Security vs. Commodity Crypto: Why Classification Matters and What It Means for Investors, Issuers, and Exchanges

The key difference between a security and a commodity in crypto lies in the economic reality of the transaction: if buyers invest money in a common enterprise expecting profits from others' managerial efforts—satisfying the Howey test—the asset is treated as a security under SEC jurisdiction, whereas decentralized assets like Bitcoin, lacking a central issuer or profit promises, are classified as commodities regulated by the CFTC. This classification dictates disclosure requirements, trading venue legality, and investor protections. Understanding this distinction builds on foundational concepts like how to tokenize real world assets and blockchain clearing and settlement, and directly informs projections around the growing asset tokenization market size.

Related topics in this series:

• Earlier in the series: How to tokenize real world assets
• Also earlier in the series: Blockchain clearing and settlement
• Next topic in the series: Asset tokenization market size

Introduction: The Legal Question Reshaping the Crypto Industry

The crypto industry has grown from a niche experiment into a multi-trillion-dollar global market, yet one fundamental question continues to challenge every participant: which rules apply? For issuers launching tokens, exchanges listing digital assets, institutional investors building portfolios, and retail buyers navigating a complex landscape, the answer to whether a given crypto asset is a security or a commodity shapes virtually every decision they make.

This distinction is not academic. It determines which federal regulator has authority, what disclosures must be provided, how an asset may be offered and traded, what protections are available to buyers, and what penalties apply when rules are broken. A crypto asset sold as an investment contract may be a security under the Howey test, subjecting it to the jurisdiction of the U.S. Securities and Exchange Commission. Bitcoin and certain other virtual currencies, by contrast, have been classified as commodities under the Commodity Exchange Act, placing them within the purview of the U.S. Commodity Futures Trading Commission.

The critical insight that many observers miss is that the same token can require entirely different legal analysis depending on how it is issued, marketed, and used. A token sold to fund the development of a network that does not yet exist, accompanied by promises that the founding team will build value, may constitute an investment contract. That same token, traded years later on a fully decentralized and operational network, may present a very different legal profile. The statement "Token X is a security" is therefore legally incomplete without examining the transaction and circumstances in which it changes hands.

This article's thesis is straightforward: classification is not determined by a token's name, its ticker symbol, or its underlying code. It depends on the economic reality of the transaction, the role of promoters, the expectations of purchasers, the maturity of the network, and the applicable regulatory framework. Understanding this distinction is essential for anyone participating in digital-asset markets, whether as an issuer, investor, exchange operator, or advisor.

What follows covers the legal foundations of the debate, the key concepts that drive classification analysis, the practical consequences for real-world business decisions, illustrative case studies, the most contested issues, and actionable guidance for navigating this evolving landscape.

The Legal Foundations: From Howey to the Commodity Exchange Act

The roots of the security-versus-commodity debate reach back nearly a century. U.S. securities law originated with the Securities Act of 1933 and the Securities Exchange Act of 1934, both enacted in response to the stock-market crash and widespread investor fraud. These statutes established a disclosure-based regime designed to protect investors by requiring issuers to register their offerings and provide material information.

The cornerstone of modern crypto-securities analysis is the U.S. Supreme Court's 1946 decision in SEC v. W.J. Howey Co. In that case, the Court established the investment-contract test, holding that a transaction constitutes an investment contract—and therefore a security—when there is an investment of money in a common enterprise with a reasonable expectation of profit derived from the managerial or entrepreneurial efforts of others. The Howey test was deliberately designed to focus on economic substance rather than the form or label of the transaction, making it adaptable to new financial arrangements.

Commodity regulation developed along a separate track. The Commodity Exchange Act, first enacted in 1936 and significantly amended over the decades, created a framework for regulating commodity futures, options, and swaps. The CFTC, established in 1974, oversees these markets and has authority over fraud and manipulation in commodity spot markets.

When Bitcoin launched in 2009, it introduced something genuinely new: a decentralized digital asset with no conventional issuer, no corporate board, and no centralized entity making promises about future value. This architecture made it difficult to apply the Howey test in any straightforward way, and it contributed to Bitcoin's eventual treatment as a commodity.

The initial coin offering boom of 2017 and 2018 changed the landscape dramatically. Hundreds of projects sold tokens to raise capital, often before their networks were operational, frequently accompanied by marketing materials emphasizing potential price appreciation and the team's plans to build value. Many of these offerings triggered clear Howey concerns.

Understanding Security vs commodity crypto in practice

Key regulatory milestones followed in rapid succession. In 2015, the CFTC declared in the Coinflip matter that Bitcoin and virtual currencies are commodities. In 2018, SEC officials publicly explained how a token's distribution method and promotional claims affect investment-contract analysis. In 2019, the SEC published its Framework for Investment Contract Analysis of Digital Assets, while CFTC officials described Ether as a commodity. Throughout the 2020s, enforcement actions, exchange applications, and legislative proposals intensified the debate. By 2025 and 2026, regulators increasingly distinguished between the digital asset itself and the transaction or arrangement through which it is sold, recognizing that a crypto asset can be non-security in itself but become part of an investment contract when accompanied by promises of managerial efforts.

Understanding this history is not optional for anyone evaluating crypto assets today. The legal frameworks governing digital assets were not invented from scratch; they were adapted from decades of securities and commodities jurisprudence. Knowing how that adaptation occurred is the foundation for understanding where the law stands and where it is heading.

Commodity Classification in Practice: XAUH and Gold-Backed Tokens

Gold-backed tokens like Herculis Gold Coin (XAUH) provide a compelling example of how digital assets can function as commodities when structured correctly. Each XAUH token represents ownership of one gram of LBMA-certified gold stored in audited Swiss vaults. The token's link to physical gold and its minimal reliance on managerial or entrepreneurial efforts solidify its status as a commodity under the Commodity Exchange Act framework. Unlike speculative tokens marketed for appreciation based on development teams' efforts, XAUH derives its value directly from the underlying physical asset, aligning more closely with the principles of commodity regulation.

One notable feature of XAUH's operational model is its seamless integration with Telegram, a platform with approximately one billion users and millions of built-in Web3 wallets. This structure vastly simplifies the process of acquiring and holding XAUH tokens. Existing Telegram users only need to activate their wallets to begin transacting, eliminating the need for external platforms or complex wallet downloads. Transfer fees on XAUH's JAMTON protocol are a mere 0.02%—a fraction of the costs associated with traditional gold transactions or Ethereum-based alternatives like PAX Gold. This low-cost, user-friendly approach makes tokenized gold accessible to populations historically excluded from gold markets, such as users in developing economies.

Transparency and auditability also play a critical role in XAUH's classification as a commodity. Quarterly audits of the stored gold are conducted by KPMG Switzerland, with results published on-chain through the Chainlink oracle network. This ensures that the physical gold fully backs the circulating tokens, a level of transparency uncommon among digital assets. By tying its value to tangible reserves verified in real-time, XAUH exemplifies how tokenized commodities can bridge the gap between traditional financial systems and blockchain technology while maintaining compliance with commodity market principles.

The XAUH model also highlights an important distinction for regulators and investors alike: when purchasers acquire a token solely to hold exposure to a physical commodity, and the token's price movements are determined by the spot price of that commodity rather than by any team's entrepreneurial activity, the transaction lacks the "efforts of others" prong required by Howey. This structural clarity makes asset-backed tokens a useful reference point for understanding how commodity classification works in practice and why it differs from security classification.

Core Concepts: What Makes a Crypto Asset a Security or a Commodity

The Howey Test in Detail

The Howey test remains the central analytical tool for determining whether a crypto transaction constitutes an investment contract and therefore a security. Each element demands careful examination:

1. Investment of Money: Purchasers provide value. This is not limited to fiat currency; it can include other crypto assets or any form of consideration.
2. Common Enterprise: Purchasers' financial outcomes are linked to one another, the promoter, or the success of a specific project. Courts have applied both horizontal commonality—where investors' fortunes are pooled—and vertical commonality—where investors' returns are tied to the promoter's efforts.
3. Expectation of Profit: The transaction involves an expectation of financial return, evidenced by promotional statements, token economics, resale opportunities, or marketing materials. Profits can take the form of capital appreciation or participation in earnings generated by the enterprise.
4. Reliance on the Efforts of Others: The expected return depends substantially on managerial or entrepreneurial work by a third party, such as developers, protocol managers, or founding teams. This prong is often the most contested in crypto disputes, because projects vary widely in the degree to which ongoing centralized effort is required to generate value for token holders.

The SEC has consistently emphasized that the Howey test applies to the entire economic arrangement, not merely to a token's technical features. A token's whitepaper, smart-contract architecture, or consensus mechanism is relevant only insofar as it illuminates the economic substance of the transaction. Marketing materials, social-media posts by founders, and roadmap commitments are all considered when evaluating whether purchasers reasonably expected profits from a promoter's efforts.

Commodity Characteristics

A crypto asset is more likely to be treated as a commodity when it operates on a sufficiently decentralized network, has no identifiable issuer or promoter whose ongoing efforts drive its value, and functions primarily as a medium of exchange, store of value, or unit of account. Bitcoin is the clearest example, but the logic extends to any token whose market price is determined by supply-and-demand dynamics rather than by a specific team's development activities.

Practical Consequences for Issuers, Exchanges, and Investors

The classification of a crypto asset as a security or a commodity has far-reaching practical consequences that affect every market participant differently.

How to Buy PAX Gold: Step-by-Step Guide to Tokenized Gold

For issuers, a security classification triggers mandatory registration with the SEC or reliance on an available exemption such as Regulation D, Regulation A+, or Regulation S. These pathways impose disclosure obligations, investor qualification requirements, and ongoing reporting duties. Failing to register a securities offering can result in enforcement actions, disgorgement of proceeds, civil penalties, and even criminal liability. Issuers of commodity-classified tokens face a lighter registration burden but must still comply with anti-fraud and anti-manipulation rules enforced by the CFTC.

For exchanges, listing a security requires registration as a national securities exchange or as an alternative trading system with a registered broker-dealer. Exchanges that list unregistered securities risk enforcement actions and fines. Commodity spot markets, while subject to CFTC oversight for fraud and manipulation, do not require the same registration framework. This regulatory asymmetry is a primary reason exchanges invest heavily in legal analysis before listing new tokens.

For investors, the distinction determines the level of disclosure they receive before purchasing, the legal remedies available if they suffer losses due to fraud or misrepresentation, and the tax and custodial treatment of their holdings. Securities purchasers benefit from anti-fraud provisions under the Securities Act and the Exchange Act, including private rights of action. Commodity purchasers rely on CFTC enforcement and common-law remedies, which may offer different—and in some cases narrower—protections.

Understanding these consequences is not merely a matter of legal compliance; it is a strategic imperative. Issuers who design their token economics and distribution methods with classification in mind can reduce legal risk, broaden their investor base, and access regulated trading venues. Exchanges that develop robust classification frameworks can list assets with greater confidence. And investors who understand the regulatory status of their holdings can make more informed decisions about risk and portfolio construction.

Frequently Asked Questions

Is Bitcoin a security or a commodity?

Bitcoin has been determined by the CFTC to be a commodity under the Commodity Exchange Act. Its decentralized architecture and lack of a conventional issuer distinguish it from token offerings that may constitute investment contracts. The SEC has also publicly stated that it does not consider Bitcoin a security.

Can the same token be a security in one situation and not in another?

Yes. The legal analysis may focus on the particular transaction and the promises made to purchasers rather than only on the token itself. A token sold as part of a fundraising effort with promises of future value may be an investment contract, while the same token traded later on a fully operational network may present a different legal profile. This is sometimes called the "transaction-based" approach to classification.

What is the Howey test?

It is the legal framework established by the U.S. Supreme Court for determining whether a transaction constitutes an investment contract. Its core elements are an investment of money in a common enterprise with a reasonable expectation of profits derived from the efforts of others. The test is intentionally flexible and applies to novel financial arrangements, including digital assets.

How does a gold-backed token like XAUH avoid security classification?

Because the token's value is derived from the spot price of physical gold rather than from any team's managerial efforts, the "efforts of others" prong of the Howey test is generally not satisfied. The purchaser is acquiring exposure to a commodity, not investing in an enterprise.

What happens if an exchange lists a token that is later deemed a security?

The exchange may face enforcement actions from the SEC for operating as an unregistered securities exchange. This can result in fines, disgorgement, and orders to cease operations. Several high-profile enforcement actions in 2023 and 2024 targeted exchanges on precisely these grounds.

Final Checklist: Navigating Security vs. Commodity Classification

• Review the economic substance of every token transaction, not just the token's technical features or label.
• Apply all four prongs of the Howey test to the specific circumstances of the offering or sale.
• Evaluate the degree of decentralization of the underlying network and whether a central promoter's efforts drive value.
• Examine all marketing materials, whitepapers, and public statements for language that implies profit expectations tied to a team's efforts.
• For asset-backed tokens, verify that the token's value derives from the underlying asset rather than from entrepreneurial activity.
• Confirm whether the token issuer has registered the offering with the SEC or is relying on a valid exemption.
• Assess whether the trading venue listing the token is appropriately registered as a securities exchange or commodity marketplace.
• Monitor ongoing regulatory guidance, enforcement actions, and legislative developments, as classification standards continue to evolve.
• Consult qualified legal counsel before issuing, listing, or making significant investments in digital assets whose classification is uncertain.
• Maintain thorough documentation of all classification analyses and compliance decisions for audit and enforcement readiness.