SEC Innovation Exemption 2026: A Founder's Decision Guide

I. What Is the SEC Innovation Exemption: The Three-Part Framework at a Glance

For the past decade, Howey was the test the SEC used to say no. On March 17, 2026, Chair Paul Atkins announced an Innovation Exemption that uses Howey to say yes – three new pathways with the doctrine’s own fourth prong, the cessation of essential managerial efforts, as the registration architecture’s load-bearing element.¹ The rulemaking package has been at OIRA pre-publication review since April 6, 2026,² and could publish as a Notice of Proposed Rulemaking any day.

The framework has three parts: a Startup Exemption capping early-stage raises at $5 million over four years, a Fundraising Exemption capping mid-scale raises at $75 million per twelve-month period, and an Investment Contract Safe Harbor that lets tokens transition from security to non-security status when the issuer’s essential managerial efforts cease. For crypto founders who spent the last decade in regulatory limbo, this is what they asked for. None of the three pillars is final, and structural challenges to the safe harbor’s legal authority are already being prepared – founders who treat the rule as litigation-proof will be the ones surprised.

The taxonomy released by the SEC and CFTC the same day Atkins delivered his Token Safe Harbor speech answered the question that has paralyzed crypto founders for years: what is my token?³ The Innovation Exemption answers a different question: how do I bring it to market? For founders sitting on capital decisions today, the answer reshapes Reg D, Reg S, and Reg A+ economics for the next generation of token offerings.

This article is the founder-grade decision tree before the NPRM publishes – not the institutional explainer Big Law has written ten times over the past six weeks,⁴ but a guide to which pathway fits which token archetype, what each exemption likely requires, and where the rule’s legal vulnerabilities sit.

II. What Atkins Actually Proposed: A Three-Part Framework

The framework is not one rule. It is three. Each piece addresses a different scale of token offering, carries different requirements, and interacts differently with the existing exemption stack. Founders need all three, because the right pathway depends on offering size, network maturity, and how aggressively the project pushes toward decentralization.

A. The Startup Exemption: $5 Million Over Four Years

The startup exemption is the de minimis pathway for early-stage projects. As Atkins described it, the exemption permits a token issuer to raise up to $5 million over up to four years, subject to principles-based disclosure obligations.¹ The framing is founder protection: a project at seed-and-Series-A scale should not have to retain Cooley-grade securities counsel and run a full Reg D 506(c) verification process to launch a token.

The $5 million cap is small relative to Reg A+ Tier 2’s $75 million ceiling, 17 C.F.R. § 230.251 et seq., but the four-year duration window distinguishes it from instantaneous registration exemptions: it functions as a runway during which the issuer can develop the network, distribute the token, and – if the project succeeds – graduate to the fundraising exemption, a registered offering, or the safe harbor’s status-based exit. Disclosure is principles-based – narrative, whitepaper-style materials covering the project, team, token economics, and risks – rather than prescriptive Form 1-A or Form C requirements. Antifraud liability is fully preserved under Section 17(a) of the Securities Act, 15 U.S.C. § 77q, and Rule 10b-5; AML and KYC are integrated through the Bank Secrecy Act framework, 31 U.S.C. § 5311 et seq., likely cross-referencing the GENIUS Act’s Permitted Payment Stablecoin Issuer obligations.

Operational mechanics remain TBD until the NPRM publishes. Whether the $5 million cap is gross or net of expenses; whether the four-year window measures from first sale or a defined launch event; whether secondary trading is permitted within the runway; and – most consequentially – whether the exemption qualifies for covered-security treatment under Section 18(b)(3) or 18(b)(4) of the Securities Act, 15 U.S.C. § 77r. The (b)(3) versus (b)(4) distinction is operational: (b)(3) tracks the qualified-purchaser pathway used by Reg A+ Tier 2, while (b)(4) is the statutorily enumerated pathway used by Reg D 506 – the difference between fifty-state blue-sky review and single-track federal preemption is the deciding cost factor for mid-size raises. The cap-and-clock structure is confirmed; the mechanics are not.

For founders raising under $5 million, the startup exemption is likely the cheapest pathway – but only if the NPRM delivers covered-security preemption, principles-based disclosure, and reasonable secondary-trading rules.

B. The Fundraising Exemption: $75 Million Per Twelve Months

The fundraising exemption is the mid-scale pathway. Atkins described it as permitting up to $75 million per twelve-month period, with structured financial disclosures.¹ The cap is deliberately identical to Regulation A+ Tier 2 – a signal the SEC is building a crypto-tailored Reg A analogue rather than reinventing the architecture.

What likely distinguishes it from Reg A+ Tier 2 is disclosure tailoring. Reg A+ requires Form 1-A with audited financials, ongoing reports (Forms 1-K, 1-SA, 1-U), and a four-to-six-month SEC qualification process. Crypto issuers running through Reg A+ today produce disclosure packages designed for Tier 2 retail securities, then bolt on token-economic, smart-contract-risk, and decentralization-roadmap disclosures because no native template exists. The fundraising exemption is the chance to fix this: structured schedules built around what crypto investors actually evaluate – token allocations, vesting, governance distribution, validator architecture, treasury management – rather than what a 1933-Act drafter would have included. The pathway needs Section 18 covered-security preemption to be a viable Reg A+ alternative; the speech’s explicit Reg A+ comparison suggests the SEC understands this.

Operational mechanics TBD. Whether the SEC qualification process will be expedited (Reg A+‘s four-to-six-month window is the rail’s biggest weakness for crypto issuers; without an expedited track, the fundraising exemption is Reg A+ in a different costume); whether existing Reg A+ qualifications can convert without restarting; whether secondary trading will be permitted on registered exchanges or only on alternative trading systems; whether qualification staff will be experienced enough with token-specific disclosure to keep the timeline meaningful.

For founders raising between $5 million and $75 million, the fundraising exemption likely competes directly with Reg A+ Tier 2 and Reg D 506(c). Which wins depends on disclosure burden, qualification timeline, and whether the new pathway delivers cleaner secondary-trading mechanics.

C. The Investment Contract Safe Harbor: Status-Based Exit

The third pillar is the headline. Atkins proposed an investment contract safe harbor under which a token initially offered as a security can transition to non-security status when the issuer’s essential managerial efforts cease.¹ The exit is status-based, not time-based. There is no four-year clock built into the safe harbor itself.

The doctrinal architecture matters. Atkins did not propose to declassify securities by administrative fiat. He proposed to operationalize Howey itself: SEC v. W.J. Howey Co., 328 U.S. 293 (1946), defines an investment contract as requiring an expectation of profit derived from the entrepreneurial or managerial efforts of others. The SEC’s theory is that when those essential managerial efforts cease, the fourth Howey prong dissolves and the investment-contract relationship factually terminates – an extrapolation from Howey the SEC will defend, but one no Supreme Court case has endorsed at the cessation step. The safe harbor provides bright-line evidentiary triggers – semi-annual disclosures on decentralization progress, governance distribution, validator counts, token allocation changes, material network events – for what the SEC argues is a doctrinal conclusion Howey already supports. The architecture tracks Peirce’s Proposed Rule 195 modified for status-based exit: an issuer that elects in accepts initial registration relief in exchange for ongoing disclosure cadence; antifraud liability under Section 17(a), Section 10(b), 15 U.S.C. § 78j(b), and Rule 10b-5 survives throughout.

The exit triggers when the issuer’s essential managerial efforts cease. The bright-line operational triggers most likely include completion of the represented network functionality, distribution of governance authority across a defined validator set, code immutability or community-governed upgrades with adequate time-locks, and absence of issuer control over treasury or fee distribution. The exit test is expected to align with the SEC/CFTC taxonomy’s three-factor digital-commodity test³ – meaning a project satisfying the safe-harbor exit also satisfies the taxonomy’s commodity-classification criteria – though the alignment is not yet codified.

This is meaningfully different from how trade press has covered the framework. The colloquial “Token Safe Harbor 3.0” framing implies a categorical exemption that converts securities into non-securities by SEC rule. The actual proposal is doctrinally tighter: a Howey-faithful factual-cessation rule – at least on the SEC’s reading – that the SEC will defend under the framework Howey itself supplies. The distinction has material consequences for the rule’s litigation vulnerability, addressed in section III.D.

For founders building L1/L2 protocols or DeFi infrastructure with credible decentralization roadmaps, the safe harbor is the most consequential of the three exemptions. But the “status, not timer” architecture means founders cannot simply schedule the exit; they have to engineer the cessation.

III. How the Innovation Exemption Differs from Peirce’s Token Safe Harbor 1.0 and 2.0

The Innovation Exemption did not arrive in a vacuum. It descends from a six-year doctrinal experiment that began with a single Commissioner’s proposal and ended with a Chair willing to drive it through OIRA. Understanding the lineage matters, because trade press has treated this as “Token Safe Harbor 3.0” – a framing that overstates institutional continuity in ways that affect how confidently founders should rely on the rule.

A. Origins: Peirce’s Token Safe Harbor 1.0 and 2.0

The original proposal was Commissioner Hester Peirce’s Running on Empty speech of February 6, 2020, the package now colloquially called Token Safe Harbor 1.0.⁵ Peirce floated a three-year regulatory grace period during which network developers could distribute tokens, build infrastructure, and reach what she called Network Maturity – the point at which the network was either functional or sufficiently decentralized that Howey’s fourth prong no longer attached. Token Safe Harbor 2.0, released as Proposed Rule 195 on April 13, 2021, refined the architecture but kept the three-year window.⁶ Both proposals were single-Commissioner work product, never Commission action.

B. What Survived from Peirce’s Framework

What conceptually survived from Peirce’s framework into Atkins’s: the disclosure regime built around decentralization milestones, the exit test grounded in essential-managerial-efforts cessation, semi-annual disclosures during the runway, and antifraud preservation throughout. The doctrinal architecture – a runway-then-exit structure under which a network earns its way out of investment-contract status – is Peirce’s.

C. What Atkins Changed

What Atkins changed is more important than what he kept. Atkins’s safe harbor uses a status test, not Peirce’s three-year clock; the startup exemption is a separate pillar with its own four-year duration cap (which trade press has confused with the safe harbor’s nonexistent timer); the framework is coupled with the March 2026 SEC/CFTC five-category token taxonomy that gives the cessation test an objective classification anchor; and – for the first time in this lineage – a Chair is driving rulemaking through OIRA rather than circulating an aspirational policy statement. The institutional posture is fundamentally different.

The “3.0” framing is shorthand. The reality is that Atkins’s framework draws on Peirce’s work but is not Peirce’s proposal. Founders relying on the framework should source their understanding from Atkins’s March 17, 2026 speech, the eventual NPRM, and the SEC/CFTC interpretive release that frames the underlying classification regime³ – not from Peirce 1.0/2.0, which never reached Commission action and which differ in important respects.

D. The Exemptive-Authority Challenge Risk: Loper Bright + Howey Fidelity

The framework’s most attractive feature – the Investment Contract Safe Harbor’s status-based exit – is also its most legally vulnerable. The elements of an APA challenge are already visible to sophisticated practitioners, and founders should understand the shape of that challenge before treating the safe harbor as a settled regulatory fixture.

The cleanest version of the SEC’s defense is doctrinal. The safe harbor does not declassify securities by fiat. It operationalizes Howey itself: when the issuer’s promised “essential managerial efforts” cease, the fourth Howey prong dissolves and the investment-contract relationship factually terminates. The semi-annual-disclosure runway and decentralization milestones supply bright-line evidentiary triggers for a doctrinal conclusion Howey already supports. Section 28 of the Securities Act, 15 U.S.C. § 77z-3, provides express discretionary authority for the startup and fundraising exemptions during the runway. Even after Loper Bright Enterprises v. Raimondo, 144 S. Ct. 2244 (2024), Section 28’s “necessary or appropriate in the public interest, and is consistent with the protection of investors” language preserves substantial agency discretion within its boundaries.

The cleanest version of the attack runs differently. Loper Bright eliminated Chevron deference for ambiguous statutes. Skidmore deference – which gives weight to agency interpretations only to the extent they are persuasive – survives, but it is meaningfully weaker than Chevron, and the SEC cannot count on it. What Loper Bright preserved is express statutory delegations: where Congress gives an agency explicit discretion (as Section 28 arguably does), the agency retains substantial authority within the delegated boundaries. Challengers will argue that “investment contract,” as defined in Section 2(a)(1) of the Securities Act and elaborated by Howey, sits outside Section 28’s delegated boundary – that Section 28 authorizes exemptive rulemaking but not redefinition of the underlying definitional category. The closest on-point precedent is Financial Planning Association v. SEC, 482 F.3d 481 (D.C. Cir. 2007), in which the D.C. Circuit vacated an SEC rule that used general rulemaking authority to redefine a statutory category Congress had already addressed. The FPA court’s framing – quoting the Supreme Court’s holding in Board of Governors of the Federal Reserve System v. Dimension Financial Corp. – was direct: “the [SEC] has no power to correct flaws that it perceives in the statute it is empowered to administer.”⁷ A second front of attack is that the safe harbor’s bright-line proxies are themselves contestable as SEC-imposed rulemaking that goes beyond Howey’s factual test. Add the major-questions doctrine overlay – the proposition that resolving the regulatory status of a multi-trillion-dollar asset class is the paradigmatic “extraordinary case” demanding explicit Congressional authorization, West Virginia v. EPA, 142 S. Ct. 2587 (2022)⁸ – and the safe harbor’s vulnerability to APA challenge is real.

A defender will distinguish FPA on its facts, and the distinction has real force. FPA invalidated a rule that redefined a statutory exclusion Congress had drawn – the broker-dealer exclusion from “investment adviser” – whereas the Innovation Exemption leaves “investment contract” as Section 2(a)(1) defines it and provides exemptive relief under Section 28’s express delegation. Exemption is doctrinally distinct from redefinition. The rebuttal is that the safe harbor’s bright-line proxies – validator counts, governance analytics, treasury protocols – effectively redefine when Howey’s fourth prong attaches and dissolves. Whether that operates as exemption (Section 28 territory) or as definitional gloss (outside Section 28) is the litigated question. Both sides have real arguments. This article’s thesis does not turn on which wins; it turns on the litigation being live.

The SEC will not be without responses. Section 28 has been on the books since 1996, used dozens of times for crypto and non-crypto exemptive rulemakings including Reg A+‘s 2015 expansion. The major-questions doctrine targets unprecedented assertions of authority, not routine exemptive rulemaking, and a defender will argue the Innovation Exemption is precisely the clarification Congress invited. Loper Bright’s express-delegation carve-out leaves room for agency discretion within Section 28’s boundaries – whether the cessation theory and its bright-line proxies stay within those boundaries is the litigated question. Reasonable judges will disagree.

None of this means founders should ignore the safe harbor. When the rule is finalized, compliance will be necessary. But it does mean compliance is necessary-but-not-sufficient. Until the rule clears APA challenge in a circuit court – and recent Fifth Circuit jurisprudence vacating SEC action on statutory-authority grounds is unmistakable: Nat’l Ass’n of Private Fund Managers v. SEC, 103 F.4th 1097 (5th Cir. 2024) (vacating the SEC’s private fund advisers rule in full); see also All. for Fair Bd. Recruitment v. SEC, 125 F.4th 159 (5th Cir. 2024) (en banc) (9-8 decision vacating SEC’s approval of Nasdaq board diversity rules; invoking major-questions doctrine and holding the SEC failed to identify clear congressional authorization for rules of “staggering” economic and political significance), together with the D.C. Circuit’s FPA v. SEC precedent – founders should structure offerings as if the safe harbor might be vacated. The Alliance en banc opinion is particularly relevant: a 9-8 majority found the SEC’s statutory-authority showing inadequate for a rule far less aggressive than redefining when a Howey fourth prong dissolves. Preserve registration and Regulation D exemption optionality during the runway. Document decentralization to Howey-rigor levels, not just to the safe harbor’s bright-line proxies. Build cap-table flexibility for voluntary registration if the cessation test fails or the rule is invalidated. Statutory clarification through the CLARITY Act framework, if enacted, would moot most of these concerns; until then, the safe harbor is a probabilistic compliance vehicle, not a regulatory fixture.

The most coherent crypto-securities framework Washington has produced may also be its most vulnerable. Treat the Investment Contract Safe Harbor as a probabilistic compliance vehicle, not regulatory bedrock – and structure offerings to survive without it.

IV. The Decision Matrix: Innovation Exemption vs. Reg D vs. Reg S vs. Reg A+ vs. Wait-for-CLARITY

A founder making capital decisions in May 2026 has five live pathways. Each carries different cost, timeline, investor pool, marketing rules, secondary-market posture, and – critically – state-law preemption status. Cost differentials between covered-security pathways (single-track federal compliance) and non-preempted pathways (fifty-state blue-sky filings) are often the deciding factor for mid-size raises, not the cap or timeline.

*Innovation Exemption pathways are pending NPRM publication; all “TBD” mechanics will be confirmed in the NPRM text. As of May 2026, the rulemaking package is at OIRA pre-publication review under Executive Order 12866 (submitted on or before April 6, 2026). Reg D 506(b)/(c) holding periods are 12 months for non-reporting issuers, 6 months for Exchange Act reporting issuers under Rule 144.

Reg D 506(c) wins on speed when the investor pool is sophisticated. The four-to-eight-week timeline, federal preemption under Section 18(b)(4)(F) of the Securities Act, 15 U.S.C. § 77r(b)(4)(F), and public-marketing permission make 506(c) the dominant rail for tokens raising from accredited investors. The trade-off is the twelve-month holding period and secondary-trading restrictions; both compress the liquidity profile founders can offer.

Reg A+ Tier 2 wins on retail liquidity. The $75 million cap, audited-financials and ongoing-reporting cost, four-to-six-month qualification timeline, and $200K-to-$400K+ legal-and-accounting bill are the price of (a) selling to non-accredited investors, (b) immediate secondary-trading permission, and (c) covered-security preemption under Section 18(b)(3) of the Securities Act, 15 U.S.C. § 77r(b)(3) – the qualified-purchaser pathway, not the (b)(4) statutorily-enumerated pathway some practitioners conflate.

The Innovation Exemption pathways win on the dimensions Reg D and Reg A+ leave open, but only if the NPRM delivers what Atkins’s speech promised. The Startup tier likely wins for early-stage projects under $5 million if the rule delivers covered-security status and principles-based disclosure – materially cheaper than Reg D 506(c)‘s verification regime. The Fundraising tier likely competes with Reg A+ Tier 2 for mid-size raises if the qualification track is genuinely expedited and the disclosure schedule is crypto-tailored; if not, it is Reg A+ in a different costume. The Safe Harbor wins for tokens with credible decentralization roadmaps that can engineer essential-managerial-efforts cessation – carrying the legal-vulnerability discount in section III.D.

Waiting for the CLARITY Act is the conservative play. The Tillis-Alsobrooks compromise of May 1-2, 2026 restored momentum after the stablecoin-yield deadlock,⁹ and the White House has set a July 4, 2026 passage target. If CLARITY passes, the Innovation Exemption framework becomes statutory, the legal-vulnerability discount disappears, and the regulatory architecture settles. Banking-industry pushback active as of May 6, 2026 makes the timeline uncertain.¹⁰ Projects that can defer six-to-twelve months without competitive consequence may wait; most cannot.

Founders raising under $5 million should compare Innovation Exemption Startup against Reg D 506(b)/(c) once the NPRM publishes. Founders raising $5-75 million should compare Innovation Exemption Fundraising against Reg A+ Tier 2 once the NPRM publishes. Founders building decentralization-track protocols should compare the Safe Harbor against waiting for CLARITY – but should not assume the Safe Harbor is litigation-proof.

V. Token-Archetype Mapping: Which Pathway Fits Your Project

The decision matrix is the abstract version. The decision tree below maps the matrix to the token archetypes founders actually build. Use the same archetype framework as the SEC/CFTC token taxonomy’s five categories³ – the classification analysis sits upstream of every exemption decision.

A. Governance Token Under $5 Million Raise

If the token confers governance rights without revenue distribution and the launch capital fits within $5 million, the Startup Exemption is the likely best fit – assuming the NPRM delivers covered-security preemption. Reg D 506(c)‘s accredited-only verification regime is overkill for governance tokens that need broad community distribution to function as governance tokens. But governance tokens that distribute revenue or confer claims on a treasury asset pool may be classified as digital securities under the taxonomy, in which case the Startup Exemption’s principles-based disclosure may not provide adequate investor protection, and the project should default to Reg D 506(c) or the Fundraising tier even at sub-$5-million scale. The classification analysis is upstream; do not skip it. Cross-reference: SEC/CFTC token taxonomy, five-category framework.

B. Utility Token, $20 Million to $50 Million Raise

If the token provides genuine network utility with a clear functional purpose at launch and the raise sits between $20 million and $50 million, the comparison is between Reg A+ Tier 2 and the Fundraising tier. Reg A+ wins today on certainty – the rail is live, the disclosure framework is settled, the qualification timeline is predictable. The Fundraising tier wins if the NPRM delivers an expedited qualification track and a disclosure schedule built around token-specific risks. The conservative call: start Reg A+ Tier 2 preparation in parallel with monitoring NPRM developments, convert to the Fundraising tier if the rule publishes with favorable mechanics, default to Reg A+ if not. Dual-tracking the early disclosure work is modest cost relative to the option value.

C. L1/L2 Token with Multi-Year Decentralization Plan

The Investment Contract Safe Harbor is the natural fit – and the most legally fraught. Layer-1 and Layer-2 protocol tokens have credible paths to essential-managerial-efforts cessation: validator distribution, governance handoff to community-controlled DAOs, code immutability with time-locked upgrades, and absence of issuer control over treasury or fee distribution. Documenting the decentralization milestones to Howey-rigor levels, while running semi-annual disclosure cadence, is the operational discipline the safe harbor will reward.

But the Loper Bright + Howey-fidelity vulnerability in section III.D applies most acutely here. The L1/L2 founder is making a multi-year capital and architecture commitment on a rule that has not survived APA challenge. The mitigation discipline is heavy: document decentralization to Howey-rigor levels rather than to the safe harbor’s bright-line proxies; preserve registration optionality – a parallel Reg A+ qualification track or pre-built Reg D 506(c) compliance materials – so a vacatur or cessation failure does not collapse into a Howey-only defense. Treat the safe harbor as the most likely path; treat alternatives as fallback architecture.

C.1. The Cessation-Failure Path – What If Your Network Never Achieves Essential-Managerial-Efforts Cessation

The Investment Contract Safe Harbor’s most attractive feature is also its most dangerous. Founders adopting this pathway need to plan for cessation success and cessation failure from year zero. The failure scenarios are not edge cases. They are the foreseeable outcome for the meaningful subset of L1/L2 projects whose teams continue making material decisions about protocol direction, fee distribution, and treasury management long past the runway.

If the cessation test is never satisfied – because the founding team continues to drive material network decisions, or because the network’s operational reality remains centralized despite token-distribution choreography – the safe harbor never triggers. The token remains an investment contract. The project does not default to a clean status; it defaults to enforcement uncertainty for an unregistered securities offering.

The exposure architecture matters. Section 12(a)(1) of the Securities Act, 15 U.S.C. § 77l(a)(1), provides purchasers of unregistered, non-exempt securities a strict-liability rescission claim. Section 13, 15 U.S.C. § 77m, sets a one-year limitations period for Section 12(a)(1) claims (running from the violation, with no discovery rule) and a three-year statute of repose running from the date the security was bona fide offered to the public. Whether the safe-harbor pendency tolls the limitations clock will be a litigated question; founders should not assume tolling. The repose is not subject to equitable extension. Cal. Pub. Emps.’ Ret. Sys. v. ANZ Sec., Inc., 137 S. Ct. 2042 (2017).

The Wells-notice posture compounds the exposure. SEC enforcement counsel will tee up Wells notices when issuers withdraw from safe-harbor compliance without satisfying the cessation test, and the project’s prior reliance on the safe harbor becomes record evidence of awareness of the registration requirement – which can support scienter findings on related Section 17(a) and Rule 10b-5 claims. The mechanic is not hypothetical. Cf. SEC v. LBRY, Inc., No. 1:21-cv-00260, 2022 WL 16744741 (D.N.H. Nov. 7, 2022) (rejecting issuer’s reliance on the absence of an ICO as a safe harbor against Section 5 liability and holding that the issuer’s own statements and internal documents supplied adequate evidence that token purchasers were led to expect profits from the issuer’s efforts). LBRY’s regulatory-positioning theory was different from a safe-harbor election, but the doctrinal mechanic is the same: pre-enforcement regulatory posture becomes record evidence at the merits stage. The defense framework the firm has previously analyzed in SEC Crypto Enforcement Defense: What to Do When You Get a Wells Notice applies to this scenario, with the additional complication that the project’s safe-harbor election sits in the SEC’s file.

The Loper Bright vacatur scenario is the catastrophic version. If the safe harbor itself is invalidated on APA review (per section III.D), founders who structured offerings around the rule face retroactive Howey exposure on the original offering and every subsequent transfer. Investors retain Section 12(a)(1) rescission claims for the full repose window. Preserved Reg D 506(c) compliance and Reg A+ qualification optionality are the only protection.

The taxonomy mismatch risk adds a third failure mode. The safe-harbor exit test is expected to align with the SEC/CFTC taxonomy’s three-factor digital-commodity test³ – but the alignment is not codified as of OIRA review. A project could satisfy the cessation test without satisfying the taxonomy’s digital-commodity criteria, leaving post-cessation status ambiguous. Or vice versa. Founders should not assume alignment until the NPRM confirms it.

The mitigation discipline writes itself. Preserve Reg D 506(c) compliance during the runway so a cessation failure does not collapse into a Howey-only defense. Document decentralization to Howey-rigor levels – validator metrics, governance analytics, code-immutability commitments, treasury protocols – not only to the safe harbor’s bright-line proxies. Build Reg A+ qualification optionality into the cap table. Track Section 13 repose clocks per offering tranche; the three-year repose is the operational planning horizon for catastrophic exposure.

The cessation test is the safe harbor’s most attractive feature AND its most dangerous one. Founders adopting this pathway should plan for both cessation success AND failure from year zero. The catastrophic scenarios converge on the same mitigation: build the offering to survive without the safe harbor’s protection.

D. DeFi Protocol Token

DeFi protocol tokens are the hardest case. The CLARITY Act’s three-factor DeFi test (no unilateral control over user assets, immutable or community-governed software, meaningful decentralization) maps cleanly onto the safe harbor’s cessation criteria. But the doctrinal vulnerability runs deepest here – DeFi protocols are precisely the asset class for which the SEC’s “essential managerial efforts cease” theory is most contestable, because critics argue that protocol-level managerial decisions persist in upgrade authority, parameter setting, and frontend control even after nominal “decentralization.” Cross-reference: The CLARITY Act Explained: CFTC vs. SEC Jurisdiction Defined.

The conservative posture for DeFi protocols is to combine the Safe Harbor with the most rigorous decentralization architecture available – non-custodial design, immutable smart contracts or multi-year time-locked governance, fully open-source code with distributed development, absence of upgrade keys. Safe Harbor compliance plus the strongest possible Howey-cessation factual record gives the project the best chance of surviving APA challenge if the rule is invalidated.

E. Out-of-Scope Archetypes: Memecoins and Stablecoins

Two archetypes generally sit outside the Innovation Exemption’s exemption-selection process. Memecoins and community tokens often fall under the taxonomy’s digital-collectible or digital-tool categories³ – not securities under Howey, no exemption needed – though the trap is that price-appreciation marketing, team-driven roadmaps, or revenue-sharing tokenomics can collapse the analysis back into investment-contract status, in which case the Startup Exemption’s principles-based disclosure is the most likely fit. Stablecoins follow the GENIUS Act Permitted Payment Stablecoin Issuer framework, Pub. L. No. 119-27, 139 Stat. 419 (2025): PPSI-issued payment stablecoins are statutorily defined as not securities under federal law and not commodities under the Commodity Exchange Act, 7 U.S.C. § 1 et seq. The exception is yield-bearing and algorithmic stablecoins, which fall outside PPSI and may be classified as digital securities – the Tillis-Alsobrooks compromise of May 1-2, 2026 attempted to draw the line between permitted “bona fide activities” rewards and prohibited bank-deposit-equivalent yield, but whether that line survives the final CLARITY Act text remains uncertain. Cross-reference: GENIUS Act Stablecoin Compliance Roadmap; Federal vs. State Stablecoin Regulation.

VI. What’s Still Unknown (Honest Open Questions)

The directional shape of the rule is clear. The operational mechanics are not. Founders should treat every requirement above as the most likely interpretation of Atkins’s speech and Peirce’s prior proposals, then verify against the NPRM when it publishes. The unresolved issues are operationally significant and litigation-exposed:

The NPRM text itself remains unpublished as of OIRA review (April 6, 2026 submission). The SEC, as an independent agency, is not bound by Executive Order 12866’s Section 6 review requirements; the Atkins package’s voluntary submission is institutionally significant – it is comity, not mandate. Under OIRA practice implementing EO 12866, the review window is typically up to ninety calendar days, extendable once by thirty days on agency request. Publication could occur as early as the second week of May 2026 or as late as August 2026. Whether the rule frames as a Section 28 exemption from registration or a Howey factual-cessation rule will be the swing variable for the legal-vulnerability analysis in section III.D.

AML and KYC integration remains TBD. The Bank Secrecy Act framework imposes obligations on money services businesses, and the GENIUS Act, Pub. L. No. 119-27, 139 Stat. 419 (2025), brings Permitted Payment Stablecoin Issuers into the BSA framework. Whether the Innovation Exemption pathways will impose comparable obligations, or leave AML/KYC to FinCEN coordination, will determine whether the exemptions are operationally cheaper or more expensive than current Reg D and Reg A+ practice.

State blue-sky preemption status is TBD across all three pathways. NSMIA’s covered-security framework under Section 18 of the Securities Act, 15 U.S.C. § 77r, is the most consequential operational question for mid-size raises. If the Startup Exemption is not a covered security, founders face fifty-state blue-sky filings – effectively pricing the exemption out of the market for any project planning national token distribution. The Fundraising Exemption’s competitiveness with Reg A+ Tier 2 depends entirely on whether it qualifies under Section 18(b)(3). The safe harbor’s runway preemption status will affect how aggressively state regulators can intervene during decentralization.

SEC-CFTC coordination on safe-harbor exit alignment with digital-commodity classification is TBD. The March 17, 2026 joint interpretive release³ established the five-category framework, but whether the cessation test is treated as automatic graduation into digital-commodity status, or whether the CFTC retains authority to challenge the classification, will affect post-cessation regulatory architecture.

The Loper Bright + Howey-fidelity attack discussed in section III.D is the most consequential litigation-exposed open question. Until the rule is tested in a circuit court – recent Fifth Circuit jurisprudence vacating SEC action on statutory-authority and major-questions grounds, Nat’l Ass’n of Private Fund Managers, 103 F.4th 1097, and All. for Fair Bd. Recruitment v. SEC, 125 F.4th 159 (5th Cir. 2024) (en banc), together with the D.C. Circuit’s Financial Planning Association v. SEC, 482 F.3d 481 (D.C. Cir. 2007), precedent, all signal active scrutiny – founders should structure offerings as if the safe harbor might be invalidated.

Banking-industry pushback adds a parallel uncertainty vector. The CLARITY Act stablecoin-yield compromise drew crypto-industry support but is provoking opposition from traditional banks concerned about deposit substitution.⁹ Similar pressure could reach the Innovation Exemption rulemaking – particularly the Fundraising Exemption’s positioning against bank-eligible offerings. Political durability across the next administration transition compounds the legislative uncertainty.

Cross-border issuance treatment remains undefined. Whether a Singapore Pte. Ltd. or Cayman SPV can use the Innovation Exemption pathways for U.S. distributions, and how the rule interacts with Regulation S’s offshore safe harbor, are not addressed in Atkins’s speech and may not be addressed in the NPRM. International issuers with U.S. token-purchaser populations should not assume accommodation.

Retroactive coverage for tokens already issued is uncertain. Whether founders who launched under SAFT structures, Reg D 506(b) private placements, or unregistered offerings can use the Innovation Exemption to remediate prior compliance gaps is not addressed in the speech. The default assumption – prospective application only – is conservative; whether the NPRM provides a transition or retroactive election will materially affect projects with pre-2026 offerings on their cap tables.

The framework is directional, not final. Track NPRM publication; submit specific, solution-oriented comment letters; preserve flexibility in offering documents drafted before the rule publishes.

VII. What Founders Should Do Now

The Innovation Exemption is at OIRA review, not in force. But capital decisions made today will be evaluated against the framework when it publishes. Founders who structure offerings now with the framework in mind will be ready to elect in on day one. Founders who wait for final text will be six months late.

1. Run the Classification Analysis Under the Taxonomy First

If the token is a digital tool, digital collectible, or PPSI-issued payment stablecoin under the SEC/CFTC five-category taxonomy³, no exemption is needed – the token is not a security. The Innovation Exemption pathways are irrelevant. Use the Token Classification Issue Spotter to run the upstream classification analysis before evaluating any exemption. Skipping this step routes founders toward exemptions they may not need.

2. Map the Raise to the Comparison Matrix

For tokens classified as digital securities or sold through investment-contract structures, identify the top two pathways from section IV’s matrix by cap, investor pool, marketing posture, and timeline. The top two will almost always be (a) the Innovation Exemption pathway aligned with the project’s scale, and (b) the live exemption (Reg D 506(c) or Reg A+ Tier 2) that serves as fallback if the NPRM publishes unfavorably or is invalidated on APA review. Plan for both.

3. Build Offering Documents With Optionality

Structure today’s offering documents so the same raise can convert into Innovation Exemption registration when the NPRM ships, or default to the existing exemption pathway if the rule publishes unfavorably. The dual-track work is not free, but the option value is high. Building Reg D 506(c) compliance materials in parallel with monitoring the NPRM is modest cost relative to restructuring an in-flight raise. For projects at $5-million-and-under, dual-tracking Reg D 506(b) and Innovation Exemption Startup is the most defensible posture.

4. Documentation Discipline From Year Zero

Document decentralization milestones, governance distribution, validator counts, code-immutability commitments, and treasury management protocols from first token sale. The cessation test will reward Howey-rigor factual records; the Loper Bright vacatur scenario will require them. Founders who treat decentralization as a milestone-driven engineering effort with documented evidence will have defensible records when the cessation test or the APA challenge arrives. Founders who treat decentralization as marketing language will not.

5. Engage the Comment Process When the NPRM Publishes

The Administrative Procedure Act’s notice-and-comment process is the founder’s leverage point. Submit specific, solution-oriented comment letters when the NPRM publishes – detailed examples of how proposed mechanics fail for actual token architectures, alternatives that maintain investor protection while improving operational viability, demonstrations of industry best practices in use. Generic “the framework is welcome” comments are useless. Practitioner-grade submissions get incorporated into final guidance. The crypto industry left the 2018-2024 enforcement era with weaker authorities than it should have because comment-period engagement was thin. The Innovation Exemption is the chance to fix that.

6. Disclosure Discipline – Antifraud Liability Survives Every Safe Harbor

The Innovation Exemption exempts registration. It does not exempt antifraud liability. Section 17(a) of the Securities Act, 15 U.S.C. § 77q, applies to every offer or sale of any security – including offers and sales inside the safe harbor’s runway. Section 10(b) of the Exchange Act, 15 U.S.C. § 78j(b), and Rule 10b-5 apply to every secondary-market transaction. Misleading whitepapers, exaggerated tokenomics projections, undisclosed conflicts of interest, and overstated decentralization claims remain actionable – by the SEC and by private plaintiffs. The safe harbor does not protect against any of this.

Founders who treat the Innovation Exemption as a license to relax disclosure will be the test cases for the rule’s antifraud preservation. The discipline is straightforward: every disclosure materially accurate when made; every projection reasonably grounded; every conflict disclosed; every milestone claim documented. The Innovation Exemption raises the operational floor for compliant token offerings; it does not raise the ceiling on good-faith disclosure.

The Wells-notice generation of crypto founders learned the cost of waiting for guidance. The Innovation Exemption generation should not repeat the mistake. Build for the rule that is coming, not the rule that exists – but build with disclosure discipline that survives every safe harbor and every regulatory regime.

VIII. Conclusion: The Most Coherent Federal Framework Yet – and the Risks

The taxonomy classified the assets. The Innovation Exemption, if it ships in recognizable form, gives them a registration pathway. The CLARITY Act, if it passes, gives them a jurisdictional home. Together, these three pieces represent the most coherent federal crypto framework the United States has ever proposed – the institutional architecture the industry has been requesting since the SEC’s 2017 declaration of jurisdiction.

Each piece is provisional. The taxonomy is an interpretive release subject to revision under a future administration. The Innovation Exemption is an unpublished NPRM at OIRA review, with credible APA-challenge exposure under Loper Bright and Financial Planning Association v. SEC. The CLARITY Act is pending legislation with active banking-industry pushback as of May 6, 2026. The framework is real; durability is contingent.

The founders who win this transition will not wait for final rules. They will structure today’s offerings to elect into the framework on day one if it ships favorably, default to the existing exemption stack if it does not, and survive APA challenge or political reversal if either occurs. Documentation discipline, optionality, comment-period engagement, disclosure rigor – these translate regulatory transition into competitive advantage.

The founders who lose will treat Atkins’s speech as the final rule, structure offerings as if the safe harbor were litigation-proof, and build decentralization to bright-line proxies rather than to Howey-rigor evidence. The framework is the most coherent the U.S. has produced. It is not bedrock yet – and structuring as if it were is how Wells notices get teed up two years from now.

IX. How Astraea Counsel Helps

Astraea Counsel advises crypto founders on token classification and exemption-pathway selection. Engagement scope typically includes regulatory architecture design across the Reg D, Reg S, Reg A+, and Innovation Exemption stack; offering-document optionality drafting (dual-track Reg D 506(c) plus Innovation Exemption Startup, or parallel Reg A+ qualification); decentralization-milestone documentation to Howey-rigor levels; comment letter drafting for the NPRM record; and Wells Notice defense and pre-Wells posture for offerings sitting at enforcement risk. The firm publishes ongoing analysis of SEC digital-asset rulemaking – see the SEC Crypto Pivot guide, Token Launch Legal Checklist, and Wells Notice defense framework. Explore our Digital Assets & Blockchain services.

Related Resources

• The SEC/CFTC Token Taxonomy: What the Five Categories Mean for Your Token – the classification framework this exemption sits on top of

• The CLARITY Act Explained: CFTC vs. SEC Jurisdiction Finally Defined – the legislative companion piece

• Token Launch Legal Checklist: Avoiding SEC Enforcement in 2025 – the existing exemption pathways the Innovation Exemption competes with

• The SEC’s Crypto Pivot: What the Dismissals and Task Force Mean for Your Startup – the political shift that produced this framework

• Token Classification Issue Spotter – interactive tool to identify your token’s category

---

Disclaimer: This article provides general information for educational purposes only and does not constitute legal advice. The Innovation Exemption framework is at OIRA review and has not been published as a Notice of Proposed Rulemaking; descriptions of likely requirements are sourced to Chair Atkins’s March 17, 2026 speech, Commissioner Peirce’s prior Token Safe Harbor proposals, and industry analysis. Final rule text may differ. Consult qualified legal counsel for advice on your specific offering.

Footnotes

1. Paul S. Atkins, Chairman, U.S. Sec. & Exch. Comm’n, Regulation Crypto Assets: A Token Safe Harbor, Remarks at the DC Blockchain Summit (Mar. 17, 2026), https://www.sec.gov/newsroom/speeches-statements/atkins-remarks-regulation-crypto-assets-031726. ↩ ↩² ↩³ ↩⁴

2. Paul S. Atkins, Chairman, U.S. Sec. & Exch. Comm’n, Opening Remarks at the Digital Assets and Emerging Technology Policy Summit, Vanderbilt Univ. Owen Graduate Sch. of Mgmt. (Apr. 6, 2026), https://www.sec.gov/newsroom/speeches-statements/atkins-remarks-digital-asset-summit-032426 (delivered Apr. 6, 2026; SEC.gov URL slug reflects an internal CMS identifier, not the delivery date) (confirming OIRA submission). ↩

3. Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets, Securities Act Release No. 33-11412, Exchange Act Release No. 34-105020, 91 Fed. Reg. 13,714 (Mar. 23, 2026). ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸

4. See, e.g., Sullivan & Cromwell LLP, SEC and CFTC Issue Interpretation Clarifying Application of Securities Laws to Crypto Assets (Mar. 2026), https://www.sullcrom.com/insights/memo/2026/March/SEC-Clarifies-Application-Securities-Laws-Crypto-Assets; Sidley Austin LLP, SEC Releases Landmark Interpretation on Application of U.S. Securities Laws to Crypto Assets (Mar. 24, 2026), https://www.sidley.com/en/insights/newsupdates/2026/03/sec-releases-landmark-interpretation-on-application-of-us-securities-laws-to-crypto-assets; Davis Polk & Wardwell LLP, SEC Begins to Clarify Application of Federal Securities Laws to Crypto (Mar. 24, 2026), https://www.davispolk.com/insights/client-update/sec-begins-clarify-application-federal-securities-laws-crypto. ↩

5. Hester M. Peirce, Comm’r, U.S. Sec. & Exch. Comm’n, Running on Empty: A Proposal to Fill the Gap Between Regulation and Decentralization, Remarks Before the Int’l Blockchain Cong. (Feb. 6, 2020), https://www.sec.gov/newsroom/speeches-statements/peirce-remarks-blockress-2020-02-06. ↩

6. Hester M. Peirce, Comm’r, U.S. Sec. & Exch. Comm’n, Token Safe Harbor Proposal 2.0 (Apr. 13, 2021), https://www.sec.gov/newsroom/speeches-statements/peirce-statement-token-safe-harbor-proposal-20. ↩

7. Fin. Planning Ass’n v. SEC, 482 F.3d 481, 491 (D.C. Cir. 2007) (“the [SEC] has no power to correct flaws that it perceives in the statute it is empowered to administer”) (quoting Bd. of Governors of Fed. Reserve Sys. v. Dimension Fin. Corp., 474 U.S. 361, 374 (1986)). ↩

8. West Virginia v. EPA, 142 S. Ct. 2587, 2609 (2022) (major-questions doctrine; “extraordinary case” framing). ↩

9. See Helene Braun, CLARITY Act Text Lets Crypto Firms Offer Stablecoin Rewards While Shielding Bank Yield, CoinDesk (May 1, 2026), https://www.coindesk.com/policy/2026/05/01/clarity-act-text-lets-crypto-firms-offer-stablecoin-rewards-while-shielding-bank-yield; Cheyenne Ligon, Crypto Industry Backs CLARITY Act Yield Compromise, Pushes Senate Banking for Markup, CoinDesk (May 2, 2026), https://www.coindesk.com/policy/2026/05/02/crypto-industry-backs-clarity-act-yield-compromise-pushes-senate-banking-for-markup; see also MK Manoylov, Coinbase Says Deal Reached on CLARITY Act Stablecoin Yield, Clearing Path to Long-Stalled Senate Markup, The Block (May 1, 2026), https://www.theblock.co/post/399780/coinbase-says-deal-reached-on-clarity-act-stablecoin-yield-clearing-path-to-long-stalled-senate-markup. ↩ ↩²

10. See Crypto Times, Lummis and Tillis Defend CLARITY Act Stablecoin Compromise as Banking Lobby Mounts Pushback (May 5, 2026), https://www.cryptotimes.io/2026/05/05/lummis-and-tillis-defend-clarity-act-stablecoin-compromise-as-banking-lobby-mounts-pushback/ (joint statement from American Bankers Association, Bank Policy Institute, Consumer Bankers Association, Financial Services Forum, and Independent Community Bankers of America criticizing the Tillis-Alsobrooks compromise). ↩