Chairman Hill, Ranking Member Lynch, and distinguished members of Subcommittee on Digital Assets, Financial Technology and Inclusion, my name is Jennifer Schulp, and I am the Director of Financial Regulation Studies at the Cato Institute’s Center for Monetary and Financial Alternatives. The views I express in this testimony are my own and should not be construed as representing any official position of the Cato Institute.

Thank you for the opportunity to take part in today’s hearing entitled, “Dazed and Confused: Breaking Down the SEC’s Politicized Approach to Digital Assets.”

The Securities and Exchange Commission’s approach to digital assets under the leadership of Chairman Gary Gensler can be characterized as an “enforce first, make rules never” strategy. While an enforcement-forward strategy may be effective—and perhaps even appropriate—where existing rules provide clear guidance to market participants, the Commission’s current strategy, where the application of existing rules to digital assets is uncertain or inappropriate, effectively amounts to a ban on crypto activity within the United States. This strategy simultaneously exceeds the agency’s authority and abdicates the agency’s role in overseeing the securities markets.1

The SEC’s approach has subjected U.S. market participants who choose to engage in digital asset-related activities to extreme regulatory and compliance risk. Not only have the SEC’s actions directly put a stop to a host of digital asset activities in the United States,2 there are indications that developers and projects that may have otherwise chosen to operate in the United States, or serve U.S. customers, are choosing to operate elsewhere.3

The SEC’s approach is anathema to sound public policy and the rule of law. My testimony today is intended to give an overview of the errors in the SEC’s approach to digital assets, but it by no means provides a full catalogue of the ways in which the SEC’s approach could be improved. I will first address the ways in which the SEC’s existing rules, and the Commission’s interpretation thereof, do not provide regulatory clarity to those wishing to engage with digital assets. Next, I will discuss how the SEC’s enforcement-first strategy when coupled with an uncertain regulatory environment is particularly hostile to digital assets. Finally, I will identify a better approach to digital assets available to the Commission and how any steps that the SEC would claim it has taken in this direction are illusory.

Existing Rules Often Are a Poor Fit for Digital Assets

The starting point for examining the SEC’s failed approach to digital assets is the most basic one: existing rules do not provide clear guidance to market participants as to whether the SEC’s rules are even applicable, and if they are, how they can be complied with. While SEC Chairman Gary Gensler is fond of saying that “[n]ot liking the message is not the same thing as not receiving it,” it is plain that there is a lack of clarity around the application of securities laws to digital assets.4 So plain in fact, that it has been noted not just by industry, but by other federal regulators and by legislators.5 Yet, Gensler continues to promote the fiction that the answer is simply to “come in and register.”6

The SEC’s approach ignores the differences between digital assets and traditional securities, and unfairly views the entire digital assets industry as a monolith, which it decidedly is not.7 Those differences lead to problems applying existing rules to the digital assets ecosystem, which the Commission has failed to acknowledge (or remedy), resulting in a hostile regulatory environment for innovation.

The SEC’s Jurisdiction Is Unclear

The starting point for any analysis of existing rules’ appropriateness is whether a digital asset or digital asset-related service is under the SEC’s jurisdiction. While determining whether an instrument is a security subject to SEC jurisdiction is not always a straightforward process, due to the breadth of the definition of a security and the flexibility with which it has been applied, answering this question is more difficult for digital assets due to their novel characteristics. Rather than wrestling with these legal questions, or providing clear guidance to market participants, the SEC has instead disclaimed any responsibility to provide workable guidance and claimed essentially limitless jurisdiction over digital assets.

Whether a digital asset is a security is often analyzed under the test for an “investment contract.”8 The four-part Howey test requires (1) an investment of money, (2) in a common enterprise, (3) with the expectation of profit, (4) to be derived from the efforts of others.9 In the era of the Securities Act and the Howey decision, and for decades thereafter, the archetypical covered entity under securities laws was a centralized enterprise with a corporate form, headquarters, and managerial hierarchy. Crypto projects aspire to upend this model, eschewing not only the physical plant of 20th-century enterprises but also, more importantly, managerial bodies exercising ongoing control over projects. And that creates significant challenges to the traditional concept of an investment contact.10

Rather than confront those challenges, though, Gensler has laid jurisdictional claim to essentially all digital assets except for Bitcoin.11 He has repeatedly refused to provide guidance as to whether Ether can be considered a security—a position made all the more confusing by the fact that the Commodity Futures Trading Commission has deemed Ether a commodity—leaving the second largest blockchain in regulatory limbo with ongoing questions about whether the SEC will or will not assert jurisdiction.12

This issue is compounded by the fact that the jurisdictional theories that the SEC does assert stray beyond the Howey jurisprudence to instead establish SEC jurisdiction with almost no limit. As Commissioner Mary Uyeda has described, the SEC’s approach has been “that any item sold whose value is based on the efforts of others is a security,” but “[t]his broad reading of Howey would appear to scope in many common transactions in the non-digital world, including pre-purchase commitments, collectibles, art, and land.”13 The SEC has settled actions consistent with this limitless reading of its authority, specifically in the context of non-fungible tokens.14

Any market participant that questions the SEC’s expansive reading of its own jurisdiction—or any market participant that is legitimately unsure of whether the SEC has regulatory authority over its project—faces significant regulatory and compliance risks that can result in expensive investigation or litigation brought by the SEC. This alone stands as a major deterrent to operating in the digital assets space in the United States.

Securities Registration Rules Do Not Fit Digital Assets

Even if there were no jurisdictional questions and it were clear that an issuer of a digital asset was subject to the SEC’s jurisdiction by virtue of issuing a security, the SEC’s registration rules would still be a poor fit for digital assets.

Registered securities must provide initial and ongoing public disclosures about their issuer’s officers and board of directors, the issuer’s business activities, and the issuer’s audited financial statements. But disclosure obligations related to balance sheets and cash flow statements for corporate entities often do not make sense for software projects that are, fundamentally, distributed recordkeeping systems lacking traditional assets or business lines.15 Registration is simply not a viable option where the SEC’s rules require reporting that is inapplicable to digital asset issuers.16

These problems are all the more difficult when the development and/​or operation of those software projects is decentralized (or in the process of decentralizing)—meaning that no single party or unified group maintains discretionary control over the project or its code. In such circumstances, there may be no centralized entity capable of making such ongoing disclosures.

Moreover, disclosures that would be relevant to crypto users—including the determinants of token supply and governance mechanisms for software updates—are not covered by legacy securities rules.17 Indeed, other jurisdictions, including the European Union, have recognized this and have established tailored disclosure regimes for digital assets.18 The SEC’s failure to provide guidance on relevant disclosures for digital assets may create market confusion, where existing rules ask issuers for information not material to the user.19

These problems do not end with the registration of a primary offering. Once a digital asset is registered as a security, it must be treated as a security in secondary trading. But such treatment may mean that the token is thus reduced—so to speak—to only being a security, and not able to provide any other use to its owner. Digital assets that are intended to be used to facilitate the purchase and sale of goods, to facilitate blockchain functionality, or to be used in other ways, are likely unable to be used consistent with those functions because of restrictions on the sale of those assets by the securities laws.20

Exchange Regulations Do Not Fit Digital Asset Platforms

The fit of existing regulations is no better for the marketplaces over which digital assets are exchanged.21 The first major hurdle to registration of digital asset platforms follows from the discussion above. Because registered securities exchanges can only trade securities,22 any difficulties with respect to regulations’ fit for digital assets themselves will be replicated in terms of their platforms’ eligibility for SEC registration. But the poor fit of existing exchange regulations does not end there.

Even if securities registration were clear for digital assets, existing SEC rules and guidance make it impossible for digital asset platforms to register and comply with the requirements applicable to securities exchanges. Gensler has bemoaned the structure of current crypto platforms, which allow market participants to transact directly without the intermediation of a broker and vertically integrate some functions (such as custody and settlement) that securities exchange rules require to be separated.23

But even if a crypto platform’s consolidated functions were broken apart, the SEC’s rules would not be compatible with allowing such a platform to function. For example, trading on a securities exchange is limited to broker-dealers,24 but SEC guidance restricts the ability of broker-dealers to handle digital assets for their clients, limiting it to “special-purpose” broker-dealers who solely handle crypto securities.25 But the guidance covering these “special purpose broker-dealers,” issued in late 2020, appears to be unworkable, with only two entities (one just last week) having been approved for such a license.26

This problem is repeated specifically with respect to custody. Even if a crypto platform were to cease custodying a customer’s assets, the number of providers of qualified custodial services has been severely limited due to SEC guidance, including Staff Accounting Bulletin (SAB) 121 and the guidance on special-purpose broker-dealers.27

Exchange rules regarding securities settlement and clearing are also incompatible with the settlement and clearing process for digital assets. Because settlement can occur instantaneously on a blockchain, there is no practical need for a clearing agency to assume the responsibility for the settlement process when trading digital assets. Yet, existing rules may require a digital asset platform that utilizes such technology for immediate settlement to register as a clearing agency and be subject to the inapt rules that apply to such an entity.28 This makes little sense.29

For decentralized platforms, the problems are even more acute.30 Squaring securities laws designed for centralized financial intermediaries with a crypto ecosystem that includes tokens traded via disintermediated protocols is a significant challenge. Centralized platforms typically custody customer assets, settle transactions off-chain, and have opaque transaction records. But decentralized platforms do not custody the assets of users trading tokens and settle transactions on open and auditable public blockchains. Therefore, applying traditional custody and market transparency rules to decentralized platforms is, at best, unhelpful, and may be counterproductive.31 Regulations to address intermediary risks do not make sense for software designed to achieve disintermediation.

Unfortunately, the SEC has shown little interest in working through any of these issues—whether jurisdictional or related specifically to the poor fit of existing regulations for digital asset or exchange registration. Not only has the Commission failed to undertake any process towards rule-making in this space, but multiple market participants have publicly stated that they did attempt to engage with the SEC about registration, only to be rebuffed.32 And Commissioner Hester Peirce recently characterized the SEC’s posture as one where market participants asking the SEC about the “application of an old [rule] to new circumstances, too often now … are met with … well, crickets.”33 These are not the actions of a regulator engaged in its mission to protect investors, maintain fair, orderly, and efficient markets, and facilitate capital formation. Rather these are the actions of a regulator that, at a minimum, is showing callous indifference to the impact of rules that are not a good fit for evolving technology.

Enforcement-First Is a Harmful Regulatory Strategy for Digital Assets

Enforcement is a key part of the regulatory process; holding regulated parties to account for the rules that are put into place is important. But, as a matter of both fairness and efficiency, enforcement should happen only when the regulatory obligations being enforced are reasonably clear.

Where the application of existing rules to digital assets is uncertain or impossible, as discussed above, an enforcement-first strategy is inappropriate and effectively amounts to a deterrent to the entire digital assets ecosystem within the United States.

Regulation by Enforcement is Not an Efficient or Fair Way of Regulating

The SEC routinely touts its success in charging “first-of their kind” cases and bringing significant actions “to protect investors in new and emerging areas, including cases charging misconduct involving cyber issues and crypto securities.”34 While not all first-of-their-kind cases are inappropriate, the Commission should not champion leading with enforcement when addressing novel applications of existing rules.

Rulemaking achieved through enforcement is suboptimal for many reasons, including simply that it creates worse rules. As Commissioner Uyeda has explained, rulemaking through enforcement “fails to provide a mechanism for the Commission to consider the views of market participants,” which is an important input to creating “better crafted rules.”35 Creating policy through enforcement also produces less certain and less clear rules for market participants and can result in unfair treatment of such market participants, undermining public trust in the agency. At their most fundamental level, enforcement actions may provide long lists of examples—often a bit light on relevant details—about what a market participant should not do, but they rarely provide a pathway for understanding what to do.36

This has particularly been the case when the Commission has leaned heavily on enforcement to tell market participants about its view of the law on digital assets.37

The failure of this strategy is particularly egregious when the SEC has brought enforcement actions against market participants for failing to comply with rules for which there was no path to compliance. One example of this is the SEC’s settled cases regarding staking.38 While reasonable securities lawyers may disagree as to whether the specific facts and circumstances of a particular staking service fit the definition of an investment contract, the SEC’s insistence that crypto platforms register those services without the agency first providing those platforms with a clear means of registering their staking services is problematic.39 Instead of “initiat[ing] a public process to develop a workable registration process that provides valuable information to investors,” the SEC instead chose to “just shut it down,” in the words of Commissioner Peirce.40 Similarly, the SEC’s litigation against LBRY—which ultimately resulted in the company abandoning its appeal and winding down operations after exhausting its resources—charged LBRY with failing to register its tokens, despite the agency providing no path for LBRY to do so.41

These two examples, among others, make clear how an enforcement-first approach functions as an effective ban by the SEC on digital asset activity in the United States.

The SEC’s Digital Assets Enforcement Is Worse Than Garden-Variety Regulation by Enforcement

The scale of the SEC’s regulation by enforcement efforts on digital assets sets it apart from other times the agency has led with enforcement. The SEC touts its record in bringing “well over 100 crypto-related actions,”42 as if the sheer volume of enforcement actions itself does not suggest that there is some mismatch between what the agency thinks regulation requires and the practical application of regulation to functioning businesses. These enforcement actions have covered a diverse set of topics—from token registration to exchange registration to staking to non-fungible tokens to fraud—but have all taken place with little effort by the agency to engage with market participants or provide any guidance (besides enforcement actions) to assist in compliance.

But even beyond the scale of the enforcement efforts, the SEC’s conduct in bringing these actions has further increased regulatory uncertainty—and leads one to question whether the agency is acting in good faith. To name a few examples:

  • Rather than engaging with entities under investigation, the SEC has often tried to hide the ball, limiting the opportunities of potential respondents to constructively engage with the agency prior to an enforcement action being filed.43
  • The SEC’s legal theories are inconsistent and shifting, increasing regulatory risk and uncertainty for any market participant attempting to understand the agency’s position as to its jurisdiction.44
  • Settled actions often provide little detail as to the basis for the charges, particularly where the charges rest on a finding that involves unregistered securities, making it more difficult for market participants to understand the basis for the enforcement action.45
  • The SEC has engaged in sanctioned misconduct, including material misrepresentations to a federal district court, in a digital assets-related case.46

Even if the agency were enforcing clear rules, this type of conduct would reflect poorly on a regulator. These issues, among others, are indicative of the ways in which the SEC’s crypto crusade has veered beyond simply enforcing existing rules.

In addition, the aggressive SEC enforcement activity—and lack of agency engagement with market participants—has resulted in an unusually high number of lawsuits against the agency seeking proactive relief.47 This not only places additional demands on the SEC’s resources—and potentially erodes the agency’s authority—it should serve as a clear signal to the Commission that if market participants are willing to go to such (expensive) lengths to achieve clarity, the agency has a long way to go in terms of providing sound regulation on digital assets.48

A Better Approach Would Yield Clear and Predictable Rules

As demonstrated above, the SEC’s “enforce first, make rules never,” approach is the wrong one.

While there likely are regulatory gaps that can be filled only by legislation, the Commission has tools at its disposal to create clear and predictable rules to govern digital assets that fall within its jurisdiction. Congress has given the SEC broad exemptive authority that it has exercised to craft regulatory regimes tailored to products, asset classes, and entities for which the statutory scheme yielded unclear or anomalous results. The Commission has exercised those exemptive authorities for unregistered offerings, alternative trading systems, asset-backed securities, and exchange-traded funds, just to name a few.49

But exemptive relief through formal rulemaking is not the only avenue available to the SEC; it can also provide no-action relief, release interpretative guidance, or perhaps at the most basic level, begin to engage with the relevant market participants through concept releases, roundtables, or otherwise. To date, the Commission has not engaged in any of this activity.50

The SEC has the tools at its disposal; it just needs to use them.

If the Commission were to defend its approach to keeping digital assets off its rulemaking agenda, it would likely point to a few scattered references to digital assets in its rulemaking and guidance over the past several years as satisfying identified needs. But in each instance, the SEC actions have not provided clarity or have exacerbated existing regulatory uncertainties.

One example of this is the SEC’s issuance of SAB 121, which provided guidance to crypto custodians requiring them to list custodied assets on their own balance sheets. This guidance, however, is both substantively and procedurally flawed. On substance, SAB 121 upended generally accepted practices by calling on asset custodians to treat clients’ digital assets as liabilities on custodians’ own balance sheets.51 Reversing the standard practice of treating custody assets as off-balance sheet increases costs for any entity seeking to provide custody for digital assets. The result is that it has severely limited the number of qualified custodians for digital assets, an outcome that seems inconsistent with the SEC’s investor protection mission.

But this guidance was also procedurally flawed; the Government Accountability Office found that SAB 121 was tantamount to a rule that required notice to Congress under the Congressional Review Act, which the SEC had failed to provide.52

Although bipartisan majorities of both houses of Congress passed resolutions disapproving of SAB 121, the SEC has not reconsidered the guidance, but rather has doubled down—in a way that simply proves how poor of a method such staff guidance is for making policy. After rumors swirled about some prospective crypto custodians reaching deals with the SEC that did not subject them to the terms of SAB 121,53 the SEC’s Chief Accountant gave a speech that stood behind SAB 121 and outlined some fact patterns that were outside of the scope of SAB 121.54 But market participants are left with little certainty about how to apply the purported non-binding staff guidance—that is now subject to a non-binding gloss in a staff speech that was informed by one-off discussions with market participants. This is not a healthy regulatory process.

Another example is the SEC’s updates to the dealer rule,55 which explicitly contemplate that the new category of dealers outlined in that rule might include certain crypto market participants. Among the many issues with the SEC’s approach on this rule, is the most basic one: as Commissioners Peirce and Uyeda explained, “[p]eople right now are trying to figure out whether they have to register as dealers and, if so, which assets they can handle in the registered entity. To do so, they need to understand whether the assets for which they provide liquidity are securities.”56 As described above, the answer to that question remains unclear, and the agency’s dealer rule provides no additional guidance.57

Thoughtful Engagement by The SEC Is Long-Past Due

Rather than welcoming legislative intervention, Gensler pushed back explicitly against attempts by Congress to legislate, asserting that legislation was wholly unnecessary.58 As laid out above, that cannot be further from the truth. Gensler’s SEC generally stands alone in believing that there is no room for improvement in the United States’s approach to digital assets. The Biden Administration has signaled that legislation is welcome.59 Other executive agencies, including the CFTC and Treasury Department, have indicated that legislation is needed.60 And the United States would hardly be alone in needing to update its laws to address technological change, as it would follow a host of other countries in doing so.61

Indeed, Gensler himself has even suggested at times that legislation may be needed or regulations may need to be updated, claiming to have “asked staff to consider” a number of questions about how to apply existing SEC rules to crypto exchanges—acknowledging that the application of existing rules is not crystal clear.62 But years after these acknowledgments, enforcement actions continue to be filed based on existing rules, and there is no visible progress towards solutions—no proposed rules or guidance, no formal process for gathering market participant input, and no docketing of an intention to address these issues on the agency’s agenda.63

The SEC’s expansive interpretation of its authority is at odds with the nearly century-old securities laws from which the SEC is claiming to draw its power. It is difficult to find a mandate in those laws to bar the door to future innovations in capital market tools and, more generally, to technical infrastructure for decentralized and cryptographically secure computing. For instance, the Securities Exchange Act of 1934 begins with the statement that it’s in the “national public interest” to “provide for regulation and control of” securities transactions.64 The lesser power to regulate whichever digital asset transactions are, in fact, securities transactions, does not include the greater power to prohibit them writ large. At the very least, such an expansive interpretation of the SEC’s powers should not come without a public rulemaking process, which requires consideration of whether the rulemaking “will promote efficiency, competition, and capital formation.”65 The SEC’s current digital assets strategy is inconsistent with any of these goals.

Thank you for the opportunity to provide this information about the myriad deficiencies in the SEC’s approach to digital assets. I welcome any questions that you may have.