SEC Commissioner Hester Peirce has warned that crypto vaults and onchain lending products may fall within the scope of US federal securities laws, urging developers to carefully evaluate whether their offerings require regulatory compliance.

In a statement published on Wednesday, Peirce said that vaults and lending strategies involving discretionary decisions—such as allocating assets, selecting yield-generating activities, setting lending terms, and determining liquidation thresholds—may be subject to federal securities laws depending on their structure and operation.

Her comments underscore that the SEC’s analysis may turn less on whether a product runs on smart contracts and more on who makes key economic decisions, how returns are generated, and what role users expect managers or protocol operators to play.

Potential classifications under existing frameworks

Peirce indicated that some vaults could be classified as securities offerings or even investment companies. Additionally, parties responsible for managing vault allocations or lending parameters could trigger investment adviser registration requirements.

She also noted that certain onchain loans may qualify as securities, contingent on how they are structured, distributed, and used by market participants.

"Moving activities that fall within the scope of the federal securities laws onchain, as a general matter, does not take those activities outside the scope of the laws the Commission administers," Peirce stated.

Peirce urged developers and operators to proactively consult the SEC if they believe their products may fall within the agency's jurisdiction. She also invited public feedback on how existing rules could be adapted to better accommodate onchain finance.

The statement adds to an ongoing policy question for decentralized finance: how existing securities-law categories apply when products combine automated code with human-led design, parameter setting, risk management, or marketing.

Crypto vaults expand amid regulatory scrutiny

Crypto vaults pool user assets into onchain strategies designed to generate yield through lending markets, staking, or liquidity pools. Their adoption has grown throughout 2026 as companies package sophisticated decentralized finance (DeFi) strategies into products targeting both retail and institutional investors.

In April, Sentora opened its Smart Yield platform to the public, enabling users to compare and access DeFi vaults based on strategy, yield, and risk metrics. Previously, Wallet in Telegram launched self-custodial vaults for Bitcoin (BTC), Ether (ETH), and USDT (USDT), offering automated yield generation without requiring users to transfer assets to a centralized custodian.

Kraken followed in May with a Bitcoin vault offering up to 2.5% variable APY by deploying wrapped Bitcoin across decentralized lending protocols including Aave and Morpho. Rewards are paid in Bitcoin and fluctuate based on borrowing demand in the underlying markets.

Technical risks persist

These products have also exposed users to technical vulnerabilities. In December, DeFi protocol Yearn disclosed a roughly $9 million exploit affecting its legacy yETH yield vault, though the protocol stated that its V2 and V3 vaults were not affected.

If crypto vaults were determined to fall under federal securities laws, their operators could be required to register with the SEC or qualify for exemptions while complying with disclosure and other regulatory requirements. For developers, the practical issue is whether product design, custody model, user disclosures, and any discretionary management functions align with obligations under existing rules.

Related: SEC sues Mining Automatic and founder over alleged $22M crypto mining scheme

Magazine: The digital euro: Surveillance money, or a better alternative to cash?