Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
the-sec-vs-crypto-legal-battles-analysis
Blog

Why 'Vertical Commonality' Could Ensnare Entire Blockchain Ecosystems

The SEC's expansion of the Howey Test through 'vertical commonality' creates a legal kill chain that ties a foundation's entire portfolio to a single security. This analysis breaks down the doctrine, its application in cases like Solana, and the existential risk for ecosystems like Ethereum, Avalanche, and Polygon.

introduction
THE VERTICAL THREAT

Introduction: The Single Point of Failure

Shared infrastructure layers create systemic risk by concentrating failure modes across supposedly independent applications.

Vertical commonality is systemic risk. Modern dApps are not independent; they are vertically integrated clients of shared infrastructure like the EigenLayer AVS ecosystem or AltLayer's rollup stacks. A failure in this base layer cascades to every application built on it.

Modularity created a new monoculture. The shift from monolithic L1s to modular stacks (Celestia for DA, EigenLayer for restaking) replaced one set of validators with a smaller, more concentrated set of operators and sequencers. This re-centralizes risk.

The restaking attack surface is vast. A critical bug in a widely adopted EigenLayer Actively Validated Service (AVS), like a cross-chain bridge or oracle, compromises every protocol that depends on it. This turns innovations like Omni Network's unified rollup layer into potential failure funnels.

Evidence: The 2022 Wormhole bridge hack resulted in a $325M loss, demonstrating how a single bridge contract's failure devastates the dozens of protocols and chains integrated with it.

key-insights
VERTICAL COMMONALITY RISK

Executive Summary: The Three-Pronged Threat

The SEC's 'vertical commonality' doctrine, used to classify assets as securities, poses a systemic threat by targeting not just tokens but the underlying infrastructure that makes blockchains function.

01

The Problem: The Staking-as-Service Trap

Centralized staking providers like Lido, Coinbase, and Kraken create a single point of regulatory failure. Their services are a textbook 'common enterprise' where user rewards depend on the managerial efforts of a third party.\n- $40B+ in staked ETH is exposed via liquid staking tokens (LSTs).\n- A ruling against one major provider could trigger a cascade of de-risking across Ethereum, Solana, and Cosmos.

$40B+
TVL at Risk
>60%
of staked ETH
02

The Problem: MEV Supply Chain Liability

The Maximal Extractable Value (MEV) supply chain—from searchers and builders to relays—creates a profit-sharing ecosystem that regulators can frame as an investment contract.\n- Flashbots' SUAVE and Jito Labs exemplify coordinated, profit-driven networks.\n- Proposer-Builder Separation (PBS) centralizes block production, making the 'common enterprise' argument easier to prove.

$1B+
Annual MEV
~90%
Relay Market Share
03

The Solution: Protocol-Native Primitives

The only durable defense is to bake critical functions into the protocol layer, removing intermediary dependencies. This aligns with the Howey Test's fourth prong by eliminating reliance on a third party's efforts.\n- Ethereum's PBS enshrinement and Solana's localized fee markets are critical R&D paths.\n- Cosmos' interchain security and EigenLayer's cryptoeconomic slashing shift trust to code, not corporations.

0
Trusted Intermediaries
100%
Protocol Guarantees
thesis-statement
THE NETWORK EFFECT

The Core Argument: Commonality is Contagious

Vertical commonality creates systemic risk by concentrating failure modes across an entire blockchain stack.

Vertical commonality is a systemic risk. It occurs when multiple applications share a foundational dependency, like a single sequencer or oracle. A failure in that shared component cascades instantly, paralyzing the entire ecosystem built upon it.

This risk is not theoretical. The 2022 Wormhole hack ($325M) and the 2023 Multichain collapse demonstrated how a single bridge's failure can freeze assets across dozens of chains. Shared infrastructure creates a single point of failure.

The contagion spreads via economic alignment. Protocols like EigenLayer and Lido Finance create restaking commonality, where the security of hundreds of AVS or the stability of DeFi depends on the health of a single staked asset pool.

Evidence: Over 70% of Ethereum's Beacon Chain validators use a consensus client from one of two providers (Prysm, Lighthouse). A critical bug in either client would threaten chain finality, demonstrating client diversity as a critical but neglected metric.

market-context
THE LEGAL FRONTIER

Current Battleground: The SEC's Playbook in Action

The SEC is weaponizing the 'vertical commonality' doctrine to argue that token value is tied to a core development team's efforts, threatening to classify entire ecosystems as unregistered securities.

Vertical commonality redefines 'common enterprise'. The SEC's Howey Test requires a 'common enterprise' for a security. Horizontal commonality pools investor funds. Vertical commonality asserts investors' fortunes are tied to a promoter's efforts. This is the SEC's primary vector for attacking protocols like Solana (SOL) and Algorand (ALGO).

The SEC's argument targets core development. The complaint against Coinbase alleges tokens like MATIC and ADA are securities because their value depends on the managerial efforts of Polygon Labs and IOG. This logic implicates any project with an active, centralized foundation driving protocol upgrades and ecosystem growth.

This creates an existential protocol dilemma. Projects must choose between decentralization theater and functional development. A truly decentralized autonomous organization (DAO) with no controlling entity might evade the SEC but often fails to execute. Effective Layer 1 and Layer 2 development, like Arbitrum's Nitro upgrade, requires coordinated effort that the SEC will cite as evidence.

Evidence: The Ripple (XRP) partial victory is not a blanket defense. The court ruled XRP sales to institutional investors violated securities law, aligning with vertical commonality. Programmatic sales to retail on exchanges did not. This creates a fractured regulatory standard but does not invalidate the SEC's core legal theory for initial distributions and foundation-controlled assets.

VERTICAL COMMONALITY ANALYSIS

Ecosystem Risk Matrix: Foundation Dependence vs. Legal Exposure

Assesses how centralized development and token distribution create legal 'common enterprise' risk for protocols and their users under the Howey Test.

Risk VectorHigh-Risk Profile (e.g., Solana, Cardano)Medium-Risk Profile (e.g., Ethereum, Arbitrum)Low-Risk Profile (e.g., Bitcoin, Lido DAO)

Foundation/Entity Controls >50% of Dev Funds

Foundation/Entity Controls Core GitHub Repos

Native Token Sale with Promised Ecosystem Growth

Treasury Controlled by <10 Multisig Signers

Protocol Upgrades Require Entity Signature

Active SEC Enforcement Action or Wells Notice

Daily Active Addresses from Foundation Wallets

15%

5-15%

<5%

Legal Precedent Classifying Token as a Security

deep-dive
THE LEGAL FRAMEWORK

The Legal Mechanics: From Foundation Grant to Security

The SEC's application of the Howey Test's 'common enterprise' prong creates systemic legal risk for token ecosystems.

Vertical commonality is the trap. The SEC argues a token is a security if its value depends on the managerial efforts of a central promoter, like a foundation. This creates a common enterprise where investor profits are tied to the promoter's success.

Foundation grants establish this dependency. Airdrops, development grants, and treasury allocations from entities like the Ethereum Foundation or Solana Foundation are explicit managerial efforts. Courts view these as actions to build ecosystem value, directly linking token price to foundation work.

The counter-argument fails. Developers claim decentralization breaks this link, but the SEC's Reves Test for notes shows that even dispersed ecosystems can be securities if a 'common enterprise' is perceived. The initial foundation grant creates an indelible legal tether.

Evidence: The XRP ruling precedent. Judge Torres's summary judgment found XRP sales to institutional investors were securities because Ripple Labs' efforts were crucial for value. This logic applies directly to foundation-granted tokens where the foundation's ongoing development is the primary value driver.

case-study
FROM THEORY TO ENFORCEMENT

Case Studies: The Doctrine Applied

The SEC's Howey Test 'common enterprise' prong is being weaponized via 'vertical commonality', where a single entity's managerial efforts dictate the fortunes of a token's holders. This doctrine could classify entire ecosystems as unregistered securities.

01

The Uniswap Labs & UNI Governance Nexus

The SEC's core argument: Uniswap Labs' continued development of the protocol and front-end constitutes the essential managerial effort. UNI token value is directly tied to these efforts, not just fee-switch votes.\n- Key Risk: $6B+ UNI market cap and $4B+ protocol TVL deemed a single enterprise.\n- Precedent: Labs' control over the dominant interface creates de facto dependency for all liquidity providers and traders.

$6B+
Market Cap
$4B+
Protocol TVL
02

Solana Labs & The SOL Ecosystem

The SEC's 2023 complaint explicitly cited Solana Labs' central role in bootstrapping the network and driving adoption as creating vertical commonality. SOL's success is painted as a direct function of the company's efforts.\n- Key Risk: $70B+ peak ecosystem TVL and ~3000 TPS performance metrics used as evidence of a managed enterprise.\n- Expansive View: All dApps and validators on Solana could be seen as participants in the same common enterprise orchestrated by the core team.

$70B+
Peak TVL
~3000
Peak TPS
03

The LayerZero OFT Standard & Omnichain Tokens

The OFT (Omnichain Fungible Token) standard creates a dangerous legal template. LayerZero Labs provides the essential cross-chain messaging infrastructure that makes the token functional. If the infrastructure fails, the token fails.\n- Key Risk: $10B+ in value bridged via LayerZero could be implicated.\n- Novel Attack Vector: Any token using the standard inherits the 'managerial effort' of the LayerZero team, potentially ensnaring thousands of token projects in a single enforcement action.

$10B+
Value Bridged
1000s
Token Projects
04

The Lido DAO & stETH as a 'Managed Product'

The SEC's argument: Lido's node operator selection, oracle network, and protocol upgrades are centralized managerial efforts critical to stETH's price and utility. Holders' profits are derived from Lido's work, not their own.\n- Key Risk: $30B+ in stETH and ~32% of all staked ETH represents a massive, concentrated target.\n- DAO Facade: The legal distinction between the Lido DAO and the initial founding entities (Lido OG) is likely irrelevant to regulators applying vertical commonality.

$30B+
stETH Value
~32%
ETH Staked
counter-argument
THE LEGAL TRAP

The Rebuttal (And Why It Fails in Court)

The industry's primary defense against vertical commonality is a technical distinction that judges will likely dismiss as irrelevant.

Protocols are not corporations. The Howey Test's vertical commonality requires a formal business entity whose fortunes correlate with investors'. L1s and L2s like Arbitrum and Optimism are decentralized software, not legal persons.

Judges see economic reality. A court examines substance over form. If a protocol's core team (e.g., Uniswap Labs, Offchain Labs) controls upgrades and treasury, and the token's value hinges on their work, that is vertical commonality. The DAO's legal wrapper is irrelevant.

The SEC's Ripple argument applies. The SEC successfully argued XRP's value was tied to Ripple's efforts. This precedent directly maps to Ethereum's early ICO or any L2 where a founding entity drives development and marketing.

Evidence: In the SEC v. Ripple summary judgment, Judge Torres found institutional sales constituted investment contracts because buyers expected profits from Ripple's entrepreneurial efforts. This is the blueprint for attacking Solana Labs or Avalanche Foundation.

risk-analysis
VERTICAL COMMONALITY

Existential Risks & Strategic Vulnerabilities

The concentration of critical infrastructure in a single tech stack creates systemic fragility, where one failure can cascade across the entire ecosystem.

01

The L1/L2 Shared Sequencer Trap

When a single sequencer (e.g., Espresso, Astria) is adopted by dozens of L2s, it creates a single point of failure and censorship. The economic security of a $10B+ TVL ecosystem becomes dependent on the liveness of one actor.

  • Censorship Risk: A single entity can censor transactions across all dependent chains.
  • Liveness Risk: A sequencer outage halts the entire vertical stack, not just one chain.
  • Centralization Vector: Replaces decentralized validator sets with a centralized service.
1
Point of Failure
10B+
TVL at Risk
02

The Monolithic DA Catastrophe

Relying solely on a single data availability layer (e.g., Ethereum blobs, Celestia) for all L2s creates a capacity bottleneck and a universal choke point. A successful attack or a sustained surge in demand can brick every chain in the stack.

  • Throughput Ceiling: Total ecosystem TPS is capped by the DA layer's blob space.
  • Universal Downtime: A DA layer failure halts settlement and state updates for all dependent L2s.
  • Cost Spikes: Congestion on the DA layer raises fees for the entire ecosystem simultaneously.
100%
Ecosystem Impact
48hrs+
Recovery Time
03

The Bridge & Oracle Single Points of Failure

Vertical stacks often standardize on canonical bridges (e.g., native L1<>L2 bridges) and oracle feeds. A compromise here doesn't just drain one app—it enables theft or manipulation across the entire ecosystem.

  • Bridge Hack Magnitude: A single exploit can target all assets locked across the vertical.
  • Oracle Manipulation: A corrupted price feed can trigger cascading, faulty liquidations on every DeFi protocol in the stack.
  • Vendor Lock-In: Creates ecosystem-wide dependence on a single provider's security model.
$2B+
Historic Losses
0
Graceful Degradation
04

The Solution: Horizontal Redundancy & Graceful Degradation

Ecosystems must architect for failure by introducing redundancy at every critical layer. This means multiple sequencer options, fallback DA layers, and competing bridge/oracle networks that can failover without halting the chain.

  • Multi-Prover Systems: Use diverse proof systems (e.g., zk and fraud proofs) to avoid a single bug class.
  • Escape Hatches: Force-enforced withdrawal periods to L1 if the L2 stack fails.
  • Economic Decoupling: Ensure the failure of one component doesn't propagate its cost/risk to others.
2x
Security Budget
-99%
Correlated Risk
future-outlook
THE REGULATORY TRAP

The Path Forward: Dissolving the Nexus

The Howey Test's 'common enterprise' prong is a legal weapon that can implicate entire blockchain ecosystems in a single enforcement action.

Vertical commonality creates ecosystem liability. The SEC's argument against Terraform Labs established that a founder's managerial efforts can create a 'common enterprise' linking a token to its entire ecosystem. This precedent means a single enforcement action against a core protocol like Solana or Avalanche could theoretically ensnare every dApp and user on that chain.

The nexus is the shared infrastructure. Regulators view the L1 consensus mechanism and validator set as the centralized managerial effort that binds all participants. This makes modular chains with shared sequencers (like EigenLayer or Celestia-based rollups) and monolithic L1s equally vulnerable. The legal attack surface is the coordination layer.

Counter-intuitively, decentralization is the shield. The only defense is provable, credible decentralization at the infrastructure layer. This requires permissionless validator sets, client diversity, and governance minimization that exceeds current standards. Most 'decentralized' chains today fail this test under a Howey analysis.

Evidence: The SEC's Terra Ruling. The court found that Terraform Labs' active development and promotion of the Terra blockchain created the requisite 'common enterprise' for UST and LUNA. This legal blueprint is now applied to all subsequent cases, making ecosystem-wide liability the new regulatory norm.

takeaways
VERTICAL COMMONALITY RISK

TL;DR: The Builder's Mandate

The SEC's Howey Test uses 'horizontal commonality' (pooled investor funds) and 'vertical commonality' (entrepreneurial efforts). The latter is a legal landmine for builders.

01

The SEC's 'Efforts of Others' Trap

Vertical commonality hinges on investors' profits being derived from the managerial or entrepreneurial efforts of a promoter. In crypto, a core dev team's ongoing work on protocol upgrades, governance, and ecosystem growth can be framed as this 'essential effort', turning a decentralized token into a security.

  • Key Risk: Post-launch development and marketing are scrutinized.
  • Precedent: The SEC's case against LBRY centered on the team's continuous development efforts.
  • Mitigation: True on-chain governance and credible decentralization roadmaps are non-negotiable.
LBRY
Case Study
Ongoing
Effort Scrutiny
02

The 'Ecosystem' as a Liability

An integrated tech stack (e.g., a monolithic L1 with its own VM, bridge, and DEX) creates a single point of legal failure. If the foundation's efforts are deemed essential to the entire stack's value, every asset within that ecosystem could be deemed a security.

  • Example: A token on an L1's native DEX is more entangled than a multi-chain asset on UniswapX.
  • Strategy: Promote modularity and sovereignty. Use Celestia for DA, EigenLayer for shared security, and Across for intent-based bridging to disperse 'essential efforts'.
Monolithic
Stack Risk
Modular
Defense
03

The VC-Backed Build Trap

Venture capital funding a core development entity creates a textbook 'promoter.' Their equity stake's value is directly tied to the token's success, creating a clear profit motive from the team's efforts. This directly satisfies the 'efforts of others' prong for all token holders.

  • Reality: >90% of top 100 L1/L2s are VC-backed.
  • Dilemma: Bootstrapping is nearly impossible at scale, but taking VC money paints a target.
  • Solution: Transparent, time-locked vesting schedules and rapid, verifiable dev team decentralization post-launch.
>90%
VC-Backed
Equity Link
Promoter Risk
04

Actionable Defense: The Protocol Politburo

To defeat vertical commonality, you must architect genuine on-chain irrelevance. The core dev team must become one of many possible contractors, not the essential manager.

  • Mandate 1: Code upgrade authority must reside in a decentralized, on-chain governance system (e.g., Compound Governor).
  • Mandate 2: Foundation treasury must be governed by the DAO, not a board.
  • Mandate 3: Ecosystem growth (grants, marketing) must be managed by community-led subDAOs. The goal is to point to the chain and say, 'The protocol runs itself.'
On-Chain
Governance
DAO Treasury
Control
ENQUIRY

Get In Touch
today.

Our experts will offer a free quote and a 30min call to discuss your project.

NDA Protected
24h Response
Directly to Engineering Team
10+
Protocols Shipped
$20M+
TVL Overall
NDA Protected Directly to Engineering Team