How the SEC’s New Crypto ETP and Market Structure Rules Work
The SEC has quietly rewritten how crypto ETPs get listed and exchanges get regulated. Here is what the AN38, AN48 and AN49 rules change, and what is still stuck at the White House.
For most of 2025, the SEC and crypto story ran through the courtroom. Coinbase, Kraken, Binance, ConsenSys, Cumberland DRW: one case after another that Gary Gensler’s SEC filed either got dismissed or quietly closed once Paul Atkins took over as chair. That part of the story has already been told from a lot of angles: the dropped lawsuits, the Howey test, the whistleblower numbers, the Trump v. Slaughter ruling that just changed how independent an SEC commissioner really is. This piece looks at a quieter part of the same shift, the part that never needed a courtroom at all.
On September 17, 2025, the SEC approved something with a far less dramatic name than a Wells notice or a settlement: generic listing standards for commodity based exchange traded products. There was no press conference and no defendant, just a procedural order most people scrolled past. Ten months later, that single order, plus two rulemakings still sitting at the White House as of this writing, will likely decide which crypto products an ordinary brokerage account can actually hold, more than any lawsuit the agency filed or dropped in the same period. This is SEC crypto enforcement as market plumbing rather than litigation, and it works differently enough from the courtroom story that it deserves its own explainer.
Why Market Structure Counts as Enforcement Too
It is easy to think of SEC enforcement as a synonym for lawsuits: a Wells notice, a complaint, a settlement, a jury verdict. That framing made sense under Gary Gensler, when registration theory drove most of the agency’s crypto docket. It makes less sense now. Once the SEC voted to drop its case against Coinbase in February 2025 and closed similar cases against Kraken, ConsenSys, Cumberland DRW and Binance over the following months, the agency lost its main tool for deciding, after the fact, which crypto products and venues were allowed to operate. It still had the power to sue for fraud, and it still used it. What it needed was a way to draw the line in advance, rather than in court years later.
That is what listing standards, custody rules and market structure amendments actually do. An exchange that lists a product outside the rules, or a broker dealer that mishandles custody outside the capital and recordkeeping requirements, still faces the SEC’s ordinary civil enforcement powers: injunctions, penalties, industry bars. The difference is where the line gets drawn. Instead of litigating what counts as an unregistered security one lawsuit at a time, the SEC is now writing, in relatively plain rule text, what a compliant crypto trading venue, ETP issuer or custodian is actually supposed to look like. Judge the current era by the rulebook, not just the docket, and a very different picture of the agency’s priorities emerges.
The Old Way: One Product, One Filing, Many Months
Until September 2025, every new crypto exchange traded product had to clear the same review process, individually. A listing exchange would file a proposed rule change with the SEC under Section 19(b) of the Securities Exchange Act, known in practice as a Rule 19b-4 filing, for each specific product. The agency would publish it for public comment, then had to approve or disapprove within an initial 45 day window, which it could extend, and extend again, up to a statutory maximum of roughly 240 days for a complex filing, according to a breakdown of the old timeline. In practice, that meant the better part of a year between an exchange filing to list a crypto ETP and that product actually trading.
That is why the first eleven spot Bitcoin ETPs all started trading on the same day, January 10, 2024, rather than staggered over the prior year as issuers filed. The SEC did not choose that timing on its own initiative; a 2023 D.C. Circuit ruling in Grayscale’s favor forced its hand, and once the agency lost that fight it approved the whole pending batch at once rather than relitigate the same question product by product. Even then, then Chair Gensler was careful to frame it as a legal defeat accepted rather than a policy endorsed, telling the public the Commission did not approve or endorse Bitcoin and calling it a speculative, volatile asset. Every product after that, an Ether ETF, a multi asset fund, anything beyond the original eleven, still had to run its own separate 19b-4 process from scratch.
Smaller issuers felt the cost of that timeline the most. A firm the size of BlackRock could absorb a year of legal and compliance spending waiting on a single 19b-4 filing; a smaller asset manager proposing a more niche product often could not, which meant the pre-2025 process quietly favored whichever issuers already had the biggest balance sheets, regardless of how good the underlying product idea was.
September 2025: Generic Listing Standards Rewrite the Playbook
NYSE Arca, Nasdaq and Cboe BZX filed proposals in July 2025 to change that, asking the SEC to let them list qualifying commodity based ETPs, including crypto ones, under standing generic criteria instead of a fresh 19b-4 filing every time. The SEC approved the change on September 17, 2025. The core test: if the underlying commodity already trades on an established futures market with a surveillance sharing agreement in place for at least six months, an exchange can list a qualifying ETP holding it without asking the SEC first, and only has to post basic information about the product on its own website within five business days of the start of trading, according to a legal analysis of the order.
The practical effect was to collapse a process that used to take up to 240 days into something closer to 75. That is not a minor efficiency gain, it is the difference between a product that can launch inside a single fiscal quarter and one that needs a year of lead time and legal budget most smaller issuers do not have. It also shifts the SEC’s own role, from individually blessing each product to policing whether exchanges are actually applying the generic criteria correctly, a much lighter supervisory lift.
| Step | Before September 2025 | After September 2025 |
|---|---|---|
| Filing required | Individual Rule 19b-4 filing per product, per exchange | No individual filing if generic criteria are met |
| Review timeline | Up to roughly 240 days under Section 19(b)(2) extensions | Roughly 75 days, mostly administrative |
| Underlying asset test | Case by case Commission finding | Established futures market with a 6+ month surveillance sharing agreement |
| Who decides | Full Commission vote on each product | Exchange self certifies against generic criteria |
| Example | 11 spot Bitcoin ETPs approved together on January 10, 2024, after a court forced the issue | GDLC (5 assets) launched September 19, 2025, without individual review |
Grayscale’s Crypto 5: The First Fund Built for the New Rules
The first real test of the new pathway arrived almost immediately. Grayscale’s multi asset fund began trading on NYSE Arca on September 19, 2025 under the ticker GDLC, renamed around the same time to the Grayscale CoinDesk Crypto 5 ETF. It holds a basket of five assets, Bitcoin, Ether, XRP, Solana and Cardano, weighted heavily toward Bitcoin (roughly seventy percent of the fund) with Ether a distant second (a bit under a fifth), and XRP, Solana and Cardano rounding out the rest in low single digits each. The fund tracks the CD5 Index, which at launch represented over ninety percent of total crypto market capitalization.
What makes GDLC notable is not the specific weights, it is that a five asset basket cleared listing as effectively one product. Under the old regime, each of those five assets would have needed its own individual review before it could sit inside an exchange traded wrapper, the same multi month, multi filing process Bitcoin and Ether ETPs went through separately in 2024. Under the generic standard, the whole basket qualified in one pass, as long as every underlying asset independently cleared the established futures market test. That is the generic listing standard doing exactly what it was built to do: turning a process that used to run five separate times into one.
Two Commissioners, Two Views: Peirce vs Crenshaw
The commission was not unanimous. Commissioner Hester Peirce backed the change, publishing a supporting statement she titled “A Special Generic”, arguing that letting exchanges apply objective, pre-set criteria, rather than forcing the Commission to relitigate the same underlying questions product by product, was a sensible use of the agency’s resources, one that let genuinely qualifying products reach investors faster.
Commissioner Caroline Crenshaw, the panel’s lone Democrat at the time, dissented in a statement she called “Passing the Buck”. Her core objection: “The commission is passing the buck on reviewing these proposals and making the required investor protection findings, in favor of fast tracking these new and arguably unproven products to market.” She also pushed back on blurring the line between an ETP, which carries fewer structural protections, and a registered ETF, arguing the eligibility criteria added confusion rather than clarity.
That four to one split will not recur in its old form. Crenshaw’s term expired in January 2026, leaving an all Republican commission for the first time in the agency’s modern history, with no Democratic nominee named as of this writing. The Peirce Crenshaw exchange over generic listing standards is worth remembering anyway, because it is the same argument, more speed and less individualized review against more individualized review and more caution, that keeps resurfacing across the SEC’s entire 2025 to 2026 pivot, just without a dissenting vote left on the board to record it formally.
Custody Gets a Rulebook Too: RIN AN48
Listing standards solve the question of whether a product can exist. They do not solve the question of who is allowed to hold the assets underneath it, and how, which is where RIN 3235-AN48 comes in. Filed as part of the SEC’s 2026 Unified Regulatory Agenda alongside two companion rulemakings, AN48 would amend the broker dealer net capital rule (Rule 15c3-1), the customer protection rule (Rule 15c3-3), and the recordkeeping requirements under Rules 17a-3 and 17a-4, specifically for firms that custody crypto assets on behalf of customers.
The gap AN48 is meant to close is a real one. A traditional broker dealer’s net capital and customer protection obligations were written for cash and securities that settle through familiar clearing infrastructure. Crypto assets do not fit cleanly into that framework: there is no uniform answer yet, inside SEC rules, for how a firm should treat customer crypto on its books for capital purposes, or what segregation looks like when the underlying asset is a private key rather than a book entry at a clearing corporation. Until AN48 is finalized, firms are left applying older guidance and their own risk judgment to a new asset class, exactly the kind of gap that produces disputes once something goes wrong.
Where the Coins Actually Sit: Custody Concentration Risk
Whatever AN48 eventually requires, it will be layered on top of a custody market that is already fairly concentrated. Coinbase Custody Trust Company holds custody duties for the majority of major US spot Bitcoin ETFs, including IBIT, GBTC, the Grayscale Bitcoin Mini Trust, ARKB and BITB, according to a rundown of IBIT’s structure. BlackRock added Anchorage Digital as a second, backup custodian for IBIT in April 2025, but has not stated any plan to actually move assets there, so the practical concentration remains real even with a nominal second option on paper.
That concentration is a structural fact the new rulemaking has to work around, not something AN48 alone will fix. A capital rule or a recordkeeping requirement can force better disclosure and stronger balance sheet treatment, but it does not, by itself, change how many organizations are actually capable of custodying institutional scale crypto today. The deeper issue sits a level below regulation entirely, in how custodians actually manage signing and key control day to day, the same operational question this outlet has examined before in the context of exchange hacks that started with a compromised signing interface rather than a broken smart contract. A rulebook can require a custodian to be well capitalized and to keep clean records. It cannot, on its own, guarantee the multisig setup behind those records was configured correctly.
None of this means concentrated custody is inherently unsafe, regulated custodians operate under far more oversight than the exchanges whose collapses defined the 2022 bear market. It does mean that when regulators and market commentators talk about diversifying away from a single custodian, they are describing a multi year infrastructure project, not a switch anyone can flip once AN48 is finalized.
RIN AN49: Rewriting the Rules for Trading Venues
The third piece, RIN 3235-AN49, targets the venues themselves. It would amend Exchange Act rules governing how alternative trading systems and national securities exchanges handle crypto asset securities: order types, disclosure obligations, and how order flow gets treated relative to the equivalent equity market rules those venues already follow for stocks. Right now, a crypto ATS sits in a genuine gray zone, not quite treated like an equity ATS, not given any crypto specific framework either, which leaves both the venue and its users guessing at how existing rules apply.
Many crypto trading venues operating today do so under a patchwork of state money transmitter licenses and, for larger firms, New York’s BitLicense regime, rather than under any SEC administered trading venue framework. That is a fundamentally different regulatory lineage than the one equity exchanges and ATSs operate under, which is part of why simply grafting existing Exchange Act rules onto crypto venues was never going to be a clean fit; AN49 is the SEC’s attempt to build a purpose made bridge between the two systems instead.
This is also where crypto market structure and traditional market structure start to blend together in practice. Professional trading desks already run substantial infrastructure around crypto volatility using tools built for traditional finance, the same derivatives and clearing arrangements options market positioning around Bitcoin’s halving cycle depends on. AN49 is, in effect, an attempt to give the venues underneath all of that a settled rulebook instead of a patchwork of individual no action letters and informal guidance.
Where the CFTC Fits In
Market structure rulemaking does not happen in a vacuum, and crypto trading venues do not sit neatly inside SEC jurisdiction alone. Spot crypto trading has historically been the SEC’s turf when a token looks enough like a security, while derivatives, futures, options, and increasingly spot commodity trading itself, sit with the CFTC. Michael Selig, previously chief counsel of the SEC’s own Crypto Task Force, was confirmed as CFTC chair in December 2025 and sworn in that same month, putting someone with direct SEC crypto policy experience in charge of the sister agency just as all three rulemakings were taking shape.
The two agencies formalized that alignment in stages. On January 30, 2026, the SEC and CFTC jointly signed onto Project Crypto as a shared initiative rather than two separate agendas running in parallel. On March 11, 2026, Atkins and Selig went further and signed a formal memorandum of understanding between the two agencies, committing to coordinate cross market examinations, streamline overlapping reporting requirements, and apply what the agencies called a “minimum effective dose” of regulation. Atkins referenced that same coordination again in a June 30, 2026 speech to the Economic Club of New York. For AN49 specifically, this matters because a crypto trading venue rarely deals in pure spot assets or pure derivatives exclusively, it deals in both, and a market structure rule that only addresses the SEC’s half of that book leaves the other half governed by a completely different regulator with its own separate rulebook. Whether the eventual AN49 proposal actually harmonizes with whatever the CFTC is doing on its side, or simply coexists alongside it, is one of the open questions that will not be answered until proposed text actually exists.
The Three Rulemakings Side by Side
Seen together, the three rulemakings split neatly by function: one governs what tokens can be offered and how, one governs who can custody the assets, and one governs where they can trade. None of them had published proposed rule text as of this writing.
| Rulemaking (RIN) | What It Covers | Status as of July 22, 2026 |
|---|---|---|
| Regulation Crypto (AN38) | Token offerings: startup exemption (up to about $5M), fundraising exemption (up to $75M), investment contract safe harbor | Proposed Rule Stage, NPRM targeted July 2026, at OIRA review |
| Broker Dealer Custody Rules (AN48) | Net capital rule 15c3-1, customer protection rule 15c3-3, recordkeeping rules 17a-3/17a-4 for crypto custodians | Proposed Rule Stage, NPRM targeted July 2026, at OIRA review |
| Crypto Market Structure Amendments (AN49) | Exchange Act rules for ATSs and national exchanges trading crypto asset securities | Proposed Rule Stage, NPRM targeted July 2026, at OIRA review |
Stuck at the White House: Where the Rules Actually Stand
SEC Chair Paul Atkins previewed the token offering piece back in April 2026, telling a digital assets summit hosted by Vanderbilt University and the Blockchain Association: “We’ll have reg crypto that we’ll be proposing here shortly. It’s in fact at OIRA right now, which is the next step before being published, so that’s exciting,” according to a report from that event. OIRA, the White House’s Office of Information and Regulatory Affairs, is the last review stage a federal rule clears before it is formally published for public comment.
Three months later, “shortly” has not arrived. As of this writing in late July 2026, all three RINs, AN38, AN48 and AN49, are still listed at the Proposed Rule Stage, with a target Notice of Proposed Rulemaking date literally recorded in the federal agenda system as the placeholder “07/00/2026” rather than an actual day. Reporting from Cryptonomist and other outlets indicates the roughly 400 page combined package is still sitting inside OIRA review, with no proposed rule text published yet.
The SEC’s own rulemaking clock and Congress’s separate crypto market structure clock are stuck at almost the same moment, for different reasons. The CLARITY Act, the House passed bill meant to formally divide crypto oversight between the SEC and CFTC, has been sitting on the Senate calendar without a floor vote scheduled through most of this same window, a parallel timeline covered in more detail elsewhere. Whether it is a rule stuck at OIRA or a bill stuck without cloture votes, the pattern this year has been the same: plenty of framework setting speeches and interpretive releases, comparatively little that has actually been finalized and taken effect.
| Date | Event |
|---|---|
| July 30, 2025 | NYSE Arca, Nasdaq and Cboe BZX file generic listing standard proposals |
| September 17, 2025 | SEC approves generic listing standards; Peirce and Crenshaw statements published |
| September 19, 2025 | GDLC (Grayscale CoinDesk Crypto 5 ETF) begins trading on NYSE Arca |
| March 11, 2026 | SEC and CFTC sign a formal memorandum of understanding |
| March 17, 2026 | Atkins lays out the three part safe harbor framework at the DC Blockchain Summit |
| Late March 2026 | SEC interpretive release states most crypto assets are not themselves securities |
| April 2026 | Atkins says the Regulation Crypto proposal is at OIRA, “shortly” to be published |
| July 2026 | AN38, AN48 and AN49 still listed at Proposed Rule Stage, NPRM date a placeholder, package still at OIRA |
What This Means If You’re Building or Trading Right Now
For a founder weighing a token launch, the practical read is not to wait for AN38 to be finalized, it is to work out which of the three exemption lanes sketched in Atkins’ March 2026 speech would actually apply once a real proposal exists:
- A startup exemption for raises up to roughly $5 million, using whitepaper style disclosure, available for up to four years
- A larger fundraising exemption for raises up to $75 million in any twelve month period
- A broader investment contract safe harbor for tokens meant to decentralize away from the issuing team over time
A founder focused breakdown of the framework is useful reading now, even before the formal proposal drops, because the eligibility questions it walks through, how much to raise, how long exemptive relief is needed, whether the token is meant to decentralize eventually, are the same questions any real proposal will ask.
For an exchange or a would-be ETP issuer, the generic listing standard already in effect is the more immediate lever: a plain vanilla, single or multi asset commodity backed product tracking something with six plus months of regulated futures history can likely move fast. Anything more creative, a yield bearing structure, an actively managed strategy, a fund built around a staking linked token, still falls outside the generic criteria and needs its own individualized review under the slower, pre-2025 process. That distinction matters a lot for how institutional capital is actually being deployed into liquid staking and restaking structures right now, since almost none of that activity qualifies for the fast lane; it is exactly the kind of product still stuck filing the long way.
For everyday investors, none of this changes what happens to money already sitting in an existing spot Bitcoin or Ether ETF, those products cleared review under the old rules and are not being reopened. What it does change is the pace and variety of new products likely to reach a normal brokerage account over the next year, more single asset and multi asset commodity backed funds, priced and structured close to what GDLC already looks like, rather than dramatically new fund structures, since anything more exotic still faces the slower individualized path.
What the New Rules Don’t Touch: DeFi, Restaking, and Offshore Venues
All three rulemakings, and the generic listing standard that is already live, are built around registered, centralized market infrastructure: exchanges, broker dealers, ETP issuers. None of them say anything about immutable DeFi protocols that have no operator to register in the first place, or about offshore trading venues serving US users who route around geographic restrictions. Those remain governed, if at all, by the same non binding staff statements on staking that the SEC issued in May and August 2025, guidance a future commission could simply withdraw, and by ordinary fraud enforcement when something goes obviously wrong rather than by any market structure rulebook.
That gap is not really an oversight, it is closer to a reflection of what rulemaking is actually good at. A capital rule can bind a registered broker dealer because that broker dealer has to register to operate legally in the first place. It has no obvious grip on a protocol with no company behind it, or on developers who ship code and then walk away. For everything living in that gap, security still runs on a completely different track, closer to what whitehat researchers and bug bounty programs already do than to anything a broker dealer capital rule could touch. Custody rules protect assets sitting with a registered custodian. They do nothing for assets sitting in a smart contract with a bug nobody has found yet.
The Bigger Picture: Why Plumbing Beats Lawsuits
There is a real argument that rulemaking, slow as it has been this year, is the more durable path compared to the litigation era it replaced. A dropped lawsuit can be refiled by a future SEC under a future chair with a different view of Howey; a final rule sitting in the Code of Federal Regulations needs a full notice and comment process to unwind, which takes years, not a single change of administration. Seen that way, three rulemakings still parked at OIRA in July 2026 are frustrating for anyone trying to plan a product launch around them, but they are also a sign the current commission is choosing the slower, harder to reverse tool over the faster, easier to reverse one.
That durability argument has a real asterisk on it now. The Supreme Court’s Trump v. Slaughter ruling this summer removed the old legal insulation that kept independent agency heads, including SEC commissioners, from being fired at will by a sitting president. A rule on the books is genuinely harder to undo than a dropped lawsuit, but a commission that a future president can reshape at will, without the tenure protections that used to apply, is a different kind of durable than it was a year ago. The rulebook approach outlasts a single administration’s lawsuits. Whether it outlasts a change in who is allowed to sit on the commission writing the next rulebook is a question nobody has actually tested yet.
For readers trying to track this cluster of rules going forward, the signal to watch is not another speech, the SEC has already given several, it is whether AN38, AN48 and AN49 actually clear OIRA and get published with real text attached. Everything up to that point is a framework. What happens after determines whether crypto ETPs, custody and trading venues end up governed by rules that hold up regardless of who sits in the chair’s office, or by preferences a future commission can simply choose not to enforce.
Frequently Asked Questions
What are the SEC’s generic listing standards for crypto ETPs?
They are rules the SEC approved on September 17, 2025 that let NYSE Arca, Nasdaq and Cboe BZX list qualifying commodity based ETPs, including ones holding crypto assets, without filing a separate Rule 19b-4 proposal for each individual product. To qualify, the underlying asset needs an established futures market with a surveillance sharing agreement in place for at least six months; if it does, the exchange can list the product and simply post basic details on its website within five business days of trading starting. This effectively brought crypto ETPs closer to how traditional commodity ETFs already operate, rather than treating every crypto product as a novel case requiring its own individualized finding.
What is the difference between the SEC’s AN38, AN48 and AN49 crypto rules?
All three are part of the SEC’s 2026 Unified Regulatory Agenda and were still at the Proposed Rule Stage as of late July 2026. AN38, called Regulation Crypto, covers token offerings and the proposed safe harbor exemptions. AN48 covers broker dealer net capital, customer protection and recordkeeping rules for firms that custody crypto. AN49 covers market structure, meaning how alternative trading systems and national exchanges are allowed to handle crypto asset securities.
Has the SEC stopped suing crypto companies?
No, but the volume and focus have changed sharply. Registration theory cases like the ones against Coinbase, Kraken, ConsenSys, Cumberland DRW and Binance were dismissed or closed during 2025. The SEC has continued to bring fraud cases, its Cyber and Emerging Technologies Unit exists specifically to pursue fraud rather than registration theory, and enforcement actions tied to Ponzi style schemes and fake trading platforms have continued through 2026. Enforcement data shows a sharp year over year drop in the number of crypto specific actions since the new leadership took over, even as fraud cases have continued largely unaffected.
What is the Grayscale CoinDesk Crypto 5 ETF (GDLC)?
It is a multi asset crypto ETP that began trading on NYSE Arca on September 19, 2025, the first product to use the SEC’s new generic listing standards. It holds a basket weighted mostly toward Bitcoin, with smaller allocations to Ether, XRP, Solana and Cardano, and tracks an index designed to represent the bulk of total crypto market capitalization.
When will the SEC’s new crypto market structure rules actually take effect?
There is no confirmed date. As of late July 2026, the three rulemakings, AN38, AN48 and AN49, were still sitting in White House OIRA review, with no proposed rule text published and a placeholder target date in the federal regulatory agenda. Even once a formal proposal is published, it still needs to go through a public comment period and a Commission vote before taking effect, a process that realistically extends into 2027.
Daniel Reyes, HOGE Wire Regulation Desk.