CFTC vs SEC: The Jurisdictional Battle Over Crypto and Tokenized Assets

Executive Briefing

The jurisdictional dispute between the CFTC and SEC over digital assets is not an abstract academic debate — it determines which regulatory framework applies to every digital asset, what disclosure and compliance obligations issuers face, what trading venues can legally operate, and what enforcement agency has authority to investigate misconduct. The stakes are enormous: the SEC’s securities framework imposes registration, disclosure, and investor protection obligations that the CFTC’s commodity framework does not. For tokenization practitioners, understanding the CFTC-SEC divide and the current state of jurisdictional clarity is essential groundwork for structuring any digital asset product or platform.

The Howey Test: Securities Jurisdiction Foundation

The starting point for any digital asset jurisdictional analysis is the Supreme Court’s 1946 decision in SEC v. W.J. Howey Co., which established the test for whether a transaction constitutes an “investment contract” — and therefore a security — under the Securities Act of 1933.

The Howey Test finds an investment contract when there is:

1. An investment of money
2. In a common enterprise
3. With an expectation of profits
4. Derived from the efforts of others

The SEC has applied the Howey Test to digital assets since at least 2017, when its DAO Report concluded that certain tokens issued in the infamous DAO hack were securities. The SEC’s position since then has been consistent: most tokens — sold to investors who expect to profit from the efforts of the development team — are securities, regardless of whether they are labeled as “utility tokens” or “governance tokens.”

The CFTC’s jurisdiction is derived from the Commodity Exchange Act (CEA), which gives the CFTC authority over “commodities” and transactions in commodities. Commodities under the CEA include agricultural products, metals, and — critically for digital assets — “all other goods and articles … and all services, rights, and interests … in which contracts for future delivery are presently or in the future dealt in.”

The CFTC has taken the position that Bitcoin and Ether are commodities under the CEA — a position supported by the fact that regulated futures markets for both assets have operated under CFTC oversight since 2017. The CFTC’s commodity jurisdiction extends to the spot (non-derivatives) market only for anti-fraud and anti-manipulation purposes — it does not regulate the spot commodity market comprehensively the way the SEC regulates securities markets.

The Bitcoin Precedent: Commodity Status Established

Bitcoin’s commodity status is the most settled question in digital asset jurisdiction. Both the CFTC and SEC have publicly stated that Bitcoin is a commodity, not a security. The SEC’s January 2024 approval of spot Bitcoin ETFs — listed on national securities exchanges and regulated as 40 Act registered investment products — operates consistently with Bitcoin’s commodity status: the ETFs are registered securities that hold a commodity (Bitcoin), analogous to gold ETFs that are registered securities holding a commodity (gold).

The Bitcoin futures market — regulated by the CFTC through CME Group’s Bitcoin futures — has operated since December 2017. No court has challenged CFTC jurisdiction over Bitcoin derivatives, and the SEC has not asserted securities jurisdiction over Bitcoin itself (though it has registered Bitcoin ETFs as securities).

The practical implication: Bitcoin-related products fall primarily under CFTC derivatives regulation (for futures and options) and SEC securities regulation (for ETFs and other registered products) — a dual oversight regime that is somewhat awkward but functional.

Ether: The More Complex Case

Ether (ETH) presents a more complex analysis. The SEC under Gary Gensler consistently declined to state publicly whether Ether was a security, a position that created substantial market uncertainty. The CFTC, in contrast, explicitly stated in several enforcement actions and public comments that Ether was a commodity.

The SEC’s implicit acceptance of Ether’s commodity status became clearer with two developments:

The Ethereum Merge (September 2022). Ethereum’s transition from proof-of-work to proof-of-stake created arguments that ETH staking looked more like an investment contract (investors stake ETH expecting returns generated by the network’s consensus mechanism — potentially satisfying Howey). The SEC investigated whether post-Merge ETH was a security. No securities enforcement action against ETH itself was brought.

The Spot Ether ETF Approvals (May 2024). The SEC’s approval of spot Ether ETFs — structured identically to Bitcoin ETFs as 40 Act funds holding a commodity — represented the strongest implicit endorsement of Ether’s commodity status. If Ether were a security, a fund holding Ether would be investing in securities and would face different regulatory treatment. The ETF approval effectively operationalized the CFTC’s long-held position.

However, the SEC has also brought enforcement actions against platforms offering Ether staking as a service, arguing that staking services may constitute securities offerings even if the underlying ETH is a commodity. This distinction — commodity asset, potentially security service — adds complexity for platforms that offer staking yields.

The Ripple (XRP) Precedent

The SEC v. Ripple Labs litigation — filed December 2020, with key decisions in 2023 — is the most important judicial precedent for how courts apply the Howey Test to token sales.

Judge Analisa Torres’s July 2023 ruling established a nuanced framework:

• Institutional XRP sales (private sales to institutional buyers who received marketing materials explaining Ripple’s development plans and expected XRP appreciation) were securities transactions — sales of investment contracts satisfying Howey.
• Programmatic XRP sales (exchange sales to buyers who did not know they were buying from Ripple, and who received no marketing materials) were not securities transactions — buyers could not have reasonably expected profits from Ripple’s efforts when they had no way of knowing Ripple was the seller.

The Ripple ruling created what practitioners call the “programmatic sales” doctrine: the securities analysis depends not just on the token’s characteristics but on the specific circumstances of each sale — who sold it, what representations were made, and what information the buyer received. This contextual analysis means that the same token may be a security in some sales contexts and not in others — a result that creates compliance complexity but aligns with the Howey Test’s focus on the nature of the transaction rather than the instrument.

The Ripple ruling also created significant tension with the SEC’s enforcement philosophy (which had argued that entire token projects were securities across all sales channels), and it prompted ongoing appellate proceedings that have not been finally resolved.

FIT21: The Decentralization Test Proposal

The Financial Innovation and Technology for the 21st Century Act (FIT21), passed by the House of Representatives in May 2024 with bipartisan support and signed into law in August 2024, attempts to codify a digital asset jurisdictional framework in federal statute.

FIT21’s central innovation is the “decentralization test” — a statutory framework for determining whether a digital asset is a security (SEC jurisdiction) or a commodity (CFTC jurisdiction) based on the degree of decentralization of the underlying blockchain network.

Under FIT21:

Digital commodities are digital assets associated with certified, functional, decentralized blockchain systems. “Functional” means the blockchain is operational and the asset can be used for its intended purpose. “Decentralized” means no single person or related persons control 20% or more of the digital asset supply or the governance of the blockchain system. Digital commodities are subject to CFTC regulation for both derivatives and spot markets (a significant expansion of CFTC authority).

Restricted digital assets are digital assets that do not meet the decentralization test — primarily tokens sold in the early stages of a project where the development team controls significant token supply and governance. Restricted digital assets are subject to SEC jurisdiction as securities, with a pathway to transition to commodity status as the project decentralizes over time.

Digital asset securities are digital assets that are securities under existing securities law analysis (i.e., satisfy the Howey Test based on traditional analysis), without regard to decentralization. These remain under SEC jurisdiction permanently.

FIT21’s decentralization test is an elegant attempt to distinguish between tokens that are genuinely decentralized infrastructure (more like commodities) and tokens that are controlled by centralized issuers (more like securities). Critics argue that the 20% threshold is arbitrary, that decentralization can be gamed through formal governance structures that don’t reflect actual control, and that the transition pathway creates regulatory uncertainty during the transition period.

How Tokenized Assets Fall Into the Framework

For practitioners structuring tokenized asset products, the jurisdictional framework maps to specific product types:

Tokenized US Treasuries (BUIDL, FOBXX): Underlying assets are US Treasury securities (SEC-regulated), but the tokens themselves represent fund interests (securities), not the Treasury bills directly. SEC jurisdiction applies clearly.

Tokenized real estate: Tokenized real estate ownership interests are securities (investment contracts in a real estate common enterprise). SEC jurisdiction, Regulation D offering framework.

Tokenized loans (Provenance/Figure HELOCs): Loan interests are securities under established case law. SEC and state securities law jurisdiction. Figure ATS registration reflects this analysis.

Tokenized commodities: A token representing a direct claim on a commodity (gold, oil) may be a commodity under the CEA rather than a security, depending on whether the Howey Test is satisfied. Most commodity token products are structured as registered securities (commodity ETFs) to provide investor protections and exchange listing.

DeFi governance tokens: Under FIT21’s decentralization test, governance tokens for sufficiently decentralized protocols may qualify as digital commodities. Under the current SEC enforcement approach (pre-FIT21 clarity), governance tokens for projects with concentrated developer control are likely securities.

Exhibit: CFTC vs SEC Jurisdiction Map for Digital Assets

Practical Implications for Tokenization Practitioners

The CFTC-SEC jurisdictional map has three practical implications for tokenization practitioners in 2026:

Structure determines jurisdiction. A tokenized asset’s regulatory treatment is shaped significantly by how it is structured, not just what underlying asset it represents. A direct claim on a gold commodity might be a CFTC-regulated commodity interest; the same gold exposure wrapped in a fund structure is an SEC-regulated security. Structuring choices that optimize for regulatory clarity are available and worth pursuing.

FIT21 creates a new decentralization pathway. For sufficiently decentralized blockchain protocols, FIT21’s digital commodity classification provides a pathway to CFTC regulation that avoids the SEC’s registration requirements. For tokenization projects that can achieve genuine decentralization, this pathway reduces long-term regulatory burden but requires careful navigation of the transition from restricted digital asset to digital commodity status.

Both agencies have enforcement authority. Even if an asset is classified as a commodity, both CFTC and SEC retain anti-fraud authority. CFTC can bring fraud enforcement actions in spot crypto markets; SEC can bring fraud actions for misrepresentations in connection with any securities-related activity. Operating compliantly under the applicable framework does not eliminate the other agency’s anti-fraud oversight.

The jurisdictional clarity that FIT21 provides — while imperfect — is a significant improvement over the prior state of regulatory uncertainty. For practitioners who have operated in the ambiguous zone between CFTC and SEC authority, the new statutory framework provides a clearer compliance roadmap, even as its specific applications continue to be worked out through agency rulemaking and judicial interpretation.