SEC Commissioner Hester Peirce has outlined a securities-law framework that could place the people making allocation decisions in delegated DeFi vaults and lending products at the center of regulatory scrutiny, rather than treating autonomous smart-contract code as the primary target.
In a July 22 statement titled “Headstands and Summervaults,” Peirce applied the U.S. Supreme Court’s Howey test to on-chain products where users deposit assets and rely on a curator, risk manager, or other operator to determine where that capital is deployed. The approach would examine whether depositors expect profits from the managerial efforts of others — a core element in determining whether an arrangement is an investment contract under U.S. securities law.
Peirce’s statement represents the views of one commissioner and does not itself establish an SEC enforcement policy, rule, or legal finding. Yet it provides a clearer map of how delegated on-chain asset-management products could be assessed under existing law if the agency pursued cases involving vault curators, lending managers, restaking operators, or yield-allocation services.
Morpho’s MORPHO token fell about 5% following the statement’s release, reflecting the market’s immediate sensitivity to a framework that could affect protocols built around third-party capital allocation.
Discretion, rather than code, becomes the focal point
The analysis turns on who controls economically meaningful decisions after users deposit funds. In a delegated vault, a curator may choose lending markets, establish concentration limits, adjust collateral standards, change yield targets, or move assets as risk conditions change. Depositors retain ownership of their vault shares, but their returns can depend heavily on someone else’s judgment.
That structure differs from a fixed, immutable smart contract that carries out predetermined rules without a party able to alter parameters or redirect funds. Many vaults are deployed without administrator keys or upgrade mechanisms, limiting the ability of even the original developer to pause, modify, or unwind the contract.
Peirce’s reasoning would place greater weight on the identifiable party exercising discretion than on the software executing that party’s decisions. That distinction has practical enforcement consequences. Financial regulators generally need a person or legal entity that can receive subpoenas, respond to court orders, face injunctions, or have assets frozen. An immutable contract with no continuing operator offers few of those points of contact.
The question under this approach is less about whether a vault uses decentralized infrastructure and more about whether a depositor is relying on an ongoing manager to produce returns. A curator who selects markets and actively reallocates capital resembles an asset manager more closely than a developer who publishes software and then relinquishes control.
The framework could reach beyond vault curators
Delegated lending vaults are the most direct example, but the same decision-authority analysis could extend across other DeFi categories. Liquid restaking operators that select validators or actively validated services, yield aggregators moving user capital among lending and liquidity venues, and rebalancing services managing on-chain portfolios could all face similar questions.
The analysis cited approximately $25.9 billion in total value locked across products where delegated allocation may create regulatory exposure. The degree of risk would depend on how much discretion exists, how clearly it is disclosed, and whether users can observe the strategy’s rules and controls on-chain.
Opaque arrangements could attract the closest attention. Examples include off-chain agreements, undercollateralized lending structures, or products in which depositors cannot readily assess who is making credit and allocation decisions. Products with visible on-chain controls, timelocks, guardian roles, governance processes, and clearly defined curator mandates may present a more manageable compliance profile, though transparency alone would not settle a Howey analysis.
Fully immutable systems with no controlling party sit at the other end of the spectrum, as do products already offered through a registered securities structure. Neither category is automatically outside regulatory reach, but both raise different legal questions from a discretionary vault managed by a known entity.
Permissioned distribution does not erase management risk
Several DeFi firms have already begun separating institutional products from open-access yield tokens, often through KYC checks, accredited-participant requirements, collateral whitelists, and entity-level risk controls.
Steakhouse Financial launched Grove in June 2025 as an institutional on-chain allocation channel for pre-screened real-world asset participants. In May 2026, Orca partnered with Streamex Corp., which trades on Nasdaq under the ticker STEX, on a GLDY pool restricted to accredited participants. Transfers were initially frozen until users completed KYC and accreditation checks.
GLDY was described as a yield-bearing tokenized security backed by physical gold reserves and issued under Regulation D, Rule 506(c). Such restrictions may support a private-placement strategy, but they do not independently determine whether a product is an investment contract. If users’ returns continue to depend on discretionary managers, the underlying Howey question remains.
Sentora’s structure illustrates the issue. Its DeFi Earn offering used Veda’s vault infrastructure, while Chaos Labs managed Balanced and Boosted vaults and Sentora served as risk manager for Advanced vaults. The managers retained responsibility for capital allocation, risk controls, and liquidity decisions across on-chain protocols. KYC-based distribution and regulated issuance infrastructure may address who can access a product, but they do not remove the role of the party directing the assets.
Institutional lending models show the trade-offs
Aave Horizon, launched in August 2025, was designed as a separate institutional real-world-asset lending market rather than an extension of Aave’s core permissionless protocol. Its collateral whitelist included assets associated with issuers such as Circle, Ripple, Superstate, Centrifuge, and Janus Henderson. Risk parameters followed recommendations from LlamaRisk, while collateral valuation used Chainlink net asset value data.
Maple Finance adopted a whitelist model in April 2024 and shifted lending toward fully overcollateralized loans. Maple Direct conducted borrower due diligence, monitoring, and margin calls for approved institutional participants. Its Syrup protocol later allowed users to deposit USDC without KYC in exchange for SyrupUSDC, while those funds entered institutional lending pools managed under Maple Direct’s permissioned framework.
That split demonstrates the legal challenge facing tokenized credit products. Permissioned lending can concentrate underwriting, borrower selection, and collateral management in a regulated or identifiable operator. Packaging the returns from those decisions into a token available to a broader user base can create a separate question about the token’s legal status and the obligations associated with distributing it.
Compliance costs could reshape the curator market
The likely responses range from full registration under securities law to private-offering exemptions for accredited participants, immutable designs that eliminate discretionary management, and new exemptions tailored to on-chain financial products. Ava Labs and the Solana Policy Institute have submitted proposals to the SEC seeking clearer pathways for blockchain-based activity.
Each route carries operational costs. Curators may need KYC systems, legal review, asset-valuation processes, institutional contracts, disclosures, and structures for allocating losses when strategies fail. Larger managers can spread those costs across more assets and clients. Smaller curators may find it harder to build independent compliance operations, increasing pressure to consolidate or rely on specialized service providers.
The historical comparison is asset management rather than software licensing. U.S. rules surrounding blind-pool funds, peer-to-peer lending, and crowdfunding eventually developed around disclosure, operator responsibilities, and rules for allocating losses. Peirce’s statement suggests delegated DeFi products may face a similar examination: not because their transactions occur on-chain, but because a person’s continuing judgment may determine how deposited capital is put at risk.
Concerned about DeFi regulation and decision-maker liability? Dive deeper into evolving rules with this detailed regulatory outlook.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
