SEC Says Voting Isn't Control: 3 New Answers That Decide Whether Your Governance Token Is a Security — 5 Checks Before You Buy

On November 2, 2026, the U.S. Securities and Exchange Commission's staff quietly answered a question that decides the fate of thousands of crypto tokens: if thousands of strangers vote together on a blockchain network, are they a single company in control? The staff's answer was no — not by voting alone. That one distinction, buried in three new FAQ answers numbered 1.4 to 1.6, redraws the line between a governance token that can trade freely and one regulators may treat as a security, and it matters for anyone holding a token with a vote attached.

Here is the payoff up front. Voting in a broad, rule-based governance system does not by itself make participants a controlling group, according to the Division of Corporation Finance staff. A party only counts as a central party if it can act unilaterally — grant or block access, rewrite the rules, pick the validators, or reverse transactions. And a token can be fully usable without its network being decentralized at all. Those three sentences are the whole story, and the rest of this article unpacks what they change, what they deliberately do not change, and the five checks every holder should run before buying another governance token.

This is not a law change, and that caveat matters as much as the answers themselves. The new entries are staff guidance: they carry no legal force, the Commission itself has neither approved nor disapproved them, and staff can revise or withdraw them later. They do not approve or endorse any token, they do not change anything in your wallet or on your exchange account overnight, and they do not decide the status of any specific token on their own. What they do is reveal how the staff currently reads the SEC's March 17, 2026 interpretive release on crypto asset classification — the framework that sorts tokens into categories including digital commodities, collectibles, tools, stablecoins, and digital securities. For projects, exchanges, and investors trying to guess which side of the line a token falls on, that reading is the closest thing to a map available right now.

What the SEC actually published on November 2

The Division of Corporation Finance added three answers to its crypto asset FAQ, which was first issued on September 25, 2026 and builds on the March 17 interpretive release that the Commodity Futures Trading Commission joined. The March framework says, in essence, that a digital commodity is not inherently a security but a vehicle for participating in and using a functional cryptographic system, and that such a system lacks a centralized entity overseeing participation and distributing rewards. The November answers clarify three pressure points in that definition: who counts as a group, what overseeing participation means, and how functionality differs from decentralization.

Question 1.4 asks whether the broad base of participants in a governance system counts as a group of persons or entities under the definition of a centralized entity. The staff answer is facts-and-circumstances based, but the general rule is reassuring for ordinary voters: if participants are not affiliated with each other, and have no agreement, arrangement, or understanding — written or oral, formal or informal, including through delegation or proxy voting — to act together outside the governance system itself, they are generally not treated as a group. That holds even when the governance system operates through an association or foundation, provided participation depends only on holding the network's native token. And there is a second safety net: even if participants were treated as a group, they would still need operational, economic, or voting control over the system to meet the full definition of a centralized entity. Voting alone is not control.

Question 1.5 defines the other side of the line: what it means for a central party to oversee participation. The answer is about unilateral authority at any layer of the system. A party oversees participation if it alone can grant or limit access at the protocol layer, the validator layer, or the user layer; set or change how upgrades, protocol changes, or token distributions are voted on; decide who is eligible to validate transactions; or modify code, reverse transactions, or revoke access. The emphasis on "alone" and "unilaterally" is the point. A multisig wallet or an on-chain vote does not automatically equal control — what matters is who, if anyone, can act without everyone else.

Question 1.6 separates two words that crypto marketing routinely merges. A system is functional when its native token can be used for its designed purpose — paying gas, accessing a service, participating in the network as intended. A system is decentralized when it operates autonomously, with no person, entity, or coordinated group holding operational, economic, or voting control. A token can therefore be perfectly functional and still fail the decentralization test, because a single party retains a kill switch, an upgrade key, or the power to freeze accounts. Usability proves the product works. It proves nothing about who runs it.

Why this matters now: the Canton precedent and the ETF pipeline

The timing is not accidental. One day after the FAQ update, on November 3, the same Division issued a no-action letter viewing Canton Coin as a digital commodity, declining to recommend enforcement over its programmatic issuance by super validators, validators, and application providers under stated conditions. Canton Network is an institutional blockchain built by Digital Asset for private, interoperable transactions, and its token had already drawn institutional attention: 21Shares launched the first U.S. ETF offering direct exposure to it in May, and Digital Asset raised $355 million in June in a round led by a16z crypto. The no-action letter was explicitly tied to its specific facts and did not express a legal conclusion on whether the coin is a security — but a16z general counsel Miles Jennings publicly read the March taxonomy plus the new FAQs as creating a clear pathway for network tokens out of securities laws.

That pathway matters commercially because classification decides distribution. A token treated as a digital commodity faces a different listing, custody, and ETF route than one treated as a security. The SEC has already been building that route all year: in July 2025 it approved in-kind creation and redemption for crypto funds, in September 2025 it approved standing listing standards that cut the approval clock from roughly 240 days to about 75, and by early 2026 more than 126 crypto ETF filings sat in the pipeline. The agency also approved a rule change allowing options on multi-crypto commodity trusts, provided each underlying asset averaged at least $700 million in daily market value over the prior year. Each of those steps rewards tokens that can credibly claim commodity status — and the November FAQs tell projects exactly which governance facts help or hurt that claim.

The political backdrop cuts both ways, which is why the FAQ's nonbinding status deserves emphasis. The CLARITY Act, the market-structure bill that would hand much of classification to the CFTC, passed the House in July 2025 but has stalled in the Senate, and after the 2026 midterm results delivered Congress to the Democrats, analysts now describe its near-term prospects as bleak. That leaves staff guidance as the working rulebook for now — useful, but reversible by a future Commission, a future Congress, or a court. Anyone treating the FAQ as a permanent safe harbor is misreading it.

Myth-busting: 5 things most people get wrong about governance tokens

Myth 1: voting means you control the network. Wrong under the new guidance. Casting a vote inside a broad, transparent, rule-based system, without side agreements to vote as a bloc, generally does not make you part of a controlling group. Control requires the power to decide outcomes, not merely to participate in them.

Myth 2: a foundation or DAO wrapper proves decentralization. Wrong in both directions. The staff say governance through an association or foundation does not automatically create a controlling group — but neither does it guarantee decentralization. If the foundation alone can change the rules, freeze accounts, or pick validators, the system still has a central party, whatever its legal form. Commentators have noted the FAQ leaves room for structures such as DUNA nonprofit associations, but the FAQ itself does not name or endorse DUNA or any particular form.

Myth 3: a working product means a decentralized network. Wrong, and Question 1.6 exists to kill this confusion. Functionality asks whether the token does what it was designed to do. Decentralization asks whether anyone can unilaterally override it. A slick app with a single admin key is functional and centralized at the same time.

Myth 4: the FAQ legalizes your token. Wrong. Staff guidance has no legal force, creates no obligations, and decides no specific token's status. It is a statement of how staff currently read the March framework. A court, the Commission, or a future staff could read it differently, and enforcement decisions still turn on specific facts.

Myth 5: only founders need to care. Wrong for holders too. Classification drives whether exchanges keep listing a token, whether ETFs can hold it, whether U.S. investors can access it at all, and how violently its price reacts to the next enforcement headline. Governance design is now a valuation input, not just a developer concern.

Control vs. not control: the table that decides it

The table below distills Questions 1.4 and 1.5 into the practical test. The left column describes facts that, on the staff's reading, generally do not create a central party. The right column describes facts that point the other way. Most real networks sit somewhere in between, which is why the staff insist on a facts-and-circumstances analysis rather than a bright line.

Generally NOT a central party	Points TOWARD a central party
Independent holders voting in a broad, transparent, rule-based system	One party that alone can grant or revoke access at any layer
Governance run through a foundation, with participation open to all token holders	A small affiliated group with a side agreement to vote as a bloc
Multisig execution of votes that the community actually decided	One party that alone sets voting procedures or upgrade rules
Delegated voting without coordination outside the governance system	Delegation arranged to concentrate voting power under one controller
A token usable for gas, fees, or services as designed	A party that can modify code, reverse transactions, or freeze users

Read that table against any token you own and the gaps become obvious fast. The dangerous facts are rarely advertised: they hide in admin keys, upgrade proxies, allowlists, and foundation bylaws that let a board override a vote. The reassuring facts are structural and boring: many independent voters, no side deals, transparent rules, and no single party able to act alone.

5 checks before you buy a governance token

Use this checklist before adding a governance token to a portfolio, and re-run it after major upgrades, because governance can centralize over time even when it starts decentralized.

• Check who can act alone first. Read the project's docs for admin keys, upgrade proxies, pause functions, and freeze powers. If one address or one small group can change the rules or reverse transactions without a vote, the network has a central party under Question 1.5, whatever its marketing says.
• Check how concentrated the vote really is. Look at actual voter turnout and the top holders' share. A system with 10,000 holders but three wallets deciding every vote is not the broad, independent participation Question 1.4 describes, especially if those wallets coordinate off-chain.
• Check whether the foundation can override the vote. A foundation running governance is fine on the staff's reading — unless it can ignore, veto, or rewrite outcomes. Bylaws and charters matter more than the word "decentralized" on the website.
• Check whether the token works without permission. Can anyone use the token for its designed purpose, or does access depend on an allowlist controlled by one party? Permissioned access at the protocol, validator, or user layer is oversight of participation, and it counts against commodity treatment.
• Check the classification trail, not just the hype. Has the project sought or received any staff position, like a no-action letter, or does it merely claim commodity status? And remember the FAQ is staff guidance, not law: treat any project promising regulatory certainty from it as a red flag, not a selling point.

What happens next: 3 scenarios for governance tokens

Bull case: the FAQ becomes the template. Projects redesign governance to fit Questions 1.4 to 1.6 — genuinely broad voting, no unilateral keys, transparent rules — and use that design to support commodity treatment, listings, and ETF inclusion. Network tokens with clean governance trade at a premium to opaque ones, and the FAQ's logic hardens into practice even without a statute.

Base case: guidance stays guidance. Most likely in the near term. The FAQ helps lawyers advise and exchanges assess risk, but classification remains case-by-case, the CLARITY Act stays stalled, and enforcement headlines still move prices. Governance quality becomes one diligence item among many, not a pass-or-fail stamp.

Bear case: a test case breaks the calm. A high-profile token with concentrated governance draws an enforcement action or a court rejects the staff's reading, and the market reprices governance risk overnight. Tokens whose decentralization was mostly marketing fall hardest, while genuinely decentralized networks hold up better. Holders who ran the five checks above will already know which bucket they are in.

For practical context, the same classification logic touches products many readers already use. If you hold crypto through a fund rather than directly, our guide to what a Bitcoin ETF is and how spot ETFs work explains why fund structure matters, and our best crypto wallets guide covers how self-custody changes who controls your coins when an exchange or issuer runs into trouble. Beginners starting from scratch should read how to buy Bitcoin first, and readers following the Canton story can catch up on the SEC's Canton Coin no-action letter and what the midterm results mean for the CLARITY Act.

Frequently asked questions

Does voting in a DAO make me part of a controlling group?

Generally no, under the staff's November 2 answer — provided you are not affiliated with other voters and have no agreement, formal or informal, to act together outside the governance system itself. Even if voters were treated as a group, they would still need operational, economic, or voting control to count as a centralized entity. Ordinary, independent voting is participation, not control.

Is the SEC's FAQ a law?

No. It is staff guidance from the Division of Corporation Finance. The SEC's own page says it has no legal force or effect, creates no new obligations, and has neither been approved nor disapproved by the Commission. It can be revised or withdrawn, and it does not decide any specific token's legal status.

What is the difference between functional and decentralized?

Functional means the token can be used as designed — for gas, fees, or access to services. Decentralized means the system runs autonomously, with no person, entity, or coordinated group holding operational, economic, or voting control. A network can be functional without being decentralized if one party retains unilateral powers such as freezing accounts or rewriting code.

Does a foundation running governance make a network centralized?

Not automatically. Staff say governance through an association or foundation does not by itself create a controlling group, as long as participation depends only on holding the native token and voters act independently. But if the foundation alone can override votes, control access, or change the rules, that unilateral power is what creates a central party — the legal form does not save it.

What does the Canton Coin no-action letter have to do with this?

Canton Coin received a no-action letter on November 3 viewing it as a digital commodity under its specific facts, including programmatic issuance by validators and application providers. It shows the same classification framework in action, but the letter expressly did not decide whether the coin is a security as a legal conclusion, and its reasoning applies to Canton's facts — not to every governance token.

Should I sell a governance token if its team holds an admin key?

Not necessarily, and this article is not investment advice — but treat an admin key as a material risk factor, not a footnote. Ask whether the key is time-locked, governed by a vote, scheduled for burning, or held by one person with no constraints. A key that can freeze your funds unilaterally is exactly the kind of fact Question 1.5 flags, and it should change how much of your portfolio you put at stake.

Conclusion

The SEC staff's November 2 answers do not legalize governance tokens, and they do not condemn them either. They draw a cleaner line than crypto has had before: voting together is not controlling together, unilateral power is the red line, and a working product is not the same as a decentralized network. For holders, the practical move is simple — run the five checks on every governance token you own, discount any project that confuses usability with decentralization, and remember that staff guidance is a weather report, not a roof. The projects that take that seriously, by removing unilateral powers and proving genuinely broad governance, are the ones best placed for whatever rulebook comes next. The rest are one enforcement headline away from repricing.

Sources: SEC Division of Corporation Finance crypto asset FAQ update (November 2, 2026) as reported by The Crypto Guide and Binance Square; The Block on the Canton Coin no-action letter; The CryptoBase November 2 report; Coin Edition SEC coverage. This article is educational analysis, not investment or legal advice.