Project Crypto — Overview of the Five-Bucket Framework

Last researched: 2026-05-18

What it is

Project Crypto is the SEC's Commission-wide initiative, announced by Chair Paul Atkins on July 31, 2025, to modernize the application of U.S. federal securities laws to crypto assets and on-chain markets ([S3]). It is the regulatory pivot away from the 2018–2024 enforcement-led posture toward a rulemaking-led posture.

The keystone deliverable arrived on March 17, 2026: joint SEC/CFTC Interpretive Release 33-11412 / 34-105020, "Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets" ([S6], [S7], [S8]). The interpretation:

  • Defines a "crypto asset" as "any digital representation of value that is recorded on a cryptographically secured distributed ledger" ([S8]).
  • Establishes a five-bucket taxonomy of crypto assets and analyzes each under the §2(a)(1) Securities Act "security" definition.
  • Addresses how a non-security crypto asset may become subject to an investment contract — and how it may cease to be ([S2]).
  • Supersedes the April 2019 staff "Framework for 'Investment Contract' Analysis of Digital Assets" ([S8]).
  • Is coordinated with the CFTC: certain non-security crypto assets may meet the CEA definition of "commodity" ([S6]).

Timeline of Project Crypto deliverables

DateActionSource
2025-02-27Corp Fin Staff Statement on Meme Coins — not securities[S9]
2025-03-20Staff Statement on Proof-of-Work Mining — not securities[S10]
2025-04-04Staff Statement on Covered Stablecoins — not securities[S11]
2025-05-29Statement on Certain Protocol Staking Activities — not securities[S12]
2025-07-31Chair Atkins launches "Project Crypto" (speech)[S3]
2025-08Staff Statement on Liquid Staking — not securities[S2]
2025-09SEC–CFTC joint statement on spot crypto trading[S2]
2025-11-12Chair Atkins "Inside Project Crypto" speech[S1]
2026-03-17Interpretive Release 33-11412 — the five-bucket interpretation[S6], [S7], [S8]
2026-03-17Chair Atkins "Regulation Crypto Assets: A Token Safe Harbor" speech[S5]
2026-03-23Federal Register publication, effective date[S7]

The five buckets (canonical names per 33-11412)

  1. Digital Commodities — see 02
  2. Digital Collectibles — see 03
  3. Digital Tools — see 04
  4. Digital Securities (also called tokenized securities) — see 05
  5. Stablecoins — see 06

Buckets 1–3 and 5 are presumptively not securities. Bucket 4 is. Every bucket remains subject to anti-fraud law for misrepresentations in connection with the offer or sale.

Guiding doctrines from Project Crypto

  • "Economic reality governs — labels do not." Form does not determine classification; substance does ([S4]).
  • The classification is anchored in Howey. The five buckets are not a replacement for the Howey investment-contract test; they are a structured application of it to specific crypto-asset patterns ([S1]).
  • Investment contracts can end. A token issued under an investment contract can mature into a non-security as the network becomes functional and decentralized ([S1]).
  • Anti-fraud always applies. Even where the underlying asset is not a security, anti-fraud provisions reach misstatements made in connection with sale of the investment contract ([S1]).

What is coming next (rulemaking pipeline)

Project Crypto is interpretive guidance, not rule. The forthcoming "Regulation Crypto Assets" rule package is expected to include ([S2], [S5], [S15]):

  • A startup exemption — time-limited (around four years), capped capital raise (around $5M), principles-based disclosures. For early-stage projects working toward maturity.
  • A mature-network exemption — for sufficiently decentralized protocols whose tokens should be treated as non-securities.
  • An innovation exemption / sandbox — principles-based, for novel structures.
  • Amendments to the Exchange Act (and likely Reg ATS) to accommodate crypto trading venues.
  • Updated custody framework for broker-dealers holding crypto asset securities (replacing SAB 121 posture).

These are proposals and speech-stated intentions, not final rules. Rulemaking requires notice-and-comment.

What this means for builders today

  • Bucket your token first. Use 01 → 02–06 → 10 to land on a defensible bucket.
  • If you might be a security (bucket 4) — plan a registered or exempt offering (see 12).
  • If you are betting on bucket 1 (digital commodity) — document decentralization. Atkins's framing requires the network to be both functional and decentralized.
  • The safe-harbor exemptions are not law yet. Do not rely on them. Comply under current law and watch the rulemaking.
  • CFTC may have jurisdiction even when SEC does not. Coordinate counsel across both agencies.

Cross-references