Quiz — Chapter 29: Crypto Regulation: The Global Landscape and the Fight Over Classification
Multiple Choice
1. The Howey Test, used to determine whether a crypto token is a security, originates from a Supreme Court case involving: - a) Railroad bonds in the 1920s - b) Orange groves in Florida in the 1940s - c) Oil wells in Texas in the 1960s - d) Internet stocks in the 1990s
2. Under current US regulatory practice, Bitcoin is primarily classified as: - a) A security by the SEC - b) A commodity by the CFTC - c) A currency by the Federal Reserve - d) Unclassified and unregulated
3. Which of the following is NOT one of the four prongs of the Howey Test? - a) An investment of money - b) In a common enterprise - c) With the expectation of profits - d) Traded on a registered exchange - e) Derived primarily from the efforts of others
4. In the SEC v. Ripple case, Judge Torres ruled that: - a) All XRP sales were securities transactions - b) No XRP sales were securities transactions - c) Institutional XRP sales were securities transactions, but programmatic sales on exchanges were not - d) XRP was a commodity, not a security
5. MiCA (Markets in Crypto-Assets Regulation) was adopted by: - a) The United States Congress - b) The United Kingdom Parliament - c) The European Union - d) The G20
6. Under MiCA, the three categories of crypto-assets are: - a) Securities, commodities, and currencies - b) Asset-Referenced Tokens, E-Money Tokens, and other crypto-assets - c) Bitcoin, stablecoins, and utility tokens - d) Payment tokens, governance tokens, and security tokens
7. The "passporting" feature of MiCA's CASP license means that: - a) Token holders can travel freely within the EU - b) A company licensed in one EU member state can operate in all 27 member states - c) Crypto-assets can be used as travel documents - d) Exchanges must accept customers from all EU countries equally
8. Which country was the first major economy to create a comprehensive regulatory framework for cryptocurrency, driven by the Mt. Gox collapse? - a) United States - b) United Kingdom - c) Japan - d) Singapore
9. China's approach to cryptocurrency regulation as of 2021 is best described as: - a) Comprehensive licensing framework - b) Light-touch regulation with sandbox approach - c) Comprehensive ban on all cryptocurrency transactions and mining - d) No regulation at all
10. The UK Financial Conduct Authority's approach to crypto regulation is characterized by: - a) A comprehensive licensing regime similar to MiCA - b) A registration requirement focused on AML/KYC, with strict advertising rules - c) A total ban on cryptocurrency trading - d) No regulatory requirements of any kind
11. OFAC's sanctions on Tornado Cash in August 2022 were unusual because: - a) They sanctioned a country rather than an individual - b) They sanctioned smart contract addresses — lines of code on a blockchain - c) They were the first sanctions ever imposed on a financial institution - d) They were imposed without any evidence of illicit use
12. Under US tax law (IRS Notice 2014-21), cryptocurrency is treated as: - a) Currency, subject to foreign exchange rules - b) Property, making every disposal a taxable event - c) A collectible, subject to the 28% collectible tax rate - d) Tax-exempt, similar to municipal bonds
13. "Regulatory arbitrage" in the crypto context refers to: - a) The practice of using arbitrage bots on exchanges - b) Disputes between regulators about jurisdiction - c) Structuring activities to take advantage of differences in regulatory requirements across jurisdictions - d) The requirement that regulators must arbitrate disputes between exchanges
14. Which of the following is explicitly excluded from MiCA's scope? - a) Stablecoins - b) Crypto exchanges - c) Fully decentralized DeFi protocols with no identifiable service provider - d) Custody services
15. The SEC's "regulation by enforcement" approach has been criticized primarily because: - a) The SEC has been too lenient on crypto companies - b) It provides companies no clarity about what is legal before they build - c) The SEC lacks the legal authority to regulate securities - d) Enforcement actions are too slow to be effective
16. South Korea's real-name account requirement for crypto exchanges means: - a) Exchanges must display their CEO's name publicly - b) Every crypto trader must link their exchange account to a verified bank account - c) Anonymous tokens are banned - d) Users must use their legal name as their on-chain address
17. A Wells Notice in the context of SEC enforcement is: - a) A court order freezing a company's assets - b) A formal notification that the SEC intends to bring an enforcement action, giving the company an opportunity to respond - c) A license to operate as a crypto exchange - d) A warning letter from a federal judge
18. Singapore's regulatory approach to crypto has: - a) Remained consistently permissive since 2019 - b) Initially been permissive but tightened after the TerraUSD collapse and Three Arrows Capital bankruptcy - c) Always been as restrictive as China's - d) Never established a regulatory framework
19. Which of the following best describes the "sufficiently decentralized" concept for crypto tokens? - a) A statutory standard defined in the Securities Act of 1933 - b) An informal concept from an SEC director's speech, never tested in court, suggesting tokens may start as securities but become non-securities once sufficiently decentralized - c) A CFTC standard for classifying commodities - d) A MiCA requirement for DeFi protocol governance
20. The Financial Action Task Force (FATF) "travel rule" requires: - a) Crypto users to report all international travel - b) Exchanges to share sender and receiver information for transfers above certain thresholds - c) Crypto companies to be licensed in every country where they have users - d) Regulators to travel to exchanges for in-person audits
True or False
21. Under current US law, a single crypto token can be simultaneously classified as property (by the IRS), a commodity (by the CFTC), and a convertible virtual currency (by FinCEN). True / False
22. MiCA requires all DeFi protocols to obtain a CASP license to operate in the EU. True / False
23. Germany treats cryptocurrency held for more than one year as tax-free on disposal. True / False
24. Hong Kong has maintained a consistent ban on retail crypto trading since 2018. True / False
25. The CFTC has regulatory authority over both the derivatives market and the spot market for commodities like Bitcoin. True / False
Short Answer
26. Explain why the classification of a crypto token (as a security, commodity, currency, or property) is so consequential. Give a specific example of how the same token could face dramatically different regulatory treatment depending on its classification.
27. Compare and contrast the US "regulation by enforcement" approach with the EU's MiCA legislative approach. Identify one advantage and one disadvantage of each.
28. What is the "front-end problem" in DeFi regulation, and why does it represent a fundamental limitation of traditional regulatory approaches?
29. Explain how the Tornado Cash case illustrates the tension between national security and the principle that code is speech. What are the strongest arguments on each side?
30. A startup plans to launch a new DeFi lending protocol. They ask you whether they should incorporate in the US, the EU, or Singapore. What key regulatory factors should they consider for each jurisdiction, and what would you recommend?
Answer Key
1. b) Orange groves in Florida in the 1940s. SEC v. W.J. Howey Co. (1946) established the four-part test for investment contracts.
2. b) A commodity by the CFTC. The CFTC first classified Bitcoin as a commodity in 2015, and courts have repeatedly upheld this classification.
3. d) Traded on a registered exchange. The four prongs are: investment of money, common enterprise, expectation of profits, and derived primarily from the efforts of others.
4. c) Institutional XRP sales were securities transactions, but programmatic sales on exchanges were not. The split ruling distinguished between sales where buyers knew funds went to Ripple (institutional) and secondary market sales where buyers did not.
5. c) The European Union. MiCA was adopted in 2023 and became fully effective in December 2024.
6. b) Asset-Referenced Tokens, E-Money Tokens, and other crypto-assets.
7. b) A company licensed in one EU member state can operate in all 27 member states.
8. c) Japan. The Mt. Gox collapse in 2014 drove Japan to create the Payment Services Act amendments of 2017.
9. c) Comprehensive ban on all cryptocurrency transactions and mining.
10. b) A registration requirement focused on AML/KYC, with strict advertising rules.
11. b) They sanctioned smart contract addresses — lines of code on a blockchain.
12. b) Property, making every disposal a taxable event.
13. c) Structuring activities to take advantage of differences in regulatory requirements across jurisdictions.
14. c) Fully decentralized DeFi protocols with no identifiable service provider.
15. b) It provides companies no clarity about what is legal before they build.
16. b) Every crypto trader must link their exchange account to a verified bank account.
17. b) A formal notification that the SEC intends to bring an enforcement action, giving the company an opportunity to respond.
18. b) Initially been permissive but tightened after the TerraUSD collapse and Three Arrows Capital bankruptcy.
19. b) An informal concept from an SEC director's speech, never tested in court, suggesting tokens may start as securities but become non-securities once sufficiently decentralized.
20. b) Exchanges to share sender and receiver information for transfers above certain thresholds.
21. True. Different US agencies classify crypto differently for their respective regulatory purposes.
22. False. MiCA explicitly excludes fully decentralized DeFi protocols with no identifiable service provider, though this exemption is narrow and contested.
23. True. Germany exempts cryptocurrency held for more than one year from capital gains tax.
24. False. Hong Kong reversed course in 2022-2023, introducing a new licensing regime that allows retail crypto trading on licensed exchanges.
25. False. The CFTC primarily regulates the derivatives market (futures, options, swaps). Its authority over the spot commodity market is limited, which creates a regulatory gap for Bitcoin spot trading.
26. Classification determines which regulatory agency has jurisdiction, which laws apply, and which compliance obligations attach. For example, if Token X is classified as a security, the issuer must register with the SEC (or qualify for an exemption), exchanges trading it need securities exchange licenses, and broker-dealers need broker-dealer licenses — compliance costs could run into millions. If the same Token X is classified as a commodity, the spot market faces minimal federal regulation, and the primary compliance requirements are AML/KYC through FinCEN and state money transmitter licenses — far less burdensome. The same company selling the same token could face either routine compliance or existential enforcement action depending solely on classification.
27. US approach: Advantage — can respond quickly to new threats through enforcement without waiting for legislation. Disadvantage — provides no advance clarity to businesses about what is legal, creating a chilling effect on innovation. EU approach (MiCA): Advantage — provides legal certainty and a level playing field across 27 countries, enabling companies to build with confidence. Disadvantage — legislative frameworks take years to develop and may be outdated by the time they are implemented, and compliance costs can be substantial.
28. The front-end problem refers to the fact that regulators can regulate the websites and applications that users use to access DeFi protocols (since those are operated by identifiable companies), but they cannot directly regulate the underlying smart contracts. This is a fundamental limitation because technically sophisticated users can interact directly with smart contracts without any front-end, and if a front-end is blocked in one jurisdiction, alternative front-ends can be built in another. Front-end regulation reduces casual access but cannot prevent determined use of the underlying protocol.
29. The Tornado Cash case illustrates this tension directly. National security argument: Tornado Cash was used by North Korean hackers to launder hundreds of millions in stolen funds, and OFAC has a responsibility to prevent sanctions evasion regardless of the tool's technological form. Code-is-speech argument: Open-source code is a form of expression protected by the First Amendment, and sanctioning code sets a precedent that could be extended to encrypted messaging, VPNs, or any privacy technology. The government should target criminals who use tools, not the tools themselves.
30. Key factors: US — largest market but highest regulatory uncertainty; SEC may classify lending tokens as securities; no comprehensive framework; "regulation by enforcement" risk; but institutional credibility and market access. EU (MiCA) — regulatory certainty and passporting across 27 countries; CASP licensing provides a clear path; compliance costs are substantial but predictable; DeFi exemption exists but is narrow. Singapore — clear Payment Services Act framework; strong reputation; but post-2022 tightening and smaller domestic market. Recommendation depends on the startup's priorities: if they prioritize regulatory certainty and European market access, the EU is strong; if they prioritize access to the largest capital market and are prepared for regulatory risk, the US; if they prioritize a clear framework with Asian market access, Singapore. Most startups in this position should seriously consider the EU under MiCA for its combination of certainty and scale.