On March 2, 2026, U.S. District Judge Katherine Polk Failla dismissed with prejudice all remaining claims in *Risley v. Universal Navigation Inc.*, the class action lawsuit alleging Uniswap Labs, founder Hayden Adams, and venture capital backers were liable for investor losses caused by scam toke...
"This investigation cost Uniswap tremendous time, tens of millions, and held back the promise of DeFi for years." — Mary-Catherine Lader, Former President, Uniswap Labs
On March 2, 2026, U.S. District Judge Katherine Polk Failla dismissed with prejudice all remaining claims in Risley v. Universal Navigation Inc., the class action lawsuit alleging Uniswap Labs, founder Hayden Adams, and venture capital backers were liable for investor losses caused by scam tokens traded on the protocol. The dismissal — meaning plaintiffs cannot refile — marks the most definitive federal court ruling to date on DeFi developer liability.
The ruling establishes that creators of permissionless, non-custodial trading protocols cannot be held civilly liable for third-party misuse of their software. It arrives at a moment when DeFi protocols collectively hold over $80 billion in TVL and face a patchwork of litigation with contradictory outcomes across jurisdictions. Uniswap alone processes approximately $2 billion in daily trading volume across its deployments and holds roughly $5.2 billion in TVL.
The decision does not grant blanket immunity. Judge Failla signaled that courts will scrutinize protocol operators who step beyond neutral infrastructure into promotional activity. The ruling's implications extend well beyond Uniswap to every DeFi protocol built on similar architectural principles.
The Risley case was filed in 2023 in the U.S. District Court for the Southern District of New York. Plaintiffs alleged they purchased tokens on Uniswap's decentralized exchange that turned out to be fraudulent — so-called "rug pulls" — and that Uniswap Labs, Adams, and venture investors including Andreessen Horowitz bore responsibility.
The core claim: by building and maintaining the protocol, Uniswap's creators provided the infrastructure that enabled fraud. Plaintiffs sought damages under both federal securities law and state consumer protection statutes.
Judge Failla dismissed the federal securities claims in an earlier ruling in 2023, finding that the plaintiffs failed to identify a responsible party for the token listings because Uniswap operates as autonomous smart contract code — not a centralized exchange with listing decisions. An appeals court largely affirmed that ruling in February 2025.
The March 2, 2026, dismissal eliminated the remaining state-law claims. With prejudice. Case closed.
The ruling rests on two legal pillars.
First: No actual knowledge. To impose secondary liability for fraud, U.S. law requires plaintiffs to demonstrate the defendant had "actual knowledge" of the specific wrongdoing. Uniswap's permissionless design means anyone can deploy a token contract and create a liquidity pool without approval from Uniswap Labs. The court found no evidence that the defendants knew about the specific scam tokens at issue.
Second: No substantial assistance. Even if knowledge existed, liability requires "substantial assistance" that materially aided the fraud. Judge Failla compared the situation to suing Venmo or Zelle because a user conducted a drug transaction through the platform. The protocol is general-purpose infrastructure. Third-party human intervention — the scammer deploying the fraudulent token — causes the harm.
Failla wrote that holding a developer responsible for how strangers misuse a permissionless protocol would "defy logic." The court drew an explicit line between building technology that can be misused and actively facilitating misuse.
This distinction matters. The court did not declare DeFi protocols immune from all litigation. It established that building neutral, non-custodial infrastructure — where the developer does not control user assets, approve listings, or intermediate transactions — does not, by itself, create liability for fraud committed by third parties.
The Uniswap ruling did not occur in isolation. It caps a two-front legal battle that consumed years and, according to former Uniswap Labs President Mary-Catherine Lader, "tens of millions" in legal costs.
In April 2024, the SEC issued a Wells notice to Uniswap Labs, signaling potential enforcement action for operating as an unregistered securities exchange and broker-dealer. Adams publicly stated he was "not surprised. Just annoyed, disappointed, and ready to fight."
The SEC closed the investigation without charges in February 2025, under the leadership of Acting Chairman Mark Uyeda and Commissioner Hester Peirce, as the agency recalibrated its crypto enforcement posture following leadership changes. Under Chair Paul Atkins, who succeeded Gary Gensler, the SEC has since halted 12 crypto enforcement cases, including suits against Binance, Coinbase, and Kraken.
The combined outcome — SEC investigation dropped, class action dismissed with prejudice — gives Uniswap the cleanest legal slate of any major DeFi protocol. The cost to get there: multiple years, tens of millions of dollars, and the departure of Lader herself, who stepped down in July 2025 after four years.
The Uniswap decision creates a direct tension with a November 2024 ruling in the Northern District of California. In Samuels v. Lido DAO, Judge Vince Chhabria ruled that DAOs can be classified as general partnerships under California law, exposing individual token holders and governance participants — including institutional investors like Paradigm and Dragonfly — to personal liability.
The Lido ruling held that DAO members could be liable under Section 12(a)(1) of the Securities Act for failing to register the LDO token. Discovery is ongoing, with expert reports scheduled for the first half of 2026 and summary judgment motions due in August. A motion hearing is set for November 19, 2026.
The two rulings operate on different legal theories — Uniswap addresses secondary liability for third-party fraud, while Lido addresses direct liability for unregistered securities issuance — but the practical divergence is stark:
| Factor | Uniswap (S.D.N.Y.) | Lido (N.D. Cal.) | |--------|-------------------|------------------| | Protocol type | DEX (permissionless trading) | Liquid staking | | Legal theory | Aiding and abetting fraud | Unregistered securities | | Outcome | Dismissed with prejudice | Motion to dismiss denied | | Developer liability | Rejected | Potentially affirmed | | VC liability | Rejected | Potentially affirmed |
The divergence underscores that "DeFi liability" is not a single legal question. Architecture matters. Token design matters. Governance structure matters. Jurisdiction matters.
The Uniswap ruling effectively creates a design template for legal defensibility. Protocols that maintain these characteristics are better positioned:
Non-custodial architecture. The protocol never holds user funds. Smart contracts execute trades autonomously. This was central to the court's reasoning.
Permissionless access. No entity approves token listings or user accounts. The protocol is open to all. This severed the causal link between developers and the scam tokens.
Minimal promotional activity. The court noted it will still scrutinize protocol operators who engage in promotional activity beyond neutral technology provision. Protocols that market specific tokens or yield opportunities may face different treatment.
Autonomous smart contracts. Code executes without human intervention post-deployment. The absence of ongoing human decision-making in transaction processing weakened the "substantial assistance" argument.
Protocols like Aave, Compound, and Curve Finance operate on similar principles and stand to benefit from the precedent. According to DeFi Education Fund analysis, lending and liquidity protocols relying on non-custodial, permissionless designs are the most direct beneficiaries.
However, DeFi applications with curation functions — platforms that feature, recommend, or promote specific assets — may not enjoy the same protection. The court's language suggests a spectrum: the more a developer intervenes in user-facing decisions, the closer they move toward potential liability.
The Uniswap ruling lands amid a broader regulatory recalibration. On January 29, 2026, CFTC Chairman Michael Selig announced "Project Crypto" in coordination with SEC Chairman Paul Atkins, establishing a joint framework for digital asset oversight. The CFTC appointed a former federal prosecutor as its new enforcement chief in early March 2026 — signaling continued oversight but with a focus on fraud rather than registration violations.
Crypto class action filings surged in 2025, with six cases filed in the first half alone approaching the total of seven for all of 2024, according to Cornerstone Research data. The Uniswap dismissal may slow this trend for DeFi-specific claims, but the Lido precedent keeps the door open for cases targeting governance token issuance.
Meanwhile, the Supreme Court's decision to hear Sripetch v. SEC (certiorari granted January 9, 2026) will determine whether the SEC must demonstrate investor pecuniary loss to obtain disgorgement in enforcement actions — a ruling that could further reshape the enforcement landscape for digital assets.
The net effect: U.S. courts are drawing increasingly precise distinctions between types of DeFi activity, types of liability, and types of harm. The era of treating "DeFi" as a monolithic legal category is ending.
Judge Failla's March 2 ruling dismissed all claims against Uniswap Labs with prejudice, permanently barring plaintiffs from refiling. It is the most definitive federal court ruling on DeFi developer liability to date.
Non-custodial, permissionless protocol design is now a legally defensible architecture in the Southern District of New York. Developers who build neutral infrastructure and do not control user funds or curate assets face a high bar for secondary liability.
The ruling does not grant blanket immunity. Courts will still scrutinize promotional activity and direct involvement in token distribution. Protocol operators who cross from infrastructure to promotion assume additional legal risk.
The Lido DAO ruling in California creates a direct jurisdictional tension, holding that DAO governance participants may be liable as general partners. The legal landscape for DeFi varies significantly by jurisdiction, legal theory, and protocol design.
Uniswap's total legal cost — SEC investigation plus class action defense — reached "tens of millions" of dollars over multiple years. This price tag remains prohibitive for smaller protocols and highlights a structural advantage for well-funded projects.
The joint SEC-CFTC "Project Crypto" initiative and the Supreme Court's Sripetch case will further define the boundaries of regulatory and enforcement authority over DeFi in 2026.
The Risley v. Universal Navigation dismissal establishes a clear principle: building permissionless software does not make you liable for how strangers use it. In the Southern District of New York, at least, DeFi developers who maintain non-custodial, neutral infrastructure have a defensible legal position against class action claims rooted in third-party fraud.
The principle is narrower than the crypto industry's initial celebration suggests. It applies to secondary liability for fraud — not to unregistered securities issuance (see Lido), not to promotional misconduct, and not necessarily to jurisdictions outside New York. The legal defense cost tens of millions of dollars, underscoring that even favorable law is expensive to establish.
For the DeFi sector — approximately $80 billion in TVL, processing billions in daily volume across hundreds of protocols — the ruling provides the first major U.S. judicial endorsement of the core design philosophy: code that runs autonomously, without gatekeepers, should not subject its creators to liability for the actions of its users. Whether that principle survives appeal, spreads to other jurisdictions, or extends to other legal theories will define DeFi's legal architecture for years to come.