Commissioner Hester M. Peirce’s July 22, 2026 statement identifies federal securities-law questions raised by crypto vaults and onchain lending strategies. The question is what legal weight the statement carries and when the described assets, instruments, arrangements, and service providers fall within United States federal securities law. No specific vault, codebase, entity chart, asset list, agreement, marketing record, or control model was supplied. This analysis states the governing tests, likely results for recurring designs, and facts needed for a product-level opinion.
Summary
- [United States federal law] The statement is an individual Commissioner statement. It does not bind the Commission, courts, or market participants. It grants no exemption, no-action position, or reliance protection. The Commission’s March 2026 interpretive release carries greater institutional weight, but it creates no new legal obligations. Courts retain independent responsibility for construing the statutes. Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets, Securities Act Release No. 11412, Exchange Act Release No. 105020, at 8, 62 (Mar. 17, 2026); Loper Bright Enters. v. Raimondo, 603 U.S. 369, 412-13 (2024).
- [United States federal law] “Vault” is not a legal classification. Counsel must analyze at least four layers: the deposited asset, the user’s vault or receipt interest, each lending instrument, and each operator’s conduct. A non-security deposited asset does not immunize a pooled interest, receipt token, borrower note, or managed service. Securities remain securities when issued or represented onchain. 15 U.S.C. § 77b(a)(1).
- [United States federal law] A pooled yield vault presents substantial investment-contract risk when users contribute value, share results, expect yield, and rely on curators or operators. Strategy selection, rebalancing, counterparty selection, rate setting, collateral rules, liquidation terms, oracle choices, and upgrade powers support reliance on managerial efforts. Immutability and user direction weaken that case only when the product’s facts match those descriptions. SEC v. W.J. Howey Co., 328 U.S. 293, 298-99 (1946); United Hous. Found., Inc. v. Forman, 421 U.S. 837, 852-54 (1975); SEC v. Edwards, 540 U.S. 389, 394 (2004).
- [United States federal law] Each debt claim requires a separate Reves analysis. A broadly distributed, transferable, yield-bearing note sold for investment has elevated securities risk. A bilateral commercial-purpose loan with limited distribution and meaningful alternate protections has a stronger non-security position. Collateral, short duration, automated execution, and a “loan” label do not decide the issue. Reves v. Ernst & Young, 494 U.S. 56, 63-67 (1990).
- [United States federal law] A vault may be an investment company if an issuer pools user capital and invests primarily in securities. The 40 percent asset test also matters. Borrower notes can be investment securities even when the loaned crypto asset is not a security. A fixed strategy does not automatically create a unit investment trust. An “SMA” label does not satisfy Rule 3a-4 without individualized management and direct client rights. 15 U.S.C. §§ 80a-2(a), 80a-3(a), 80a-4; 17 C.F.R. § 270.3a-4.
- [United States federal law] A curator or operator may be an investment adviser when it receives compensation for advising on or managing securities. Management fees, performance fees, security selection, rebalancing, and discretion support adviser status. Federal adviser status is less likely where the service concerns only non-security assets and non-security obligations. Registration, exemptions, and state-law treatment still require separate review. 15 U.S.C. §§ 80b-2(a)(11), 80b-3, 80b-3a, 80b-6.
- [United States federal law] The current Custody Rule applies to an adviser registered or required to register under section 203 that has custody of client funds or securities. Withdrawal keys, unilateral transfer authority, or control of a pooled vehicle can create custody. The rule does not use an all-assets standard. Asset classification remains a separate question. 17 C.F.R. § 275.206(4)-2.
- [United States federal law] If any vault interest or note is a security, offering, broker, antifraud, disclosure, and custody duties may follow. Publishing code does not create a categorical First Amendment safe harbor for operating a fee-based financial service. The legal result turns on function, control, compensation, solicitation, user reliance, and the rights created. 15 U.S.C. §§ 77e, 77q(a), 78c(a)(4), 78j(b), 78o(a); 17 C.F.R. § 240.10b-5; Lowe v. SEC, 472 U.S. 181, 204-11 (1985); United States v. O’Brien, 391 U.S. 367, 376-77 (1968).
Legal effect of the July 22 statement
The statement supplies a warning and an issue map, not operative relief. The SEC website classifies it as a statement by Commissioner Peirce. Hester M. Peirce, Headstands and Summervaults: A Statement on Crypto Vaults and Lending Strategies (July 22, 2026). It is not a Commission rule, order, interpretive release, exemptive order, or no-action letter. The Securities Exchange Act establishes a five-member Commission. One Commissioner’s publication does not constitute action by that body. 15 U.S.C. § 78d(a).
The statement’s practical importance is still material. It identifies the questions that SEC personnel may ask about vaults and lending products. Those questions track existing statutes, Supreme Court tests, and the Commission’s March 2026 interpretation. The statement also invites engagement with the SEC. That invitation does not suspend registration duties or protect past or future conduct.
The March 2026 Commission release has a different status. The Commission issued it as an interpretation under the Securities Act and Exchange Act. The release states that the Commission and its staff will administer the federal securities laws consistently with its views. It also states that the interpretation creates no new legal obligations. Application of the Federal Securities Laws, Securities Act Release No. 11412, Exchange Act Release No. 105020, at 8, 62. A reviewing court must exercise independent judgment when deciding statutory meaning. Loper Bright, 603 U.S. at 412-13.
The July 22 statement should therefore guide issue spotting and engagement strategy. It should not support a legal opinion by itself. A product sponsor needs an analysis under the operative statutes, rules, contracts, and facts. Formal protection requires a valid exemption, registration, Commission order, or applicable no-action position.
Analyze the arrangement in layers
The deposited asset is only the first layer. It may be a security, a non-security crypto asset, or an asset whose status depends on its offer and surrounding promises. Tokenized stock, bonds, and other enumerated instruments remain securities onchain. A non-security asset can also be offered through an investment contract. 15 U.S.C. § 77b(a)(1); Application of the Federal Securities Laws, Securities Act Release No. 11412, Exchange Act Release No. 105020, at 23-25.
The user’s contractual or tokenized interest is the second layer. A vault share may represent a pooled profit interest, a debt claim, a redeemable receipt, or beneficial ownership of specified assets. Each characterization invokes a different statutory term. A receipt for a security is itself within the Securities Act definition. A receipt for a non-security asset may still be sold through a separate investment contract. 15 U.S.C. § 77b(a)(1).
The vault’s positions are the third layer. Lending can create notes or other evidences of indebtedness. Staking can create receipt tokens and contractual claims. Liquidity positions can carry rights against protocols, counterparties, or asset pools. The legal status of those positions affects both the user-facing instrument and the Investment Company Act asset test.
The service provider’s conduct is the fourth layer. A deployer may only publish immutable code. Another person may curate strategies, alter allocations, set economic terms, control keys, solicit users, or charge performance-linked compensation. Those acts bear on investment-contract, adviser, broker, custody, and antifraud analysis. Labels do not replace this functional review.
Investment-contract status under Howey
A managed yield vault can satisfy Howey even when every deposited asset is a non-security. Howey asks whether the transaction or scheme involves an investment of money in a common enterprise with an expectation of profits derived from others’ efforts. Howey, 328 U.S. at 298-99. The economic reality controls rather than the instrument’s name or technical form.
A transfer of valuable crypto to obtain a yield-bearing vault interest strongly supports the investment element. The user parts with control or use of an asset to obtain an economic return. A noncustodial design may change the facts, but signature authority alone does not settle whether value entered the scheme.
Pooling strongly supports a common enterprise. Shared strategy accounts, pro rata returns, pooled collateral, common counterparties, and common loss allocation link users’ fortunes. Separate onchain accounting does not negate pooling when each account receives the same strategy result. Circuit law differs on the required form of commonality. The chosen forum can affect the result.
Yield supplies the expected profit in the ordinary vault design. Profit includes income and capital appreciation. Forman, 421 U.S. at 852. A fixed return can qualify; variability is not required. Edwards, 540 U.S. at 394. Marketing that emphasizes annual percentage yield, optimized returns, compounding, or curator expertise strengthens the profit expectation.
Managerial reliance is the decisive variable for many vaults. Human or group selection of strategies, assets, counterparties, protocols, rates, leverage, loan-to-value limits, liquidation thresholds, and hedges supports Howey. Rebalancing, upgrading code, changing oracles, pausing withdrawals, and exercising emergency keys add further support. Selecting the persons who make those decisions can also be managerial conduct.
The Commission’s March 2026 staking analysis does not extend categorically to vaults. That interpretation addresses defined protocol-staking arrangements. Its covered provider does not decide whether, when, or how much to stake. It does not set or guarantee rewards. Its acts are administrative or ministerial. A provider that chooses allocations or sets rewards falls outside that defined treatment. Application of the Federal Securities Laws, Securities Act Release No. 11412, Exchange Act Release No. 105020, at 45-53.
An immutable, user-directed product has a stronger defense. The defense is strongest when users choose each strategy and amount, code executes fixed instructions, no operator promises optimization, and no person can alter outcomes. Objective data display and fixed execution fees also help. The defense weakens if a nominally immutable front end recommends allocations, ranks strategies, routes users toward selected products, or retains hidden control rights.
Pre-deployment work can still matter when the sale depends on promised development or operation. The Commission’s current interpretation focuses on issuer representations or promises of essential managerial efforts. Marketing, documentation, social media, voting and control materials, and interface design all inform that inquiry. A disclaimer cannot neutralize contrary product features or promotional statements.
Receipt tokens require their own analysis. The Commission concluded that a defined staking receipt for a non-security asset was not a security under narrow ministerial facts. It reached the opposite result for a receipt representing a security or an asset subject to an investment contract. It also required a separate investment-contract review of the receipt itself. Activities that use the receipt to generate added returns fall outside that staking analysis. Id. at 51-53.
The strongest non-security position combines user control, fixed code, no pooling beyond mechanical protocol operation, no managerial promises, and direct ownership rights. The strongest securities case combines pooled economics, yield marketing, discretionary curation, changeable code, operator compensation, and user dependence. Most commercial vaults require a feature-by-feature assessment between those poles.
Note status under Reves
Onchain lending raises note questions apart from Howey. The Securities Act includes “note” and “evidence of indebtedness” within the definition of security. 15 U.S.C. § 77b(a)(1). Reves begins with a presumption that a note is a security. The instrument escapes that presumption only if it bears a strong family resemblance to a recognized non-security note. Reves, 494 U.S. at 63-67.
Two instruments may require review. The borrower may issue a note or debt claim to the lending pool. The platform or vault may also owe depositors repayment plus yield. Contract language, token rights, accounting treatment, and insolvency treatment determine whether either relationship creates a note or other evidence of indebtedness.
The first Reves factor examines motivations. A borrower raising assets for general business use, and a lender seeking yield, support an investment purpose. A loan financing a specific commercial purchase, working-capital need, or consumer transaction supports a commercial purpose. The full transaction matters; a protocol’s generic “borrow” label has little weight.
The second factor examines distribution. Permissionless access, standardized terms, transferability, fractional interests, and broad promotion support common trading for investment. A negotiated bilateral loan, limited to identified commercial parties, points the other way. An automated market can still distribute notes broadly.
The third factor examines public expectations. Terms including “earn,” “yield,” “fixed return,” “investment,” or “passive income” invite users to view the claim as an investment. Legal disclaimers carry less weight when the product’s economics and sales message point toward investing.
The fourth factor examines alternate protections. Collateral, margining, liquidation code, prudential supervision, insurance, and another applicable protective regime can reduce risk. Their presence does not automatically displace securities law. Counsel must assess coverage, enforceability, volatility, oracle failure, liquidation gaps, and insolvency rights.
Short duration does not resolve the classification. Section 3(a)(3) exempts qualifying short-term commercial paper from Securities Act registration. It does not exempt every short-maturity note or decide Reves. 15 U.S.C. § 77c(a)(3). Overcollateralization also does not end the inquiry. Reves treats risk-reducing protections as one factor within the full test.
A retail-facing lending pool that issues transferable yield claims presents the strongest note risk. A nontransferable bilateral loan for a documented commercial purpose presents a stronger family-resemblance argument. A single product may contain both categories across different borrowers. Asset-by-asset classification is necessary for the Investment Company Act analysis.
Investment company status
A vault can trigger the Investment Company Act only if there is an “issuer” that meets a statutory investment-company test. The Act defines “company” broadly to include a corporation, partnership, association, trust, fund, or organized group. 15 U.S.C. § 80a-2(a)(8). A deployer, sponsor, legal entity, multisignature group, or organized curator group may supply the relevant issuer. A truly personless code arrangement presents a harder threshold question. Branding alone does not answer it.
Section 3(a)(1)(A) covers an issuer engaged primarily in investing, reinvesting, or trading in securities. Section 3(a)(1)(C) covers an issuer holding investment securities worth more than 40 percent of total assets, excluding government securities and cash items. 15 U.S.C. § 80a-3(a)(1). Both tests require classification and valuation of each material position.
Non-security crypto assets ordinarily do not count as investment securities merely because they are held for appreciation or yield. Tokenized securities do count. Notes that qualify as securities can count. Security receipts, investment-contract interests, and interests in security pools can also count. A lending vault may cross the statutory threshold because its borrower notes are securities, even though users deposited non-security crypto.
Peirce’s comparison to unit investment trusts is functional, not dispositive. A unit investment trust must be organized under a trust indenture, custodial contract, agency contract, or similar instrument. It must lack a board and issue only redeemable securities representing undivided interests in specified securities. 15 U.S.C. § 80a-4(2). A static allocation or immutable contract does not satisfy those elements by itself.
An investment company that does not satisfy the unit investment trust definition is generally a management company. 15 U.S.C. § 80a-4(3). Active curation, rebalancing, risk limits, and discretionary counterparty selection fit that residual category more naturally. The classification follows statutory structure, not branding.
A separately managed account label also has limited value. Rule 3a-4 supplies a nonexclusive safe harbor for qualifying advisory programs. Each account must reflect the client’s financial situation and objectives. Clients must be able to impose reasonable restrictions. They must receive account information and retain direct rights in account assets. 17 C.F.R. § 270.3a-4. A standardized strategy selected from a menu may not supply the required individualized treatment.
Sections 3(c)(1) and 3(c)(7) can exclude qualifying private funds from the investment-company definition. Both require an absence of a public offering. Section 3(c)(1) also limits beneficial ownership. Section 3(c)(7) generally requires qualified purchasers. 15 U.S.C. § 80a-3(c)(1), (7). Permissionless retail access, unrestricted transfers, and public yield solicitation conflict with those conditions.
If no exclusion applies, section 7 restricts an unregistered investment company’s interstate activities. Registration would also bring substantive requirements for custody, capital structure, valuation, transactions with affiliates, reporting, and operations. 15 U.S.C. §§ 80a-7, 80a-8. A sponsor should resolve this issue before offering vault interests to United States users.
Investment adviser and custody consequences
A curator may be an investment adviser when three elements are present. The person must be in the business of advising others about securities, must provide that advice or management, and must receive compensation. 15 U.S.C. § 80b-2(a)(11). The analysis reaches discretionary management and advice concerning security values, purchases, or sales.
Security selection and rebalancing are direct indicators. So are recommendations about tokenized securities, security notes, security receipts, or funds. Selecting outside managers can also constitute advice. Management fees, performance fees, spread participation, token allocations, and other economic benefits may satisfy compensation.
A service limited to non-security assets and non-security obligations has a stronger argument against federal adviser status. That determination must follow asset classification, not product labels. State adviser statutes can use different definitions. Commodity, banking, and lending laws can also apply outside the present scope.
Registration depends on section 203, section 203A, assets under management, client type, and available exemptions. 15 U.S.C. §§ 80b-3, 80b-3a. Adviser status and registration status are separate questions. Section 206’s antifraud duties apply to an investment adviser even when an exemption removes federal registration. 15 U.S.C. § 80b-6.
Software does not escape the definition solely because advice is encoded. The relevant questions are who designed or selects the recommendation, whether users receive individualized treatment, and who receives compensation. A fixed publication available to the general public presents a different case from personalized portfolio management. Lowe v. SEC, 472 U.S. 181, 204-11 (1985).
The current Custody Rule has a narrower trigger. It applies to an adviser registered or required to register under section 203 that has custody of client funds or securities. 17 C.F.R. § 275.206(4)-2(a). The rule’s text does not reach every asset merely because a client owns it.
Custody includes direct or indirect possession and authority to obtain possession. It also includes withdrawal authority and control through a managing role in a pooled vehicle. 17 C.F.R. § 275.206(4)-2(d)(2). Private keys, upgrade keys, emergency keys, unilateral withdrawal rights, and control over transfer modules require close review. Multisignature arrangements require analysis of each signer’s practical and legal power.
Self-custody can reduce custody risk, but interface design matters. A user signature does not negate custody if an operator can redirect assets, change recipients, or compel transfers. Contractual authority can also create custody without routine key possession. A registered investment company faces separate custody provisions under the Investment Company Act.
Offering, intermediary, and antifraud consequences
If a vault interest, receipt, or note is a security, section 5 generally bars interstate offers and sales without registration or an exemption. 15 U.S.C. § 77e. Private-placement reliance requires facts supporting the chosen exemption and compliance with its conditions. Open United States access and unrestricted secondary transfers can defeat a private-offering design.
The antifraud provisions apply independently of registration. Securities Act section 17(a), Exchange Act section 10(b), Rule 10b-5, and Advisers Act section 206 may govern materially false statements, omissions, schemes, and conflicts. 15 U.S.C. §§ 77q(a), 78j(b), 80b-6; 17 C.F.R. § 240.10b-5. A non-security determination for one asset does not protect fraudulent conduct involving another security or an advisory relationship.
Material disclosures should match the product’s actual mechanics. Key subjects include yield sources, fee calculations, loss allocation, slashing, leverage, collateral quality, liquidation rules, oracle dependencies, counterparty exposure, rehypothecation, code changes, key control, conflicts, redemption limits, and insolvency rights. Historical or displayed annual percentage yields require a stated period, method, assumptions, and treatment of fees and losses.
Broker status also requires review when securities transactions occur. A broker is a person engaged in effecting securities transactions for others. Exchange Act section 15(a) generally requires registration. 15 U.S.C. §§ 78c(a)(4), 78o(a). Solicitation, transaction participation, routing control, custody, negotiation, and transaction-linked compensation raise the risk.
An interface that only translates user-selected parameters into code has a stronger non-broker position. That position weakens when the operator recommends assets, chooses routes for economic reasons, exercises discretion, handles assets, or solicits purchases. The Division of Trading and Markets issued a narrow staff statement on certain self-custodial interfaces in April 2026. SEC Division of Trading and Markets, Staff Statement Regarding Broker-Dealer Registration of Certain User Interfaces Utilized to Prepare Transactions in Crypto Asset Securities (Apr. 13, 2026). That staff statement has no legal force and does not alter the statutory test.
Developer speech and neutral software
The statement properly identifies free speech as a limit that the SEC must respect. It does not establish a categorical rule that source code, interfaces, or developers lie outside securities law. The First Amendment analysis depends on what the government regulates and what the developer does.
Publishing source code, research, or general commentary can contain protected expression. Operating a system that pools assets, selects investments, sets loan terms, or transfers client property also involves conduct. A neutral law may regulate conduct despite an incidental burden on expression when the O’Brien requirements are met. United States v. O’Brien, 391 U.S. 367, 376-77 (1968).
The Advisers Act’s publisher exclusion draws a related line. A bona fide publication of general and regular circulation differs from personalized advice or account management. Lowe, 472 U.S. at 204-11. A developer who publishes fixed code and retains no operational role has a stronger speech and publisher argument. A compensated curator exercising ongoing discretion has a weaker one.
Facts concerning control remain central. Courts and regulators will examine upgrade rights, fee switches, multisignature participation, recommendation logic, front-end control, treasury benefits, promotional conduct, and emergency powers. Open-source licensing or decentralized branding does not erase those facts.
Practical compliance path
A sponsor should first identify every legal actor and control point. The record should name the deployer, issuer, curator, fee recipient, key holder, interface operator, oracle selector, borrower, custodian, and affiliated counterparty. It should state who can alter code, terms, allocations, and withdrawals.
The sponsor should then prepare an instrument inventory. Each deposited asset, receipt, vault share, liquidity position, borrower claim, and repayment obligation needs a classification. The inventory should state ownership, transferability, redemption, priority, collateral, maturity, and insolvency treatment.
A communications review should capture every promise. White papers, websites, interfaces, social media, developer materials, and user agreements should be compared against actual operation. Yield displays, strategy descriptions, risk statements, and claims of immutability need factual support.
The product should receive separate Howey, Reves, Investment Company Act, Advisers Act, custody, broker, offering, and antifraud analyses. Each analysis should use the same verified control and instrument record. Inconsistent assumptions can produce a false non-security result.
Product design may reduce legal exposure through genuine user direction, asset segregation, limited discretion, fixed code, clear ownership, nontransactional fees, restricted distribution, and enforceable risk controls. Those features must exist in operation. Drafting alone cannot replace them.
A material unresolved issue should be addressed before United States launch. The available paths include registration, a valid statutory or rule exemption, a Commission exemptive order, or a fact-specific no-action request. Informal engagement may clarify staff concerns. It does not provide reliance protection without formal relief.
