I. Bill on the Verge: Where H.R. 3633 Stands After Senate Banking Clearance
H.R. 3633, the Digital Asset Market Clarity Act, is one floor vote and a conference reconciliation away from becoming the most consequential reorganization of U.S. crypto market structure since the SEC declared jurisdiction in 2017.1 The House passed the bill 294-134 on July 17, 2025. Senate Banking advanced it today, May 14, 2026, on a 15-9 vote.2 The Senate Agriculture Committee’s parallel Digital Commodity Intermediaries Act, S. 3755, sits on the same reconciliation track and informs how the Banking text gets finalized.3 Full Senate floor vote, conference reconciliation, and Presidential signature still lie ahead. The market is pricing enactment for August 2026.
The current text is not yet law. It is, however, enough to plan against. Pre-enactment compliance work for exchanges is statute-derived, not rule-dependent — qualified-custodian negotiations, segregation-policy drafting, board-governance documentation, and registration-stack scoping all start from statutory text that has been stable across both the House-passed bill and the Senate Banking manager’s amendment.4 Waiting for enactment to begin compresses a 90-day registration window into a fire drill.
The bill speaks to three different audiences inside every U.S.-facing exchange. First, the Title IV CFTC digital-commodity intermediary registration architecture — new CEA Section 5i for exchanges, new Section 4u for brokers and dealers, Section 405 for qualified custodians.567 Second, the Title III SEC registration framework — alternative trading system or broker-dealer registration for any activity touching investment-contract assets that survive the Section 201 jurisdictional pivot.8910 Third, Section 310’s bank-custody mechanics, which determine whether your custodian sits on its own balance sheet or operates a true bailment-style segregated structure.11 The thesis of this article is straightforward: U.S.-facing centralized exchanges face two registrations under CLARITY, not one — and the 90-day cliff starts the day CFTC publishes its expedited-process rule, not the day of enactment.
II. The Registration Cliff: What Happens 90 Days After CFTC’s Expedited-Registration Rule
Call it “The Registration Cliff.” The 90-day window between the CFTC publishing its expedited-registration rule and the close of the initial filing deadline is the operational pinch point of the entire bill. Title IV requires the CFTC to publish an expedited-process rule for digital commodity exchanges within 180 days of enactment.56 On the day that rule publishes — by statute, no later than Day 180 from enactment — the 90-day registration window opens. Ninety days later (Day 270 from enactment) the window closes. Exchanges that file inside the window enter a 270-day provisional-status period; exchanges that miss it face enforcement exposure for operating an unregistered digital commodity exchange.12
The math is 180 + 90 + 270 = 540 days from enactment to final-rule effectiveness. The cliff sits at Day 270 of that calendar — but the cliff is movable in only one direction. The CFTC can extend its 180-day rulemaking clock; nothing in the statute gives the CFTC discretion to extend the 90-day filer window once its expedited-process rule has published.5 Late rulemaking compresses your runway. Early rulemaking does not buy you more time.
A practical caveat on the rulemaking-deadline side. The CFTC will write the digital commodity exchange rule from designated contract market muscle memory; the existing DCM application architecture under 17 C.F.R. § 38.3 and CEA Section 5(d)‘s 23 Core Principles is the template.1314 Practitioner analysis of DCM applications documents that the statutory 180-day review clock is conditional on material completeness, and applications routinely run “well beyond the statutory period (often north of two years)” when the agency surfaces completeness questions.14 The 90-day registration window is statutory. The 180-day rulemaking deadline is, as a practical matter, softer.
The counterintuitive consequence is that passage makes compliance harder in the near term, not easier. Today, exchanges operating under uncertain jurisdictional status face SEC and CFTC enforcement risk but no positive registration requirement.1516 The day CLARITY signs, registration becomes mandatory and the 90-day clock begins counting down once the rulemaking ships. Latecomers face a regime designed for early filers. Early filers face a regime that does not yet have final rules. There is no comfortable seat.
III. Why You Have Two Registrations, Not One
A. The Title IV / Title III Bifurcation
CLARITY divides crypto market jurisdiction along an asset-class axis. Title IV places CFTC under positive-registration authority over digital commodity activity through new CEA Sections 5i (digital commodity exchanges), 4u (digital commodity brokers and dealers), and 405 (qualified digital asset custodians).567 Title III preserves SEC authority over any activity touching investment contract assets — the broker-dealer registration baseline under Securities Exchange Act Section 15(a), alternative trading system registration under Regulation ATS, and the rest of the existing securities-laws stack.910 The bill explicitly contemplates dual registration. House Section 307 permits an SEC-registered national securities exchange or ATS to also register as a CFTC digital commodity exchange, and vice versa.17 That permission is the textual hook for everything that follows in this article.
The cleanest framing of the bifurcation is one most trade-press analyses get wrong. Section 201’s investment-contract-asset exclusion does not extinguish SEC jurisdiction over a token — it pivots jurisdiction at the boundary between primary and secondary market activity.8 An asset sold pursuant to an investment contract is a security at the point of sale; the same asset, traded in a secondary market after the investment contract has run, may be a digital commodity. The SEC’s March 17, 2026 Interpretive Release crystallized this as the “traveling investment contract” doctrine: a non-security crypto asset subject to an investment contract remains a security in secondary-market transactions until the underlying contract terminates.18 SEC v. Ripple Labs established the primary/secondary bifurcation as a matter of judicial interpretation; institutional sales constituted unregistered securities offerings, while programmatic exchange sales did not.19 SEC v. Telegram Group applied the “single scheme” theory to treat a SAFT and the anticipated Gram distribution as a single integrated investment contract — directly relevant to any exchange listing a token mid-cycle whose underlying investment-contract has not yet exhausted.20
The Interpretive Release also issued a five-category taxonomy classifying BTC, ETH, SOL, ADA, DOGE, XRP, and AVAX as digital commodities.18 That list is short. Every other token on a U.S. exchange’s order book sits in classification ambiguity unless and until SEC and CFTC further specify. Exchanges treating Section 201 as a wholesale jurisdictional gift to CFTC are reading the section as if it covered the asset universe. It covers the seven assets the Interpretive Release names — plus whatever future tokens clear the same factual test.
B. The “Two Registrations, Not One” Hard-Edged View
My view: any U.S.-facing exchange offering token launches, stablecoin yield products, or mixed-asset order books that include both digital commodities and investment-contract assets needs parallel SEC registration. The Big Law alerts framing this as a CFTC-only registration story are reading Section 201 as if it ejected the SEC from the order book. It does not.
A minority position deserves acknowledgment. A truly perimeter-disciplined exchange that never operates a primary market, lists only tokens that have already cleared the Section 201 jurisdictional pivot, and offers no yield, staking, or derivatives products can credibly argue CFTC-only registration is sufficient. The operational discipline required is real, and the steady-state requirement is harder than it sounds — listing committees that maintain that discipline across thousands of tokens are theoretical rather than empirical. Treat the single-registration position as a posture available to a small subset of perimeter-disciplined exchanges, not the default.
The case for parallel SEC registration runs through the SEC’s recent enforcement history. SEC v. Coinbase survived motion-to-dismiss in 2024 on the SEC’s theory that Coinbase operated as an unregistered broker, exchange, and clearing agency for assets the SEC alleged were securities.15 SEC v. Binance alleged that a mixed commodity-security exchange violated exchange, broker-dealer, and clearing-agency registration provisions simultaneously.16 The Coinbase case was dismissed by stipulation in February 2025 under the new SEC posture; the Binance case had already produced a settlement. The doctrinal framework that produced those complaints, however, did not vanish with the dismissals. SEA Section 15(a) attaches to any person who effects transactions in securities — the rule is activity-based, not asset-based.9 If your order book hosts a single ICA at any point, the SEC has a registration theory available.
Concrete examples by product line. Token launches with any U.S. investor participation: SEC registration territory under Section 5 of the Securities Act, even if the post-launch trading market migrates to digital-commodity status. Stablecoin yield products that promise returns from issuer activity: investment-contract analysis under Howey applies, regardless of stablecoin reserve composition. Mixed-asset order books that list (say) 95 digital commodities and 5 ICAs: an ATS for the 5 and a digital commodity exchange for the 95. The bill does not split the order book — the exchange splits the order book.
IV. The 180/90/270-Day Rulemaking Timeline — A Pre-Enactment Compliance Calendar
The compliance calendar is fixed in statutory architecture even before any rulemaking ships. The trigger events are: Day 0 (enactment), Day 180 (CFTC expedited-process rule for digital commodity exchanges published, opening the registration window), Day 270 (90-day registration window closes — the Registration Cliff), and Day 540 (provisional-status period ends and final rules take effect).56
Day 0 is the enactment date — when the President signs CLARITY into law. Day 0 starts both the 180-day rulemaking clock on the CFTC and the operational countdown for every exchange that has not begun pre-enactment compliance work. Day 0 is also the moment the SEC enforcement posture shifts, because the bill’s jurisdictional architecture now exists as positive law rather than as the open question it remains today.15
Day 180 is the trigger that matters most for filing teams. By Day 180, the CFTC must publish its expedited-process rule for digital commodity exchanges. The 90-day registration window opens on the rule’s publication date — not on a Day 180 calendar marker if the CFTC ships its rule earlier or later than statute requires. Practical timelines from existing DCM rulemakings suggest CFTC may use the full 180 days and request additional time on completeness grounds; the registration window is statutory and not subject to that elasticity.14
Day 270 is the Registration Cliff. The 90-day filer window closes. Exchanges that filed inside the window enter provisional status. Exchanges that did not face enforcement exposure for operating an unregistered digital commodity exchange under amended CEA Section 5i.612 Day 270 is the date by which board governance, custody contracts, segregation policies, conflict-of-interest disclosures, AML/CFT programs, and the complete Form DCE-1 registration package must be finalized.
Day 540 is the back end of the provisional-status period. Between Day 270 and Day 540, the CFTC writes the final substantive rules (market surveillance technology specs, position-limit thresholds, conflict-of-interest disclosure formats, customer-asset segregation requirements). Registrants operating provisionally during this window face an unusual compliance environment: the registration is approved, but the rules of operation are being written in real time. Enforcement actions during this period can create de facto precedent for the final rules.21 On Day 540, final rules take effect; provisional registrants must demonstrate full compliance or face deregistration.
V. Title IV Mechanics: Digital Commodity Exchange Under CEA Sec. 5i; Broker / Dealer Under Sec. 4u
The Title IV mechanics described in this section operate in parallel with — not in lieu of — the SEC ATS or broker-dealer registration requirements for any activity touching investment-contract assets.910 The perimeter-disciplined exchange that has cleanly limited itself to digital-commodity-only operations can read this section as a single-track CFTC roadmap. Everyone else carries the dual-registration architecture from §III.B forward through every paragraph below.
A. What CEA Section 5i Says About Digital Commodity Exchanges
New CEA Section 5i creates a positive-registration regime for any person operating a facility for the trading of digital commodities by U.S. customers.56 The category is novel. It is not a designated contract market (DCM), not a swap execution facility (SEF), and not a futures commission merchant (FCM) — though Section 5i borrows liberally from each. DCMs trade futures contracts; SEFs trade swaps; FCMs intermediate but do not operate matching engines. A digital commodity exchange is the new category: a spot market for digital commodities with custody-bearing intermediation.
The operational definition triggers registration on three concurrent factors: (i) operation of a trading facility for digital commodities; (ii) intermediation of customer orders or custody of customer assets; and (iii) U.S. customer access.6 Each prong is broader than industry has read in trade-press coverage. “Operation of a trading facility” reaches order-matching at the protocol level, not just operation of a centralized exchange front-end. “Intermediation” reaches anyone routing customer orders through a clearing function, even when matching is outsourced. “U.S. customer access” reaches offshore platforms that have not implemented enforceable geofencing. The Ooki court found CFTC jurisdiction over a DAO that geofenced post-litigation; the doctrine forecloses reactive geofencing entirely.12
Existing CFTC architecture supplies most of the operational template. CEA Section 5(d) lists 23 Core Principles for DCMs — compliance, anti-manipulation, trade monitoring, position limits, financial integrity, audit trail, governance, conflicts, financial resources, system safeguards, chief compliance officer designation — and 17 C.F.R. Part 38 operationalizes each.14 CFTC will adapt these principles for digital commodity exchanges with modifications for the asset class (custody mandates under Section 405; settlement architecture; surveillance technology calibrated to on-chain transaction patterns).22 The BitMEX enforcement framework, which alleged DCM, SEF, and FCM violations against an offshore venue serving U.S. customers, supplies the floor: prosecution under existing CEA mechanics against unregistered venues was happening before CLARITY, and CLARITY converts that enforcement pressure into mandatory positive registration.23 CFTC v. FTX drove the point home with a $12.7B consent judgment; customer-fund commingling was the core violation, and Section 405’s qualified-custodian framework is the statutory response.24
Activities explicitly outside the Section 5i perimeter include genuinely non-custodial DeFi protocols (Section 309 exclusion); foreign exchanges with no U.S. customers and prospective IP+KYC geofencing in place pre-launch (a defensible posture, in contrast to reactive geofencing under Ooki); and futures-trading platforms registered as DCMs or SEFs under existing CEA architecture, though those platforms still need separate Section 5i registration for any spot-market activity.2512 Futures-trading CEXes with existing CFTC FCM or futures-broker registrations may grandfather elements of their compliance architecture (capital adequacy, governance, conflict-of-interest policies), but “digital commodity exchange” is a new category requiring full re-registration. National Futures Association membership — mandatory for FCMs — is orthogonal to Title IV and carries over.
B. CEA Section 4u: Brokers and Dealers
New CEA Section 4u creates parallel registration regimes for digital commodity brokers (agency intermediaries) and digital commodity dealers (principal counterparties).7 The principal/agent distinction tracks securities-law architecture but operates under CFTC authority. A broker takes orders and routes them to an exchange or other counterparty; a dealer holds inventory and trades against its customers. A firm can be both, neither, or only one. The registration tracks are independent.
Why broker registration is independent from exchange registration matters operationally. A pure broker who routes customer orders to a Section 5i registrant exchange does not need Section 5i registration — but does need Section 4u broker registration, plus AML/CFT compliance, plus customer-fund segregation under amended CEA Section 4d.26 A proprietary trading shop that buys and sells digital commodities for its own account without taking customer orders may need only Section 4u dealer registration. An exchange that routes some customer orders externally for liquidity purposes is operating in both a Section 5i capacity (the home exchange) and a Section 4u capacity (the routing function), and likely needs both registrations.
Beyond firm-level registration, personnel licensing creates a second tier of compliance work the trade press largely ignores. Personnel licensing follows CFTC architecture, not SEC. CFTC and the National Futures Association administer Series 3 (commodity-futures registered representative), Series 30 (branch manager), and Series 32 (associated person of an introducing broker) — not the FINRA Series 7 and 24 most exchange compliance teams currently staff.27 Existing Series 7/24 staff who plan to operate inside a Section 5i registrant will likely need NFA registration in addition to FINRA registration during the provisional window, and the CFTC may publish modified competency examinations for digital-asset-specific operations. CFTC has not yet published the digital commodity exchange registration form; the analysis throughout this article anticipates the form will be styled “Form DCE-1” or a similar designation. The form is most likely templated on SEC’s Form ATS-N for conflict-of-interest disclosures, since the CFTC has been studying ATS-N’s disclosure architecture closely.22
Bank Secrecy Act compliance — FinCEN MSB registration, AML program, customer identification, suspicious activity reporting — is statutorily orthogonal to Title IV registration. There is no statutory credit; an MSB-registered firm still files Form DCE-1 on its own merits. The harmonization opportunity sits at the program level: AML/CFT programs designed to satisfy FinCEN MSB requirements can be tailored to also satisfy CFTC AML/CFT expectations under the integrated Section 5i framework.
VI. The Custody Mandate: Qualified Digital Asset Custodian Requirements Under Sec. 405
Section 405’s custody mandate is the CFTC-side custody architecture; the SEC’s parallel digital-asset custody rule for registered broker-dealers operates additively (covered at the end of this section). Dual-registered exchanges face both. Section 405 of the bill codifies the Qualified Digital Asset Custodian framework the CFTC has been building piecewise.22 An FCM, broker, dealer, or exchange holding customer digital assets must use a custodian meeting CFTC standards by rulemaking. Section 310 separately authorizes banking institutions to serve as QDACs without the digital assets sitting on the bank’s balance sheet — a structural fix to the SAB 121 problem that historically pushed banks out of the custody business.11 Together, the two sections create a custody architecture that the existing crypto custody market is not yet operationally ready to satisfy. Begin LOI-stage negotiations with at least one QDAC candidate now.
The standards CFTC will likely impose track the existing FCM segregation framework, adapted for digital assets. Expect capital adequacy minimums calibrated to assets under custody; cybersecurity standards aligned with the CFTC’s Pilot Program for Tokenized Collateral framework (the December 2025 no-action position that permits FCM margin in BTC, ETH, and USDC supplies the early operational template);28 insurance coverage minimums (likely a multiple of average daily assets under custody, with specified deductible structures); independent audit (likely annual SOC 2 Type II with quarterly attestations); conflict-of-interest segregation between custody and proprietary trading; and bilateral disaster-recovery protocols. SEC’s proposed digital-asset custody rule for registered broker-dealers operates in parallel and applies separately to SEC-registered exchange operations.29 An exchange operating dual registrations may face both standards; the regimes are additive, not substitutable.
For exchanges using third-party custodians, the contract architecture matters at three levels. First, the custodial-services agreement itself: segregation by customer, bankruptcy-remote structuring (true bailment language; explicit non-rehypothecation; UCC Article 8 securities-entitlement framework where applicable); custody-specific service-level agreements with credit-event triggers; and termination-for-cause provisions for cybersecurity failures. Second, the operational integration: API-level architecture for order-driven custody movements, audit trails meeting CFTC Core Principle requirements, and reconciliation procedures matching the exchange’s books to the custodian’s records. Third, the financial assurance: minimum insurance coverage explicitly named in the agreement, capital adequacy representations and warranties, and ongoing financial-condition reporting from the custodian to the exchange’s risk management function.
For exchanges self-custodying, the segregation requirements under amended CEA Section 4d govern.26 Customer assets must be segregated from house funds, identifiable on a per-customer basis, and not commingled with operational liquidity. The FTX enforcement architecture is the cautionary template: customer-fund commingling was the core of the $12.7B judgment, and Section 405 codifies the prohibition.24 Self-custody operationally requires the same security architecture a third-party QDAC would deploy — hot-wallet thresholds, multi-signature governance, hardware security module key management, withdrawal-velocity controls — plus the segregation accounting that demonstrates per-customer asset traceability. Self-custody is allowed; it is not cheap.
VII. The Three Trapdoors
Call them “The Three Trapdoors.” Each is a structural consequence of statutory text — not a discretionary risk an exchange can opt out of by careful drafting. Two are statutory in origin (Trapdoors #1 and #3); one is an operational consequence of dual-registration architecture (Trapdoor #2). All three need active management.
A. Token-Status Mid-Cycle Reclassification
Trapdoor #1 is statutory. Section 201’s jurisdictional pivot is asset-specific, not activity-specific.8 A token listed today as a digital commodity may flip back to investment-contract-asset status if the issuer takes managerial actions that violate the Section 201 perimeter — for example, a major issuer-driven roadmap commitment, an unexpected treasury distribution to insiders, or a reorganization of token economics that reintroduces an expectation of profit from issuer efforts. The SEC’s “traveling investment contract” doctrine articulates this directly: the security status of a token can persist across primary-to-secondary market boundaries, and post-Section-201 status is not permanent.18
SEC v. Telegram’s “single scheme” theory is the doctrinal anchor.20 The court treated a SAFT and an anticipated token distribution as a single integrated investment contract for jurisdictional purposes. By analogy, an exchange listing a token mid-cycle inherits the SAFT’s jurisdictional consequences: even a token nominally trading on a commodity-exchange order book may revert to ICA status if the underlying investment contract has not yet exhausted, or if issuer conduct in the secondary phase re-triggers the Howey analysis.
The operational implication is straightforward. Your listing committee needs continuous status monitoring, not point-in-time classification. The committee must (i) document the basis for initial commodity classification at listing; (ii) monitor issuer conduct on a quarterly basis for managerial actions that re-trigger Section 201; (iii) re-evaluate classification when material network or governance events occur; and (iv) build delisting and dual-listing protocols for the case in which an asset reverts to ICA status mid-trading. Treating digital-commodity status as a binary lifetime classification is the structural error.
B. Mixed-Asset Order Books
Trapdoor #2 is an operational consequence of dual-registration architecture, not a standalone statutory requirement. Securities Exchange Act Section 15(a) attaches to any person who effects securities transactions in interstate commerce.9 An order book that lists 95 digital commodities and 5 ICAs is functioning as an alternative trading system for the 5 ICAs and as a digital commodity exchange for the 95 digital commodities — simultaneously. The bill does not split the order book. The exchange splits the order book.
The operational implications cascade through every layer of the exchange’s architecture. Separate matching engines (or, more commonly, segregated logical pools within a unified matching engine with regulatory tagging and audit trails). Separate clearing processes (ATS-cleared trades vs. Section 5i-cleared trades, with separate qualified-custodian custody for any ICA-side custody). Separate market data feeds (because securities-side trades carry NMS-Reg-style consolidation expectations while commodity-side trades do not). Separate market surveillance protocols (because the manipulation patterns and reporting expectations differ across the two regimes). Separate customer-disclosure regimes for the two asset classes — at minimum, the existence of dual registration must be disclosed.
The Binance enforcement record is the cautionary template: the SEC alleged that operating a mixed commodity-security exchange without parallel SEC registration constituted simultaneous exchange, broker-dealer, and clearing-agency violations.16 CLARITY does not exempt the operator from this analysis — it codifies the registration pathway for the commodity side while preserving the securities-side registration requirement intact.
C. Ancillary Staking Services
Trapdoor #3 is statutory. The bill creates a separate 270-day CFTC rulemaking for “custodial and ancillary staking services” under amended CEA Section 5i.6 The rulemaking sits outside the Section 309 DeFi exclusion, because a CEX retaining custody of customer staked assets is functioning as a custodial intermediary — not as a non-custodial protocol.25 Staking-as-a-service offered through a U.S.-facing CEX sits inside this future rulemaking, full stop.
The architectural distinction worth flagging is between hybrid CEX/DEX models with custodial features and genuinely non-custodial app-chain architectures. A dYdX v4-style hybrid that retains some custodial element (sequencer-controlled liquidity, off-chain order book with custodial settlement, or staking-pool custody) sits inside Title IV registration as a digital commodity exchange and inside the Section 5i staking rulemaking for its staking products. A genuinely non-custodial app-chain — one where the protocol holds no customer assets and exercises no managerial control — may sit inside Section 309’s DeFi exclusion. The distinction is custody, not branding. The “we’re DeFi” label is not a registration defense if the operator retains any custodial role.
Exchanges offering yield-bearing staking, restaking, or liquid-staking products should not assume those products survive Title IV registration by default. The 270-day staking-specific rulemaking can impose disclosure requirements, leverage limits, segregation rules, and customer-protection standards that materially restructure existing product economics. Plan for the rulemaking to constrain the product, not enable it.
The product distinctions matter because staking product managers tend to bundle them. Delegated staking — the customer’s tokens remain on the customer’s books, the exchange operates the validator — sits closest to the non-custodial pole and may survive with minimal restructuring under the staking rulemaking. Liquid staking — the exchange issues a derivative liquid-staking token against staked principal — adds an investment-contract layer that may itself be a security under Howey analysis, especially where the liquid-staking token trades secondary on the exchange’s order book. Restaking — re-pledging staked principal across multiple validation services — concentrates risk and is the most exposed to leverage-limit and disclosure intervention. Dual-token staking, where the customer earns yield denominated in a second asset (often the issuer’s governance token), folds an investment-contract analysis into the yield mechanic and frequently fails the Section 201 ICA exclusion at the secondary-yield level. Audit each product separately under the rulemaking; do not assume the staking carve-out is a category exemption.
VIII. Provisional Status vs. Final Registration: The 270-Day Window
Provisional status is the operating posture an exchange holds between Day 270 (registration approved on filing inside the 90-day window) and Day 540 (final substantive rules effective). The status is registered, not unregistered — which means enforcement authority attaches in full — but pre-final-rule, which means the operating standards are an evolving blend of statutory floors, existing CFTC architecture (DCM, SEF, FCM), SEC ATS standards (for any dual-registered operations), and whatever interim guidance the CFTC publishes during the 270-day window.21
The provisional period is harder than most exchange GCs assume. Regulators have signaled they expect substantial compliance with statutory baselines even as the rules are being written.21 The CFTC’s April 2025 “back-to-basics” enforcement directive — a willfulness threshold for regulatory violations — eases the floor for pre-enactment activity but does not eliminate enforcement exposure for registered provisional operators.30 Operating provisionally without meeting the statutory floor (customer-fund segregation under Section 4d; qualified-custodian arrangements under Section 405; core principles compliance derived from existing 17 C.F.R. Part 38 architecture) creates enforcement risk that final rules cannot retroactively cure.
There is a constitutional attack worth flagging for completeness: provisional-status enforcement during a period when the final rules have not been written may exceed APA authority if the agency departs materially from announced interim standards. The retroactive-rulemaking attack is real and should be preserved for peripheral or novel-theory claims. It is not, however, a safe harbor for core statutory compliance. The Section 405 custody mandate, the Section 4d segregation requirement, and the SEA Section 15(a) broker-dealer registration baseline are all statutory — not rule-dependent — and enforceable from Day 0 of registration. Core compliance is statute-derived; peripheral compliance is rule-dependent.
The risk dimension most exchanges underestimate is the precedent-setting effect of enforcement actions during the provisional window. Cases settled or adjudicated between Day 270 and Day 540 effectively shape final-rule interpretation. Regulatory staff who handle the early provisional-status cases bring their interpretive choices into the final-rule drafting. Be the exchange whose first regulatory contact involves a constructive engagement on policy, not a settlement on an enforcement action. The SEC’s parallel rulemaking trajectory matters here too: Commissioner Peirce’s December 2025 Request for Information on national securities exchanges and ATSs trading crypto assets signals that the SEC-side registration framework is itself in flux during this same window.31 A material change in the SEC’s registration approach can shift the operating economics for any dual-registered exchange.
IX. How Likely Is This to Change Before It Becomes Law: Reconciliation Forecast
Big Law alerts treat the bill text as fixed. It isn’t. The reconciliation between Senate Banking’s manager’s amendment, the House-passed text, and Senate Agriculture’s parallel S. 3755 still has to clear floor votes and conference. The forecast below assigns calibrated probabilities to each exchange-facing provision, derived from filed amendments, industry comment letters, and reported reconciliation positions as of May 14, 2026.32
| Provision | Likelihood of Material Change | Direction if Changed | Drivers |
|---|---|---|---|
| Sec. 401-405 (CFTC registration architecture) | LOW (10-15%) | Stable | Bipartisan consensus on 180/90/270 framework; identical in House and Senate Banking texts |
| Sec. 308 (state preemption) | MEDIUM-HIGH (35-45%) | Narrower (states retain more authority) | Blue-state senators (CA/NY/MA) expected to file narrowing amendments; state regulators vocal |
| Sec. 310 (bank custody) | LOW (10%) | Stable | Banking industry strongly supports; crypto industry accepts |
| Sec. 110 / 201 (definitional perimeter) | LOW-MEDIUM (20-30%) | Tighter (control threshold could drop) | SEC March 2026 Interpretive Release; past enforcement (Ripple, Uniswap); Senate Banking “Myth vs. Fact” doc |
| Senate Ag S. 3755 reconciliation | LOW (20-25% material rewrite) | Banking version dominates | Senate Ag silent on stablecoin and DeFi; Banking text covers more ground |
Translation for exchange GCs. First, build the registration calendar with high confidence. The Sec. 401-405 architecture is locked — bipartisan consensus on 180/90/270 mechanics is the strongest reconciliation signal in the bill.32 Second, reserve state-MTL operational flexibility for the Sec. 308 narrowing scenario. Plan to keep your state-MTL stack live; treat federal preemption as additive, not displacing. Some industry counsel have argued Section 308 reaches state money-transmitter laws; I do not read the text that way, and the floor-amendment trajectory points the opposite direction. Third, treat the QDAC framework under Sec. 310 as stable for vendor contracts and reserve architecture — both industry constituencies support it. Fourth, flag the Sec. 110 / 201 definitional perimeter for sensitivity testing in any token-listing committee work; SEC March 2026 guidance signaled tightening, and the Ripple and Uniswap enforcement records bear out the SEC’s continuing interest in perimeter expansion.
The Tillis-Alsobrooks Section 404 stablecoin-yield fight is the bill’s hottest fault line, but it affects exchanges only indirectly through listing decisions. (Article 3 of this series covers Section 404 directly.) The Senate Banking Committee’s “Myth vs. Fact” majority document rebuts dual-registration concerns and signals committee-staff resistance to amendments narrowing CFTC authority — useful as adversarial framing the article anticipates and answers.33
X. If This Version Becomes Law: The 90-Day Registration Cliff Translated Into Day-by-Day Compliance
Assume for purposes of this section that the Senate Banking manager’s amendment text becomes law unchanged.4 CFTC will define “digital commodity exchange” and “digital commodity broker” broadly enough to capture most existing U.S.-facing CEX operations. Registration is mandatory; the bill contains no exemption for foreign-based platforms serving U.S. customers, and Ooki forecloses reactive geofencing as a registration substitute.12
Day 0 — enactment. Form the CFTC-readiness working group spanning GC, Compliance, Risk, Treasury, and Technology. Audit every product line against the Section 5i digital-commodity-exchange perimeter and the Section 201 ICA exclusion. Begin LOI-stage QDAC negotiations with at least two candidates (one bank-eligible under Section 310, one non-bank). Draft the conflict-of-interest disclosure framework and the customer-fund segregation policy from CEA Section 4d as the controlling baseline.26 Document the listing-committee process and re-evaluate every listed asset against the SEC’s March 2026 five-category taxonomy.18
Day 180 (registration window opens, on rule publication). File the anticipated CFTC exchange-registration form — to be styled by the agency under its expedited-process rule, likely as “Form DCE-1” or a similar designation. Submit the complete registration package: custody arrangements (signed QDAC agreement or executed LOI plus binding commitment), customer-fund segregation proofs (audited reconciliation of customer assets to per-customer ledger), conflict-of-interest disclosures (templated from SEC Form ATS-N where applicable), and AML/CFT program documentation. Apply for provisional status. For dual-registered operations, file SEC ATS or broker-dealer registration in parallel on the SEC track.910
Day 270-540 (provisional period; rulemaking tracking). Provisional status is active. Monitor CFTC final rules on market surveillance technology requirements, anti-fraud and anti-manipulation protocols, position-limit thresholds, and customer-disclosure formats. Build the required trading-halt and reporting infrastructure to interim standards. Budget for ongoing compliance — annual SOC 2 Type II audits, market-surveillance technology vendor contracts, dedicated compliance headcount (CFTC and SEC sides where applicable), and counsel for the final-rule comment period.
Key risk under the unchanged-text scenario: Section 308 narrowed in conference produces parallel state-MTL compliance burdens layered on top of federal Title IV registration. Plan for state-MTL maintenance even under the unchanged-text scenario; treat the unchanged version as the floor, not the ceiling, of regulatory burden. Key opportunity: if the CFTC’s expedited-process pathway proves faster and cheaper than SEC broker-dealer registration for the commodity-only operations, exchanges that file early may secure a competitive advantage over latecomers facing fully-developed final rules.
XI. What to Do Today: Pre-Enactment Compliance Architecture
A. Pre-Enactment Posture (Now Through August 2026)
Form the cross-functional CFTC-readiness team now: General Counsel, Compliance, Risk, Treasury, and Technology. The Treasury function carries more weight than exchange GCs typically appreciate — qualified-custodian financial assurance, capital-adequacy planning, and reserve architecture all sit on Treasury’s side of the org chart, and Treasury is where Section 405 and Section 310 mechanics get operationalized.2211 Audit every trading product against the Title IV jurisdictional perimeter and the Section 201 ICA exclusion. Begin LOI-stage QDAC negotiations with at least one bank-eligible custodian and one non-bank custodian. Draft the conflict-of-interest and segregation policy framework — both are statute-derived under Sections 405 and 4d and can be authored without waiting for final rules.26
The SEC enforcement environment between now and enactment also matters. SEC-side exposure does not pause while Congress works. The March 2026 Interpretive Release and the SEC’s Ripple, Coinbase, and Binance enforcement records all signal a continuing interest in exchange-side registration violations.18191516 Coordinate any pre-enactment SEC-track work (broker-dealer registration scoping, ATS architecture, ICA-listing-policy audits) with the CFTC-track work. The May 2026 to August 2026 window is when most of the operational planning matters; the post-enactment 90-day cliff is for executing a plan, not building one.
B. Day 0 Deliverables (Day of CLARITY Signature)
CFTC registration-readiness checklist complete. QDAC agreement signed or LOI executed. Customer-notification plan drafted in plain English explaining what registration changes for the customer’s account experience. Internal compliance training module live for trading, customer service, and risk operations staff. Personnel-licensing inventory complete (which staff hold Series 3, 30, 32; which need to acquire NFA registration during the provisional window). Board governance materials drafted (charter amendments, conflict-of-interest policy, independent-director representation analysis).
C. Day 180 Deliverables (Registration Window Opens, On CFTC Rule Publication)
File the anticipated CFTC exchange-registration form (likely “Form DCE-1”) or the applicable broker/dealer form. Submit signed QDAC agreements, SOC 2 Type II audit documentation (or an audit timeline acceptable to staff), AML/CFT program documentation, and all conflict-of-interest disclosures. Apply for provisional status. For dual-registered operations, file the SEC ATS form or broker-dealer registration on the parallel track. Submit the complete personnel-licensing roster with NFA registrations pending or complete. The 90-day window from this date is the Registration Cliff.
D. Day 270-540 Deliverables (Provisional Period; Rulemaking Tracking)
Monitor CFTC final rules on market surveillance technology, anti-fraud and anti-manipulation protocols, position limits, and customer-disclosure formats. Submit comment letters during the public-comment windows with practitioner-grade specificity — generic “the framework is welcome” comments are useless; detailed examples of how proposed mechanics fail or succeed for actual exchange architectures get incorporated into final rules. Implement required trading halts and reporting procedures as interim standards crystallize. Budget for ongoing compliance: annual SOC 2 audits, market-surveillance technology vendor contracts, dedicated compliance headcount, and counsel retainer for the comment-period engagement.
The 90-day window opens the day CFTC publishes its expedited rule — not the day of enactment. Every architecture decision the next nine months can move forward on statute-derived ground: custody contracts, segregation policies, board governance, personnel-licensing inventory, conflict-of-interest disclosures. The exchange that builds the application stack now is the exchange that files in Week 1 of the window. The exchange that waits for final rules is the exchange that files with two months left on a 90-day clock, against a Section 405 QDAC market that has not absorbed a registration cohort of this size at this speed. That is not a posture any GC wants to argue from.
Astraea Counsel works with exchange GCs and CCOs on the full dual-track application stack — CFTC Title IV scoping, SEC Title III parallel registration where ICAs touch the order book, QDAC architecture under Sections 310 and 405, and the personnel-licensing inventory across NFA and FINRA. Scope a Registration Readiness Assessment with us to map your current state-MTL footprint, custody architecture, and expected post-enactment token-listing profile against the 180/90/270 calendar. Intake is exchange-readiness-scoping.
Related Resources
- The DeFi Decentralization Test Under CLARITY: A Mechanics Guide to Section 309’s Control-Surface Analysis (Article 2 of this series)
- The Stablecoin Issuer’s Dual-Framework Roadmap: GENIUS Act PPSI Compliance and the Pending CLARITY Act Yield Compromise (Article 3 of this series)
- The CLARITY Act: CFTC and SEC Jurisdictional Divisions Explained (foundational hub)
- Qualified Crypto Custodians: Regulatory Requirements 2025 (cross-reference for Section 405 QDAC framework)
- Crypto Exchange License: State Requirements 2025 (cross-reference for state-MTL footprint under Section 308 narrowing scenario)
Footnotes
-
H.R. 3633, Digital Asset Market Clarity Act of 2025, 119th Cong. (as passed by the House, July 17, 2025), available at https://www.congress.gov/bill/119th-congress/house-bill/3633/text. ↩
-
CoinDesk, “Clarity Act Clears U.S. Senate Committee on Its Way to a Final Test in Congress” (May 14, 2026), available at https://www.coindesk.com/policy/2026/05/14/clarity-act-clears-u-s-senate-committee-on-its-way-to-a-final-test-in-congress. ↩
-
S. 3755, Digital Commodity Intermediaries Act, 119th Cong. (Senate Agriculture Committee version, advanced Jan. 29, 2026), available at https://www.congress.gov/bill/119th-congress/senate-bill/3755/text. ↩
-
Senate Banking Comm., Manager’s Amendment to H.R. 3633 (May 12, 2026 text), available at https://www.banking.senate.gov/imo/media/doc/market_structure_draft.pdf. ↩ ↩2
-
H.R. 3633 § 401 (CFTC jurisdiction over digital commodity transactions). ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
Commodity Exchange Act § 5i (digital commodity exchange registration), as added by H.R. 3633 § 404. ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8
-
Commodity Exchange Act § 4u (digital commodity broker/dealer registration), as added by H.R. 3633 Title IV. ↩ ↩2 ↩3
-
H.R. 3633 § 201 (investment contract asset; jurisdictional pivot from SEC to CFTC at secondary-market trading). ↩ ↩2 ↩3
-
Securities Exchange Act § 15(a), 15 U.S.C. § 78o(a) (broker-dealer registration baseline). ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
H.R. 3633 § 310 (treatment of custody activities by banking institutions). ↩ ↩2 ↩3
-
CFTC v. Ooki DAO, No. 3:22-cv-05416 (N.D. Cal. June 8, 2023) (CEA jurisdictional reach over non-registered intermediaries). ↩ ↩2 ↩3 ↩4 ↩5
-
17 C.F.R. § 38.3 (designated contract market application procedures); see also Form DCM (CFTC). ↩
-
Commodity Exchange Act § 5(d), 7 U.S.C. § 7(d) (23 Core Principles for designated contract markets); 17 C.F.R. Part 38 (DCM operational requirements); see Katten Muchin Rosenman LLP, So You Want to Apply to Become a CFTC-Registered DCM? (2024) (documenting that DCM applications routinely run “well beyond the statutory period”). ↩ ↩2 ↩3 ↩4
-
SEC v. Coinbase, Inc., No. 1:23-cv-04738 (S.D.N.Y.) (dismissed by stipulation Feb. 27, 2025) (March 2024 ruling sustained SEC theory that Coinbase operated as unregistered broker, exchange, and clearing agency for assets alleged to be securities). ↩ ↩2 ↩3 ↩4
-
SEC v. Binance Holdings, Ltd., No. 1:23-cv-01599 (D.D.C. June 5, 2023) (alleging exchange, broker-dealer, and clearing-agency registration violations against mixed commodity-security exchange). ↩ ↩2 ↩3 ↩4
-
H.R. 3633 § 307 (dual-registration permission; SEC national securities exchange or ATS may also register as CFTC digital commodity exchange). ↩
-
Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets, Securities Act Release No. 33-11412 (Mar. 17, 2026), available at https://www.sec.gov/files/rules/interp/2026/33-11412.pdf (establishing the “traveling investment contract” doctrine and the five-category taxonomy classifying BTC, ETH, SOL, ADA, DOGE, XRP, and AVAX as digital commodities). ↩ ↩2 ↩3 ↩4 ↩5
-
SEC v. Ripple Labs, Inc., No. 1:20-cv-10832 (S.D.N.Y. July 13, 2023) (primary/secondary market bifurcation under investment-contract analysis). ↩ ↩2
-
SEC v. Telegram Grp., Inc., 448 F. Supp. 3d 352, 357 (S.D.N.Y. 2020) (treating the SAFT and the anticipated distribution of Grams “as part of a single scheme” comprising a single investment contract subject to the Securities Act’s registration requirement). ↩ ↩2
-
Methodology for reconciliation forecast (§IX): inputs include filed amendments to H.R. 3633 and S. 3755 as of May 14, 2026; industry comment letters submitted to House Financial Services and Senate Banking Committees; reported reconciliation positions from CoinDesk, The Block, and Bloomberg Law as of May 14, 2026; and Senate Banking Committee staff guidance. ↩ ↩2 ↩3
-
H.R. 3633 § 405 (qualified digital asset custodian). ↩ ↩2 ↩3 ↩4
-
CFTC v. BitMEX, No. 1:20-cv-08132 (S.D.N.Y. Aug. 10, 2021) ($100M penalty; DCM/SEF/FCM violation framework against offshore venue serving U.S. customers). ↩
-
CFTC v. FTX Trading Ltd., No. 1:22-cv-10503 (S.D.N.Y. 2024) ($12.7B judgment; customer-funds commingling as core CEA violation). ↩ ↩2
-
H.R. 3633 § 309 (SEC DeFi activities exclusion; preserves anti-fraud authority). ↩ ↩2
-
Commodity Exchange Act § 4d, 7 U.S.C. § 6d (FCM customer-fund segregation requirements). ↩ ↩2 ↩3 ↩4
-
National Futures Association registration architecture: Series 3 (commodity-futures registered representative), Series 30 (branch manager), Series 32 (associated person of introducing broker); NFA Bylaw Sec. 301. ↩
-
CFTC Digital Assets Pilot Program for Tokenized Collateral (Dec. 8, 2025), Press Release No. 9146-25, available at https://www.cftc.gov/PressRoom/PressReleases/9146-25 (permitting BTC, ETH, and USDC as FCM margin under no-action position). ↩
-
SEC’s proposed digital-asset custody rule for registered broker-dealers (in development as of May 2026) — separate from Section 405 QDAC framework; may apply to SEC-registered exchanges doing custody business as an additive requirement. ↩
-
CFTC Acting Chairman Caroline D. Pham, Back-to-Basics Enforcement Policy (Apr. 2025), CFTC Press Release No. 9104-25, available at https://www.cftc.gov/PressRoom/PressReleases/9104-25. ↩
-
Hester M. Peirce, Comm’r, U.S. Sec. & Exch. Comm’n, Request for Information on National Securities Exchanges and ATSs Trading Crypto Assets (Dec. 17, 2025), available at SEC.gov. ↩
-
Methodology for reconciliation forecast probabilities: see footnote 21 above. The Sec. 401-405 architecture is identical in the House-passed text and the Senate Banking manager’s amendment, supporting the LOW (10-15%) likelihood of material change. Sec. 308 preemption probabilities reflect public statements by CA, NY, and MA state regulators and reported floor amendment plans. ↩ ↩2
-
Senate Banking Committee Majority, “Myth vs. Fact: The CLARITY Act” (2026), available at https://www.banking.senate.gov/newsroom/majority/myth-vs-fact-the-clarity-act. ↩