The CLARITY Act Died at 60 Votes. Now the SEC Is Writing Crypto Rules From a Memo

I read the SEC's new staff guidance on token issuers twice last night. Not because it's dense. Because I wanted to figure out how much of it's actually law.

Spoiler. None of it.

That's not a shot at the people who drafted it. It's a structural fact. When a bill dies in the Senate and two federal agencies step into the gap with staff guidance, what you get is policy without a statute. Useful in the short term. Fragile over the long term. And if you're writing code on top of it, you need to know exactly which one you're holding.

What The Guidance Actually Does

Here's the sequence. The CLARITY Act needed 60 votes to clear cloture in the Senate. It didn't get them. Days later, the SEC published updated staff guidance on how federal securities laws could apply to token issuers. The CFTC had already moved first with its own version for the markets it oversees. Two agencies, two documents, no single market structure.

That last part matters more than the guidance itself. Because the SEC and the CFTC don't define the same things the same way, and they never have. A token that gets comfortable treatment from one shop can still be a problem for the other. Issuers now have to read both documents and figure out where the overlap ends and the disagreement starts.

And staff guidance isn't a rule. It doesn't go through notice and comment. It doesn't carry the force of law. It's a signal of how the staff intends to think about enforcement and review. Which means it binds nobody except the people who wrote it, and only for as long as they're there.

So what does it actually give you? A reading on how the investment contract question gets handled in practice. Whether the token itself is the security, or whether the sale was the security. That distinction is the whole ballgame for a US-facing issuer, and the guidance finally puts some staff thinking on paper instead of leaving it to enforcement actions.

But a memo can't overrule a court. If a judge reads the same facts differently, the memo loses. Every time.

Who Wins And Who Gets Left Outside

Look at who this helps. Exchanges that want a US footprint. Issuers with real legal budgets. Law firms billing by the hour. Anyone who was sitting on the fence waiting for a green light now has something to point at when they file.

And who does it leave out? Everyone whose product can't survive a disclosure regime. That's the part nobody in the cheerleading section wants to talk about.

Think about what the guidance framework assumes. It assumes a token issuer can disclose. Can identify itself. Can describe its own economics in a filing. Can hand over a cap table and a narrative about who's holding what.

Now try that with a privacy coin. Try it with a protocol that uses ring signatures, stealth addresses, and a mixnet so that nobody, including the developers, can tell you who holds what. There's no disclosure document for that. The architecture is the point.

So the guidance doesn't ban privacy tools. It just quietly creates a category of asset that can never comply, because compliance would require dismantling the exact property that makes it worth using. If it's not private by default, it's surveillance by design. And a framework built on disclosure is structurally a surveillance framework.

Here's the thing nobody says out loud. Two agencies filling a legislative hole isn't stable. It's provisional. The next set of appointees can withdraw staff guidance on a Tuesday afternoon with a press release. No vote. No hearing. No debate.

So who actually wins here? The honest answer is anyone who needed 18 months of regulatory clarity to close a funding round. They got it. Everyone building for the next decade got a placeholder.

What I'd Do With This

Don't build your compliance strategy on a memo. That's the whole advice. I've watched people treat agency guidance like a foundation when it's closer to a rug, and I've watched the rug get pulled.

Build for the scenario where this guidance gets rescinded in 2029. Ask yourself what your product looks like if the SEC wakes up one morning and decides the staff position has changed. If the answer is that you're dead, you've got a concentration risk you can see from orbit.

For privacy builders, the calculus is different and harder. No memo is coming to save you. The chain remembers everything, and a disclosure-based framework will always treat that as a feature. Which means your roadmap shouldn't include waiting for permission from an agency that can't grant it in the first place.

And for the people holding tokens right now, here's what I'd actually pay attention to. Not the guidance itself. The fungibility question underneath it. If some coins carry a compliance history and others don't, you don't have one asset. you've two, trading at different prices on the same ticker. That's the number that'll matter in 24 months, and no staff document fixes it.

The CLARITY Act got 59 votes and change worth of support and died anyway. That tells you exactly how much appetite Congress has for settling this. The agencies are improvising. Read the guidance. Use it. Just don't hand it the keys.