Recent Developments in Crypto Regulations: Key Insights from November 2026
This week in crypto law highlights SEC guidance on governance, CFTC's market access position, sanctions on Canadian firms, and a former FBI agent's fraud case.

Legal Insights into Cryptocurrency
Legal insights into cryptocurrency are provided by the news segment, Law and Ledger, presented by Kelman Law, a law firm specializing in digital asset commerce. Recent developments in the field offer substantial guidance for blockchain enterprises navigating the complex regulatory environment.
Recent Developments
A noteworthy shift occurred when the Securities and Exchange Commission (SEC) clarified its analysis methods regarding decentralized governance and operational networks. Its framework was applied specifically to Canton Coin, alongside escalating tensions between state and federal agencies regarding market access, punctuated by the Commodity Futures Trading Commission (CFTC) taking a firm stance on the issue. Additionally, the Office of Foreign Assets Control (OFAC) and the Department of Justice underscored the risks associated with sanctions and digital asset custody relationships with trusted intermediaries.
SEC Updates
An important update came from the SEC's Division of Corporation Finance on November 2, which augmented its crypto-asset FAQ section with three new inquiries aimed at guiding projects through the agency's classification framework expected in 2026. The SEC clarified that unaffiliated participants in a broad-based governance model typically would not be regarded as a unified "central party" unless they have a formal or informal agreement to act collectively.
It also detailed the characteristics of a central entity overseeing participation, including exclusive powers to restrict entry, select validators, modify voting methods, adjust code, reverse transactions, and rescind access.
Crucially, the update differentiated between functionality and decentralization; while a system’s asset may exhibit inherent utility, the actual decentralization level is contingent upon who possesses control over operational, economic, or voting rights. Labels like "DAO-governed" are now considered inadequate, requiring further examination of governance structures, delegation specifics, validator inclusion processes, emergency powers, and reward distribution against the SEC's guidelines.
While these FAQs reflect staff perspectives rather than formal rules—and do not create new legal liabilities—they serve as an essential checklist for token initiatives pertaining to launches, listings, disclosures, and structural overhauls.
Canton Coin and Regulatory Stance
On November 3, a no-action letter concerning Canton Coin was issued, indicating an acknowledgment by regulatory staff that the token could be classified as a "digital commodity" under the SEC's interpretation from March 2026. This stance was based on counsel's assertions that the token’s value was derived from the programmatic functioning of the network and supply-demand factors, rather than from managerial activities.
The SEC stressed that enforcement action would be avoided if Canton Coin was issued programmatically by designated validators and application hosts, bypassing the need for registration under specific sections of the Securities Act and Exchange Act. However, this does not imply that all utility or governance tokens are exempt from being classified as securities, as differing circumstances could lead to alternative outcomes.
The takeaway is that project designs must be meticulously documented; key elements such as minting processes, rights to control, value determinants, and management commitments are crucial in determining regulatory expectations.
CFTC and OFAC Actions
On November 5, the CFTC unveiled new interpretations related to designated contract markets (DCMs), indicating that these entities cannot exclude eligible participants based solely on their geographical location within the U.S. The CFTC mandated DCMs to eliminate any unconstitutional domestic location restrictions within thirty days unless valid reasons for non-compliance are provided.
This guidance extends beyond just the current litigation against Utah's state gambling law challenge, establishing a national access policy reflective of Core Principle 2 and Regulation 38.151, affecting all DCMs engaged in crypto derivatives.
Another significant event on November 6 involved OFAC sanctioning eight Canada-based entities for their involvement in Iran's digital asset sector, which violated U.S. sanctions laws. These firms were accused of converting Iranian rials into cryptocurrencies, with some engaging with sanctioned exchanges tied to terrorism and drug trafficking. This action, taken in coordination with other governmental bodies, freezes U.S. interests held by these businesses and bars transactions unless authorized.
Security Vulnerabilities and Compliance Needs
In an alarming headline on November 5, former FBI agent Patrick Steven Yaroch admitted guilt regarding wire fraud and money laundering charges linked to his illicit use of cryptocurrency credentials from FBI systems. Yaroch executed unauthorized transfers amounting to approximately $2.47 million, involving multiple criminal investigations, and subsequently attempted to obscure the origins of these assets. His sentencing is slated for March 4, 2027, but highlights the intrinsic vulnerabilities of private keys and recovery credentials even within high-security settings, prompting calls for more robust internal controls in cryptocurrencies.
The implications of these events underscore a pressing need for firms to adopt stringent compliance measures. Particularly in evaluating token classifications, market access regulations, sanctions risks, and custody procedures, it is prudent for businesses to seek legal input from specialized firms like Kelman PLLC. This piece is intended as a general overview and should not be considered legal advice.
Also in other languages: РусскийDeutschFrançaisItalianoEspañol