset and recognize accordingly. For compliance officers at broker-dealers, trust companies, and banks exploring custody services, this is a structural change that unlocks business models that were previously capital-prohibitive.

Stablecoin Guidance

The February 2025 staff statement on "covered stablecoins" — defined as fiat-backed, redeemable 1:1, with reserves held in low-risk liquid assets — concluded these instruments are not securities. The analysis focused on the absence of a profit motive: holders buy stablecoins for payment utility, not investment return. The statement explicitly does not cover algorithmic stablecoins, yield-bearing stablecoins, or stablecoins backed by crypto assets. Those remain in a gray zone.

Ongoing Registration and Disclosure Obligations

The SEC's updated Division of Corporation Finance guidance (released Q1 2025) clarifies that issuers with material digital asset holdings or operations must disclose: (a) the nature and risks of those holdings, (b) custody arrangements and counterparty risk, (c) any regulatory uncertainty that could materially affect the business. This applies to Exchange Act reporting companies that hold crypto on their balance sheets, operate crypto-related business lines, or have issued tokens that may be securities.

What Has Not Changed

Unregistered securities offerings remain illegal. The SEC continued filing enforcement actions through 2024 and into 2025 against token issuers who conducted public sales without registration or a valid exemption. The Ripple litigation's partial outcome — where the court found programmatic secondary market sales of XRP did not constitute securities transactions but institutional sales did — has not been codified into SEC policy. The agency has appealed aspects of that ruling, and compliance teams should not treat the programmatic sales holding as a blanket safe harbor.

What This Means for Your Company

Token issuers face a cleaner analytical framework but not a lighter compliance burden. If your token involves a common enterprise and investors expect profits from your team's ongoing development, you're likely issuing a security. The 2025 guidance doesn't change that calculus; it just removes some ambiguity at the edges.

Custodians and banks now have a viable path to offering crypto custody without the punishing balance-sheet treatment SAB 121 imposed. Expect institutional custody offerings to accelerate through 2025 and 2026.

Stablecoin issuers operating a covered stablecoin model have meaningful regulatory clarity for the first time. But "covered" is a narrow definition. If your stablecoin pays yield, uses an algorithmic mechanism, or holds anything other than cash and short-term Treasuries, you're outside the safe harbor.

Mining operations can now point to explicit SEC staff analysis confirming their activities don't produce securities. That said, state-level money transmission and energy regulations remain live issues.

DeFi protocols remain the most exposed category. The SEC has not issued guidance suggesting that governance tokens, liquidity pool tokens, or yield-bearing DeFi instruments fall outside the securities framework. The 2023 proposed amendments to the definition of "exchange" under the Securities Exchange Act, which would have swept in DeFi protocols, were not finalized as of mid-2025, but the underlying legal theory hasn't been abandoned.

How to Operationalize

Step 1: Run a fresh Howey analysis on every token in your ecosystem. Don't rely on a 2021 memo. The 2025 guidance, the Ripple district court opinion, and subsequent SEC statements have added texture to each Howey prong. Document your analysis in writing, date it, and have outside counsel review it.

Step 2: Map your stablecoin against the "covered stablecoin" definition. Check: Is it fiat-backed? Is the peg maintained by reserves, not algorithms? Are reserves held in cash or short-term U.S. government securities? Does it pay yield? If you fail any of these, you're outside the February 2025 safe harbor.

Step 3: Update custody agreements and disclosures for SAB 122. If you're a custodian or you custody assets for clients, your accounting policies, client agreements, and risk disclosures likely reference SAB 121 mechanics. Audit those documents and update them.

Step 4: Review your Exchange Act disclosures. If you're a reporting company with material crypto exposure, pull your most recent 10-K or 10-Q and compare it against the Division of Corporation Finance's Q1 2025 guidance. Gaps in custody risk disclosure and regulatory uncertainty disclosure are low-hanging enforcement fruit.

Step 5: Establish a regulatory monitoring protocol. The SEC's crypto posture has shifted more in 18 months than in the prior five years. Assign someone to track SEC releases, no-action letters, and enforcement actions on a monthly basis. Build a log. When guidance changes, you want a documented record that your compliance program responded.

Step 6: Don't conflate staff statements with rules. Staff bulletins and staff statements are not Commission rules. They don't have the force of law. They're persuasive, they signal enforcement priorities, and they're the best available guidance in many cases. But a court or a future Commission could reach a different conclusion. Your legal analysis needs to account for that residual risk.

Common Mistakes and How to Avoid Them

Treating the Ripple programmatic sales holding as a universal safe harbor. It isn't. The SEC v. Ripple Labs district court opinion addressed a specific set of facts about XRP sales on secondary markets. The SEC appealed, and the holding has not been adopted by other courts or by the Commission itself. Relying on it to justify an unregistered token sale is a significant legal risk.

Assuming SAB 122 eliminates all custody compliance obligations. SAB 122 addresses accounting treatment. It doesn't affect state trust company regulations, OCC guidance on bank custody of crypto, or FINRA rules applicable to broker-dealers. Custody compliance is a multi-regulator problem.

Ignoring the "efforts of others" prong for decentralized protocols. Some teams argue their protocol is "sufficiently decentralized" and therefore token holders don't rely on the efforts of others. The SEC has never formally adopted a decentralization safe harbor, and the 2025 guidance doesn't create one. This argument may have merit in specific fact patterns, but it requires rigorous factual support, not a boilerplate assertion.

Failing to update offering documents after guidance changes. If you issued a SAFT or conducted a Reg D offering under a legal theory that the 2025 guidance has now clarified or undermined, your existing investor disclosures may be stale or misleading. Review them.

Conflating "not a security" with "unregulated." A token that isn't a security may still be a commodity under CFTC jurisdiction, a money transmission instrument under FinCEN rules, or subject to state licensing requirements. The SEC's clarifications narrow one regulatory question; they don't answer all of them.

FAQ

Q: Does the February 2025 staff statement on stablecoins mean I don't need to register my stablecoin offering?

A: If your stablecoin meets the "covered stablecoin" definition — fiat-backed, 1:1 redeemable, reserves in cash or short-term U.S. government securities, no yield — the SEC staff has said it's not a security, so federal securities registration wouldn't apply. But you still need to assess state money transmission licensing, potential FinCEN registration as a money services business, and any applicable banking regulations. The SEC statement is one piece of a larger compliance picture.

Q: How does the Ripple decision affect my token project?

A: The district court's July 2023 ruling in SEC v. Ripple Labs held that programmatic secondary market sales of XRP didn't satisfy the Howey test because buyers couldn't know they were buying from Ripple. Institutional sales did qualify as securities transactions. The SEC appealed. Until there's appellate resolution or Commission rulemaking, treat the programmatic sales holding as a data point in your legal analysis, not a safe harbor. Your facts will differ from Ripple's.

Q: My token was issued in 2019 under a SAFT. Do I need to do anything now?

A: Possibly. If the token has since launched and is trading, the original SAFT analysis may no longer reflect the current legal landscape. Run a fresh Howey analysis on the token as it exists today. If your token has become more decentralized, or if the network is now fully functional, the "efforts of others" prong may look different than it did at issuance. Document the updated analysis.

Q: Does SAB 122 apply to non-bank crypto custodians?

A: SAB 122 is an SEC staff accounting bulletin that applies to entities filing financial statements with the SEC. Non-bank custodians that are SEC registrants (e.g., registered investment advisers, broker-dealers) need to assess whether SAB 122 affects their financial reporting. Non-registrants aren't directly subject to SAB 122 but may want to align their accounting policies with the updated guidance for consistency and investor confidence.

Q: Is there a formal "utility token" exemption under federal securities law?

A: No. The SEC has never adopted a utility token exemption, and the 2025 guidance doesn't create one. A token's utility features are relevant to the Howey analysis — particularly the profit expectation prong — but they don't automatically remove a token from the securities framework. Tokens with genuine consumptive use and no investment expectation may fall outside Howey, but that conclusion requires a fact-specific analysis, not a label.

---

Sources

• U.S. Securities and Exchange Commission, Staff Accounting Bulletin No. 122 (January 2025), SEC.gov
• U.S. Securities and Exchange Commission, Division of Corporation Finance Staff Statement on Certain Proof-of-Work Mining Activities (February 2025), SEC.gov
• U.S. Securities and Exchange Commission, Division of Corporation Finance Staff Statement on Stablecoins (February 2025), SEC.gov
• SEC v. W.J. Howey Co., 328 U.S. 293 (1946)

---

Disclaimer

This article is provided for general informational purposes only and does not constitute legal advice. The content reflects publicly available regulatory guidance and legal analysis as of the date of publication and may not reflect subsequent developments. No attorney-client relationship is created by reading or relying on this material. Consult qualified legal counsel for advice specific to your situation, jurisdiction, and token structure. BizLegal-AI Intelligence Desk makes no representations regarding the completeness or accuracy of information derived from third-party regulatory sources.