The
Learning Objectives
Analyze the Hinman speech in detail, understanding what he said, why it mattered, and its uncertain legal status
Explain the theoretical connection between decentralization and the Howey test's "efforts of others" element
Evaluate frameworks for measuring decentralization across technical, economic, and governance dimensions
Assess the doctrine's current status in light of SEC positions, litigation, and regulatory evolution
Apply decentralization analysis to evaluate token transition arguments
On June 14, 2018, at the Yahoo Finance All Markets Summit, SEC Director of Corporation Finance William Hinman delivered remarks that would be cited thousands of times in the following years.
His key statement:
"And so, when I look at Bitcoin today, I do not see a central third party whose efforts are a key determining factor in the enterprise. The network on which Bitcoin functions is operational and appears to have been decentralized for some time, perhaps from inception... Applying the disclosure regime of the federal securities laws to the offer and resale of Bitcoin would seem to add little value... And putting aside the fundraising that accompanied the creation of Ether, based on my understanding of the present state of Ether, the Ethereum network and its decentralized structure, current offers and sales of Ether are not securities transactions."
- Confirmed Bitcoin wasn't a security (widely assumed)
- Stated Ethereum—despite its ICO—wasn't currently a security
- Introduced "sufficient decentralization" as a framework
- Suggested tokens could transition from security to non-security status
The speech wasn't law. It wasn't even SEC policy. But it shaped industry thinking, litigation strategy, and regulatory debate for years.
Let's examine Hinman's key points precisely:
On the Howey Test and Crypto:
"If the network on which the token or coin is to function is sufficiently decentralized—where purchasers would no longer reasonably expect a person or group to carry out essential managerial or entrepreneurial efforts—the assets may not represent an investment contract."
This connects decentralization to Howey Element 4 (efforts of others). If no identifiable party provides "essential managerial efforts," that element fails.
On Evolution Over Time:
"This analysis is not static and does not strictly inhere to the instrument."
A token's status can change. What was a security at issuance might not be a security later.
On Ethereum Specifically:
"Based on my understanding of the present state of Ether, the Ethereum network and its decentralized structure, current offers and sales of Ether are not securities transactions."
Note the qualifications: "my understanding," "present state," "current offers and sales." He carefully limited his statement.
On What Remains a Security:
"Central to determining whether a security is being sold is how it is being sold and the reasonable expectations of purchasers... When the efforts of the third party are no longer a key factor for determining the enterprise's success, material information asymmetries recede... In these circumstances, applying federal securities law to secondary transactions seems unnecessary."
The focus is on what purchasers reasonably expect and whether information asymmetry exists.
Equally important is what Hinman omitted:
- No metrics: He didn't define how to measure "sufficient" decentralization
- No timeline: He didn't say when transition occurs
- No process: No mechanism for projects to confirm their status
- No binding authority: This wasn't a rule, no-action letter, or formal guidance
- No retroactive cleansing: He distinguished "current offers" from the original sale
- A public address by an SEC official
- Expressing his personal views
- Based on his "understanding" of Ethereum
- Not SEC rulemaking or formal guidance
- Not binding on courts or even the SEC itself
Courts have cited Hinman's speech but aren't bound by it. The SEC under Chair Gensler later distanced the agency from it. The speech influenced thinking but didn't create law.
During the Ripple litigation, discovery sought internal SEC communications about the Hinman speech:
- Internal debate about whether to give the speech
- Concerns about implications
- Discussions about Ethereum's status
- Questions about consistency with enforcement positions
Ripple's Argument:
If the SEC internally debated Ethereum's status and never provided clear guidance on XRP, Ripple lacked "fair notice" that XRP might be treated differently.
SEC's Position:
Hinman's speech was his personal view; internal debates don't change applicable law.
The Outcome:
Judge Torres considered fair notice but found it didn't constitute an affirmative defense. The emails revealed uncertainty but didn't change the legal analysis.
Why would decentralization affect securities classification?
Howey Element 4: Profits derived from the "essential managerial efforts" of others.
- In centralized projects, promoters control development, marketing, partnerships
- Buyers reasonably expect profits from those efforts
- In decentralized networks, no one controls the enterprise
- No identifiable "others" provide essential managerial efforts
- Therefore Element 4 fails
- Therefore not an investment contract
The Logic:
Centralized Project:
Investor → Funds → Promoter → Builds Network → Value Created
↑
"Efforts of others" = Promoter
Decentralized Network:
Investor → Acquires Token → Uses Network
↑
No identifiable "others" whose efforts matter
Value derives from network effects, not promoter
```
The theory implies tokens can transition:
Team raises money
Promises to build network
Investors expect profits from team's efforts
Howey elements satisfied → Security
Network is built and functioning
Team dissolves or becomes one of many contributors
Value derives from network usage, not team efforts
Howey Element 4 may fail → Not a security?
The Critical Question:
When exactly does this transition occur? What markers indicate sufficient decentralization?
Why might securities law stop applying to decentralized networks?
Information Asymmetry Disappears:
Securities regulation addresses information gaps between promoters and investors. If there's no promoter with special knowledge, disclosure requirements serve less purpose.
No One to Regulate:
Securities compliance requires someone to comply. If no central entity controls the network, who files the 10-K?
Consumer-Like Transaction:
Buying a decentralized network token resembles buying a commodity or consumer good—not investing in someone's enterprise.
Proportionate Regulation:
Securities compliance is costly. If the protective purpose is absent, the costs may not be justified.
- Large token holdings
- Foundation governance
- Core development control
- Information advantages
- Network effects of initial design choices
- Token distributions to affiliated parties
- Governance structures with founder veto
- Development controlled through foundation funding
- "Decentralized" in name, centralized in effect
Legal Uncertainty:
Without clear metrics, "sufficient decentralization" becomes a loophole for sophisticated promoters to exploit rather than a principled distinction.
- Technical understanding
- Governance influence
- Early information on proposals
- Whale coordination
If decentralization determines securities status, how do you measure it?
Hinman didn't answer this. Various frameworks have been proposed:
- How many independent nodes operate the network?
- Are nodes geographically distributed?
- What's the cost to run a node? (High cost → concentration)
- Who validates transactions?
- How concentrated is validation power?
- Bitcoin: Mining pools → some concentration
- Ethereum: Stakers → some concentration
- XRP: UNL validators → criticized as concentrated
- Who can change the protocol?
- How is the GitHub repository controlled?
- What's the process for protocol upgrades?
- Nakamoto coefficient (minimum nodes to control 51%)
- Validator distribution
- Geographic diversity
- Client software diversity
- How concentrated is token ownership?
- Do founders/team hold substantial portions?
- Are there whale addresses controlling significant supply?
- Who controls development funds?
- How are funds allocated?
- Foundation treasury size and governance
- Does any party earn ongoing fees from the network?
- Are there revenue concentrations?
- Gini coefficient of token distribution
- Top 10/100/1000 holder concentration
- Treasury holdings relative to circulating supply
- Founder/team token vesting status
- Who decides on protocol changes?
- Is there on-chain governance? Off-chain?
- How do token holders participate?
- Who can propose changes?
- What's the threshold for adoption?
- Are there founder vetoes or special powers?
- Does a foundation exist? What's its power?
- How is the foundation governed?
- Can the foundation be captured or controlled?
- Voter participation rates
- Proposal source diversity
- Decision concentration
- Foundation board composition
- Do investors rely on company announcements?
- Is there official roadmap/development communication?
- Would absence of promoter communications affect price?
- Does the community produce analysis independently?
- Are there alternative information sources?
- Could the network continue without original promoters' involvement?
- Technical (protocol/network)
- Economic (token distribution)
- Legal (entity structure)
- Development (core contributor diversity)
- Active participants responsible for development
- Essential tasks performed by identifiable group
- Purchasers expect promoter to drive value
- No person controls >20% of tokens
- No person controls >20% of network functions
- Or: Token holders can use tokens for intended purpose
How does XRPL measure on these dimensions?
- UNL validators: ~35 on default UNL
- Ripple runs some but not majority
- Non-Ripple entities can run validators
- Criticism: Default UNL creates influence
- Ripple holds substantial XRP (though in escrow)
- Original founders received large allocation
- Broader distribution over time
- Concentration higher than Bitcoin/Ethereum
- No on-chain governance
- Protocol changes through consensus of validators
- Ripple proposes most amendments
- Community can reject by not upgrading
- Ripple communications influence market
- But independent analysis exists
- Network operates without Ripple day-to-day
Assessment:
XRPL is more decentralized than many projects but less than Bitcoin. The question is where the line falls—and the line isn't defined.
SEC Chair Gary Gensler (2021-2025) distanced the agency from Hinman's analysis:
"I believe most crypto tokens are securities... Just because something is on the internet or on blockchain doesn't mean it's not a security."
- Brought enforcement against numerous tokens
- Argued most tokens are securities
- Didn't formally repudiate Hinman but didn't embrace it
- Focus on how tokens were marketed and sold
Judge Torres didn't rely on sufficient decentralization. Instead, she used contextual analysis:
- Institutional sales: Buyers knew Ripple was seller, expected profits from Ripple's efforts → Securities
- Programmatic sales: Blind transactions, no relationship with Ripple → Not securities
- The analysis focused on transaction context, not network decentralization
What This Means:
Torres avoided the decentralization question by focusing on whether buyers in specific contexts could have expected profits from Ripple's efforts. The token's decentralization wasn't the determinative factor—the buyer's reasonable expectations were.
The doctrine's status is genuinely uncertain:
SEC under Gensler ignored it
No formal adoption ever occurred
Torres used different framework
Enforcement continued against "decentralized" projects
The logic remains sound (no "others" = no Element 4)
Bitcoin's non-security status implicitly reflects it
ETH ETF approvals suggest ETH isn't a security
Torres ruling compatible with decentralization reasoning
New SEC leadership might revive it
The Honest Assessment:
The doctrine exists as an influential concept but not settled law. Projects can't rely on it with certainty. Courts may use it selectively. Regulatory approach depends partly on SEC leadership.
Legislative Action:
FIT21 and similar proposals would create clear criteria for when tokens are commodities vs. securities. This would effectively codify a decentralization transition.
SEC Rulemaking:
A future SEC could adopt rules specifying decentralization criteria. This would provide clarity but hasn't happened.
Supreme Court Guidance:
A Supreme Court case applying Howey to crypto could establish whether decentralization defeats Element 4. No such case has reached the Court.
Industry Consensus:
Consistent treatment of established networks (Bitcoin, Ethereum) as non-securities creates de facto acceptance even without formal doctrine.
When a project claims "sufficient decentralization," evaluate:
Current State vs. Original Sale:
Even if the network is decentralized now, were original sales securities offerings? The SEC can pursue past violations even if current status differs.
- Token concentration (on-chain data available)
- Validator/miner distribution
- Governance control
- Development funding
Degree of Decentralization:
It's a spectrum:
More Centralized ◄──────────────────────────► More Decentralized
│ New ICO │ Foundation-led │ Broad │ Bitcoin
│ tokens │ networks │ contributor │
│ │ (many L1s) │ networks │
│ │ │ (Ethereum) │
Reliance Risk:
Don't assume decentralization creates legal certainty. The doctrine isn't established law.
DECENTRALIZATION ASSESSMENT FRAMEWORK
Dimension │ Questions to Ask │ Data Sources
─────────────────┼──────────────────────────────┼────────────────────
Technical │ Node count and distribution? │ Network explorers
│ Validator concentration? │ Consensus data
│ Client diversity? │ GitHub, node stats
─────────────────┼──────────────────────────────┼────────────────────
Economic │ Token distribution? │ On-chain analytics
│ Founder/team holdings? │ Token unlock calendars
│ Treasury control? │ Foundation disclosures
─────────────────┼──────────────────────────────┼────────────────────
Governance │ Who makes decisions? │ Governance forums
│ Proposal source diversity? │ On-chain votes
│ Founder veto or control? │ DAO structure docs
─────────────────┼──────────────────────────────┼────────────────────
Information │ Reliance on promoter comms? │ Market reactions
│ Independent analysis exists? │ Research coverage
│ Could network survive │ Technical assessment
│ without original team? │
SCORING GUIDE:
1-2: Highly centralized (strong securities argument)
3-4: Moderately centralized (uncertain status)
5-6: Somewhat decentralized (stronger defense)
7-8: Highly decentralized (weak securities argument)
9-10: Near-complete decentralization (Bitcoin-like)
```
Legal Risk Assessment:
More decentralized → Lower risk that future enforcement treats token as security
More centralized → Higher risk of securities classification
- Regulatory risk
- Governance risk
- Key person dependency
- Long-term sustainability
Due Diligence:
Claims of decentralization should be verified with data, not accepted based on marketing.
✅ Hinman articulated a theoretical connection between decentralization and Howey. If no identifiable party provides essential managerial efforts, Element 4 may fail. The logic is sound even if application is uncertain.
✅ Bitcoin is universally treated as not a security. Whatever the doctrinal basis, the practical conclusion is settled. This implicitly supports decentralization analysis.
✅ Ethereum has been treated as non-security for spot ETF purposes. SEC approval of ETH ETFs suggests current ETH trading isn't securities transactions, supporting Hinman's original statement.
✅ The speech was influential but never became law. Thousands of citations don't make it binding. It's persuasive authority at most.
⚠️ Whether sufficient decentralization is viable legal doctrine. No court has definitively adopted it. The SEC under Gensler distanced from it. It remains conceptually appealing but legally uncertain.
⚠️ How to measure decentralization. No agreed metrics exist. Different frameworks produce different conclusions. The line between "sufficient" and "insufficient" is undefined.
⚠️ Whether XRP qualifies. XRPL is more centralized than Bitcoin but more decentralized than many projects. It's in uncertain territory under any framework.
⚠️ How new SEC leadership will treat the doctrine. Policy could shift. The doctrine might be revived, formalized, or abandoned depending on administration priorities.
The sufficient decentralization doctrine offers an intellectually appealing framework connecting network characteristics to securities classification. But it remains uncodified, unmeasured, and uncertain. Projects can't rely on it for compliance certainty. Courts may or may not apply it. The concept influences thinking but doesn't determine outcomes. Sophisticated analysis acknowledges this uncertainty while still evaluating decentralization as a relevant factor in overall legal risk assessment.
Assignment: Conduct a comprehensive decentralization analysis of the XRP Ledger using the framework from this lesson. Conclude: Is XRPL "sufficiently decentralized" for XRP to not be a security?
Requirements:
Validator structure (UNL, non-UNL)
Ripple's validator presence
Geographic and entity distribution
Protocol upgrade process
Comparison to Bitcoin/Ethereum
XRP distribution (Ripple holdings, escrow)
Founder allocations
Token concentration metrics (if available)
Treasury/foundation control
Historical distribution trends
Decision-making processes
Amendment proposal and adoption
Ripple's influence on governance
Community participation
Market reliance on Ripple communications
Independent analysis ecosystem
Could XRPL function without Ripple?
Score each dimension (1-10 scale with explanation)
Overall assessment: Is XRPL sufficiently decentralized?
Key uncertainties in your analysis
How does this compare to Bitcoin, Ethereum, other L1s?
Conclude: Would XRP satisfy the Hinman doctrine (if it were law)?
1,700-2,200 words total
Use specific data where available (cite sources)
Acknowledge where data is unavailable or uncertain
Provide scoring with explanation, not just numbers
Data-driven analysis (30%)
Framework application (25%)
Honest acknowledgment of uncertainty (20%)
Quality of synthesis (25%)
Time Investment: 3 hours
Value: This exercise applies decentralization analysis to the asset you're studying. Understanding XRPL's decentralization profile is essential for evaluating its long-term legal risk and comparing it to other networks.
1. Hinman's Core Statement:
What did SEC Director Hinman say about Ethereum in his 2018 speech?
A) The SEC formally declared that ETH is a commodity under CFTC jurisdiction
B) Based on his understanding of Ethereum's current state and decentralized structure, current offers and sales of Ether are not securities transactions
C) Ethereum was always a security and will remain one permanently
D) All cryptocurrencies except Bitcoin are securities
Correct Answer: B
Explanation: Hinman stated: "based on my understanding of the present state of Ether, the Ethereum network and its decentralized structure, current offers and sales of Ether are not securities transactions." He carefully qualified this as his "understanding" of the "present state" and "current offers"—not a blanket declaration. Option A is wrong—this wasn't formal SEC/CFTC action. Option C is wrong—he said current ETH sales aren't securities transactions. Option D is wrong—he didn't make that claim.
2. Theoretical Basis:
Why might sufficient decentralization affect whether a token is a security under the Howey test?
A) Decentralized networks are exempt from federal law under the Commerce Clause
B) If no identifiable party provides "essential managerial efforts," Howey Element 4 (profits from efforts of others) may not be satisfied
C) The SEC has a formal rule exempting decentralized networks from registration
D) Decentralization automatically converts all tokens into commodities
Correct Answer: B
Explanation: The theoretical connection is through Howey Element 4. If a network is truly decentralized with no central party whose efforts drive value, there may be no identifiable "others" from whose efforts investors expect profits. This could mean Element 4 fails, and without all four elements, there's no investment contract. Option A is fabricated. Option C is wrong—no such rule exists. Option D overstates—there's no automatic conversion.
3. Legal Status:
What is the legal status of Hinman's "sufficient decentralization" doctrine?
A) Binding Supreme Court precedent that all courts must follow
B) Formal SEC rule published in the Federal Register
C) An influential concept from a speech by an SEC official, but not formal SEC policy, not binding on courts, and never adopted as law
D) A congressional statute that became effective in 2020
Correct Answer: C
Explanation: The Hinman speech was remarks at a conference expressing personal views. It was never adopted as SEC policy, wasn't published as a rule, and isn't binding on courts. It's been widely cited and influential but doesn't have legal force. Courts may consider it persuasive but aren't bound by it. Options A, B, and D mischaracterize the legal status.
4. Measuring Decentralization:
Which dimension of decentralization analysis examines whether investors rely on promoter communications to make decisions?
A) Technical decentralization (node distribution)
B) Economic decentralization (token distribution)
C) Governance decentralization (decision-making processes)
D) Information decentralization (reliance on promoter communications)
Correct Answer: D
Explanation: Information decentralization examines whether the market depends on communications from the original promoter/team for price-relevant information. If investors rely on company announcements, there's still information asymmetry. If the community produces independent analysis and the network could function without original promoters, information decentralization is higher. Options A, B, and C describe other dimensions.
5. Application to XRP:
Judge Torres' ruling in SEC v. Ripple addressed XRP's legal status. How did her analysis relate to the "sufficient decentralization" doctrine?
A) She formally adopted the Hinman doctrine and ruled XRPL was sufficiently decentralized
B) She rejected decentralization as relevant and ruled XRP is always a security
C) She used a different framework—contextual analysis of transaction types—rather than relying on network decentralization to distinguish securities from non-securities
D) She deferred to Japanese regulators' classification of XRP as a payment token
Correct Answer: C
Explanation: Torres didn't rely on sufficient decentralization analysis. Instead, she focused on transaction context: did buyers in specific sale types reasonably expect profits from Ripple's efforts? Institutional buyers who contracted with Ripple did (securities); exchange buyers in blind transactions didn't (not securities). This contextual approach avoided the decentralization measurement problem by focusing on buyer expectations in each transaction type. Option A is wrong—she didn't adopt Hinman doctrine. Option B is wrong—she found some sales weren't securities. Option D is wrong—she applied U.S. law, not foreign classification.
- William Hinman, "Digital Asset Transactions: When Howey Met Gary (Plastic)" (June 14, 2018) — Full speech transcript
- SEC Framework for "Investment Contract" Analysis of Digital Assets (April 2019) — Factors suggesting reliance on others
- "Sufficient Decentralization" analysis in legal journals
- A16z crypto decentralization framework
- Token governance research
- SEC v. Ripple Labs — Torres ruling on contextual analysis
- Hinman email references in Ripple discovery
- Nakamoto coefficient data
- On-chain token distribution analytics
- Validator distribution statistics
For Next Lesson:
Lesson 7 examines registration, exemptions, and safe harbors—the practical pathways for token offerings within the securities framework. Understanding these options illuminates what compliance looks like and why most ICOs failed to achieve it.
End of Lesson 6
Total words: ~5,700
Estimated completion time: 55 minutes reading + 3 hours for deliverable
Key Takeaways
Hinman's 2018 speech introduced "sufficient decentralization" but didn't create law.
The speech was influential, widely cited, and theoretically sound—but it was personal views, not SEC policy, not binding on courts, and not a compliance pathway.
The theoretical basis connects to Howey Element 4.
If no identifiable party provides "essential managerial efforts," that element may fail. Decentralization could mean no "others" whose efforts generate profits.
No agreed metrics for measuring decentralization exist.
Technical (nodes, validators), economic (token distribution), governance (decision-making), and information (reliance on promoter) dimensions matter—but there's no formula for "sufficient."
The doctrine's status is genuinely uncertain.
Gensler's SEC distanced from it. Torres used different reasoning. Legislative proposals could codify it. The concept survives but isn't established law.
Decentralization analysis remains relevant for risk assessment.
Even without legal certainty, more decentralized networks face lower regulatory risk than centralized ones. Investors should evaluate decentralization as part of comprehensive legal risk analysis. ---