On March 3, 2026, the U.S. Securities and Exchange Commission submitted to the White House Office of Information and Regulatory Affairs (OIRA) a Commission-level interpretive framework titled "Commission Interpretation on Application of the Federal Securities Laws to Certain Types of Crypto Asset...
"Investment contracts can be performed and they can expire. They do not last forever simply because the object of an investment contract continues to trade on a blockchain." — Paul Atkins, Chair, U.S. Securities and Exchange Commission
On March 3, 2026, the U.S. Securities and Exchange Commission submitted to the White House Office of Information and Regulatory Affairs (OIRA) a Commission-level interpretive framework titled "Commission Interpretation on Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets." This marks the first time in the agency's 91-year history that a Commission-level crypto classification framework has entered the federal regulatory pipeline.
The filing operationalizes Chair Paul Atkins' four-tier "token taxonomy" — first outlined during his November 12, 2025 speech at the Federal Reserve Bank of Philadelphia — into binding interpretive guidance. If adopted after OIRA review, it would formally establish that three of the four token categories (digital commodities, digital collectibles, and digital tools) are not securities, while only tokenized representations of traditional financial instruments remain under SEC jurisdiction. For a $2.44 trillion crypto market that spent years navigating enforcement-by-ambiguity, this is the regulatory equivalent of a ceasefire.
The implications are structural. The taxonomy doesn't merely clarify existing rules — it redraws the jurisdictional boundary between the SEC and CFTC, potentially releasing thousands of token projects from securities registration obligations while simultaneously creating a regulated on-ramp for tokenized equities, bonds, and funds. This report examines the taxonomy's architecture, its economic consequences, and the 90-day countdown that will determine whether it becomes law.
The SEC's shift from enforcement-first to architecture-first regulation is not rhetorical — it is quantifiable. Under Chair Gary Gensler (April 2021–January 2025), the SEC initiated 125 cryptocurrency-related enforcement actions, resolving 98 with $6.05 billion in penalties. In FY 2025, total new enforcement actions fell to 313 — the lowest in a decade — representing a 27% decline from FY 2024. More strikingly, cryptocurrency-specific actions dropped 60% to just 13, five of which were filed before Gensler departed. Under Atkins' tenure, the SEC has announced zero cryptocurrency enforcement actions.
This enforcement vacuum was not accidental. It was the deliberate clearing of space for "Project Crypto," the SEC's internal initiative to replace case-by-case litigation with systemic rulemaking. The January 28, 2026 Division-level staff statement on tokenized securities was the first output. The March 3 Commission-level filing to OIRA is the second — and carries substantially greater legal weight, as it does not require the full procedural steps of formal rulemaking.
The regulatory posture has flipped. Where Gensler's SEC argued that virtually every token was a security until proven otherwise, Atkins' SEC is building a framework where most tokens start as non-securities, with the burden falling on the agency to demonstrate otherwise. The distinction matters enormously for capital formation. Projects that spent millions on legal counsel to navigate uncertain securities classifications — or that avoided the U.S. market entirely — now face a potential path to domestic operations without registration.
Chair Atkins' taxonomy classifies digital assets into four categories, three of which explicitly fall outside the SEC's securities jurisdiction:
These are crypto assets "intrinsically linked to and derive their value from a programmatic operation of a crypto system that is 'functional' and 'decentralized.'" This category encompasses layer-1 tokens like ETH and SOL, as well as governance tokens of sufficiently decentralized protocols. The critical qualifier is functional decentralization — the network must operate without reliance on the managerial efforts of a centralized team.
For the market, this is the category with the largest economic impact. Bitcoin (BTC) at $1.38 trillion in market cap and Ethereum (ETH) as the second-largest network token would both fall clearly into this bucket. The CFTC, not the SEC, would retain oversight of spot commodity markets for these assets.
These are assets "designed to be collected and/or used and may represent or convey rights to artwork, music, videos, trading cards, in-game items." NFTs, which saw $23.7 billion in trading volume in 2022 before collapsing to a fraction of that, would finally receive definitive classification. Profile picture projects, gaming items, and digital art — none securities. The clarity removes the legal overhang that has frozen institutional interest in digital collectibles since the SEC's investigation of Yuga Labs' Bored Ape Yacht Club collection.
These are assets that "perform a practical function, such as a membership, ticket, credential, title instrument, or identity badge." Utility tokens — access passes, voting credentials, identity markers, platform credits — are explicitly carved out. This classification potentially covers a significant portion of the 17,000+ tokens currently tracked across exchanges, particularly those issued by SaaS-type blockchain applications where the token grants access to a service rather than an expectation of profit.
These are assets that "represent the ownership of a financial instrument enumerated in the definition of 'security' that is maintained on a crypto network." Tokenized equities, bonds, fund shares, REIT interests, and SPV-structured fractional property interests remain unambiguously securities. For this category, the taxonomy doesn't loosen regulation — it tightens it by providing explicit certainty. Tokenized securities face full registration, disclosure, and broker-dealer obligations.
This is the category that Wall Street is racing to build infrastructure for. Morgan Stanley's February 18 application for an OCC National Trust Bank charter — proposing "Morgan Stanley Digital Trust, National Association" — is designed specifically to custody tokenized securities under federal bank supervision. The $3.69 billion institutional crypto custody market (projected to reach $7.74 billion by 2032) is being built around this category.
Perhaps the most consequential element of the taxonomy is not what it classifies, but what it un-classifies. Atkins introduced a concept that upends decades of securities law orthodoxy: investment contracts can expire.
In his November 2025 speech, Atkins stated plainly: "Once the investment contract can be understood to have run its course, or expires by its own terms, the token may continue to trade, but those trades are no longer 'securities transactions.'"
He illustrated this with a memorable analogy: "A token is no more a security because it was once part of an investment contract transaction than a golf course is a security because it used to be part of a citrus grove investment scheme."
The practical significance is enormous. Under Gensler's interpretation of the Howey test, a token sold via an ICO in 2017 to fund protocol development could remain a security indefinitely — even after the protocol was fully built, decentralized, and operating without the original team's involvement. Atkins' framework creates an off-ramp: once the promises embedded in the original investment contract are fulfilled, or once the network achieves sufficient decentralization, the token sheds its securities classification.
This directly affects tokens like XRP, which spent years embroiled in SEC litigation over its securities status. Under the new framework, the analytical question shifts from "was this ever sold as part of an investment contract?" to "is the investment contract still operative?" For mature networks where the original fundraising promises have been delivered, the answer may increasingly be no.
The filing to OIRA on March 3, 2026 started a formal countdown. Under Executive Order 12866, OIRA has up to 90 calendar days to complete its interagency review — placing the outer deadline around June 1, 2026. However, the White House has signaled expedited timelines for deregulatory measures, and this interpretation clearly qualifies.
The review process matters because it is the final gatekeeping step before the SEC's five commissioners hold a vote. Unlike a formal rulemaking — which requires public notice-and-comment periods that can stretch for years — a Commission-level interpretation can be adopted by a simple majority vote after OIRA clearance. With a 3-2 Republican majority on the Commission, passage is considered highly likely.
The legal architecture is also significant. A Commission-level interpretation carries substantially greater weight than the Division-level staff statement issued on January 28, 2026. Staff statements "create no new obligations" by their own terms. A Commission interpretation, while not technically a regulation, establishes the official position of the agency and is typically given deference by courts. It becomes the reference framework for enforcement decisions, no-action letters, and industry compliance programs.
For the market, the 90-day window creates both opportunity and risk. Institutional capital that has been waiting for regulatory clarity — the "sideline capital" that industry participants have estimated at tens of billions — now has a defined timeline. But the interpretation could also be modified during OIRA review, and the final voted text may differ from the submitted draft.
Viewed through the lens of economic value distribution — the framework that governs how fees, rents, and compliance costs flow through the blockchain ecosystem — the taxonomy creates clear winners and losers:
Winners:
Losers:
The SEC filed its first-ever Commission-level crypto classification framework with the White House on March 3, 2026, establishing four token categories: digital commodities, digital collectibles, digital tools, and tokenized securities. Only the fourth category is classified as securities.
Chair Atkins has introduced the concept that investment contracts under the Howey test can expire — a fundamental shift that could reclassify mature, decentralized tokens from securities to non-securities.
Under EO 12866, OIRA has up to 90 days to complete review, placing the outer deadline around June 1, 2026. A 3-2 Republican Commission majority makes adoption probable upon completion of review.
SEC crypto enforcement actions dropped 60% in FY 2025, with zero actions under Chair Atkins, confirming the strategic pivot from litigation to rulemaking.
The taxonomy's biggest economic beneficiaries are layer-1 networks, DeFi protocols, and — counterintuitively — tokenized securities issuers who gain the certainty needed for institutional-grade infrastructure.
The $3.69 billion institutional crypto custody market is being built around the tokenized securities category, with Morgan Stanley, Citi, and nine other firms racing for OCC National Trust Bank charters.
The SEC's token taxonomy is not a piece of guidance — it is an act of jurisdictional cartography. For the first time, the agency is drawing a map that shows where its authority ends, not just where it begins. Three of the four quadrants of the digital asset landscape — commodities, collectibles, and tools — are being ceded to other regulators or to no regulator at all. Only tokenized securities remain firmly in the SEC's domain.
The economic consequences will be measured in the trillions. A $2.44 trillion crypto market that priced in perpetual regulatory risk now faces a defined 90-day timeline to clarity. The capital that flows in — or stays out — over the next three months will be determined not by market sentiment, but by the contents of a document sitting on a desk at the Office of Information and Regulatory Affairs.
The previous era's question was: "Is this token a security?" The new era's question is: "Has this token stopped being a security?" That single shift in framing — from permanent classification to temporal analysis — may prove to be the most consequential regulatory innovation in digital asset history.
SEC Chair Atkins: "The SEC's Approach to Digital Assets: Inside Project Crypto" — Speech at Federal Reserve Bank of Philadelphia, November 12, 2025 — Original speech outlining the four-tier token taxonomy and Howey test expiration framework.
SEC Submits Crypto Securities Framework to White House — The Block, March 5, 2026 — Breaking coverage of the Commission-level interpretation filing with OIRA.
SEC Sends Crypto Securities Framework to White House for Review — Unchained, March 5, 2026 — Analysis of the OIRA review process and 90-day timeline.
SEC Cryptocurrency Enforcement: 2025 Update — Cornerstone Research — Data on the 60% decline in crypto enforcement actions and $6.05 billion in Gensler-era penalties.
Morgan Stanley Applies for Bank Charter to Custody Crypto Assets — Bloomberg, February 27, 2026 — Coverage of Morgan Stanley Digital Trust, National Association OCC charter application.
Citi and Morgan Stanley Expand Bitcoin and Crypto Custody — CoinDesk, February 27, 2026 — Institutional custody expansion and market size data.
Eleven Companies, Eighty-Three Days: The Race for a Federal Crypto Banking License — FinTech Weekly, 2026 — Analysis of the OCC charter race among eleven applicant firms.
Crypto Custody Provider Market Size & Share 2026-2032 — 360iResearch — Market sizing data: $3.69 billion in 2026, projected $7.74 billion by 2032 at 13.05% CAGR.
SEC Chair Outlines Token Taxonomy for Crypto Assets — Lexology, 2025 — Legal analysis of the four-category classification system.
SEC Staff Statement on Tokenized Securities — SEC.gov, January 28, 2026 — The Division-level precursor to the Commission-level interpretation.