SEC Token Taxonomy: The Five Crypto Asset Categories

Video transcript

The SEC sorts crypto assets into five categories. Where your token lands turns on facts an engineer can check: what it pays, what it does, and who controls it.

The March 2026 interpretation names digital commodities, collectibles and tools, which are not themselves securities. Stablecoins depend on the facts. Digital securities are securities.

A category is not the whole answer. If an issuer promises essential managerial efforts that buyers expect profits from, the sale is an investment contract, which is a security.

The release never says admin key, but it describes what one does. Staff examples of central party oversight include powers to limit access, change voting, control who validates, or modify code.

Staff say the degree of decentralization varies with the facts. The record should show who holds each pause, blacklist, upgrade and validator admin role.

Upgradeability cuts across every design fact. A live upgrade key can add a fee switch, a blacklist or a mint path later.

Counsel owns the classification. Engineering owns the facts. That means a dated record of economics, supply, control, key holders, roadmap promises, and whether the docs match the code.

Guardian's Technical Evidence work builds that record. We map every privileged role and upgrade path, verify deployed bytecode against the audited commit, and date every configuration change.

Read the full article for the design facts and staff FAQs, or talk to Guardian at guardian.security.

The SEC's token taxonomy started as a speech. On November 12, 2025, Chairman Paul Atkins said he anticipated the Commission would consider "establishing a token taxonomy" anchored in Howey.

On March 17, 2026, the Commission issued an interpretive release that sorts crypto assets into five categories. It took effect on March 23, 2026.

Its categories turn on facts an engineer can check: what a token pays, what it does, and who controls the system behind it.

This article explains the technical and security side of the SEC's crypto asset interpretation, Release No. 33-11412. It is not legal advice; confirm how it applies to you with counsel.

What the SEC Actually Issued

The taxonomy sits in a Commission interpretation, published as an interpretive rule. Here is what exists, and the weight of each.

Three lines in the release set its weight:

• It "does not supersede or replace the Howey test, which is binding legal precedent."
• The SEC and its staff will administer the securities laws consistent with it, including in enforcement.
• It supersedes the staff's 2019 investment contract framework for digital assets.

The CFTC joined with guidance that it will administer the Commodity Exchange Act consistent with the interpretation. The SEC invited comments and may refine it.

The Five Categories

The release classifies crypto assets "based on their characteristics, uses, and functions."

Three details matter for design:

• The first three have no "intrinsic economic properties or rights," such as passive yield or rights to income, profits or assets.
• Some tokens fit none of the five, and hybrids may fit more than one.
• The named examples reflect each asset "as of the date of this release."

For stablecoins, the release notes that once the GENIUS Act is effective, payment stablecoins from permitted issuers are not securities by statute. Others may be, depending on the facts.

When an Investment Contract Attaches

A category is not the whole answer. A non-security crypto asset can still be sold subject to an investment contract, which is a security.

That happens when an issuer induces an investment of money in a common enterprise with "representations or promises to undertake essential managerial efforts" from which a buyer would reasonably expect profits.

The channels count: agreements, the issuer's website and official social accounts, direct private communications, filings and whitepapers.

The token separates from the contract once the issuer fulfills those promises, or buyers can no longer expect it to. A widely disseminated announcement abandoning the work is one example.

One footnote matters to engineers. If an issuer promised decentralization, whether it got there is judged by the issuer's own definition, "not a general market conception."

The release encourages issuers to publish milestones and a timeline, and to "publicly disclose the completion of those efforts."

Control, Decentralization and Admin Keys

The release never says "admin key." Its definitions describe what admin keys do.

• Functional: the native asset "can be used on the system in accordance with the programmatic utility of the system."
• Decentralized: the system runs autonomously, with no person or group holding operational, economic or voting control.
• Central party: a person, entity or group with operational, economic or voting control of a crypto system.

A digital commodity is tied to a functional system. The release says a functional crypto system "does not have a central party that oversees participation or distributes rewards to users."

Staff FAQ 1.5, added November 2, 2026, gives examples of oversight: unilateral authority to limit access, change voting processes, control who validates, or modify code and reverse transactions.

In contracts, those powers often sit in pause and blacklist roles, upgrade keys over governance, validator set admins and proxy admins. Our central party explainer maps each one.

FAQ 1.6 adds that the degree of decentralization "can vary depending on the facts and circumstances." So the record should show who holds each power, not a label.

Token Design Facts That Matter

The release's descriptions turn on facts that can be read from code or chain state.

Upgradeability cuts across every row. An upgrade key can add a fee switch, a blacklist or a mint path to a token that had none.

Staking receipt tokens have their own staff answer in FAQ 1.2. Our liquid staking explainer covers it.

A Record for Counsel

Counsel owns the classification. Engineering owns the facts. A dated record, read from deployed contracts, covers:

1. Economics. Every path that pays holders: fees, rewards, buybacks, revenue shares.
2. Supply. Every mint and burn role, cap and bridge mint.
3. Control. Every owner, role admin, proxy admin, pause and blacklist role.
4. Holders. EOA, multisig threshold and signers, timelock delay, or governor.
5. Functionality. What the token does on the system today, not on the roadmap.
6. Promises. Each roadmap milestone, its status, and where completion was disclosed.
7. Consistency. Website, docs and whitepaper claims checked against the code.

Fix the gaps before anyone relies on a category. If the docs say a timelock guards upgrades, confirm one does. If a team key can still mint or upgrade, record it and the plan for it.

Planning an offering? The same facts feed the technical items in the proposed Regulation Crypto Assets.

How Guardian Helps

Guardian's Technical Evidence work builds this record from the system as built:

• Privileged role and upgrade path map: every role that can move value, upgrade, pause, freeze or change parameters, with holder, threshold and timelock.
• Deployment verification: deployed bytecode matched to the audited commit.
• Contract configuration drift: parameters, roles and upgrades compared with what was reviewed, every change dated.

The legal reading stays with your counsel.

Frequently Asked Questions

Has the SEC adopted a token taxonomy?

Yes, as an interpretation. Release No. 33-11412, dated March 17, 2026 and effective March 23, sorts crypto assets into five categories. It conveys the Commission's views and does not replace the Howey test.

Which crypto assets are not securities under the SEC's taxonomy?

The release says digital commodities, digital collectibles and digital tools are not themselves securities. Each can still be offered and sold subject to an investment contract, which is a security.

Do admin keys affect how a token is classified?

The release never mentions admin keys. It ties digital commodities to functional systems without a central party: no one with operational, economic or voting control. Admin keys can confer that control, so counsel needs them mapped.

Are the SEC staff crypto FAQs binding?

No. The Division of Corporation Finance says they are staff views, not a rule, regulation or statement of the Commission, with no legal force or effect.

Sources

• GovInfo: Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets, Release Nos. 33-11412 and 34-105020, 91 FR 13714 (Mar. 23, 2026)
• SEC: Interpretive release page, File No. S7-2026-09 (issued Mar. 17, 2026; effective Mar. 23, 2026)
• SEC: Chairman Paul S. Atkins, The SEC's Approach to Digital Assets: Inside "Project Crypto" (Nov. 12, 2025)
• SEC Division of Corporation Finance: Frequently Asked Questions on the Application of the Federal Securities Laws to Certain Types of Crypto Assets (issued Sept. 25, 2026; updated Nov. 2, 2026)
• GovInfo: Regulation Crypto Assets, proposed rule, Release Nos. 33-11434 and 34-106150, 91 FR 54510 (Aug. 21, 2026)
• SEC: Regulation Crypto Assets rulemaking page, File No. S7-2026-27 (viewed Nov. 6, 2026)
• Guardian: The SEC Central Party Test: Which Admin Powers Count
• Guardian: Regulatory and Compliance Assessment