America’s top securities regulator has published three new FAQ entries clarifying when a crypto token qualifies as a commodity rather than a security, a distinction that once carried life-or-death consequences for digital asset projects.
The Securities and Exchange Commission’s staff guidance states that broad token holder governance does not create a central controlling group, provided participants are unaffiliated and hold no separate agreement to act in concert.
The same analysis applies when governance functions through a foundation, while the SEC identifies unilateral powers over validators, access, and protocol rules as concrete examples of disqualifying control.
Although the FAQs carry the weight of staff guidance rather than formal rulemaking, they represent the agency’s deepest public engagement yet with the operational mechanics of decentralized networks.
The regulatory development arrives as Coinbase (NASDAQ: COIN) secured a separate win at the state level, with New Jersey rescinding a 2023 cease-and-desist order against the exchange’s staking service, along with a $5 million penalty, on October 30.
Brian Armstrong said New Jersey customers would regain staking access “very soon,” though the order was withdrawn without prejudice, preserving the regulator’s ability to pursue future enforcement action.
Meanwhile, the broader crypto industry is still absorbing the damage from what analysts are calling the world’s largest exchange hack, with Binance reporting cumulative net outflows of approximately $5.28 billion following the $6.4 billion breach.
Total withdrawals reached $10.97 billion across 46 hours, though $5.7 billion in fresh deposits flowed back in during the same window, suggesting retail confidence is stabilizing faster than many observers expected.
Binance said roughly 95% of affected assets have been replenished, completing a verified reserve snapshot on Monday covering 10 tokens that confirmed balances were backed on at least a one-to-one basis, with a further snapshot covering additional tokens scheduled for Wednesday.
The exchange’s Safu insurance fund has fallen below its publicly disclosed target threshold, and no announcement on how it will be rebuilt has yet been made.
North Korea flatly denied involvement in the attack after the FBI attributed the breach to operatives linked to Pyongyang, with on-chain analysts noting the wallets involved match patterns from previous state-sponsored hacks.
The hack wave did not stop at Binance: Brazil’s Mercado Bitcoin halted deposits and withdrawals after approximately $40 million was drained across at least 10 blockchain networks, with roughly $11 million subsequently frozen through coordination between Chainalysis, law enforcement, and stablecoin issuers.
A separate breach hit the Solana mobile app store, where a fraudulent SKR claim application tricked users into surrendering seed phrases under the guise of an airdrop, a social-engineering tactic that security researchers say is as old as crypto itself.
Institutional sentiment also took a hit, with BlackRock’s ibit Bitcoin ETF recording $405.3 million in net outflows on Monday, its largest single-day redemption since June, partly offset by slight inflows into Fidelity’s competing product.
On the tokenization front, roughly 70% of the stocks OKX Ice originally targeted for its tokenized equities platform have now opted out, with Tesla, Amazon, SpaceX, Netflix, Lam Research, and SoFi among the companies declining to participate, and no launch date yet confirmed for the platform.
