In the early days of 2025, a small team of developers in Austin received a Wells notice. Their project, a decentralized lending protocol with under 10,000 users, was accused of operating an unregistered securities exchange. The irony? They had spent the last six months integrating with a compliant custody solution, had a legal opinion from a top-tier firm, and had published their entire governance token distribution in a transparent, verifiable on-chain report. They were not trying to evade the law; they were trying to build within it. But the SEC did not care.
This is not an isolated case. It is a pattern. And it is the reason I am writing this.
Conscience over consensus. When I audited the smart contracts of EtherTrust in 2017, I saw that the market was drunk on speculation. Today, I see the same intoxication, but now it is the regulator who is drunk on power. The SEC's regulation-by-enforcement approach is not about protecting investors. It is about deliberately withholding clear rules, so that the agency can pick winners and losers, and keep the industry in a perpetual state of legal uncertainty. Based on my experience analyzing over 400 projects in the last eight years, I have seen how this approach hollows out the very thing that makes blockchain valuable: the ability to create transparent, trust-minimized systems.
Soul in the machine is lost when every novel application has to be vetted by a bureaucracy that sees code as a threat.
Let me be clear: I am not advocating for no regulation. I am advocating for clear regulation. But the SEC has chosen a path of ambiguity, because ambiguity grants them maximum leverage. They can call a governance token a security when they want to shut down a DeFi protocol, and call a centralized exchange's staking product a security only after millions of users have lost money. The goal is not to prevent harm; it is to maintain control over a technology that, by its very nature, challenges the need for centralized gatekeepers.
Trust is earned, not mined. The SEC has earned distrust.
Take a closer look at the technical reality. When the SEC charges a DAO with operating an unregistered exchange, they are treating a set of smart contracts as if they were a company with a CEO. But a DAO is not a legal entity in most jurisdictions. It is a collection of code and community votes. By applying securities laws designed for 1930s stock certificates to on-chain governance, the SEC is forcing developers to either shut down their projects or face crippling legal costs. I have personally advised three DAOs that chose to dissolve rather than fight the SEC. That is the cost of regulation-by-enforcement: innovation moves offshore, or it dies.
DeFi must mature — but maturity comes from clear rules and safe harbors, not from a legal system that punishes experimentation.
Now, let me address the contrarian angle. Some will argue that the SEC is doing the right thing, that crypto is rife with scams, and that enforcement is the only way to protect ordinary people. I agree that scams exist. I lost $60,000 in 2022 to a phishing attack on a malicious DApp. But the answer is not to treat every protocol like a scam. The answer is to provide a clear framework that distinguishes between a legitimate decentralized project and a fraudulent scheme. The SEC has had the authority to create such a framework since the Securities Act of 1933. They have chosen not to. Why? Because keeping the rules vague allows them to expand their jurisdiction without congressional oversight. It is a power grab, not an investor protection strategy.
To understand the depth of the problem, look at the technical details of the SEC's cases. In the lawsuit against Ripple, the agency argued that XRP was a security because it was sold to raise funds for Ripple Labs. But they ignored the fact that the XRP Ledger is a decentralized network with its own consensus mechanism, independent of the company. The court disagreed with the SEC on many points, but the damage was already done. Ripple spent over $200 million in legal fees. Meanwhile, the SEC's own staff admitted in internal emails that they were unsure whether Ether was a security. The rule making is not delayed by complexity; it is delayed by a deliberate choice.
Ethics is the protocol. And a protocol that punishes the innocent to catch the guilty is flawed.
I recall a conversation I had in early 2024 with a senior engineer from a Layer 2 team. He told me that their legal team had advised them to move their operations to the Cayman Islands, because even with a compliant smart contract, the SEC could still claim that the rollup sequencer constituted a broker-dealer. The engineer was heartbroken. He had built the system to be permissionless, but the legal risk was too high. This is the real cost: we lose the next generation of builders because the regulatory environment is hostile.
Value beyond the vote — the SEC's enforcement actions are not just attacking projects; they are attacking the very idea of decentralized governance.
Let me offer a path forward. I propose a Regulatory Safe Harbor for Decentralized Protocols based on three technical criteria: 1. The protocol must be governed by smart contracts that cannot be altered by a single entity. 2. The tokens must have a clear economic use within the protocol, not just a speculative investment contract. 3. The project must provide transparent, auditable financial statements for the first two years.
If a project meets these criteria, it should be presumed not to be a security. This approach would give innovators clarity while still protecting against the worst abuses. But the SEC has rejected similar proposals because safe harbors reduce their enforcement power.
I have seen this movie before. In the 1990s, the SEC tried to shut down the early internet by claiming that email was an unregistered brokerage. They lost. But before they lost, they scared away millions of dollars in innovation. We are at the same inflection point now. The blockchain industry is not asking for free passes. We are asking for a level playing field. Give us the rules, and we will comply. But do not use enforcement as a substitute for rulemaking.
Art is not data. The SEC treats every token as a security, just as a bad art critic treats every painting as a commodity. Both miss the soul.
In the bear market of 2022, I wrote a 15,000-word manifesto called "The Long Winter." I analyzed why 80% of the top 100 projects from 2021 failed. The top reason was not market conditions; it was poor governance and lack of alignment. Regulation-by-enforcement did not save those projects. It made them worse. When you face an unpredictable regulator, you cut corners, you hide things, and you eventually get caught. The answer is not more enforcement; it is clearer rules.
I have spent the last year building a curriculum for institutional investors at my platform, Values First. I teach them the technical and ethical foundations of blockchain. The number one question I get is: "How can we comply if we do not know the rules?" My honest answer: "You cannot. You have to guess, and hope you guess right." That is not a regulatory framework; it is a lottery. And the SEC is the house.
Code with heart — but also with clarity. The heart of crypto is peer-to-peer trust. The SEC's actions are eroding that trust.
Consider the case of Lido Finance, the largest liquid staking protocol. It has billions of dollars in TVL. Its governance token, LDO, is traded on exchanges. Yet the SEC has not classified it as a security. Why? Because Lido is too big to fail? That selective enforcement is a sign of a broken system. Smaller protocols with the same structure get sued; large ones get a pass. That is not justice; it is favoritism.
Conscience over consensus — the consensus in Washington is that crypto is dangerous. But the conscience of every builder I know says that with clear rules, we can build something safer and more inclusive than the current financial system.
I want to be constructive. I believe the SEC has a role to play in prosecuting actual fraud. But when they charge a developer for writing code that allows two parties to lend and borrow without a bank, they are going after the wrong person. The real fraud is committed by centralized entities that misuse the technology. Let's go after the FTXs, not the DAOs.
Soul in the machine — the soul of a decentralized network is its community. When you sue the DAO, you sue everyone who ever voted. That is not accountability; it is collective punishment.
Here is a concrete data point: in 2023, the SEC charged a DAO called Ooki DAO with operating an unregistered exchange. The DAO had no legal structure. The SEC argued that the group of token holders who voted on proposals was essentially a general partnership, and each member was personally liable for the DAO's actions. This is a terrifying precedent. It means that if you vote on a governance proposal that later is deemed illegal, you could be sued personally. Most DAOs have no legal status. When things go wrong, members face unlimited personal liability. This is not how innovation works. Innovation requires a sandbox, not a firing squad.
And yet, I am optimistic. I have seen the community rally. I have seen projects voluntarily implement KYC on their DEXs to prove they are not evading the law. I have seen protocols work with the CFTC to create commodity-based frameworks. The industry is maturing. But it is maturing despite the SEC, not because of it.
Trust is earned, not mined. The SEC has earned our distrust. But the industry must also earn the trust of the public. We do that by writing better code, by being transparent, and by demanding clear rules. We do not do it by hiding in regulatory gray zones.
Let me end with a vision. In five years, I hope to see a regulatory framework that acknowledges the technical reality of decentralized systems. A framework that distinguishes between a protocol and a company, between a utility token and a security, between a vote and a binding partnership. Until then, we will continue to operate in a state of uncertainty. But we will continue to build. Because we believe in something bigger than the SEC: we believe in the power of open, permissionless systems to create a more equitable world.
DeFi must mature. And part of that maturation is learning to stand up for ourselves, not through illegal activity, but through persistent, principled advocacy for clear rules. I invite every reader to join me in this fight. Write to your representatives. Support projects that prioritize compliance. And never stop asking: why can't the SEC simply write a rule instead of filing a lawsuit? The answer will tell you everything about who they really serve.
Conscience over consensus. Every time.
