SEC's Hester Peirce Warns DeFi Vaults and Crypto Lending May Fall Under Securities Laws
SEC Commissioner Hester Peirce says some DeFi vaults and onchain lending platforms could fall under U.S. securities laws, depending on how they are built and who actually controls them. The message is blunt: calling something “decentralized” does not make the legal questions disappear.
- Structure, not branding, drives the legal risk
- Human managers can turn a vault into an investment product
- Onchain lending still faces old securities-law tests
- Peirce wants builders to engage, not dodge
In a statement titled “Headstands and Summervaults, ” Peirce argued that DeFi vaults and crypto lending arrangements may implicate federal securities laws when users are relying on managers, curators, or platform operators to generate returns or set core lending terms.
That is the part a lot of crypto projects try to skate past. The brochure says “onchain.” The pitch says “decentralized.” The reality, in too many cases, is a small group of humans making the decisions while the smart contract does the button-pushing.
Peirce’s point is not that all DeFi is suspect. It is that the law looks at substance, not vibes.
She said crypto vaults can let users deposit digital assets into smart contracts for staking, lending, and other yield-generating strategies. Some vaults follow fixed, automated rules. Others depend on managers or curators choosing what strategies to use and how to allocate assets.
That difference matters because, under federal securities law, an arrangement can become an investment contract if investors expect profits mainly from the efforts of others. In plain English, if users are passive capital providers and someone else is doing the actual work to produce returns, regulators may see something closer to a securities product than a simple software tool.
Peirce also noted that actively managed vaults can resemble traditional pooled investment vehicles. She pointed to structures such as unit investment trusts, management investment companies, and separately managed accounts - all familiar to securities lawyers, less so to everyone else.
Translated: if a vault is effectively being run like a managed fund, slapping “DeFi” on it does not magically send it into a legal blind spot.
Onchain lending raises a separate set of issues. Peirce said many protocols allow lending through smart contracts, but platform operators often still set key terms like interest rates, loan-to-value ratios, and liquidation thresholds.
A loan-to-value ratio is the amount someone can borrow compared with the value of the collateral they post. A liquidation threshold is the point where that collateral can be sold if the loan becomes too risky. If collateral falls far enough, the system can liquidate it automatically to cover losses.
Those controls are not minor details. They are the heart of how a lending market functions.
Peirce said some of those arrangements could raise questions under the Supreme Court’s 1990 Reves v. Ernst & Young framework, which helps determine when a note should be treated as a security. That does not mean every DeFi loan is a security. It does mean blockchain-based lending does not get a free pass just because it runs through smart contracts instead of a bank app.
Peirce’s broader argument is familiar: technology does not erase legal substance. If a product is really a managed investment structure, or if investors are relying on someone else’s entrepreneurial or managerial efforts, the SEC may treat it accordingly.
She also warned firms against trying to lawyer their way out of those obligations. Her phrasing was characteristically sharp: companies doing “headstands, backflips, and other gymnastics” to argue that federal securities laws do not apply risk enforcement if the facts say otherwise.
Companies performing “headstands, backflips, and other gymnastics” to argue that federal securities laws do not apply risk enforcement, Peirce warned.
That line lands because it captures the basic problem in a lot of crypto compliance theater. A project can be decentralized in code and centralized in control. It can be non-custodial on paper and heavily directed in practice. The SEC is not required to squint politely and pretend that is something else.
Peirce has long been one of the SEC’s more crypto-tolerant voices, but this statement is not a blanket blessing. It is a reminder that builders still have to work inside existing law unless and until the rules change.
She said blockchain-based financial tools can still become mainstream portfolio management solutions if they comply with the rules. She also encouraged DeFi developers, vault operators, and crypto lending platforms to work directly with regulators and to ask whether some existing requirements are unnecessarily burdensome.
That is a more constructive posture than the usual crypto reflex of “regulate us, but only in the most convenient way possible.” Innovation is real. So is investor protection. Pretending those two things never collide is how projects end up getting flattened by enforcement.
For users, the practical test is simple: who controls the strategy, who sets the risk terms, and who is expected to make the money? If the answer is “some person or group behind the curtain, ” the product may be a lot closer to regulated finance than its branding suggests.
And that is really the point. A blockchain wrapper does not turn a managed investment product into a magical legal loophole. Sometimes it is just a managed investment product with better typography.
Peirce’s comments also land in the context of a broader debate over how far the SEC should go in policing digital asset markets, especially as she is set to leave the SEC in 2026 while crypto regulation remains largely unwritten. That uncertainty is doing the industry no favors.
It is also worth remembering that demand for lending and yield products remains massive, with crypto lending hitting $36.5B in 2024 as CeFi kept its grip and DeFi tried to claw more share. Big money means bigger incentives to cut corners, and bigger incentives for regulators to pay attention. Funny how that works.
Peirce has at times taken heat from both sides: crypto users who want a cleaner runway, and SEC hardliners who would rather see the whole sector treated like a hazard zone. She has also signaled a more open tone in past remarks, including when she apologized for crypto crackdowns and floated a more constructive posture toward NFTs and other digital asset experiments.
For anyone trying to build tokenized financial products, the SEC has already telegraphed the basic lesson elsewhere too: securities can be digital, but they are still securities. In her statement “Enchanting, but Not Magical: A Statement on the tokenized securities debate, Peirce made clear that tokenization does not conjure legal exemptions out of thin air.
That is the boring truth, and the useful one. If a product is structured like a fund, marketed like a profit machine, and managed like a profit machine, the law will likely notice - even if it lives on a blockchain and has a slick dashboard.
Key takeaways
-
Are all DeFi vaults securities?
No. Peirce’s warning applies to certain structures, especially where users rely on managers or curators rather than fixed automated rules. -
Why does control matter so much?
Because securities law focuses on substance. If investors expect profits mainly from someone else’s efforts, the setup can look like an investment contract. -
Why is onchain lending under scrutiny?
Because operators may still set important economic terms like interest rates, loan-to-value ratios, and liquidation thresholds, which makes the product less “neutral” than the marketing suggests. -
What does Reves v. Ernst & Young have to do with DeFi?
It is a Supreme Court framework for deciding when a note is treated as a security. Peirce said some onchain lending arrangements may bear the hallmarks of securities under that analysis. -
Is Peirce anti-innovation?
No. She said blockchain-based tools can become mainstream if they comply with existing rules, and she invited builders to engage with regulators instead of trying to outsmart them. -
What should DeFi users look for?
Check who controls the vault or lending protocol, whether strategy decisions are truly automated, and whether returns depend on a person or team making active choices.
Further reading
One more take on how the SEC is framing DeFi vaults and lending risk.
