The security versus commodity distinction decides which US regulator reaches a crypto asset and on what terms: the SEC reaches transactions that are investment contracts under the Howey test, and the CFTC reaches assets that are commodities under the Commodity Exchange Act. The two statutes test different things, so both can apply to the same token at once. Classification follows substance and transaction context, not branding.
Classification is a design decision before it is a legal one. Whether a token carries a claim on revenue, and whose continuing work its value depends on, are set at mechanism-design time, and those two choices do more to shape the regulatory outcome than any drafting done afterward.
Scroll to see the full diagram
The four components that frame the analysis
Security under the Howey test: an asset sold as an investment contract, meaning an investment of money in a common enterprise with a reasonable expectation of profits derived from the efforts of others.1 Securities fall under SEC jurisdiction and carry registration or exemption requirements plus disclosure obligations.
Commodity under the Commodity Exchange Act: the statute reaches enumerated agricultural goods "and all other goods and articles ... and all services, rights, and interests in which contracts for future delivery are presently or in the future dealt in."2 That catch-all clause, not any crypto-specific provision, is the textual hook that lets courts and the CFTC treat digital assets as commodities.
The test that decides: courts apply Howey's four prongs to the economic reality of each transaction rather than to the token in isolation.1 One question carries most token cases. Whose work is the buyer relying on?
What determines the answer: the rights the token carries, what was promised when it was sold, and how dependent holders are on a central team's ongoing effort. Labels carry no weight. A token marketed as a utility and sold on profit expectations can still be an investment contract.
What the Howey test asks
The Howey test comes from SEC v. W.J. Howey Co., a 1946 Supreme Court case about Florida citrus groves sold together with a farming and marketing contract. The Court defined an investment contract by four elements, and all four must be present: an investment of money, in a common enterprise, with a reasonable expectation of profits, derived from the efforts of others.1
The fourth prong does most of the work in crypto. If holders expect the token to appreciate because a named team is shipping the product, running the treasury, and marketing the network, the analysis points toward a security. Where no identifiable promoter's effort drives the value, it points away. The prong-by-prong argument lives on the Howey test page. What matters here is that a positive answer routes the transaction to the SEC whatever the asset is.
Where the two statutes actually divide
These are not two halves of one law. They are separate acts with separate triggers, and they overlap. The Securities Act reaches the deal: an offer or sale of an investment contract has to be registered or exempt, whatever the underlying asset is. The Commodity Exchange Act reaches the asset and its market, and anything qualifying as a commodity brings CFTC jurisdiction with it.2
What the CFTC gets is narrower than founders assume. Derivatives on a commodity sit under full CFTC oversight. Spot markets do not. There its authority runs to fraud and manipulation rather than registration and disclosure, and a federal court confirmed that reaches bitcoin spot trading directly.3 A commodity classification removes a registration burden, not enforcement risk.
Because the triggers differ, both can be live at once. An asset can trade as a commodity in the spot market and still be the subject of an investment contract when the issuer sells it under a negotiated agreement. That is not a contradiction: one statute tests the transaction, the other tests the asset.
Scroll to see the full diagram
Why Bitcoin is treated as a commodity
Two things carry it. The statutory definition covers goods, articles, services, rights and interests in which futures contracts are dealt in, which sweeps well past the enumerated agricultural list.2 And a federal court applied it. In CFTC v. Patrick K. McDonnell, decided March 6, 2018 in the Eastern District of New York, the court held that virtual currencies including bitcoin are commodities under 7 U.S.C. section 1a(9), and that the CFTC's anti-fraud and anti-manipulation authority reaches bitcoin spot markets even without a directly implicated futures contract.3
The other half is the Howey side, and it is a factual argument rather than a statutory carve-out. No promoter's continuing managerial work drives the network's value, so the fourth prong has nothing to attach to. That reasoning does not transfer automatically to a token with a foundation, a treasury, a roadmap and a marketing function.
As of March 2026 the position has formal agency backing. The SEC issued an interpretation, joined by the CFTC, on how the federal securities laws apply to crypto assets, with the CFTC stating it will administer the Commodity Exchange Act consistently with it.6 Bitcoin and ether are named among sixteen digital commodities under that taxonomy.
Classification runs transaction by transaction: the Ripple ruling
On July 13, 2023, Judge Analisa Torres of the Southern District of New York granted partial summary judgment to each side in SEC v. Ripple Labs, Inc., No. 1:20-cv-10832 (AT), reported at 682 F. Supp. 3d 308. Roughly $728.9 million of XRP sold to institutional and hedge fund buyers under negotiated written contracts were unregistered securities transactions. Programmatic sales, blind bid and ask orders matched algorithmically on exchanges, were held not to be investment contracts, because those buyers "could not have known if their payments of money went to Ripple, or any other seller of XRP."5
The asset was identical in both categories; transaction context decided each outcome. A third category made the point again: XRP paid to employees and developers as compensation failed the investment of money prong outright, because those recipients gave services rather than capital.5
The limit on that ruling matters as much as the ruling. The court did not hold that exchange sales of digital assets fall outside the securities laws as a class. It held that these programmatic sales, on this record, were not investment contracts.5 This page states the district court holdings and nothing further. In our view the lesson founders skip runs both ways: a clean secondary market does not retroactively clean a primary sale, and a compliant primary sale does not immunize every later distribution.
Decentralization and the efforts of others
The idea that a token can move outside Howey as its network matures traces to a June 14, 2018 speech by William Hinman, then Director of the SEC's Division of Corporation Finance. Where a digital asset gives its holder a financial interest in an enterprise, he said, it likely cannot stop being a security. But where "there is no longer any central enterprise being invested in," or the asset is sold only to buy a good or service on its network, he believed the answer was a qualified yes.4
Two cautions travel with that speech, and both are in it. Hinman framed the analysis as his own view rather than Commission action, and no statute or binding SEC rule has codified a decentralization threshold since.4 Courts apply Howey. They do not apply a decentralization score.
What changed in March 2026 is the formality, not the underlying law. The joint SEC and CFTC interpretation addresses how a non-security crypto asset may become subject to, and may cease to be subject to, an investment contract, and applies that reasoning to airdrops, protocol mining, protocol staking and wrapping.6 SEC Chairman Paul S. Atkins is quoted acknowledging that most crypto assets are not themselves securities and that investment contracts can come to an end. That is Commission-level interpretive guidance: not a statute, not a court holding, and revisable by a future Commission without an act of Congress.
What is settled, what is agency policy, and what is still a bill
Three tiers get blended constantly, usually at a founder's cost. Settled law is Howey and the statutory commodity definition, plus district court holdings like McDonnell and Ripple.2 Agency policy is the March 2026 joint interpretive release, formal and current and revisable by the next Commission.6 Both are real. Only one survives a change of leadership without a vote.
Pending legislation is the third tier, and it is the one that is not law at all. The Digital Asset Market Clarity Act of 2025, H.R. 3633 in the 119th Congress, passed the House on July 17, 2025 by a recorded vote of 294 to 134 (Roll No. 199). It was referred to the Senate Committee on Banking, Housing, and Urban Affairs on September 18, 2025 and reported out with an amendment on June 1, 2026. Through that date it had not passed the Senate floor and had not been enacted. Its predecessor concept, FIT21 (H.R. 4763, 118th Congress), passed the House in May 2024 and expired unenacted.
The firm's interpretation is that pending legislation is a planning input, not a design constraint. Building a token structure that only works if a bill passes is a bet on a legislative calendar, and we have watched one version of that bet expire already. Design against the law that exists and treat a favorable statute as upside.
What this means at design time
The classification factors are visible in the design itself, before a lawyer reads it. A token that promises yield paid out of a team's work, carries a claim on protocol revenue, or is sold on price appreciation hands the Howey analysis material. A token representing redeemable ownership of an underlying asset, paying no yield, trading at a market-set price, presents a different profile. Those are mechanism choices, made in a spreadsheet months before an offering document exists.
Four things a founder controls at design time, and controls almost completely. Whether the token carries any claim on revenue or profit. Whether the team holds unilateral upgrade or treasury control, and what specific event would end it. Which distribution channels exist, and who the counterparty is in each. And what the marketing says the buyer is buying. None needs a regulator's permission to change, and all four cost more after a raise than before one.
A disclaimer is not a design lever. Economic reality and conduct decide these cases, which is why calling a token a utility in the offering documents while the team markets price appreciation produces the record an enforcement lawyer wants.
Classification should be an input to mechanism design, not a defense mounted afterward. Whether a specific design qualifies is fact specific and jurisdiction specific, and that call belongs to your legal team and, ultimately, a court. This page is reference material. It is not legal advice, and it is not a recommendation to buy, sell, or hold any asset.
Common questions
Who decides whether a crypto asset is a security or a commodity?
Both agencies and, when it is litigated, a federal court. The SEC reaches transactions that are investment contracts under Howey.1 The CFTC reaches assets that fall inside the Commodity Exchange Act definition, with full authority over derivatives and fraud and manipulation authority over spot markets.2 Because the two statutes test different things, an asset can sit under both at the same time.
Why is Bitcoin treated as a commodity rather than a security?
The Commodity Exchange Act's definition is broad enough to cover it, and a federal court applied that definition to virtual currencies in CFTC v. McDonnell in March 2018.3 On the securities side there is no promoter whose continuing work the network's value depends on, so Howey's fourth prong has nothing to attach to. As of March 2026, SEC and CFTC interpretive guidance names bitcoin and ether among sixteen digital commodities.6
Can the same token be both a security and a commodity?
The two questions are asked about different things, so yes in practical effect. Howey classifies a transaction, while the Commodity Exchange Act classifies the asset. SEC v. Ripple Labs is the clearest illustration: identical XRP was held to be sold in unregistered securities transactions in one channel and not in another.5 Nothing about the asset changed between those categories.
Does decentralization make a token a commodity?
It is a factor in the Howey analysis, not a switch. The idea traces to a 2018 SEC staff speech that framed it as the speaker's own view, and no statute or binding SEC rule has codified a decentralization threshold since.4 March 2026 interpretive guidance now addresses how an asset may cease to be subject to an investment contract, but that is agency policy rather than law.6
Has Congress passed a law setting the SEC and CFTC line?
Not as of this page's review date. The Digital Asset Market Clarity Act of 2025, H.R. 3633, passed the House on July 17, 2025 by 294 to 134 (Roll No. 199), went to the Senate Committee on Banking, Housing, and Urban Affairs, and was reported out with an amendment on June 1, 2026. It had not passed the Senate. Its predecessor, FIT21, expired unenacted in the 118th Congress.
See Token Classification and Compliance Guide for how this applies in practice.
Sources
- SEC v. W.J. Howey Co., 328 U.S. 293 (1946)
Supreme Court of the United States, via Library of Congress U.S. Reports, 1946
The controlling four-prong investment contract test. Decided May 27, 1946. Settled, binding law. - Commodity Exchange Act, definition of commodity, 7 U.S.C. section 1a(9)
Legal Information Institute, Cornell Law School, 2026
The statutory catch-all covering goods, articles, services, rights and interests in which futures contracts are dealt in. Binding statutory text. - CFTC v. Patrick K. McDonnell and CabbageTech, Corp., No. 18-cv-00361
U.S. District Court for the Eastern District of New York, via CourtListener, 2018
Memorandum and order of March 6, 2018. First judicial holding that virtual currencies are commodities under the CEA and that CFTC anti-fraud authority reaches bitcoin spot markets. - Digital Asset Transactions: When Howey Met Gary (Plastic), remarks by William Hinman
U.S. Securities and Exchange Commission, 2018
Speech of June 14, 2018 by the then Director of the Division of Corporation Finance. Explicitly personal views, not Commission action. Origin of the informal sufficient decentralization concept. - SEC v. Ripple Labs, Inc., summary judgment opinion, No. 1:20-cv-10832 (AT)
U.S. District Court for the Southern District of New York, 2023
July 13, 2023 opinion of Judge Analisa Torres, reported at 682 F. Supp. 3d 308. The transaction-by-transaction holding across institutional, programmatic, and compensation distributions. - SEC and CFTC Joint Interpretation on the Application of the Federal Securities Laws to Certain Crypto Assets (SEC Release Nos. 33-11412, 34-105020)
U.S. Commodity Futures Trading Commission, Press Release 9198-26, 2026
Issued March 17, 2026, effective March 23, 2026. Commission-level interpretive guidance, not legislation and not a court holding. Sets out the digital commodity taxonomy and the treatment of airdrops, mining, staking and wrapping.
Last reviewed 2026-08
More in Compliance and Classification
- Howey Test
- MiCA (Markets in Crypto-Assets Regulation)
- E-Money Token (EMT)
- Asset-Referenced Token (ART)
- FIT-21 (Financial Innovation and Technology for the 21st Century Act)
- SAFT (Simple Agreement for Future Tokens)
- KYC / KYB (Know Your Customer / Know Your Business)
- Security-Classification Defense
- GENIUS Act
- ERC-3643 (T-REX)
- Travel Rule
- Accredited Investor
- CLARITY Act (Digital Asset Market Clarity Act of 2025)
- Transfer Agent
- Regulation D
- Regulation S
Know the terms but not sure how they apply to your project? That is what an engagement is for. We design, document, and stress-test the whole token economy inside the Tokenomics Data Room.
100+ projects advised. Complete tokenomics in 4 to 6 weeks.