The U.S. Securities and Exchange Commission’s Division of Corporation Finance issued new crypto-asset FAQs on 25 September 2026, adding staff views on staking receipt tokens, post-launch network development, marketing and token buybacks. The document narrows several practical questions for projects and traders, but it is staff guidance—not a Commission rule, legal safe harbour or blanket declaration that a token is not a security.

What the SEC staff actually said

The six-question update builds on the Commission’s 17 March interpretive release. It starts with classification. In the circumstances described by that earlier release, staff said a staking receipt token representing a digital commodity that is not subject to an investment contract can be a “digital tool”: a receipt evidencing ownership of the deposited asset. A receipt issued by a protocol-based liquid-staking provider may instead be classified as a digital commodity when it is intrinsically linked to a functional crypto system.

The limits matter. Staff described a receipt as an instrument that records ownership of an asset deposited with a custodian or depository. It should not add independent economic rights, and the issuer should not be able to lend, pledge, rehypothecate or otherwise use the deposited asset. Real products with additional incentives, credit exposure, discretion or altered redemption rights may therefore require a different analysis.

On marketing, staff said promotion of a network’s current utility would generally not, by itself, amount to a promise of essential managerial efforts. Indefinite statements about possible future features may also fall short when they do not promote profit potential. That is not permission to market expected returns freely: the answer remains fact-specific, particularly where a buyer is encouraged to rely on an identifiable team to deliver value.

Ongoing development does not automatically reset the Howey analysis

The FAQ addresses a persistent grey area: software rarely stops changing after launch. Staff said that once a crypto system is functional, work to secure, maintain, improve or enhance it—and work intended to expand network effects—would not constitute the essential managerial efforts at issue in the Commission’s framework. A functioning network can therefore receive upgrades without every maintenance promise automatically creating a new investment contract.

The key condition is functionality. The guidance also says an issuer’s own promises define whether it has met the functionality or decentralisation thresholds it marketed to purchasers, while the Commission’s definitions remain relevant to asset classification. A project cannot simply label itself “decentralised” and treat the analysis as finished.

Token buybacks: useful clarity, not a universal exemption

For non-security crypto assets on functional systems, staff said announcing a buyback for treasury management, supply reduction, protocol-funded burns or rebalancing would not constitute a promise of essential managerial efforts. For a system that is not functional, however, a buyback pitch could contribute to an investment-contract analysis when the issuer presents it as creating yield or returns for holders.

That distinction is important for DeFi governance tokens and revenue-linked narratives. Traders should separate a mechanical purchase from the surrounding representations. Funding source, governance control, execution transparency, circulating supply, unlocks and whether the programme is discretionary all affect market impact even when the securities-law question is clearer.

A parallel CFTC update reinforces the infrastructure theme

On 24 September, the Commodity Futures Trading Commission’s market oversight, clearing and market-participant divisions separately updated their crypto FAQs. The agency said the additions address investment of customer funds in tokenised forms of otherwise permitted investments and the use of blockchain technology for required recordkeeping.

The two releases concern different statutes and supervised activities, but together they show U.S. regulators working through operational questions rather than treating every blockchain use as a single category. They do not erase registration, custody, books-and-records, disclosure or anti-fraud obligations.

Why it matters for projects and traders

• Liquid staking: receipt design and custody rights matter more than the label. Extra yield promises or reuse of deposited assets can change the risk profile.
• Protocol development: ordinary maintenance on a functional system is treated differently from pre-launch promises on which purchasers depend.
• Buyback narratives: a programme may avoid being an essential-managerial-effort promise in the stated circumstances, but that says nothing about its size, durability or price effect.
• Exchange access: a secondary venue is not automatically a promoter merely because it lists a token; staff points to the existing Rule 405 definition and facts of the relationship.

Bull, bear and neutral cases

NetNapz assessment

Assessment: the update is directionally constructive for mature, functional networks, but its biggest value is analytical discipline rather than deregulation. The strongest projects will be able to document custody rights, operational functionality and the limits of any buyback promise. The weakest will rely on labels and promotional language that the facts do not support.

Confirmation: clearer disclosures, product terms that match the receipt model, and consistent treatment in subsequent Commission actions or court decisions would strengthen the constructive interpretation. Invalidation: enforcement or litigation showing that similar structures still involve promised managerial efforts, hidden asset reuse or misleading return claims would undercut it.

What to watch next

Watch for formal Commission rulemaking, further answers applying the framework to specific structures, exchange listing-policy changes and project disclosures that distinguish maintenance from profit-generating promises. For buybacks, follow authorised size, actual on-chain execution, treasury funding and cancellation or redistribution of acquired tokens. For staking receipts, verify redemption mechanics, custody, slashing exposure and whether deposited assets can be reused.

The central takeaway is narrow: the staff has supplied more detail on how it views several common crypto structures. Investors should not convert that detail into a claim that a named asset has been “approved” by the SEC.

Published 26 September 2026. Confirmed facts are drawn from the dated source documents above; scenarios and the NetNapz assessment are analysis, not legal or investment advice.