On March 2, 2026, U.S. District Judge Katherine Polk Failla dismissed with prejudice all remaining claims in *Risley v. Universal Navigation Inc.*, the four-year class action that sought to hold Uniswap Labs, founder Hayden Adams, and venture backers Paradigm, Andreessen Horowitz, and Union Squar...
"If open-source smart contract code is used by scammers, the scammers are liable, not the open source devs. Good, sensible outcome." — Hayden Adams, Founder & CEO, Uniswap Labs
On March 2, 2026, U.S. District Judge Katherine Polk Failla dismissed with prejudice all remaining claims in Risley v. Universal Navigation Inc., the four-year class action that sought to hold Uniswap Labs, founder Hayden Adams, and venture backers Paradigm, Andreessen Horowitz, and Union Square Ventures liable for losses tied to scam tokens traded on the Uniswap Protocol. The ruling is the first federal decision to draw a bright line between building decentralized infrastructure and facilitating fraud — and its implications extend far beyond a single DEX.
The decision lands at a pivotal moment. DeFi protocols collectively hold over $130 billion in TVL, Uniswap alone processes roughly $10 billion in weekly trading volume across 6.3 million users, and U.S. lawmakers are simultaneously advancing the CLARITY Act and GENIUS Act to define digital asset regulation. For the $140 billion DeFi ecosystem, this ruling doesn't just resolve one lawsuit — it establishes the legal architecture under which permissionless protocols can operate without existential litigation risk from third-party bad actors.
In April 2022, investor Nessa Risley led a class of plaintiffs who had purchased tokens on the Uniswap Protocol that they described as fraudulent — classic rug pulls and pump-and-dump schemes. Unable to identify or locate the anonymous token issuers, the plaintiffs pursued a different legal theory: sue the infrastructure.
The complaint named Uniswap Labs (the company that develops the protocol's front-end interface), the Uniswap Foundation, CEO Hayden Adams, and three of crypto's most prominent venture firms — Paradigm, Andreessen Horowitz (a16z), and Union Square Ventures. The theory was straightforward: by providing the marketplace where scam tokens could be traded, these entities "facilitated" fraud and should bear liability.
The stakes were enormous. If courts accepted that building a permissionless protocol creates liability for how third parties use it, every DeFi project — from Aave ($27B TVL) to Compound to Curve Finance — would face identical exposure. Protocol development would become, as legal observers noted, "permanent litigation risk."
The federal securities claims were dismissed in August 2023, when Judge Failla found it "defies logic" to hold smart contract developers responsible for anonymous third parties' misuse. But the state-law claims — negligence, unjust enrichment, and state securities violations — lingered for another two and a half years, keeping the existential question unresolved.
On March 2, 2026, Judge Failla dismissed all remaining state-law claims with prejudice. The legal standard she applied carries significant weight for the entire industry.
The core holding: Providing general-purpose software is not the same as directing or knowingly assisting fraud. To impose liability, the law requires "actual knowledge" of specific wrongdoing and "substantial assistance" in carrying it out.
On the identification problem: The court noted that "due to the Protocol's decentralized nature, the identities of the Scam Token issuers are basically unknown and unknowable, leaving Plaintiffs with an identifiable injury but no identifiable defendant." The plaintiffs were, in effect, suing the highway because they couldn't find the hit-and-run driver.
On the "with prejudice" designation: A dismissal with prejudice means the claims cannot be refiled by simply amending the complaint. The Risley theory — that platform facilitation equals liability — has been tested, refined through multiple amendments, and definitively rejected at the district court level.
On the venture capital defendants: Paradigm, a16z, and Union Square Ventures were also dismissed. The court found no basis for holding investors liable simply because they funded a protocol that third parties later misused. This is a critical precedent for the venture capital ecosystem that has deployed billions into DeFi infrastructure.
The Risley ruling crystallizes what the DeFi Education Fund has called the "protocol as infrastructure" thesis — the argument that decentralized protocols resemble internet plumbing more than they do bank branches.
This distinction matters because it determines the entire liability framework. Banks are intermediaries with custodial control over client assets and regulatory obligations to monitor transactions. Internet infrastructure providers — ISPs, DNS services, cloud platforms — are generally not liable for how users employ their services, a principle enshrined in Section 230 of the Communications Decency Act for traditional internet platforms.
DeFi protocols exist in an uncomfortable middle ground. They process financial transactions (like banks) but operate through autonomous smart contracts without custodial control (like infrastructure). Judge Failla's ruling firmly places permissionless protocols on the infrastructure side of this divide.
The implications cascade across the entire DeFi stack:
The economic implications of this ruling are substantial and measurable.
Litigation cost reduction. DeFi protocols collectively spend tens of millions annually on legal defense. Uniswap alone has maintained a legal war chest funded partly through the Uniswap Foundation's treasury. The Risley precedent significantly narrows the attack surface for copycat lawsuits — of which there were several pending in various jurisdictions.
Venture capital deployment. The dismissal of claims against Paradigm, a16z, and Union Square Ventures removes a chilling effect on DeFi investment. If funding a protocol created secondary liability for investor fraud, the rational response would be to stop funding permissionless systems entirely. With that theory rejected, capital can flow based on economic merit rather than litigation risk assessment.
Protocol development incentives. The ruling effectively decouples protocol design from liability. Developers can build permissionless, composable systems — the core innovation of DeFi — without engineering artificial gatekeeping mechanisms solely to limit legal exposure. This preserves the open architecture that enabled Uniswap to grow from a $0 experiment to a protocol processing over $110 billion in cumulative v4 volume.
Market reaction. UNI token rose 6% on the day of the ruling to $3.92, extending gains amid a broader market rally. More significantly, the ruling removes a structural overhang that had weighed on DeFi governance tokens since 2022 — the possibility that protocol treasuries could be drained by class action settlements.
The numbers in context: Uniswap's $6.8 billion TVL represents roughly 5% of total DeFi TVL. But its protocol design — automated market makers, permissionless listing, composable liquidity — is the architectural template for hundreds of other protocols. The legal clarity provided by this ruling doesn't just protect Uniswap; it validates the design philosophy underlying the majority of DeFi's $130–140 billion in locked capital.
The Risley ruling did not occur in a regulatory vacuum. It sits at the intersection of a broader shift in how U.S. regulators approach DeFi.
In April 2024, the SEC issued a Wells Notice to Uniswap Labs, signaling potential enforcement action for allegedly operating as an unregistered securities broker and exchange. Uniswap responded with a detailed 43-page legal rebuttal. By 2025, the SEC quietly withdrew the Wells Notice and closed its investigation without taking action.
Legal observers widely interpreted the SEC's retreat as recognition that the Risley rulings had demolished the evidentiary and legal theory the agency would need to prevail. If a federal court found it "defies logic" to hold protocol developers liable for third-party token trading, the SEC's theory that Uniswap operates as an unregistered exchange faced identical conceptual problems.
The regulatory timeline tells the story:
| Date | Event | |------|-------| | April 2022 | Risley class action filed | | August 2023 | Federal securities claims dismissed | | April 2024 | SEC issues Wells Notice to Uniswap | | May 2024 | Uniswap submits 43-page rebuttal | | 2025 | SEC withdraws Wells Notice, closes investigation | | March 2, 2026 | All remaining claims dismissed with prejudice |
This parallel collapse of both private litigation and regulatory enforcement around the same legal theory suggests the "protocol liability" argument has been thoroughly exhausted — at least at the current jurisdictional level.
Meanwhile, Congress is advancing the CLARITY Act, which would formally define regulatory jurisdiction over digital assets between the SEC and CFTC. The Risley precedent may inform how lawmakers draft liability provisions for decentralized protocols, potentially codifying the "protocol as infrastructure" distinction into statute.
The ruling is significant but not unlimited in scope.
Jurisdictional constraints. This is a Southern District of New York decision — a highly influential federal court, but not an appellate or Supreme Court ruling. Other circuits could approach similar facts differently, and appeals remain possible. The precedent is persuasive, not binding, outside the Second Circuit.
The "actual knowledge" threshold. Judge Failla's standard requires "actual knowledge" of specific wrongdoing. This leaves open the question: what happens when a protocol developer does have knowledge of fraud occurring on their platform and fails to act? The ruling protects passive infrastructure providers but may not shield those who actively ignore known criminal activity.
Front-end vs. protocol distinction. Uniswap Labs maintains a front-end interface (app.uniswap.org) that has previously blocked certain tokens and wallet addresses for compliance purposes. The court's reasoning focused on the protocol layer — the autonomous smart contracts. Whether front-end operators face different liability standards remains an open legal question.
International applicability. The EU's MiCA framework, fully enforced since 2024, takes a different approach to platform liability. Protocols serving European users may face compliance obligations regardless of U.S. court rulings. The regulatory fragmentation means global DeFi projects cannot rely solely on the Risley precedent.
Criminal liability is untouched. The Risley case was a civil class action. The ruling says nothing about potential criminal liability for protocol developers who actively assist money laundering, sanctions evasion, or terrorist financing. Federal prosecutors operate under distinct statutory frameworks (Bank Secrecy Act, IEEPA) that impose different standards.
Judge Failla's dismissal with prejudice of Risley v. Uniswap establishes the strongest legal precedent yet for DeFi protocol immunity from third-party fraud claims. The "protocol as infrastructure" doctrine now has federal court backing.
The ruling protects not just DEX developers but the entire DeFi stack — lending protocols, bridges, liquidity platforms, wallet providers, and RPC nodes — from being held liable for how third parties use permissionless infrastructure.
Venture capital backers are shielded. The dismissal of claims against Paradigm, a16z, and Union Square Ventures removes a structural barrier to DeFi investment by rejecting the theory that funding creates secondary liability.
The SEC's parallel retreat — withdrawing its Wells Notice after the initial Risley ruling — suggests the "protocol liability" legal theory has been comprehensively defeated at the current jurisdictional level.
This is a district court ruling, not Supreme Court precedent. DeFi builders should treat it as a strong legal shield, not an invincible one. Other circuits, appellate courts, and international regulators may reach different conclusions.
The economic value of legal clarity is real and measurable. For a $140B ecosystem that has operated under existential legal uncertainty since 2022, the Risley precedent reduces the risk premium on DeFi capital allocation, protocol development, and institutional adoption.
The Risley ruling represents a structural shift in how the U.S. legal system understands decentralized technology. For four years, the case tested whether building open, permissionless financial infrastructure creates liability for every bad actor who uses it. The answer, delivered with prejudice, is no.
This doesn't mean DeFi operates in a legal vacuum. Criminal statutes still apply. Regulatory frameworks are being built. And the distinction between protocol-layer infrastructure and front-end application services will continue to be litigated. But the foundational question — can you sue the road because someone drove drunk on it? — now has a clear answer in the Southern District of New York.
For the $140 billion DeFi ecosystem, the economic implications are straightforward: the litigation risk premium that has hung over permissionless protocol development since 2022 just got materially smaller. Capital allocators, protocol developers, and institutional adopters now operate with a federal court precedent affirming that building neutral infrastructure is not a crime.
The real test comes next: whether this precedent holds on appeal, whether other circuits follow, and whether Congress codifies the "protocol as infrastructure" distinction into the CLARITY Act. But for now, DeFi's legal foundation just got considerably stronger.