SEC Staff Says Token Voting Alone Isn't Central Control

The U.S. Securities and Exchange Commission has clarified an important question for decentralized cryptocurrency networks: does participating in token-based governance make users part of a group controlling the blockchain?

According to newly published SEC staff guidance, the answer is generally no when participants act independently through a genuinely broad-based governance system.

On November 2, 2026, the SEC’s Division of Corporation Finance updated its crypto-asset frequently asked questions with three new answers concerning governance, central control, and the difference between functional and decentralized networks.

The guidance addresses a problem that has complicated cryptocurrency regulation for years.

A blockchain may have thousands of validators, developers, and token holders participating in governance.

Those participants might collectively approve software upgrades, modify protocol parameters, or change the distribution of network rewards.

Technically, their combined decisions can influence the network.

But does that mean they should be treated as one controlling organization?

The SEC staff says independent participants generally should not be grouped together merely because they participate in the same governance process.

That distinction could help clarify how regulators evaluate cryptocurrency networks using decentralized governance.

However, the guidance does not provide a universal exemption for governance tokens, decentralized autonomous organizations (DAOs), or blockchain foundations.

The central question is not simply whether token holders vote. It is whether an identifiable person, organization, or coordinated group actually controls important parts of the network.

A small group could still exercise control through concentrated voting power, special administrative privileges, validator restrictions, or coordinated decision-making.

A foundation could also control particular applications even when the underlying blockchain operates independently.

And a functional network is not necessarily decentralized merely because people can use its native token.

The SEC’s updated guidance attempts to draw these distinctions more clearly.

It also comes with a significant legal limitation.

The new answers represent the views of SEC staff. They are not a Commission-adopted rule, do not amend existing securities law, and do not automatically classify any particular cryptocurrency.

That makes the November update a useful clarification rather than a final resolution of the industry’s debate over decentralization.

Key Takeaways

• SEC staff added three new crypto-asset FAQ answers on November 2, 2026. Questions 1.4, 1.5, and 1.6 address governance groups, central oversight, and the distinction between functionality and decentralization.
• Independent governance participation generally does not create a central controlling group. The clarification applies to the SEC’s particular digital-commodity analysis and depends on the circumstances.
• Coordination outside ordinary governance can change the assessment. Affiliations, informal agreements, and coordinated voting arrangements, including delegation, may be relevant.
• Being a group is not sufficient by itself. The group must also have operational, economic, or voting control to meet the relevant central-party definition.
• Unilateral control over participation is a significant factor. Examples include controlling validators, restricting network access, changing voting procedures, or modifying protocol rules.
• Functional and decentralized are separate concepts. A blockchain can provide working token utility while retaining meaningful centralized control.
• A foundation or DAO structure does not automatically remove responsibility. An organization may still control specific applications, administrative functions, or other systems.
• The guidance does not classify individual tokens. It does not announce that UNI, AAVE, SOL, ETH, or any other named asset has received a new legal designation.
• The update is nonbinding staff guidance. It applies within a specific part of the SEC’s March 2026 interpretation and does not rewrite other securities-law definitions of coordinated groups.

What the SEC Actually Updated

The SEC’s Division of Corporation Finance originally issued its crypto-asset FAQ document on September 25, 2026.

It subsequently updated the document on September 28.

On November 2, the staff added Questions 1.4, 1.5, and 1.6.

The new questions explain terminology used in the SEC’s March 17 interpretation of federal securities laws as applied to cryptocurrency assets.

That interpretation introduced a framework distinguishing several categories of digital assets and explaining when a cryptocurrency transaction may involve an investment contract.

One category is particularly relevant here: digital commodities.

In the Commission’s framework, digital commodities are non-security crypto-assets whose value and utility are connected to the programmatic operation of a functional cryptocurrency system rather than primarily to promised essential managerial efforts by an identifiable party.

The concept of a central party helps explain how the SEC evaluates that distinction.

The three new questions

The SEC's Three New Crypto Governance Questions

FAQ	Question	Staff Clarification
Question 1.4	Are broad-based governance participants a controlling group?	Independent, unaffiliated participation generally does not establish a group; coordination and actual control matter
Question 1.5	What does it mean to oversee network participation?	Unilateral authority over access, validators, voting procedures, or protocol rules can indicate central oversight
Question 1.6	Are functionality and decentralization the same?	No; a network can operate according to its intended utility while control remains concentrated

These additions do not establish a new legal test separate from the existing interpretation.

They explain how SEC staff reads particular terms within that framework.

The scope matters because the phrase central party can sound broader than the specific regulatory purpose for which it is being used.

What Is a Central Party in Cryptocurrency Regulation?

The SEC’s March interpretation describes a central party as an identifiable person, organization, or group exercising operational, economic, or voting control over a cryptocurrency system.

The November guidance focuses on applying that concept to governance.

Consider a blockchain where thousands of people participate in decisions about software changes and protocol parameters.

Collectively, those decisions influence the network.

But the participants may have no common employer, no private agreement, and no coordinated plan to control the system.

They may simply express independent preferences under published rules.

SEC staff says those participants generally should not automatically be treated as one controlling group.

That is an important distinction.

Participation is not necessarily coordination

Suppose 10,000 token holders participate in a governance vote.

Seven thousand support a proposed software upgrade.

Three thousand oppose it.

The proposal passes according to established rules.

The seven thousand supporting voters reached the same conclusion.

But agreeing on an outcome does not automatically mean they formed a coordinated organization.

They might have made their decisions independently.

In the SEC staff’s explanation, ordinary participation through a genuinely broad-based governance system generally does not, on its own, establish a central group.

What could make the assessment different?

Now consider a smaller set of influential token holders.

They enter into a separate arrangement to coordinate decisions about protocol upgrades and control a large amount of delegated voting power.

They agree to vote together on material issues.

That situation raises different questions.

The participants may have an identifiable relationship outside the ordinary governance process.

The agreement could be formal or informal.

It could involve direct voting or delegated influence.

The staff considers such arrangements relevant to determining whether participants act as a group.

However, coordination alone is still not the final answer.

A controlling group must actually have control

The SEC’s guidance separates two questions.

First, should the participants be considered a coordinated group for the relevant analysis?

Second, does that group possess operational, economic, or voting control over the system?

Both questions matter.

A group of developers might coordinate around a proposed improvement without having any power to compel adoption.

A group of investors might vote together but lack enough voting power to determine the result.

Those circumstances differ from a small organization that can unilaterally alter the network’s rules.

The relevant issue is effective control, not simply shared opinions or participation in a common governance process.

What Counts as Broad-Based Governance?

The November guidance provides a more detailed description of broad-based governance.

The staff emphasizes transparency, predetermined rules, and participation by a sufficiently diverse range of stakeholders.

Those stakeholders can include developers, node operators, validators, miners, and holders of the network’s native cryptocurrency.

The process should allow independent contributions and decisions.

It should also result in governance authority that is not effectively concentrated among affiliated or coordinated participants.

Transparency

Governance proposals, deliberations, voting procedures, outcomes, and implementation should be publicly documented and accessible in a timely manner.

Transparency can help participants evaluate whether a decision was made according to published rules.

But public voting records alone are not enough.

A process could be transparent while remaining dominated by one actor.

Rules-based procedures

Governance should operate through established procedures.

Those rules should not be subject to arbitrary unilateral changes by a founder or concentrated group outside the legitimate process.

For example, an organization that can change the voting threshold whenever it dislikes an expected outcome may retain meaningful control.

The fact that votes technically occur onchain would not eliminate that power.

Diverse, independent participation

A governance system should involve stakeholders whose influence is not effectively concentrated in one organization or coordinated group.

This is more demanding than counting wallet addresses.

One organization can control many addresses.

A small group can also receive substantial voting power delegated by a much larger number of token holders.

A protocol therefore needs more than a large number of voting wallets to demonstrate genuinely broad participation.

It needs governance arrangements that distribute meaningful decision-making authority.

Why Token Voting Alone Does Not Prove Decentralization

A project can create a governance token and allow holders to vote on proposals.

That may be a useful step toward decentralization.

But it does not necessarily remove central control.

Consider a hypothetical protocol with one million governance-token holders.

The foundation retains 55% of the effective voting power.

Every holder can technically vote.

However, the foundation can approve ordinary proposals without support from anyone else, assuming the relevant quorum and voting rules allow it.

The system has broad token distribution.

Its decision-making may still be concentrated.

Delegation can create hidden concentration

Delegated voting introduces another layer.

Suppose 100,000 token holders delegate their votes to five representatives.

The original token ownership may be widely distributed.

But effective voting authority may be concentrated among those five delegates.

That does not automatically establish that the delegates form a coordinated central group.

Their affiliations, agreements, independence, and actual powers matter.

Nevertheless, concentrated delegation is relevant to understanding who can determine outcomes.

The SEC’s description of broad-based governance explicitly considers concentration through delegation.

Why measuring wallet count can mislead

A project could report:

• 100,000 token holders.
• 5,000 governance participants.
• 500 proposal authors.
• 100 active delegates.

Those numbers may suggest broad participation.

But they do not explain whether a handful of participants can consistently override everyone else.

The better questions concern control.

Who can introduce binding proposals?

Who can veto them?

Who can change governance procedures?

Who can execute approved decisions?

And who can alter the network without obtaining approval at all?

Our earlier article on Solana’s first binding governance vote examines the difference between delegated stake and independently exercised voting authority.

The SEC’s guidance gives that distinction a direct regulatory relevance within its digital-commodity framework.

What Does It Mean to Control Network Participation?

Question 1.5 addresses a more concrete issue.

A central party may oversee participation if it has the authority to control who can access or use important parts of the cryptocurrency system.

The staff identifies several examples.

These include authority over network access, validator participation, voting procedures, and protocol modifications.

The emphasis is on unilateral power.

Controlling who may use the network

A blockchain may allow a company to approve or deny individual participants.

That authority may exist at the user level.

A system could also limit which organizations may run nodes or validate transactions.

Such arrangements may be appropriate for certain private financial networks.

But they create a different control structure from a system where participation follows open, predetermined rules.

Controlling validators

Validators help determine which transactions are accepted and how the blockchain reaches consensus.

If one organization can decide which validators may participate, that organization has significant authority over the network.

The exact consequences depend on the consensus system.

But the staff identifies control over validator eligibility as a relevant form of participation oversight.

Controlling governance rules

A governance process can appear distributed while one administrator retains the ability to change how votes work.

For example, that administrator might alter quorum requirements or the rules governing protocol upgrades.

Such a power can materially affect who controls future decisions.

The voting interface may be decentralized in appearance while the underlying governance rules remain centrally adjustable.

Controlling protocol code

A party may also have authority to change important blockchain rules, reverse transactions, or restrict access.

These powers can be especially consequential.

They may allow emergency intervention during security incidents.

But they also demonstrate that an identifiable actor can influence the system’s operation.

The relevant analysis depends on the scope of those powers, how they can be exercised, and whether independent participants must approve them.

How the SEC Evaluates Different Forms of Crypto Control

Dimension	What It Means	Illustrative Evidence
Operational control	Ability to direct material system operations	Privileged upgrade keys, emergency controls, operational restrictions
Economic control	Ability to direct important economic arrangements	Unilateral reward changes, discretionary access to significant protocol resources
Voting control	Ability to determine or dominate governance outcomes	Concentrated voting power, controlled delegation, binding coordination
Participation control	Ability to determine who may use or validate the network	Validator permissions, access restrictions, exclusion mechanisms
Broad governance	Independent decisions through transparent rules and diverse participation	Published proposals, independently exercised votes, enforceable procedures

Importantly, a person contributing code to an open-source repository does not automatically exercise the same authority as someone with unilateral power to deploy changes across a network.

Proposing a change and compelling everyone to adopt it are different abilities.

Why Governance Foundations Still Matter

The updated guidance specifically addresses governance systems operated through organizations, associations, or foundations.

A network does not automatically become centrally controlled simply because it has a foundation.

Likewise, establishing a foundation does not automatically establish decentralization.

The question remains who exercises actual authority.

A foundation can support an independent network

A nonprofit foundation might fund research, publish software, and organize community meetings.

Independent validators or node operators may choose whether to adopt its recommendations.

Other teams may develop competing implementations.

Governance decisions may proceed through an open process.

Those circumstances differ from a foundation that can unilaterally determine the network’s rules.

A foundation can also control specific applications

The SEC staff includes an important qualification.

Even if governance participants are not considered a central party for a broader network, an associated foundation may exercise control over a separate application.

Imagine an open blockchain supporting a lending protocol.

The blockchain’s consensus rules may be governed through an independent community process.

But the lending application might have administrative keys controlled by one foundation.

That foundation could change collateral requirements, pause borrowing, or upgrade contracts.

The underlying blockchain and the lending protocol would therefore have different control arrangements.

Decentralization at the blockchain level does not automatically make every application built on that blockchain decentralized.

This distinction is essential for evaluating decentralized finance.

Our analysis of what decentralization means under financial regulation explores why smart-contract control, governance, and user interfaces must be examined separately.

Practical Examples: Independent Governance vs Central Control

The SEC’s clarification becomes easier to understand through hypothetical examples.

These are illustrations, not classifications of actual cryptocurrencies.

Crypto Governance Scenarios and Potential Central-Control Questions

Scenario	How It Operates	Key Regulatory Distinction
Independent community voting	Unrelated participants vote through published governance procedures	Generally does not establish a central group merely through participation
Coordinated voting bloc	Several participants agree privately to act together	Coordination may support a group analysis, depending on actual control
Founder-controlled voting	Founders hold enough effective voting power to determine outcomes	Concentrated voting control remains relevant
Validator whitelist	One organization can decide who may validate transactions	Potential unilateral authority over network participation
Foundation emergency key	A foundation can pause or modify important protocol functions	Operational control depends on the scope and use of its authority
Independent software maintenance	Developers publish updates that independent participants choose whether to adopt	Development activity alone does not establish unilateral control
DAO-governed application	A foundation controls an application built on a broader public blockchain	The application may have a central party even if the base network does not

The examples demonstrate why a simple checklist cannot determine decentralization.

A project may have a large governance community while maintaining privileged administrator functions.

Another may have a small development team whose software updates require voluntary adoption by independent network participants.

The number of people involved does not necessarily determine which arrangement has more centralized control.

Actual authority matters.

Functional Does Not Automatically Mean Decentralized

Question 1.6 addresses another frequent source of confusion.

The terms functional and decentralized describe different characteristics of a cryptocurrency network.

Functionality concerns whether the system and its native token can perform their intended technical purposes.

Decentralization concerns how the system operates and whether an identifiable party or group controls important decisions.

These properties can overlap.

They are not interchangeable.

A functional but centrally controlled network

Imagine a blockchain whose token can pay transaction fees, interact with applications, and perform its programmed functions.

The network operates reliably.

Users can transfer tokens.

Developers can deploy applications.

From a technical perspective, the system is functional.

But suppose a single company can decide who validates transactions and can modify consensus rules without independent approval.

The system remains functional.

Its governance and operation may nevertheless be centrally controlled.

A decentralized governance process

Now imagine another network where important changes follow published rules and require approval through an independent, broad-based governance process.

Participants can make their own decisions.

No single party can unilaterally change material protocol functions.

That arrangement presents a different decentralization profile.

It may still have technical limitations or incomplete functionality.

A decentralized governance process does not automatically guarantee that every promised feature works.

Why the SEC distinguishes them

The March interpretation uses functionality and decentralization in its analysis of crypto-asset classifications.

The November guidance explains that a system’s operational utility and the distribution of controlling authority must be evaluated separately.

For digital commodities, the Commission’s framework considers assets linked to functional cryptocurrency systems with characteristics of decentralization.

However, the degree of decentralization can vary with the facts.

This is not a universal numerical threshold.

It does not establish that a network becomes decentralized after reaching a particular validator count or governance participation rate.

Functional, Decentralized, Commodity and Investment Contract: Different Questions

Concept	Core Question	What It Does Not Automatically Prove
Functional	Native asset performs its intended programmatic utility	Does not by itself establish that control is decentralized
Decentralized	System operates autonomously without a person or group exercising relevant control	Must be evaluated through actual governance and operational arrangements
Digital commodity	Non-security asset fitting the Commission’s applicable classification framework	No particular token was reclassified by the new FAQs
Investment contract	A transaction or arrangement involving legally relevant promises and investor expectations	May exist in connection with an asset that is not itself a security
Broad-based governance	Transparent, rules-based decision-making by a wide and diverse community	A token vote alone does not prove these characteristics
Central party	Person, entity or group exercising operational, economic or voting control	Requires assessment of actual authority and relevant circumstances

The distinction is important because promoters often use working products as evidence that a network no longer depends on an identifiable organization.

A functional application is useful evidence of actual utility.

It does not independently answer who controls the application or the underlying network.

Does This Make Governance Tokens Non-Securities?

No.

The November FAQ additions do not classify any specific token.

They also do not establish that every governance token qualifies as a digital commodity.

The legal treatment of a cryptocurrency can depend on its characteristics, the surrounding transactions, and the promises made to purchasers.

The asset and its sale can be different legal questions

The SEC’s March interpretation distinguishes an asset that is not itself a security from a transaction involving that asset that may constitute an investment contract.

That distinction is central to understanding crypto securities law.

For example, a token might have technical utility within a blockchain network.

But an issuer could offer the token while promising investors that it will undertake essential development work intended to generate profits.

The sale could involve an investment contract even where the underlying token is not itself classified as a security.

The subsequent legal status may depend on whether those promises have been fulfilled, terminated, or otherwise ceased to support the investment-contract relationship.

A governance vote does not automatically resolve that question.

Governance rights are not a universal exemption

Some tokens allow users to vote on protocol decisions.

Others may provide financial rights, revenue claims, or contractual entitlements.

A token might be sold primarily to finance a business venture.

Another might be necessary to operate an already functional network.

Their legal and economic characteristics differ.

The existence of voting functionality does not determine the entire regulatory analysis.

Nor does it mean holders are automatically responsible for every action taken by the organization associated with the token.

These are separate questions requiring examination of the relevant arrangement.

What about UNI, AAVE or other DAO tokens?

The November staff guidance does not issue token-specific determinations.

It would therefore be misleading to claim that UNI, AAVE, or any other named governance token was formally reclassified by the update.

The new answers explain general concepts.

Applying them to a particular project requires evidence of its actual governance, token functionality, legal arrangements, and control structure.

No token should be treated as having received regulatory clearance merely because a general FAQ might appear favorable to its design.

Why the Existing SEC Safe-Harbor Proposal Still Matters

The November guidance connects with the SEC’s broader 2026 effort to clarify cryptocurrency regulation.

In August, the Commission proposed Regulation Crypto Assets.

That proposal includes fundraising exemptions and a pathway addressing when a non-security crypto-asset may cease to be associated with an earlier investment contract.

The proposal remains separate from the March interpretation and the November staff FAQ update.

A proposed exemption is not a completed exemption

Regulation Crypto Assets was published as a proposed rule.

Its final form depends on the regulatory process.

The November FAQ does not transform every proposed provision into binding law.

Nor does it allow projects to claim automatic eligibility for a safe harbor that has not been finalized.

Why essential managerial efforts matter

Under the SEC’s broader framework, an important question is whether purchasers reasonably depend on an issuer’s promised essential managerial efforts to generate profits.

A blockchain might begin with significant reliance on a founding organization.

Over time, the system may become functional.

Its governance may broaden.

Other development teams may contribute independently.

The issuer’s original promises may eventually be completed or cease to support an investment-contract relationship.

That progression is distinct from simply counting governance voters.

Our earlier article, SEC’s Crypto Safe Harbor Tests a New Way to Regulate Tokens, examines the proposed transition framework and why decentralization cannot reliably be reduced to a fixed number of validators.

Developers can maintain a network without necessarily controlling it

The SEC’s existing FAQ also addresses ongoing software maintenance.

It explains that maintaining, securing, or improving a functional network does not necessarily constitute the kind of promised essential managerial efforts relevant to the described investment-contract analysis.

That matters because blockchains require continued maintenance.

Even mature networks need security updates and protocol improvements.

If every software contribution automatically established centralized managerial control, independently maintained open-source networks could be difficult to evaluate fairly.

The more meaningful question is whether a person or organization has the power to compel changes or remains responsible for the particular promised efforts on which investors rely.

What Does the Clarification Mean for DAOs?

Decentralized autonomous organizations can use smart contracts and governance tokens to coordinate decisions.

Some operate through open voting.

Others use designated councils, delegates, foundations, or emergency administrators.

Those systems can differ substantially.

DAOs should examine effective voting concentration

A DAO with many token holders may still have highly concentrated governance power.

The concentration could arise through token ownership.

It could arise through delegation.

It could also arise through contractual arrangements between influential participants.

The SEC’s guidance makes these distinctions relevant within its central-party analysis.

A project claiming broad-based governance should be able to explain who actually determines important decisions.

DAOs should examine administrator privileges

Governance may approve a proposal, but a separate multisignature group might retain the authority to implement or block it.

That creates another control question.

Who can execute the decision?

Who can pause the protocol?

Can an emergency council overrule governance?

Are those powers limited by predetermined rules?

An administrative arrangement may be justified by security requirements.

But it should be described accurately.

DAOs should distinguish the protocol from its applications

A DAO may control a lending market deployed on a blockchain whose consensus mechanism is otherwise independently operated.

The application and underlying network should not automatically receive the same decentralization assessment.

The relevant powers may differ at each layer.

This is particularly important when a project markets its products as decentralized.

Users may interpret the term as a promise that no organization can interfere with their assets or transactions.

That assumption can be incorrect.

Our reporting on Cronos and the emergency shutdown problem in DeFi illustrates how intervention powers can become important during security incidents.

The existence of an emergency mechanism may protect users while also raising questions about who exercises control.

What About Validators and Stakers?

The SEC’s description of broad-based governance includes validators, miners, developers, and native-token holders.

That reflects the reality that governance authority is not always exercised through a simple token vote.

In proof-of-stake networks, validators may participate in consensus and influence protocol changes.

Users may also delegate their stake.

That delegation can concentrate operational and voting influence.

Validator participation is not automatically central control

A validator contributing to a network’s operation does not necessarily control the entire system.

It may follow public rules.

Other independent validators may perform the same function.

No single participant may have the authority to prevent others from joining.

That arrangement differs from a validator system where a specific organization can determine the complete approved participant list.

Large validators can still have influence

Decentralization does not require pretending every validator has equal economic power.

Some operators may control substantially more delegated stake than others.

They may influence governance outcomes or have greater visibility in ecosystem discussions.

Whether that influence amounts to relevant control depends on the structure and actual powers involved.

The new guidance does not create a universal numerical threshold at which a validator becomes a central party.

Delegators should understand who votes for them

If a staking arrangement allows the validator or delegate to exercise governance rights, users should understand that relationship.

They may be delegating more than the technical operation of validating transactions.

Depending on the network, they may also be delegating economic or governance influence.

That makes governance design relevant to the broader evaluation of decentralization.

Why a Foundation Can Be Independent in One Role and Centralized in Another

The distinction between systems is easy to underestimate.

A foundation may participate in an independently governed public blockchain.

It might fund software development without possessing authority to force every participant to adopt the resulting code.

But the same foundation could separately operate a financial application with centralized administrative controls.

Those two roles should not be combined into one blanket decentralization claim.

Example: a public blockchain and a lending protocol

Imagine the blockchain’s core rules are maintained through broad community consensus.

No single group has unilateral power to change the base network.

A lending application then launches on that blockchain.

Its governance token is distributed among users.

However, the application retains upgrade keys controlled by a small foundation.

The foundation can change collateral settings and restrict selected operations.

The base network and lending application have different control structures.

A regulator examining the application may therefore reach conclusions distinct from those concerning the blockchain itself.

Why this matters to users

A person depositing assets into a lending protocol needs to understand the controls governing that particular protocol.

Knowing that the underlying blockchain is decentralized is not sufficient.

The protocol’s administrator could have powers that affect user funds or access.

Those powers may be appropriate for emergency security responses.

But they create dependencies.

Clear disclosure is more useful than a generalized claim that everything operating on a public blockchain is decentralized.

What Does the SEC Guidance Mean for Crypto Investors?

The immediate impact is primarily interpretive.

The new FAQ does not create a new customer protection or authorize a new trading product.

It does not establish an official list of approved governance tokens.

And it does not guarantee favorable investment outcomes for tokens associated with decentralized networks.

However, it can help investors understand what regulators examine when evaluating control.

A governance token is not necessarily ownership in a company

A token may grant voting rights over certain protocol parameters.

That does not automatically make it equivalent to corporate shares.

It may not provide ownership of the organization developing the software.

It may not provide a legal claim on revenue or assets.

It may also carry limited practical voting power when governance participation is concentrated.

Investors should understand the actual rights attached to the token rather than assuming that governance functionality provides shareholder-like protections.

Decentralization claims should be tested

A project may advertise that its governance is community-controlled.

Useful questions include whether the community can actually change important parameters and whether any administrator can override it.

The presence of public votes is relevant evidence.

It is not conclusive proof.

Regulatory clarification does not remove financial risk

Even a cryptocurrency fitting the SEC’s digital-commodity category can experience severe market losses.

Classification does not guarantee liquidity.

It does not establish that an associated protocol is secure.

It does not guarantee protection from manipulation or insider influence.

And it does not make the token’s price economically justified.

The new guidance concerns regulatory concepts, not investment quality.

How to Evaluate a DAO’s Governance Claims

For developers, investors, and researchers, the SEC’s update suggests a more useful way to evaluate governance.

Instead of asking only whether a project has a DAO, examine the distribution of authority.

Practical Checklist for Assessing Crypto Governance Control

Question	Evidence to Review	Why It Matters
Who can upgrade contracts?	Governance documentation, access controls, implementation records	Unilateral upgrade authority can indicate operational control
Who decides validator access?	Consensus configuration, whitelist rules, validator requirements	A gatekeeper may control participation
How are votes delegated?	Delegation concentration, voting arrangements, public disclosures	Many individual holders can still delegate power to a few decision-makers
Can voting rules be changed?	Governance contract permissions, constitutional procedures	Unilateral rule changes can undermine claimed independence
Who controls the treasury?	Treasury permissions and spending authority	Discretionary financial control may matter to the assessment
Are participants coordinating privately?	Publicly available agreements, affiliated relationships, documented arrangements	Separate agreements may alter the group analysis
Is governance genuinely accessible?	Participation records, proposal procedures, stakeholder diversity	Permission to vote does not prove meaningful independence

This checklist is an editorial research framework, not a formal SEC compliance test.

It identifies evidence that can help explain how a system operates.

The SEC’s actual legal analysis remains dependent on the relevant facts and the applicable law.

The distinction matters because projects could attempt to optimize superficial metrics without changing their underlying control arrangements.

For example, distributing voting tokens to thousands of addresses may improve decentralization only if those addresses represent genuinely independent participation and meaningful authority.

Otherwise, the appearance of broad governance may conceal concentrated power.

Does This Affect Europe’s DeFi Regulations?

The SEC’s November clarification concerns U.S. federal securities-law analysis.

European authorities are examining decentralization through a different regulatory framework.

Under MiCA, the regulatory treatment of crypto services can depend on whether identifiable persons perform or control the relevant activity.

French authorities have separately proposed clearer requirements for businesses connecting customers to decentralized financial protocols.

Those proposals focus on intermediary responsibilities, security assessments, and related user protections.

Similar questions, different legal purposes

Both regulatory debates involve identifying actual control.

But the legal consequences are not identical.

The SEC’s new FAQ addresses the concept of a central party within its digital-commodity discussion.

MiCA-related proposals address the scope of covered crypto services and the responsibilities of identifiable intermediaries.

A governance structure that appears decentralized for one regulatory purpose does not automatically receive the same treatment under another law.

Our coverage of France’s proposed DeFi gatekeeper rules under MiCA examines why financial intermediaries can retain responsibilities even when the protocols they connect to are decentralized.

The comparison demonstrates an important principle.

Technical decentralization and legal responsibility are related but distinct questions.

The Legal Limits of the New SEC Guidance

This is perhaps the most important qualification in the announcement.

The FAQ explicitly states that it reflects the views of staff in the Division of Corporation Finance.

It is not itself a regulation or an official Commission statement.

The Commission has not separately approved or disapproved the staff’s answers.

The document also states that the FAQs do not create new legal obligations.

The guidance has a narrow stated purpose

Question 1.4 concerns the meaning of a central group in the digital-commodity classification discussion of Section III of the March interpretation.

The staff specifically says that its explanation does not determine how the word group applies in unrelated provisions of federal securities laws.

That includes other rules involving exchanges and different legal definitions.

This distinction prevents a common misunderstanding.

A clarification about independent DAO governance does not automatically modify the definition of a securities exchange.

Nor does it exempt a protocol from every applicable financial regulation.

Other laws can still apply

A financial application may have obligations involving securities transactions, derivatives, customer assets, fraud prevention, sanctions, or other regulated activities.

The absence of a central party under one analytical framework does not automatically determine those questions.

A decentralized network may also support applications whose activities fall within financial regulation.

Legal classification should follow the actual service and transaction.

It should not be inferred from the project’s marketing terminology.

Existing SEC proposals remain separate

The August Regulation Crypto Assets proposal has its own rulemaking status.

The November FAQ does not complete that process.

Nor does it amend the GENIUS Act or determine every question concerning federal crypto market-structure legislation.

The most accurate conclusion is that SEC staff has clarified its interpretation of governance and control under an existing framework.

TrendCrypt Research Notes

The November SEC update addresses a problem that has become increasingly important as cryptocurrency networks mature.

Many decentralized systems rely on collective decision-making.

Validators, developers, foundations, and token holders may all influence how a network evolves.

The difficulty is determining when that influence becomes effective centralized control.

The new guidance offers several useful distinctions.

But it also leaves significant questions for regulators and projects to resolve through evidence.

1. Coordination matters more than identical voting outcomes

Independent people can reach the same decision without forming a controlling organization.

That is common in financial markets, corporate governance, and political decision-making.

Cryptocurrency governance should not automatically be treated differently.

The SEC’s clarification recognizes that participants can independently support the same proposal.

TrendCrypt’s assessment is that this distinction helps prevent collective governance from being mistaken for unified control.

The relevant question is whether there is a separate coordinated arrangement and whether that arrangement carries actual authority.

2. Group status and system control are separate questions

The guidance does not stop at asking whether participants are affiliated or coordinated.

A group must also exercise operational, economic, or voting control for the relevant central-party definition to apply.

That second requirement is important.

A group could coordinate software research without being able to force the network to change.

Another could coordinate voting but still lack sufficient influence to determine outcomes.

Treating every collaboration as centralized control would overlook those differences.

3. Governance tokens can distribute authority or disguise concentration

A governance token creates a mechanism for participation.

It does not guarantee independent decision-making.

The actual result depends on token distribution, delegation, voting rules, and privileged administrative powers.

A system with thousands of token holders may still rely on a small group to approve every meaningful change.

We consider effective voting concentration a more useful indicator than the number of wallets technically eligible to participate.

The SEC’s focus on indirect concentration through delegation supports examining these arrangements closely.

4. The authority to intervene can matter even when it is rarely exercised

A foundation may hold emergency powers intended to protect users.

Those powers might remain unused for years.

Their existence can still be relevant to understanding control.

For example, an administrator able to pause transactions or change important rules has potential authority that ordinary users do not possess.

That does not automatically mean the power is inappropriate.

It means decentralization claims should explain the authority honestly.

Emergency controls and decentralized governance can coexist in different degrees, but their relationship should be transparent.

5. Blockchain decentralization should be assessed at multiple layers

The underlying network, governance process, applications, wallet interfaces, and financial services may have different operators.

A base blockchain can be decentralized while a specific lending platform remains centrally upgradeable.

A financial front end may restrict access while direct smart-contract interaction remains technically possible.

A foundation may fund public infrastructure without controlling the entire network.

TrendCrypt considers layer-specific analysis essential.

A single label applied to the entire ecosystem can obscure the responsibilities and powers that matter to users.

6. Functional software is not proof of independent governance

A blockchain can work perfectly while remaining controlled by one organization.

That organization might operate the validators, manage token issuance, or determine software upgrades.

The system’s utility is real.

Its decentralization is a separate question.

The SEC’s clarification helps prevent functioning technology from becoming an automatic substitute for governance analysis.

This distinction also protects legitimate innovation from misleading regulatory shortcuts.

A project should be assessed according to what it actually does and who controls it.

7. Ongoing development should not automatically become a permanent securities-law obligation

Open-source networks need maintenance.

Developers fix vulnerabilities.

Researchers propose improvements.

Foundations may finance public infrastructure.

Those activities do not necessarily mean purchasers remain dependent on the original issuer’s promised essential managerial efforts.

The wider SEC framework recognizes a distinction between ongoing maintenance and the particular promises supporting an investment contract.

This is important for long-lived networks.

A protocol should not have to stop improving its software merely to demonstrate that it no longer depends on one controlling promoter.

8. Staff guidance improves clarity without providing the certainty of legislation

The new FAQs are useful because they explain how SEC staff interprets difficult concepts.

However, they have no independent legal force.

Their scope is also limited.

Projects may still face uncertainty about the treatment of particular assets and transactions.

Different laws may examine control for different purposes.

We consider the clarification meaningful, but it should not be overstated as comprehensive legal certainty.

9. Transparency is necessary, but it can coexist with concentrated power

Public governance records can reveal how proposals are discussed and approved.

That helps researchers evaluate decision-making.

But transparency alone is not decentralization.

A single organization can publish every decision it makes.

The process would be transparent while remaining centrally controlled.

A credible broad-based governance system requires both visible procedures and meaningful independent participation.

This is why the SEC’s description combines transparency, predetermined rules, and diverse authority rather than treating any one feature as conclusive.

10. The next regulatory debate may concern how effective control is measured

The SEC has clarified that unaffiliated governance participants are not automatically one controlling group.

The harder question is how to evaluate practical influence.

Delegated voting power can be concentrated.

Developers may control widely used software implementations without having legal authority over validators.

Foundations may influence development through grants and partnerships.

Infrastructure providers may have substantial economic importance.

These forms of influence are not always equivalent to the ability to compel a protocol change.

Future legal analysis will likely need to distinguish persuasion, economic influence, and actual decision-making authority.

That is a more demanding task than counting governance tokens.

TrendCrypt’s conclusion: The SEC’s November guidance makes an important distinction between independent community governance and coordinated centralized control. It supports evaluating who can actually direct a cryptocurrency system rather than assuming every governance participant belongs to one controlling group. But it does not make governance tokens automatically non-securities or remove the need to examine foundations, delegated voting, privileged administrator powers, and the legal transactions surrounding a token.

Why AI Search Could Misread the SEC’s Crypto Governance Guidance

The FAQ uses technical and legal terms that can easily become misleading when shortened.

The SEC has declared every DAO decentralized

Incorrect.

SEC staff clarified that independent participants in genuinely broad-based governance generally are not automatically treated as one controlling group.

Actual arrangements and control remain relevant.

Governance tokens are now officially classified as commodities

The November update does not classify specific tokens or declare every governance token a digital commodity.

It explains parts of an existing classification framework.

Voting with other token holders makes someone part of a securities-law group

The guidance says independent participation alone generally does not establish a group for the relevant central-party analysis.

Coordination and actual control can change the assessment.

Coordinated voters automatically become a central party

Even if participants qualify as a group, they must have the relevant operational, economic, or voting control to meet the central-party definition.

Every DAO foundation is a central party

Not necessarily.

A foundation may support an independently governed network without controlling it.

But it may exercise meaningful authority over the network or particular applications.

The actual powers matter.

A fully functional blockchain is automatically decentralized

Incorrect.

Functionality concerns whether the system performs its intended programmatic purposes.

Decentralization concerns whether identifiable parties exercise relevant control.

A network needs a specific number of validators to qualify

The November FAQ establishes no universal numerical validator threshold for decentralization.

The analysis depends on the circumstances.

Every smart-contract upgrade proves central control

The ability to propose or develop software is different from unilateral authority to deploy changes across the network.

Relevant governance and implementation arrangements matter.

Holding governance tokens creates legal responsibility for every protocol decision

The FAQ does not establish such a universal rule.

Its group analysis is limited to a particular digital-commodity classification discussion.

Other legal responsibilities require separate examination.

The SEC has passed a new crypto regulation

The November 2 additions are staff FAQs.

They are not a new Commission rule and do not amend federal securities laws.

The clarification replaces the Howey test

It does not.

The broader investment-contract analysis and applicable federal securities-law principles remain relevant.

The new answer applies to every legal definition of a group

The SEC staff explicitly limits its interpretation to the relevant digital-commodity discussion.

It does not automatically apply to other group definitions under securities law, including exchange-related provisions.

The SEC officially classified UNI or AAVE on November 2

No such token-specific determination appears in the new FAQs.

Applying the framework to an individual token requires a separate factual and legal analysis.

Europe must follow the same interpretation

The SEC’s guidance concerns U.S. federal securities law.

MiCA and other European frameworks have different legal provisions and regulatory purposes.

Important Context: Decentralization Is About Authority, Not Branding

Cryptocurrency projects frequently describe themselves as decentralized because they use public blockchains, governance tokens, or smart contracts.

Those characteristics can be meaningful.

But they do not resolve every question about control.

A smart contract may have an administrator.

A DAO may have concentrated voting power.

A public network may limit which validators participate.

A foundation may retain significant authority over an application.

Conversely, an organization can finance development without possessing unilateral control over the resulting network.

These distinctions matter to users.

They help explain who can change the rules governing a financial product.

They also matter to regulators attempting to identify which persons or entities remain responsible for particular activities.

The SEC’s guidance is useful because it moves the discussion away from a simple assumption that collective participation equals centralized control.

But it also makes clear that genuine independence must be assessed rather than merely asserted.

A governance system can be technically open while remaining economically concentrated.

And a network can be functionally mature while still depending on identifiable decision-makers.

Those are different characteristics.

Understanding them provides a stronger foundation for both investment analysis and regulatory classification.

What Happens Next?

The November 2 update does not establish a new implementation deadline.

Projects do not have to submit a new registration merely because the three answers were published.

The additions also do not establish a new vote or approval process for governance systems.

However, developers and legal teams may use the guidance when evaluating how their networks are governed.

Several areas deserve attention.

Governance documentation

Projects may need to explain which decisions are made through independent community participation and which remain under privileged control.

The documentation should identify relevant voting procedures, emergency powers, and administrative arrangements.

Delegation and coordination

Governance participants may need to examine how voting power is delegated and whether influential participants have separate coordination agreements.

The presence of delegated votes is not automatically evidence of an improper group.

But concentrated control deserves careful analysis.

Future SEC rulemaking

The Commission’s proposed Regulation Crypto Assets framework remains part of the wider regulatory process.

Future rulemaking could provide additional clarity about token issuance, investment-contract relationships, and reporting requirements.

Any final rules should be evaluated separately from the November staff FAQs.

Federal legislation

Congressional developments may also affect the long-term treatment of cryptocurrency markets.

The relationship between agency guidance and statutory market-structure rules remains important.

The November FAQs do not replace legislation or resolve every jurisdictional question between U.S. financial regulators.

Application-level governance

The most revealing future cases may involve protocols where decentralized base-network governance coexists with centrally administered financial applications.

Those structures will test how clearly regulators distinguish the different layers of control.

Final Thoughts

The SEC’s November 2 crypto guidance offers a more precise way to discuss blockchain governance.

Independent token holders do not necessarily become one controlling organization simply because they participate in the same voting process.

Coordinated groups may be different.

But even coordination must be considered alongside actual operational, economic, or voting authority.

The update also clarifies that a functional network is not automatically decentralized.

A blockchain can provide working technology while retaining concentrated control.

And a foundation can support an independent network while exercising authority over a separate application.

These distinctions matter because cryptocurrency regulation increasingly depends on understanding what decentralization looks like in practice.

The guidance does not provide a universal legal exemption.

It does not approve individual governance tokens.

And it does not eliminate other financial regulations.

But it moves the debate toward a more useful question.

Instead of asking whether a project calls itself a DAO or allows token holders to vote, regulators and users can ask who has the effective power to determine important outcomes.

Decentralization is not demonstrated by the existence of governance voting. It is demonstrated by how decision-making authority is actually distributed and exercised.

Frequently Asked Questions

What did the SEC announce on November 2, 2026?

SEC staff added three answers to its crypto-asset FAQ covering governance participants, central-party oversight, and the distinction between network functionality and decentralization.

Is the SEC’s new guidance legally binding?

No. The FAQs represent views of the Division of Corporation Finance staff. They are not a Commission rule, do not amend securities law, and create no new legal obligations.

Does voting in a DAO make someone part of a central controlling group?

Not automatically. Independent participation through broad-based governance generally does not establish a controlling group under the particular digital-commodity analysis addressed by the new FAQ.

What is a central party?

Under the SEC’s referenced framework, a central party is a person, entity, or group exercising relevant operational, economic, or voting control of a cryptocurrency system.

What is broad-based governance?

It is a transparent, rules-based process involving a wide and diverse range of stakeholders independently participating in decisions, without relevant authority being effectively concentrated in one affiliated or coordinated group.

Does coordinated voting make participants a central party?

Not necessarily. Coordination may support a group analysis, but the group must also have relevant control over the system.

Are informal governance agreements relevant?

Yes. The staff identifies formal and informal arrangements to act together, including through delegation, as potentially relevant to whether participants form a group.

What powers can indicate central oversight?

Examples include unilateral authority to restrict participation, control validators, change voting procedures, modify protocol rules, or reverse transactions.

Does having a DAO foundation mean a network is centralized?

Not automatically. A foundation’s role depends on its actual powers. It may support an independent network while controlling particular applications or functions.

Are functional and decentralized blockchains the same?

No. A functional system performs its intended programmatic utility. A decentralized system operates without relevant control by an identifiable person, entity, or group.

Does a governance token automatically qualify as a digital commodity?

No. The legal classification depends on the applicable framework and the facts concerning the asset and associated transactions.

Did the SEC classify UNI or AAVE as commodities?

No. The November 2 FAQ additions do not name or newly classify specific governance tokens.

Can a network be functional while centrally controlled?

Yes. A system can operate successfully while a company or other identifiable party retains important authority over its participation or protocol rules.

Does a large number of governance-token holders prove decentralization?

No. Effective control may remain concentrated through ownership, delegation, administrative privileges, or coordination arrangements.

Can developers still maintain a decentralized network?

Yes. Software development or maintenance does not automatically establish unilateral control. Actual authority and the relevant investment-contract analysis matter.

Does this change the Howey test?

No. The update does not replace applicable securities-law principles or the analysis of investment contracts.

Does this guidance apply to every securities-law definition of a group?

No. The staff explicitly limits its statement to the digital-commodity discussion in Section III of the March interpretation.

Is Regulation Crypto Assets already final?

The SEC proposed that separate framework in August 2026. The November governance FAQ does not finalize the proposal.

Do these rules apply in Europe?

The guidance concerns U.S. law. European regulators evaluate decentralized activities under their own frameworks, including MiCA and applicable national requirements.

What should DAO developers examine?

Developers should review governance concentration, delegation, privileged upgrade powers, validator-access restrictions, application-level controls, and the difference between proposed changes and decisions that can be imposed unilaterally.

What should governance-token investors examine?

Investors should understand the token’s actual rights, the independence of the governance system, effective voting concentration, administrator powers, and the legal arrangements surrounding the token.