On September 15, the Senate voted 49 to 50 on whether to even begin debating the CLARITY Act, the market-structure bill the crypto industry spent two years fighting for. It needed 60 votes. This was clearly a (temporary?) defeat on a bill the industry has been waiting for. Thankfully U.S. regulatory agencies stepped in.
Within 48 hours, the SEC had opened a legal path for onchain trading of tokenized stocks, and the CFTC had sent its own crypto market rules to the White House. Before the month was out, the Fed and Treasury pushed stablecoin rules forward too.
That is the real story for founders. The U.S. now has more crypto rules than at any point in the industry's history. What it doesn't have is rules that are guaranteed to last.
What Happened on Capitol Hill
The vote was procedural: cloture on the motion to proceed to H.R. 3633. Nobody ever voted on the bill’s substance. The vote was against even debating it. No Democrat voted yes, and four Republicans voted no. The core of the bill, dividing crypto oversight between the SEC and the CFTC, was not what sank it. The final sticking points, like they have for months, were ethics rules covering crypto holdings by senior officials, including the president and his family, and community banks' objections to rewards paid on stablecoins. Both sides had made concessions.
The next day, seven Democrats who negotiated the text called the result a setback, not the end. The bipartisan coalition still exists. But the House is out until after the November 3 midterms, so the realistic windows are the lame-duck session or the next Congress.
What's currently on hold is everything only a statute can deliver: a permanent legal line between digital commodities and securities, a federal registration regime for spot exchanges, brokers and dealers, and codified protections for self-custody and software developers.
What the Regulators Did Instead
SEC Chair Paul Atkins and CFTC Chair Michael Selig had both said they would keep building if Congress stalled. September showed they meant it.
- SEC: tokenized stocks. The September 17 Innovation Exemption lets permissioned venues trade tokenized versions of U.S.-listed stocks through automated market maker pools for five years. It comes with volume caps, no synthetics, and a requirement that tokens carry the same rights as the underlying shares.
- SEC: token guidance. Staff FAQs released September 25 address marketing claims, buybacks, staking receipt tokens, and when supporting a network counts as "essential managerial efforts." The SEC's Regulation Crypto Assets proposal, with tailored offering exemptions and a safe harbor for tokens to exit security status, is open for comment until October 20. A crypto custody proposal for advisers and funds followed on October 1.
- CFTC: market structure. On September 17 the CFTC sent its own rule to the White House. It would let exchanges register as a new kind of "crypto asset market" offering leveraged and margined trading. The earliest it could take effect is late 2027.
- CFTC: developers. The same day, no-action letter 26-25 said wallets and front ends that passively route users to regulated derivatives don't need to register as brokers, provided they meet its conditions.
- Fed and Treasury: stablecoins. The Fed proposed reserve, capital and bank-issuer rules under the GENIUS Act on September 24. On September 30, Treasury set up the process for states to certify their regimes for issuers under $10 billion outstanding.
Most of this is good news for builders.
Rulemaking Isn't Durability
But almost none of all the developments above are law. It is proposals, exemptions, staff FAQs and no-action letters, and what one Commission grants, a future one can withdraw. The tools differ in how sturdy they are:
- Statute. The GENIUS Act is the only part of the U.S. crypto framework that Congress has written into law. Changing it takes another act of Congress.
- Final rules. Hard to undo, but repealable through new rulemaking and vulnerable to court challenges.
- Exemptive orders. The Innovation Exemption runs five years and can be modified or revoked.
- Staff guidance and no-action letters. The most fragile. Letter 26-25 binds only the CFTC division that issued it, not the Commission or its enforcement staff.
Chairman Atkins named the limit himself the night before the CLARITY cloture vote: An agency can build a safe harbor, he argued, but only Congress can change the definition of a security.
The foundation got thinner in September, too. Commissioner Hester Peirce, who led the SEC's Crypto Task Force, left on October 2. That leaves the SEC with two commissioners from the same party and no successor named. On September 30, the agency also changed its quorum rule so a single commissioner can act when the other is recused. A narrow, single-party Commission can move fast. Its rules are also easier to challenge in court and to reverse after the next election.
Building for Durability
Neither waiting on Congress nor betting the farm on today's agency posture is a sound strategy. A few practices hold up under either outcome:
- Track the expiry dates on regulatory relief. Exemptions, no-action letters and proposed safe harbors each come with conditions, end dates and someone who can revoke them. Projects that rely on them are better served treating each as a dependency with a sunset than as a permanent license.
- Design to the stricter standard where it's feasible. Token launches, marketing and post-launch activity built to hold up under a less friendly Commission carry less long-term risk. The SEC's September FAQs offer a useful checklist.
- Keep a contemporaneous record. A token classification analysis documented at launch is far stronger than one reconstructed later under scrutiny.
- Treat security as part of compliance. Custody, reserves, recordkeeping and technology safeguards recur across the new rules. Independent audits, key-management controls and incident response plans are becoming part of a project's regulatory case, not just its engineering hygiene.
- Participate in the process. The Regulation Crypto Assets comment period closes October 20, and input backed by concrete data on costs and use cases carries weight. So does engagement with Congress on what regulatory whiplash would mean for builders, users and the jobs the industry creates.
The Bottom Line
September proved crypto policy no longer waits on Congress. It also proved that progress built on agency action alone is progress on a lease. The GENIUS Act shows the alternative: stablecoin issuers now plan around a statute, not around who sits on a Commission.
Market structure deserves the same footing. Until it gets one, the smartest founders will treat today's rules as a head start, not a guarantee.
