On March 2, 2026, Judge Katherine Polk Failla of the U.S. District Court for the Southern District of New York dismissed with prejudice every remaining claim in *Risley v. Universal Navigation Inc.* — the four-year-old class action that sought to hold Uniswap Labs, founder Hayden Adams, and sever...
"It defies logic that a drafter of a smart contract, a computer code, could be held liable … for a third party user's misuse of the platform." — Judge Katherine Polk Failla, U.S. District Court, Southern District of New York
On March 2, 2026, Judge Katherine Polk Failla of the U.S. District Court for the Southern District of New York dismissed with prejudice every remaining claim in Risley v. Universal Navigation Inc. — the four-year-old class action that sought to hold Uniswap Labs, founder Hayden Adams, and several venture capital backers liable for losses tied to scam tokens traded on the protocol. The ruling cannot be refiled. It is over.
The decision lands at an inflection point. DeFi now holds over $130 billion in total value locked across hundreds of permissionless protocols. Uniswap alone processes approximately $148 billion in monthly trading volume across 36 chains. The question of whether writing open-source smart contracts makes you legally responsible for what strangers do with them is not academic — it is the load-bearing legal question for an industry managing hundreds of billions of dollars. Judge Failla's answer: no. Providing neutral infrastructure is not the same as directing or knowingly assisting fraud. But the ruling's real significance lies in the precise legal tests it applied — and the wide gaps it deliberately left open.
This report examines the ruling's legal architecture, its economic implications for protocol development, the stark contrast with the Tornado Cash convictions in Europe, and the limits that even Uniswap's own general counsel acknowledges remain in place. For an industry built on code-as-law ideology, the courts are now writing the actual law — and the results are more nuanced than the headlines suggest.
The lawsuit originated in 2022 when a group of retail investors filed a class action alleging that Uniswap facilitated fraud by enabling scammers to launch and trade fraudulent tokens — including "rug pulls" and pump-and-dump schemes — on its permissionless protocol. The plaintiffs named Uniswap Labs (the company that develops the front-end interface), CEO Hayden Adams, and several venture capital investors including Andreessen Horowitz and Union Square Ventures.
The core allegation was straightforward: Uniswap knew its platform was used for fraud, profited from it through fees, and therefore bore legal responsibility for investor losses. The plaintiffs sought damages under both federal securities law and New York state fraud statutes.
In August 2023, Judge Failla dismissed the federal securities claims, ruling that because anyone can deploy a token contract on Ethereum and list it on Uniswap without the protocol's permission, the protocol developers could not be classified as brokers or issuers of those tokens. What remained were state-law claims alleging aiding-and-abetting fraud and unjust enrichment.
The March 2, 2026 ruling dispatched those final claims — with prejudice.
The decision rests on three pillars, each with distinct implications for DeFi's legal future.
1. The Knowledge Standard
Under New York's aiding-and-abetting framework, plaintiffs had to demonstrate that Uniswap Labs possessed actual knowledge of specific fraudulent schemes. Judge Failla explicitly rejected constructive knowledge, recklessness, and "willful blindness" as sufficient standards. The court wrote that even a "forest of red flags" does not meet the actual knowledge requirement.
This is a high bar. It means that awareness of general scam activity on a permissionless platform — even extensive, well-publicized activity — is legally insufficient to establish liability. The plaintiffs needed to show that Uniswap knew about specific scams and specifically chose to assist them.
2. The Infrastructure Analogy
Failla drew direct comparisons to neutral payment infrastructure. Just as Venmo and Zelle are not liable when users conduct fraud through their platforms, a permissionless protocol that enables token swaps cannot be held responsible for what anonymous third parties choose to list and trade. The court emphasized that "simply providing the platform on which a fraud takes place is not the same as substantially assisting that fraud."
3. The Unknowable Defendant Problem
Perhaps most consequentially, the court acknowledged a structural feature unique to permissionless systems: "Due to the Protocol's decentralized nature, the identities of the Scam Token issuers are basically unknown and unknowable, leaving Plaintiffs with an identifiable injury but no identifiable defendant." This did not generate sympathy for the plaintiffs — it reinforced the court's view that liability cannot be transferred to protocol developers simply because the actual wrongdoers are anonymous.
The ruling's economic importance extends far beyond Uniswap's $6.8 billion in TVL and $2 billion in daily volume. Every major DeFi protocol operates on the same architectural principles that Uniswap's defense relied upon — permissionless deployment, autonomous smart contract execution, and absence of custodial control over user assets.
Aave, with $27 billion in TVL, allows anyone to create lending markets. Compound, Curve Finance, and MakerDAO all depend on similar permissionless architectures. If the Risley court had accepted the "facilitation equals liability" argument, the entire $130+ billion DeFi ecosystem would have faced existential litigation risk.
The value at stake is not theoretical. Uniswap generated approximately $790 million in annualized fee revenue through 2025, according to data from Token Terminal and DefiLlama. Aave's protocol generates over $500 million annually. These are real revenue-generating systems — not speculative experiments — and their continued operation requires legal clarity on developer liability.
From an economic-value perspective, the ruling's most important function may be preserving the conditions under which fee-generating DeFi protocols can continue operating. Unlike most of the crypto ecosystem — which runs on 85–90% subsidy-driven economics — blue-chip DeFi protocols represent the narrow category of blockchain applications that generate sustainable on-chain revenue. A ruling that exposed their developers to unlimited vicarious liability would have threatened the only segment of the industry approaching economic self-sufficiency.
The Uniswap ruling cannot be understood in isolation. In May 2024, a Dutch court convicted Tornado Cash developer Alexey Pertsev of money laundering and sentenced him to 64 months in prison. The prosecution argued that Pertsev built a tool he knew was being used to launder over $1.2 billion in illicit funds — and that the protocol's design deliberately obstructed law enforcement.
Pertsev was released on conditional electronic monitoring in early 2025 to work on his appeal before the Court of Appeal in 's-Hertogenbosch. His lawyer has publicly stated that elements of the Uniswap ruling are "relevant for the Dutch case."
In the United States, Tornado Cash co-founder Roman Storm faces federal criminal charges for conspiracy to commit money laundering and sanctions violations. The DOJ dropped its prosecution in early 2025, but a retrial remains possible — an outcome the DeFi Education Fund is actively working to prevent through amicus briefs arguing that the government's theory of wire fraud violates due process.
The cases highlight a critical distinction. The Uniswap ruling addressed civil liability — whether developers can be sued for damages by defrauded investors. The Tornado Cash prosecutions involve criminal liability — whether developers can be imprisoned for building tools used to launder money. The legal standards are fundamentally different. Civil fraud requires "actual knowledge" and "substantial assistance." Criminal money laundering can rest on willful blindness and deliberate facilitation.
This means the Uniswap precedent provides a shield against private lawsuits, but offers no protection against criminal prosecution where developers are alleged to have designed systems specifically to evade law enforcement.
The Uniswap ruling arrives alongside a broader shift in U.S. government posture toward crypto developers. In August 2025, DOJ Criminal Division head Matthew Galeotti declared at the American Innovation Project Summit that "merely writing code without ill intent is not a crime" and that "innovating new ways for the economy to store and transmit value and create wealth without ill intent is not a crime."
This position was formalized in Deputy Attorney General Todd Blanche's "Ending Regulation By Prosecution" memo, which explicitly prohibits federal prosecutors from targeting developers absent evidence of specific criminal intent. The policy establishes that when third parties violate criminal law using developer tools, prosecutors should target the misusing party — not the tool's creators.
Combined with the Uniswap ruling, the picture is clear: both the courts and the executive branch are converging on a framework where protocol developers are treated as infrastructure providers, not financial intermediaries. The SEC's closure of its investigation into Uniswap Labs in 2025 — without any enforcement action — reinforced this direction.
But convergence is not consensus. Other federal circuits could reach different conclusions. Appellate courts have not yet weighed in. And the EU's approach, as the Pertsev case demonstrates, operates under entirely different legal philosophies regarding developer responsibility.
The European Financial Regulation Institute (EFRI) published an analysis arguing that the Uniswap ruling "does not give DeFi blanket immunity." Their assessment deserves serious attention.
EFRI's core argument: the Risley complaint failed because it was poorly constructed — it "attacked an ecosystem rather than documenting actual knowledge and substantial assistance in specific frauds." A better-pleaded lawsuit, with tighter factual allegations linking protocol operators to specific fraudulent schemes, might survive dismissal.
This matters because DeFi's evolution is making the "neutral infrastructure" defense harder to maintain. Uniswap Labs operates a front-end interface. It has implemented token screening and blocklists. It charges a front-end fee. Each of these actions represents a degree of control and curation that distinguishes it from a purely autonomous protocol. Future plaintiffs will likely argue that these curatorial decisions establish a duty of care — that once you start filtering, you have an obligation to filter effectively.
The ruling also does not address:
As Uniswap's own General Counsel Brian Nistler acknowledged, while celebrating the ruling as "another precedent-setting ruling for DeFi," the legal landscape remains actively contested.
The actual-knowledge standard is DeFi's strongest legal defense. Courts require proof that developers knew about specific fraud — not just general awareness that fraud occurs on permissionless platforms. This is an extremely difficult evidentiary bar for plaintiffs to clear.
The "protocol as infrastructure" thesis now has judicial backing. Judge Failla's comparison to neutral payment platforms like Venmo and Zelle provides a framework that every DeFi protocol can cite in future litigation.
Civil and criminal liability are diverging. The Uniswap ruling shields protocol developers from private lawsuits, but the Tornado Cash criminal prosecutions demonstrate that building tools with knowledge of specific illicit use remains prosecutable.
The DOJ's "no regulation by prosecution" policy aligns with the ruling but could be reversed by future administrations. Judicial precedent is more durable than executive policy memos.
Better-pleaded lawsuits could still succeed. The ruling's foundation is pleading failure, not constitutional immunity. Plaintiffs who can document actual knowledge of specific frauds may fare differently.
The economic value at stake exceeds $130 billion in TVL — and the subset of DeFi that generates sustainable fee revenue represents the strongest argument for why legal clarity matters. Destroying the legal viability of fee-generating protocols would undermine the only segment of crypto approaching economic self-sufficiency.
The Uniswap ruling is the most important DeFi legal precedent of 2026. It establishes that writing open-source smart contracts does not make you liable for what anonymous users do with them — provided you lack actual knowledge of specific fraud and do not substantially assist it. Combined with the DOJ's formal policy against prosecuting developers for code alone, the legal environment for protocol builders in the United States has never been clearer.
But clarity is not certainty. This is a district court opinion, not appellate or Supreme Court precedent. Other circuits may disagree. The EU's criminal prosecution of Tornado Cash developers demonstrates that different jurisdictions are reaching fundamentally different conclusions about identical legal questions. And the ruling's reliance on pleading standards — rather than sweeping constitutional principles — means that smarter plaintiffs with better evidence could produce different outcomes.
For the $130 billion DeFi ecosystem, the practical takeaway is straightforward: the "protocol as infrastructure" legal thesis works — for now. Developers who build genuinely permissionless systems, avoid custodial control over user assets, and do not possess actual knowledge of specific fraud have a strong defense. But as protocols add front-end fees, token screening, and compliance features, they increasingly blur the line between neutral infrastructure and curated financial service. The next lawsuit will test whether that blurring creates new liability.
The economic stakes are too large for complacency. The protocols that generate real fee revenue — the narrow slice of crypto that may actually achieve sustainability — are precisely the ones with the most to lose if the legal framework shifts. Judge Failla bought DeFi time. What the industry does with that time will determine whether it builds on the precedent or squanders it.