SEC staff clarify when crypto governance may amount to central control

A staff update rather than a new rule

Staff in the SEC’s Division of Corporation Finance added three answers to their crypto-asset FAQs on November 2, 2026. The document clarifies their reading of network governance under the interpretation published in March. Its status is explicit: the answers are not a rule, regulation or statement of the Commission. The Commission has neither approved nor disapproved their content, and the FAQ has no legal force of its own.

That qualification limits the announcement’s scope. The text may help explain the staff’s position, but it does not establish that all governance tokens now fall outside securities law. It does not change the law or create additional obligations. The clarifications concern concepts used in asset classification, including a central party, rather than collective approval of projects or platforms.

Voting participation alone does not establish a central group

The first new answer examines participants in broad-based governance. According to staff, whether they form a group constituting a central party depends on facts and circumstances. Unaffiliated participants without an agreement or understanding to act together outside participation in the governance system generally are not considered such a group. The analysis includes informal arrangements and delegation: an apparently open vote therefore does not settle every case.

Even when participants form a group under this interpretation, they must still have operational, economic or voting control over the system to meet the definition of a central party. The FAQ describes broad-based governance as transparent, rules-based and open to diverse categories of participants. It thus directs attention to the actual distribution of power, including when an organization or foundation formally hosts decision-making mechanisms.

Access control remains distinct from a network’s utility

Another answer addresses oversight of participation. Staff cite unilateral authority to grant or limit access, change voting procedures, select validators, modify code or reverse transactions. That capacity may concern the protocol, validators or users. By contrast, they distinguish operations executed automatically by predetermined code and decisions left exclusively to broad-based governance that is not itself a central party.

The final clarification separates two questions: a system may be functional because its native asset can actually be used within it, while decentralization concerns the absence of control by a person, entity or group. These dimensions must be examined separately according to circumstances. For readers and developers, the document therefore points toward identifying who can decide and intervene, without inferring a general legal classification from the word decentralized alone or from a commercial promise.