SEC Crypto Assets Securities Law: What the 2025 Clarifications Mean

The SEC's rescission of Staff Accounting Bulletin 121 via SAB 122 in January 2025, combined with the Commission's withdrawal of multiple high-profile crypto enforcement actions and the release of new staff guidance on digital asset classification, has reset the compliance baseline for every company touching crypto in the United States. If your legal team is still operating off pre-2025 assumptions, you're working from an outdated map.

TL;DR

• The SEC under Chair Paul Atkins has formally retreated from the aggressive "regulation by enforcement" posture of the prior administration, but federal securities law still applies to many crypto assets.
• SAB 122 (effective February 2025) reversed SAB 121's controversial on-balance-sheet custody requirement, removing a major barrier for bank custodians.
• The Howey test remains the primary analytical framework; the SEC's February 2025 staff statement on "proof-of-work" mining clarified that mining rewards are not securities.
• The Commission's new crypto task force, led by Commissioner Hester Peirce, is developing formal rulemaking rather than relying on enforcement to set policy.
• Companies must still conduct asset-by-asset Howey analysis; no blanket exemption exists for any token category.

What This Regulation Actually Requires

The Foundational Framework: Howey Still Governs

Federal securities law applies to crypto assets through the same lens it applies to any investment instrument: the four-prong Howey test from SEC v. W.J. Howey Co., 328 U.S. 293 (1946). An asset is a security if it involves (1) an investment of money, (2) in a common enterprise, (3) with an expectation of profits, (4) derived from the efforts of others.

Nothing in the 2025 guidance changes this. What changed is how the SEC signals it will exercise enforcement discretion and what categories of assets it now treats as presumptively outside the securities perimeter.

SAB 122: The Custody Accounting Reversal

Staff Accounting Bulletin 122, issued January 23, 2025, rescinded SAB 121. Under SAB 121 (2022), entities that custodied crypto assets on behalf of customers were required to record a corresponding liability on their balance sheets, effectively making institutional crypto custody economically punishing for banks subject to capital requirements. SAB 122 eliminates that requirement.

The practical effect: federally chartered banks and broker-dealers can now offer crypto custody services without the balance-sheet penalty that previously made the business line unworkable. This doesn't change whether the underlying assets are securities; it changes the accounting treatment for custodians.

The February 2025 Staff Statement on Proof-of-Work Mining

The SEC's Division of Corporation Finance released a staff statement in February 2025 clarifying that proof-of-work mining activities — where miners validate transactions and receive block rewards — do not constitute the offer and sale of securities. The statement is narrow. It covers:

• Mining of proof-of-work cryptocurrencies (Bitcoin being the paradigm case)
• Block rewards and transaction fees received by miners
• Mining pool arrangements where participants contribute hash rate

It does not cover staking arrangements, token pre-sales, or any situation where a promoter is selling participation rights to investors. Staking remains in a legal gray zone pending further guidance.

The Crypto Task Force and Rulemaking Pipeline

Commissioner Peirce's crypto task force, stood up in January 2025, has been conducting roundtables and soliciting public input on a range of issues: exchange registration, broker-dealer treatment of digital assets, custody rules, and the treatment of decentralized finance protocols. As of mid-2026, formal proposed rules have not yet been published in the Federal Register, but the task force has issued several staff statements that, while non-binding, signal enforcement priorities.

The key shift: the Commission is moving toward notice-and-comment rulemaking rather than using Wells notices and litigation to define the law. That's a meaningful change in process, even if the substantive legal standards remain unsettled.

What Still Clearly Triggers Securities Law

Despite the more permissive posture, several categories remain firmly within the securities perimeter:

• Token sales to fund development. If a project raises capital by selling tokens before a network is functional, with purchasers expecting profits from the team's efforts, that's a Howey security. The SEC v. Ripple Labs litigation (S.D.N.Y.) established that programmatic sales on exchanges may be treated differently from direct institutional sales, but the case is still working through post-judgment proceedings.
• Investment contracts structured around yield. Staking-as-a-service products, yield-bearing token arrangements, and lending programs that promise returns based on a third party's efforts remain high-risk.
• NFTs with profit expectations. The SEC's 2023 action against Impact Theory established that NFTs sold with explicit promises of appreciation tied to the issuer's efforts can be securities. That precedent hasn't been withdrawn.

What This Means for Your Company

The 2025 clarifications create genuine opportunity but also a compliance trap for companies that misread the signals.

If you're a bank or trust company: SAB 122 opens the door to crypto custody. But you still need to determine whether the assets you're custodying are securities, because that triggers broker-dealer registration requirements under the Securities Exchange Act of 1934 and separate custody rules under the Investment Advisers Act.

If you're a token issuer: The more permissive enforcement environment does not mean your token isn't a security. It means the SEC is less likely to sue you first and ask questions later. You still need a defensible Howey analysis before you launch. The Ripple decision's distinction between institutional and programmatic sales is fact-specific and shouldn't be treated as a safe harbor.

If you're a crypto exchange: The task force's work on exchange registration is ongoing. Operating without clarity on whether your listed assets are securities remains legally risky. The SEC has not abandoned its position that many tokens are securities; it's just being more selective about which cases to bring.

If you're a DeFi protocol: The staff has not issued guidance that DeFi protocols are categorically outside securities law. Governance tokens that confer economic rights tied to protocol revenue are still analytically close to securities.

How to Operationalize

Step 1: Conduct or refresh your token-by-token Howey analysis. Every digital asset your company issues, lists, custodies, or recommends needs a documented legal analysis. This isn't a one-time exercise; it should be refreshed when the asset's structure, marketing, or ecosystem changes materially.

Step 2: Update your SAB 122 accounting policies. If you're a custodian, work with your auditors to remove SAB 121 balance-sheet entries and document the policy change. Ensure your financial statements for periods ending after February 2025 reflect the new treatment.

Step 3: Map your activities to the broker-dealer and investment adviser registration triggers. Custodying securities for compensation, executing trades in securities, or providing investment advice about securities each carry separate registration obligations. The asset classification question and the activity question are distinct.

Step 4: Monitor the task force's rulemaking calendar. Subscribe to SEC.gov release notifications. When proposed rules hit the Federal Register, you'll have a comment window (typically 60 days) to shape the final rule. Companies that engage in notice-and-comment rulemaking protect their interests; those that don't often find the final rule poorly suited to their business model.

Step 5: Document your compliance posture contemporaneously. If the enforcement environment shifts again, contemporaneous documentation of good-faith legal analysis is your best defense. Maintain written records of every Howey analysis, every legal opinion, and every compliance decision with the reasoning behind it.

Step 6: Assess state-level obligations in parallel. Federal securities law is not the only game. State blue sky laws, money transmission licenses, and BitLicense-style regimes (New York's being the most demanding) operate independently. A token that clears the federal securities analysis may still require state-level licensing.

Common Mistakes and How to Avoid Them

Treating the enforcement pullback as a legal safe harbor. The SEC's decision not to bring a case doesn't mean the law changed. If enforcement priorities shift again, companies that relied on prosecutorial discretion rather than legal compliance will be exposed.

Applying the Ripple programmatic sales distinction too broadly. Judge Torres's ruling that programmatic sales on exchanges didn't satisfy Howey's "efforts of others" prong was fact-specific to XRP's particular circumstances and is not binding precedent outside the Southern District of New York. Don't build a compliance program on a single district court opinion that's still being litigated.

Ignoring the investment adviser angle. Companies that provide crypto portfolio management, robo-advisory services, or individualized recommendations about digital assets may be investment advisers under the Investment Advisers Act of 1940, regardless of whether the underlying assets are securities. This is an underappreciated registration trigger.

Assuming proof-of-work clarity extends to proof-of-stake. The February 2025 staff statement was deliberately limited to PoW mining. Staking arrangements, particularly liquid staking protocols and staking-as-a-service products, remain analytically unsettled. Don't extrapolate.

Failing to update vendor and counterparty agreements. If your contracts reference SAB 121 accounting treatment, custody obligations, or prior SEC guidance, those provisions may now be inaccurate or create unintended liability. Audit your material agreements.

FAQ

Q: Does the SEC's withdrawal of enforcement actions against certain exchanges mean those exchanges are now compliant?

A: No. Withdrawal of an enforcement action reflects prosecutorial discretion, not a legal determination that the conduct was lawful. The underlying legal questions remain open. Exchanges should continue to assess whether their listed assets are securities and whether their operations require registration.

Q: Is Bitcoin definitively not a security?

A: The SEC has consistently treated Bitcoin as a commodity, not a security, and the CFTC has asserted jurisdiction over Bitcoin spot markets. No court has issued a definitive ruling, but the regulatory consensus is strong enough that most practitioners treat Bitcoin's non-security status as settled for practical purposes.

Q: How does the Ripple case affect token issuers today?

A: SEC v. Ripple Labs established that the same token can be a security in some transactions (institutional direct sales) and not in others (programmatic exchange sales), depending on the reasonable expectations of purchasers. The case is instructive but not binding outside the S.D.N.Y., and the SEC has appealed certain aspects. Treat it as one data point in your Howey analysis, not as a definitive framework.

Q: Do NFTs require a securities analysis?

A: Yes, if they're sold with profit expectations tied to the issuer's efforts. The SEC's settled action against Impact Theory in 2023 and its charges against Stoner Cats 2 LLC established that NFT structures can satisfy Howey. The analysis is fact-specific; purely collectible NFTs with no profit expectation are on stronger footing.

Q: When will the SEC's crypto task force publish formal proposed rules?

A: As of mid-2026, the task force has not published formal proposed rules in the Federal Register. The rulemaking timeline is uncertain. Companies should monitor SEC.gov and engage with the comment process when rules are proposed.

---

Sources

• U.S. Securities and Exchange Commission, Staff Accounting Bulletin No. 122 (January 2025), SEC.gov
• U.S. Securities and Exchange Commission, Division of Corporation Finance Staff Statement on Proof-of-Work Mining Activities (February 2025), SEC.gov
• SEC v. W.J. Howey Co., 328 U.S. 293 (1946)
• SEC v. Ripple Labs, Inc., No. 20-cv-10832 (S.D.N.Y.), ongoing post-judgment proceedings

---

Disclaimer

This article is provided for general informational and educational purposes only. It does not constitute legal advice and does not create an attorney-client relationship. The regulatory landscape described reflects publicly available information as of the date of publication and may not reflect subsequent developments. Readers should consult qualified legal counsel before making compliance decisions. BizLegal-AI Intelligence Desk is not a law firm and does not provide legal representation.