New SEC Crypto FAQ Puts Token Buybacks Under Fresh Scrutiny

• The latest SEC crypto FAQ update adds answers on governance, control and decentralization.
• Ordinary tokenholder voting does not by itself turn voters into a controlling group.
• Unilateral power over validators, code or transactions points to a central party.
• The FAQ reflects staff views only and changes no law.

The Securities and Exchange Commission’s Division of Corporation Finance on November 2 added three new answers to its crypto asset FAQ, spelling out when token voting or a foundation’s administrative powers turn a blockchain network into one run by a “central party.” The distinction carries practical weight because, under the agency’s March 2026 framework, a network with a central party struggles to qualify its native token as a digital commodity, and since late September the staff’s favorable reading of token buybacks also depends on the absence of such a party.

Why “central party” now carries so much weight

The new answers build on the interpretive release the SEC published on March 17, 2026 together with the Commodity Futures Trading Commission. That document, Release No. 33-11412, sorted crypto assets into digital commodities, digital collectibles, digital tools, stablecoins and digital securities, and it treated the first group as falling outside the definition of a security. To land there, a network has to be functional and free of a central party, which the release describes as a person, entity or group holding operational, economic or voting control over the system.

Staff guidance has leaned harder on that phrase with each round. The first FAQ arrived on September 25, and three days later staff amended its answer on token buybacks so that a buyback announcement avoids being read as a promise of managerial effort only when the system is functional and has no central party. Projects with active foundations or core teams were left asking what exactly would put them on the wrong side of that line, and the November answers are the first detailed response to that question.

Source: SEC Division of Corporation Finance crypto asset FAQ

Shared votes, separate voters

Question 1.4 deals with the most common structure in crypto, where holders of a native token vote on upgrades, treasury spending and parameter changes. Staff wrote that people taking part in a broad-based governance system generally should not be treated as a coordinated controlling group just because they back the same proposal. The answer points to facts that support that conclusion, such as voters who have no affiliation with each other and no formal or informal arrangement to act together outside the voting mechanism. Even where voters do form a group, staff added, they become a central party only if they actually exercise operational, economic or voting control.

The same reasoning extends to governance run through a foundation, association or similar body, provided voting rights follow ownership of the native token. Staff attached its usual caveat that the outcome turns on facts and circumstances, so a cluster of wallets voting in lockstep under a side agreement would still invite a different analysis.

Where staff looks for a hand on the controls

Question 1.5 moves from voting to day-to-day power. A central party oversees participation, according to staff, when it can control access to the system at the protocol, validator or user level. The examples include unilateral authority to grant or restrict access, rewrite governance procedures, pick who validates transactions, change protocol code, reverse transactions or revoke access.

The answer also describes what a network without such oversight looks like. Material operations that execute automatically through rules-based code, without human discretion, fall on the safe side, and so do discretionary decisions taken exclusively through broad-based governance whose participants are not themselves a central party. In practice this puts admin keys, upgrade multisigs and emergency pause functions at the center of any review, since those are the tools that let a small team act alone. A protocol where tokenholders approve an upgrade but a handful of developers alone can deploy it would, on this reading, draw scrutiny to whoever holds the deployment keys.

A live network can still be centralized

Question 1.6 separates two ideas that the industry often merges. A functional network is one where the native token can be used in its system according to its programmed utility, while a decentralized network operates autonomously, with no person, entity or coordinated group holding operational, economic or voting control. Staff noted that a blockchain can process transactions, host applications and move tokens while a foundation still decides on its own which validators qualify or how critical protocol rules change. The reverse can also hold, since a network with decentralized governance may keep adding functionality.

Staff stopped short of setting a single threshold. Its answer says a functional system tied to a digital commodity has characteristics of decentralization, but the degree can vary with the circumstances, which leaves room for different network designs and offers no checklist that guarantees an outcome.

Buyback plans and DAO setups face the first review

Legal teams are likely to start with the concentration of voting power, including delegated votes, and with the path a passed proposal takes before it goes live. A vote that triggers code automatically sits differently from one that waits for a multisig to sign, and an administrator able to override a result holds exactly the kind of authority Question 1.5 lists. Governance setups at protocols such as Aave, Uniswap and Ethereum Name Service already vary widely on delegation and execution, though the FAQ makes no finding about any named protocol.

Buyback programs feel the effect most directly, because the September 28 wording ties their favorable treatment to the no-central-party condition that these answers now flesh out. For investors, the guidance offers a way to test decentralization claims beyond holder counts and governance branding. It leaves untouched the status of the tokens the March release itself named as examples of digital commodities, a list that includes BTC, ETH, SOL and XRP, and it creates no blanket exemption for governance tokenholders. How a token was sold and what its promoters promised still matter under the Howey test, which asks whether buyers expected profits from the essential managerial efforts of others.

Why the FAQ binds no one

The FAQ reflects the views of Division of Corporation Finance staff. The Commission itself has neither approved nor disapproved it, and the answers neither amend existing law nor impose new obligations, which gives them less weight than the March interpretive release the Commission adopted. The FAQ also refers to Regulation Crypto Assets, a registration-exempt offering framework the SEC proposed on August 18, 2026, and that proposal remains unfinished.

Congress has done little to fill the gap. The Digital Asset Market Clarity Act, the market structure bill that would divide crypto oversight between the SEC and the CFTC by law, cleared the House in July 2025 and then stalled in the Senate on September 15, 2026, when a procedural vote ended 49-50, well short of the 60 votes required. The GENIUS Act, signed in July 2025, remains in force but covers payment stablecoins only, so the status of other tokens still rests on SEC interpretation and staff answers such as this FAQ.

What comes next depends on the Commission’s final vote on Regulation Crypto Assets and on whether Congress revives market structure legislation, the end point SEC Chairman Paul Atkins had in mind when he called the March release “an important bridge.” Until then, projects with a specific question about their own structure can take it to the Office of Chief Counsel in the Division of Corporation Finance, which the SEC lists as the contact point for questions about staff crypto guidance.