SEC's Peirce Signals Crypto Vaults and Onchain Lending May Fall Under Securities Laws
SEC Commissioner Hester Peirce put the US decentralised finance industry on notice on 22 July 2026: crypto vaults and onchain lending products that involve discretionary asset management decisions may fall squarely within the scope of federal securities laws, regardless of whether those decisions are executed by code rather than humans. For accounting firms, auditors, and CFOs with clients active in yield-generating DeFi strategies, the signal has immediate implications for financial statement presentation, audit scope, and client advisory obligations under US GAAP.
What Peirce Actually Said
The Core Regulatory Position
In a published statement, Commissioner Peirce drew a clear conceptual line: moving regulated activities onto a blockchain does not, by itself, remove those activities from the SEC's jurisdiction. Her exact framing was direct: activities that fall within the scope of federal securities laws do not escape Commission oversight simply because they are executed onchain.
Peirce identified several specific functions within vault and lending products that could trigger regulatory characterisation. These include allocating pooled user assets, selecting yield-generating strategies, setting lending terms, and determining liquidation thresholds. When a product performs any combination of these functions, particularly where human operators or governance tokens make discretionary calls, the product's structure begins to resemble a registered investment product or an advisory arrangement.
Three Potential Regulatory Classifications
Peirce identified three overlapping regulatory buckets that DeFi vault operators need to assess against their specific product structures:
- Securities offerings: Vault tokens or yield-bearing instruments distributed to users could themselves constitute securities depending on how they are structured and marketed.
- Investment companies: Vehicles that pool capital and deploy it across multiple yield strategies bear structural similarities to registered investment companies under the Investment Company Act of 1940.
- Investment advisers: Parties, whether human teams or DAOs, that manage vault allocations or set lending parameters for others could trigger registration requirements under the Investment Advisers Act.
Peirce also flagged that certain onchain loans may independently qualify as securities depending on how they are structured, distributed, and used downstream. This is a narrower point but significant: it means the lending leg of a vault strategy, not just the vault token itself, could carry its own regulatory characterisation risk.
DeFi Accounting Under US GAAP: What Changes
Current Treatment and Its Limitations
Under ASC 350-60, entities holding crypto assets as intangibles measure them at fair value with changes recognised in net income each period. This updated standard, which took effect for fiscal years beginning after 15 December 2024, improved transparency for plain-vanilla crypto holdings. But it was not designed with the complexity of vault strategies in mind, and it does not address what happens when an entity's crypto assets are deployed into a pooled DeFi vault that may itself be a security.
If a vault token is ultimately determined to be a security, the holder's accounting framework shifts. Securities classified as trading securities under ASC 320 are measured at fair value through earnings, which may look superficially similar to ASC 350-60 treatment, but the classification affects disclosures, impairment testing logic, and how the instrument is presented on the balance sheet. More importantly, if the vault structure meets the definition of an investment company, the entity investing through the vault may need to apply investment company accounting under ASC 946, which changes consolidation assessments and performance reporting entirely. For clients that are themselves operating vaults, the financial statement implications are more significant still: potential registration liabilities, contingent obligations related to unregistered offerings, and disclosure of regulatory risk factors all come into scope for auditors reviewing crypto financial statements.
The Investment Company Question
The investment company analysis is the one that carries the most structural weight for US GAAP DeFi accounting. ASC 946 applies to entities that are registered under the Investment Company Act, or that are not registered but meet certain criteria indicating investment company status. A vault that pools capital from multiple parties, deploys it across yield strategies, and distributes returns proportionally is, functionally, performing the role of an investment vehicle. If its operator is required to register, the entity running the vault may need to consolidate or deconsolidate depending on its ownership interest, apply fair value measurement to all portfolio positions, and present financial statements in investment company format rather than standard operating company format.
None of these are hypothetical concerns. They are accounting questions that auditors will need to work through for any client with material vault positions or vault operations, particularly as the SEC has now signalled that these products are within its supervisory line of sight. For a deeper look at how FASB's evolving stance on crypto fair value measurement intersects with these issues, see our coverage of FASB stablecoin and fair value reporting developments.
Who Is Affected and How
Vault Operators and Protocol Developers
Peirce's statement is addressed primarily to builders. She urged developers and operators to engage with the SEC proactively if their products may fall within its jurisdiction, and she invited industry feedback on how existing rules could be adapted to accommodate onchain finance. That invitation is meaningful but does not reduce the immediate compliance risk: products already live in the market need to be assessed now against the three classification tests she outlined.
Operators of vaults that involve discretionary human decisions, governance votes on strategy parameters, or centralised liquidation controls face the highest exposure. Fully autonomous, immutable smart contracts with no human governance layer sit in a different position, though even those are not categorically exempt, and the SEC has not issued guidance that would provide a safe harbour for any specific technical architecture.
Institutional Investors and Corporate Treasury Teams
CFOs whose entities hold vault tokens or have deployed treasury assets into onchain yield strategies face three near-term questions. First, how are these positions currently classified on the balance sheet, and does that classification survive a securities characterisation? Second, what disclosures are required in the notes to financial statements regarding regulatory uncertainty? Third, if the vault operator is ultimately required to register or unwind, what is the liquidity and valuation impact of that event?
Under ASC 275, entities are required to disclose risks and uncertainties that are reasonably possible to result in a material change to reported amounts. Regulatory reclassification of a material vault position almost certainly meets that threshold. Auditors should be reviewing these disclosures now rather than waiting for enforcement action.
Accounting Firms and Auditors
For practitioners advising entities with DeFi exposure, Peirce's statement is the kind of regulatory signal that warrants a client communication. It does not create new law, but it establishes the Commissioner's interpretive framework and, given that it was issued in writing and published by the SEC, it carries weight as a statement of the agency's analytical approach. Firms should review engagement letters and management representation letters for clients with vault or onchain lending exposure, confirm that regulatory risk disclosures in financial statements are adequate, and consider whether any existing audit conclusions need to be revisited in light of the expanded securities characterisation analysis.
The intersection of this guidance with the CLARITY Act's evolving framework for digital asset classification also deserves attention. Understanding how the CLARITY Act is reshaping US crypto accounting obligations is essential context for practitioners advising on DeFi product structures in 2026.
Market Context: Why Vaults Have Grown So Quickly
Product Proliferation in 2025 and 2026
Crypto vaults pool user assets into onchain strategies designed to generate yield through lending markets, staking, or liquidity provision. Their expansion has accelerated as developers have packaged complex DeFi strategies into products accessible to both retail and institutional investors. Several notable product launches illustrate the range of structures now in the market.
In April 2026, Sentora opened its Smart Yield product to the public, giving users the ability to compare DeFi vaults by strategy, yield profile, and risk metrics. Earlier, a self-custodial vault product was launched allowing users to hold Bitcoin, Ether, and USDT without transferring assets to a centralised custodian. In May 2026, Kraken launched a product offering up to 2.5% variable annual yield by deploying wrapped Bitcoin across decentralised lending protocols, with rewards paid in Bitcoin and varying based on borrowing demand in the underlying markets.
The risk side of the picture is equally relevant. In December of a prior period, the Yearn Finance protocol suffered a roughly nine-million-dollar exploit affecting a legacy yield vault, illustrating that technical risk compounds regulatory risk for anyone holding or auditing vault positions.
Why the SEC Is Paying Attention Now
The scale of capital flowing into these products, combined with increasing participation by institutional investors and corporate treasury teams, has made them too large for the SEC to treat as peripheral. Products that actively manage user assets and make discretionary allocation decisions sit close to the definitional boundary of regulated investment vehicles. Peirce's statement suggests the agency is not waiting for Congress to resolve the broader digital asset classification debate before applying existing law to structures that already fit existing definitions.
Practical Steps for Firms and CFOs
Immediate Review Priorities
The practical response to Peirce's statement involves three parallel workstreams. The first is a product inventory: any client with vault tokens on its balance sheet, or any client operating a vault product, needs to be identified and flagged for enhanced review. The second is a classification analysis: for each identified position or product, apply the three tests Peirce outlined, securities offering, investment company, and investment adviser, to determine where regulatory risk is concentrated. The third is disclosure review: confirm that financial statement notes and risk factor disclosures adequately capture the possibility of regulatory reclassification and its potential impact on reported amounts.
Peirce's invitation to engage with the SEC directly is worth taking seriously for clients operating vault products. A proactive inquiry to the SEC's Division of Investment Management or Division of Corporation Finance, depending on the relevant classification question, creates a documented record of good-faith compliance effort and may influence the agency's approach if enforcement questions arise later.
Longer-Term Accounting Implications
If vault tokens are ultimately classified as securities at scale, the accounting standards community will need to address gaps in existing guidance. ASC 350-60 does not contemplate securities issued by DeFi protocols, and ASC 320 was not written with decentralised autonomous operators in mind. The FASB has been responsive to crypto-specific accounting needs in recent years, as its fair value measurement updates demonstrate, but standard-setting moves more slowly than regulatory enforcement. Firms that build the analytical frameworks now, before enforcement creates urgency, will be better positioned to advise clients through whatever rulemaking follows.
Frequently Asked Questions
Does Peirce's statement mean crypto vaults are now illegal in the US?
No. Peirce's statement is an interpretive signal, not a rule or enforcement action. It indicates the SEC's analytical framework for assessing whether specific vault and lending products fall within federal securities laws. Products that fall within that scope are not automatically illegal, but their operators may need to register with the SEC or qualify for an exemption, which creates compliance obligations rather than a blanket prohibition.
How does a vault token get classified as a security under US law?
The primary analytical tool is the Howey test, which asks whether an instrument involves an investment of money in a common enterprise with an expectation of profit derived primarily from the efforts of others. A vault token where users deposit assets, a third party makes discretionary allocation decisions, and returns are distributed proportionally maps closely onto that framework. The specific answer depends on each product's structure and governance model.
What does investment company classification mean for DeFi accounting?
If a vault is classified as an investment company, its operator may need to register under the Investment Company Act of 1940 and comply with disclosure, custody, and valuation requirements specific to registered funds. For accounting purposes, entities investing through or operating such a vault may need to apply ASC 946, which changes how the entity measures its portfolio positions, presents financial statements, and assesses consolidation of investees.
What should auditors do right now in response to this statement?
Auditors should identify all clients with material vault or onchain lending exposure, assess whether existing balance sheet classifications remain supportable given the securities characterisation risk Peirce has outlined, review disclosures under ASC 275 for adequacy, and consider whether management representation letters need to be updated to address regulatory contingencies. Any client operating a vault product should be referred to legal counsel for a securities law analysis before the next reporting period closes.
Does this affect how wrapped Bitcoin or other wrapped tokens are accounted for?
Indirectly, yes. Vault products that deploy wrapped Bitcoin or other wrapped tokens into lending protocols as part of their yield strategy may see those underlying positions recharacterised depending on the vault's overall regulatory classification. If the vault is treated as an investment company or its tokens as securities, the accounting for all assets within the vault structure, including wrapped tokens, may need to be revisited. The regulatory characterisation of the wrapper itself remains a separate question that the SEC has not definitively resolved.
Source: Cointelegraph