Crypto Law Brief: The SEC's $75 Million Token Exemption, a White House Summit, and Maya's Six-Bug Exploit

Washington moved more in the last 48 hours than Congress has all year: the SEC's first major crypto rulemaking, a White House summit with both agency chairs, and a DeFi chain frozen after a six-bug exploit.

The SEC Proposes Regulation Crypto Assets

On August 18 the Commission proposed "Regulation Crypto Assets" (Release No. 33-11434, File No. S7-2026-27), a tailored offering regime for investment contracts involving crypto assets. It creates two Securities Act exemptions: a one-time exemption for offerings up to $5 million over four years, and a second for up to $75 million per 12-month period. Both require narrative disclosure; the larger adds financial statements and ongoing reporting.

Two provisions matter more than the dollar figures. First, a conditional safe harbor from the term "investment contract" in the statutory definitions of "security" — available, Chairman Paul Atkins said, once an issuer has completed or permanently ceased the essential managerial efforts it promised. Second, preemption of state registration requirements for exempt offerings and certain secondary trades, a direct hit to blue-sky authority and the likeliest source of hostile comment letters. Note the posture: this is a proposal, not a rule, advanced by written vote after the Commission canceled its August 14 meeting.

A White House Summit and the CFTC's First Innovation Meeting

On August 19, President Trump hosted crypto and prediction-market executives at the Eisenhower Executive Office Building with SEC Chair Atkins and CFTC Chair Michael Selig. Coinbase, Ripple, Nasdaq, CME Group attended, with Kalshi and Polymarket there for the first time. Trump pressed Congress on a "fair version" of the CLARITY Act, still stalled in the Senate. This morning the CFTC held the first public meeting of its Innovation Advisory Committee.

The significance is the substitution itself. Policy made by rulemaking rather than statute lasts only as long as the Commission that wrote it, and faces Administrative Procedure Act challenges a statute would not.

Maya Protocol Halts After a Six-Bug Exploit

Maya Protocol halted MAYAChain on August 18 after an attacker chained six flaws in one transaction carrying 23 messages. Per researcher Vini Barbosa's preliminary analysis, an uncapped subsidy calculation on a thin ARB.LINK pool generated roughly 49.45 million CACAO in accounting value; the attacker added negligible liquidity, took 99.93% of the pool, and withdrew 48.87 million CACAO. The token fell from $0.115 to $0.013 in under 240 blocks.

The loss figures measure different things. About $1.7 million is attributed to the attacker and roughly $1.36 million moved to external chains, but the broader pool-value decline near $10.9 million includes arbitrage and repricing effects, not assets the attacker controlled. A liquidity provider who lost value on a repricing is in a different legal position from a user whose assets were taken, and the two will not share a recovery theory.

Metaplanet Puts 2,100 Bitcoin Into a Nasdaq-Listed Shell

Metaplanet agreed on August 18 to contribute 2,100 BTC, near $132.1 million, plus $2.5 million cash to Nasdaq-listed Super League Enterprise, to be renamed Superplanet. SLE shares rose more than 85%. Metaplanet would hold roughly 95.7% of common stock, subject to stockholder approval and a fourth-quarter close. That stake makes Superplanet a controlled company, relaxing board independence requirements under Nasdaq rules and leaving minority holders diluted.

What This Means for You

If you are building a token project, read the SEC proposal now rather than after adoption. The comment period, 60 days from Federal Register publication, is the only window in which the terms are negotiable. Do not treat a proposal as permission; offerings made today are evaluated under existing law.

Three legal points deserve attention. State regulators retain authority until preemption is adopted, so a nationwide offering plan built on this proposal is premature. Exploit losses need characterization early, because the theory supporting a claim for stolen assets often will not support one for market-driven losses. And shareholders facing a treasury conversion should assess their appraisal rights before the vote.

At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud — whether you're a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.

Disclaimer

This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.