On March 2, 2026, Judge Katherine Polk Failla of the U.S. District Court for the Southern District of New York dismissed with prejudice all remaining claims in *Risley v. Universal Navigation Inc.* — the four-year class action that sought to hold Uniswap Labs, its founder Hayden Adams, and ventur...
"It defies logic that a drafter of a smart contract, a computer code, could be held liable … for a third party user's misuse of the platform." — Judge Katherine Polk Failla, U.S. District Court, Southern District of New York
On March 2, 2026, Judge Katherine Polk Failla of the U.S. District Court for the Southern District of New York dismissed with prejudice all remaining claims in Risley v. Universal Navigation Inc. — the four-year class action that sought to hold Uniswap Labs, its founder Hayden Adams, and venture capital backers Paradigm, Andreessen Horowitz, and Union Square Ventures liable for investor losses from scam tokens traded on the Uniswap protocol.
The ruling is the most consequential judicial statement on DeFi developer liability in the United States to date. By holding that deploying neutral, open-source smart contract infrastructure does not make developers liable for how anonymous third parties use that infrastructure, the court has drawn a line that will echo across every open protocol, every DAO governance discussion, and every venture capital term sheet in the industry. Yet the ruling comes with significant caveats — and its protective logic sits in direct tension with the criminal convictions already secured against Tornado Cash developer Roman Storm.
This report analyzes the legal reasoning, maps the broader litigation landscape, and assesses the economic implications of a ruling that redefines who bears risk in decentralized finance.
Judge Failla's opinion rests on a structural argument: Uniswap's automated market maker protocol operates through self-executing smart contracts that process trades between counterparties without Uniswap Labs acting as an intermediary. Because the protocol is permissionless — anyone can deploy a token pair without approval — the court found that the identities of scam token issuers are "basically unknown and unknowable," leaving plaintiffs with "an identifiable injury but no identifiable defendant."
The ruling addressed two critical legal questions:
1. Are smart contract developers securities intermediaries? No. The court held that Uniswap's smart contracts function as "automated tools for executing trades" rather than active transaction participants. The relevant contractual relationship exists between token creators and purchasers — not between users and Uniswap Labs. This echoes the court's analogy that holding Uniswap liable would be equivalent to "holding Nasdaq or the New York Stock Exchange responsible for fraudulent stock purchases" on their exchanges.
2. Did Uniswap Labs "substantially assist" fraud? No. Under New York's aiding-and-abetting standard, plaintiffs needed to demonstrate that Uniswap had "actual knowledge" of specific fraudulent activity and provided "substantial assistance" in carrying it out. The court found neither. Providing general-purpose infrastructure is not the same as directing or knowingly assisting fraud.
The dismissal was issued with prejudice, meaning the plaintiffs cannot refile. Brian Nistler, Uniswap's head of policy, described the outcome as "another precedent-setting ruling for DeFi," while Hayden Adams stated that "if scam artists exploit open-source smart contract code, the responsibility lies with the scammers, not the developers who wrote the code."
The case originated in 2022 when Brooklyn-based investors, led by plaintiff Nessa Risley, filed a class action alleging they suffered losses from purchasing fraudulent tokens — including rug pulls and pump-and-dump schemes — on Uniswap's protocol. The suit named not only Uniswap Labs but also its VC backers, arguing that major investors who funded and profited from the protocol bore responsibility for the ecosystem it enabled.
The litigation proceeded in stages:
The DeFi Education Fund, which has advocated for developer protections across multiple cases, called the ruling "a massive win for DeFi" and highlighted that it reinforces a principle long argued in policy circles: a developer of neutral, decentralized software should not be held liable for a third party's misuse of that software.
The Risley decision does not exist in isolation. It is one vertex of a rapidly forming legal triangle that will define how U.S. courts treat DeFi developers — and the three vertices point in contradictory directions.
The Risley ruling establishes the strongest protection yet for developers of permissionless protocols. The logic is clear: neutral infrastructure providers who do not custody assets, do not select counterparties, and do not approve transactions are not liable for how third parties use the system. Lending protocols like Aave and Compound, liquidity platforms like Curve Finance, and aggregators like 1inch all rely on architecturally similar principles. For these protocols, the Risley precedent provides a meaningful legal defense in civil litigation.
Yet the federal government has taken a sharply different position in criminal cases. In August 2025, a jury in the same Southern District of New York convicted Tornado Cash co-founder Roman Storm of conspiring to operate an unlicensed money transmitting business. The jury deadlocked on the more serious charges of conspiracy to commit money laundering and conspiracy to commit sanctions violations — but the conviction on the money transmission charge signals that criminal prosecutors can reach developers even when their software is decentralized and non-custodial.
Storm's sentencing remains pending as of early 2026, with Ethereum co-founder Vitalik Buterin publicly appealing for leniency. The case is expected to proceed to the Second Circuit Court of Appeals, creating a potential collision between the Risley shield and the Tornado Cash sword within the same appellate jurisdiction.
In a third active case, Samuels v. Lido DAO in the Northern District of California, Judge Vince Chhabria ruled in November 2024 that DAOs can be classified as general partnerships — a designation that exposes individual DAO members and VC token holders to unlimited liability. The case, now in discovery with a hearing scheduled for November 2026, alleges that Lido's LDO token constitutes an unregistered security and that major backers like Paradigm and a16z effectively controlled the protocol.
The Lido theory attacks a different surface than Risley: not the code itself, but the governance and economic structure around it. If the Risley shield protects developers who write neutral code, the Lido theory asks whether investors and governance participants who direct that code through voting and treasury allocation cross the line from passive infrastructure providers into active operators.
| Case | Jurisdiction | Theory | Developer Impact | |------|-------------|--------|-----------------| | Risley v. Uniswap | SDNY (Federal) | Smart contracts ≠ securities intermediaries | Shield: Neutral code not liable for third-party misuse | | U.S. v. Storm (Tornado Cash) | SDNY (Federal/Criminal) | Protocol = money transmitting business | Sword: Criminal liability despite decentralization | | Samuels v. Lido DAO | N.D. Cal. (Federal) | DAO = general partnership | Trap: Governance participation = personal liability |
The Risley ruling has direct economic consequences for DeFi's value chain.
For protocol developers: The ruling reduces the legal risk premium embedded in building permissionless systems. Before Risley, the open question of civil liability created a chilling effect — multiple protocol teams cited litigation risk as a reason for implementing front-end restrictions, geographic blocks, or token screening. With the "with prejudice" dismissal, protocol teams operating architecturally similar systems have a strong precedent to point to when investors, insurers, and legal counsel assess risk.
For venture capital: The dismissal of claims against Paradigm, Andreessen Horowitz, and Union Square Ventures is arguably more significant for capital allocation than the developer shield itself. VC funds deploying capital into DeFi protocols have operated under the Lido-style risk that token holdings plus governance participation could create partnership liability. The Risley outcome — where VC backers were shielded even though they funded and profited from the protocol — provides a counter-precedent to the Lido theory, though in a different circuit.
For users who suffer losses: Judge Failla explicitly acknowledged that the plaintiffs' injuries were "real and palpable." Yet the court concluded that existing legal frameworks cannot reach the responsible parties — the anonymous scam token deployers — and declined to stretch those frameworks to reach Uniswap as a proxy defendant. This creates a genuine consumer protection vacuum. The court explicitly stated that "policy-related issues fall within the purview of Congress," signaling that legislative action is required.
For Uniswap's own economics: The ruling arrives as Uniswap executes its own economic transformation. In late 2025, governance activated the long-debated fee switch, directing protocol-level fees into UNI token burns. Early data indicates approximately $34 million in annualized UNI burns from Ethereum alone, with a recent expansion to eight additional Layer 2 blockchains projected to add roughly $27 million in additional annualized revenue. UNI's market capitalization currently stands at approximately $2.4 billion against roughly $60 million in annualized protocol fees — a revenue multiple of approximately 40x. Legal certainty reduces the discount rate applied to those cash flows.
The Risley shield is not absolute. Several boundary conditions constrain its application:
1. The neutrality requirement. Judge Failla's reasoning depends on Uniswap operating as neutral infrastructure. The court signaled that it "will still scrutinize conduct where protocol operators step beyond neutral technology and into promotional activity." Protocols that actively curate token listings, promote specific pools, or market expected returns may fall outside the shield.
2. Civil vs. criminal. Risley is a civil case. The Tornado Cash prosecution demonstrates that criminal liability operates under different standards, where prosecutors can bring charges based on the nature of the service provided rather than specific knowledge of individual misuse. The coming appeal will test whether the Second Circuit reconciles these approaches.
3. Jurisdictional limits. The ruling binds only the Southern District of New York. The Lido case in California's Northern District operates under different precedent. Until appellate courts or Congress provide uniform standards, the legal landscape remains fragmented.
4. The DAO governance gap. Risley did not address whether governance token holders who vote on protocol parameters — fee tiers, pool incentives, treasury deployments — cross the threshold from passive users to active operators. This remains the open question that Samuels v. Lido will test.
Landmark shield established. The Risley dismissal with prejudice creates the strongest U.S. precedent protecting developers of permissionless, non-custodial protocols from civil liability for third-party misuse.
VC backers also shielded — at least in civil cases. The dismissal of claims against Paradigm, a16z, and Union Square Ventures reduces the legal risk premium for DeFi venture investment, though the Lido partnership theory remains active in California.
Criminal liability remains the wildcard. The Tornado Cash conviction and pending appeal within the same appellate circuit creates a direct doctrinal tension with the Risley reasoning. The Second Circuit will eventually need to reconcile whether code can simultaneously be a protected tool (civilly) and an illegal service (criminally).
Consumer protection vacuum persists. The court acknowledged real investor losses but stated that policy solutions require Congressional action. With the GENIUS Act stablecoin framework signed into law in July 2025, Congress has demonstrated willingness to legislate — but no comprehensive DeFi consumer protection bill is currently advancing.
Architectural choices now carry legal weight. The ruling incentivizes protocol teams to maintain genuine neutrality — permissionless deployment, no curation, no custodial control. Protocols that add gatekeeping features may paradoxically increase their liability by demonstrating operational control.
The Risley ruling is not the final word on DeFi developer liability — it is the opening statement in a multi-year legal debate that will be settled by appellate courts, Congress, or both. But it is a structurally significant opening statement. For the first time, a federal court has articulated a clear framework distinguishing neutral protocol infrastructure from the financial intermediaries that existing law was designed to regulate.
The economic implications are immediate. Developer teams, venture funds, and insurance underwriters pricing DeFi risk now have a concrete precedent to anchor their models against. But the framework's durability depends on how the Second Circuit resolves the tension between the Risley shield and the Tornado Cash sword — and whether Congress fills the consumer protection vacuum that the court explicitly identified.
For an industry that generates approximately $13.7 billion in identifiable on-chain revenue against $86–113 billion in total ecosystem funding, the question of who bears liability when systems fail is not academic. It is the question that determines whether DeFi's next phase is built on legal foundations or legal fiction.
U.S. judge dismisses Uniswap scam token class action with prejudice — CoinDesk, March 3, 2026. Primary reporting on Judge Failla's final ruling.
Risley v. Uniswap Ruling: A Massive Win for DeFi — DeFi Education Fund, March 2026. Legal analysis and policy implications.
Uniswap Just Changed Crypto Law — And It Could Protect Open-Source Developers Industry-Wide — CCN, March 2026. Broader implications for open-source development.
Court ruling in Uniswap case sets precedent for DeFi developers' legal protection — CryptoSlate, March 2026. Legal precedent analysis.
The Tornado Cash Trial's Mixed Verdict: Implications for Developer Liability — Mayer Brown, August 2025. Legal analysis of Tornado Cash criminal case.
Samuels v. Lido DAO: A Potential New Frontier for Liability in the Cryptocurrency Space — Davis Wright Tremaine, January 2025. Legal analysis of DAO partnership liability.
The Legal Landscape for DAOs: Key Lessons from Lido DAO and Ooki DAO — Fenwick & West. DAO liability framework analysis.
Uniswap's Fee Switch Expansion: A $27M Annual Revenue Catalyst — AInvest, February 2026. Protocol revenue data.
DeFi Debrief: Week of March 2, 2026 — DeFi Education Fund. Weekly legal and policy roundup.
Uniswap Wins as Judge Says Code Isn't Guilty — The Coin Republic, March 5, 2026. Analysis of ruling implications.