Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
crypto-regulation-global-landscape-and-trends
Blog

Why Staking-as-a-Service is the SEC's Next High-Value Target

The SEC's enforcement against centralized staking services is not an endpoint. It's a legal blueprint for a broader assault on proof-of-stake networks by establishing a 'common enterprise' precedent.

introduction
THE REGULATORY FRONTIER

Introduction

The SEC is shifting its enforcement focus from token sales to the infrastructure enabling them, with staking-as-a-service providers now in the crosshairs.

The SEC's target is shifting from primary token sales to the critical infrastructure that powers crypto economies. The legal precedent from the Coinbase staking lawsuit established that offering staking services constitutes an investment contract. This ruling transforms passive infrastructure into a high-value enforcement vector.

Staking-as-a-Service (STaaS) is a systemic risk because it centralizes the validation of major networks like Ethereum, Solana, and Cosmos. Unlike decentralized protocols like Lido or Rocket Pool, centralized STaaS providers like Coinbase, Kraken, and Figment create a single point of regulatory failure for billions in staked assets.

The enforcement rationale is control. The SEC argues that users surrender control of their assets and expect profits from the provider's managerial efforts. This legal framework directly implicates the business models of Binance, Celsius (pre-bankruptcy), and all centralized custodial stakers.

Evidence: The SEC's 2023 settlement with Kraken forced a $30 million penalty and the shutdown of its U.S. staking service. This action created a regulatory playbook that will be applied to the entire sector.

thesis-statement
THE LEGAL FRAMEWORK

The Core Legal Blueprint: Common Enterprise 101

Deconstructing the SEC's 'common enterprise' test reveals why Staking-as-a-Service is a primary enforcement target.

Staking-as-a-Service is a common enterprise. The SEC's Howey Test requires a common enterprise where investor profits are derived from the efforts of others. Centralized staking providers like Coinbase and Kraken directly manage node operations, slashing risk, and reward distribution, creating a textbook case of horizontal commonality.

Decentralized staking protocols face lower risk. The legal distinction hinges on effort dependency. In a protocol like Lido or Rocket Pool, the smart contract automates delegation and rewards; the 'effort' is algorithmic, not managerial. This structural difference is the primary legal defense against the common enterprise claim.

The SEC's target is the service wrapper, not the token. Enforcement actions against Kraken and Coinbase specifically targeted their marketing and management of pooled staking services. The SEC's argument isolates the commercial packaging of yield as the security, not the underlying proof-of-stake asset itself, setting a clear precedent for future actions.

SEC ENFORCEMENT RISK

The Staking Target Matrix: From Centralized to Decentralized

Comparative analysis of staking service models based on attributes that define an investment contract under the Howey Test.

Howey Test VectorCentralized Exchange (e.g., Coinbase, Kraken)Staking-as-a-Service (e.g., Figment, Kiln)Solo / Home Staking

Capital Investment Required

Relies on Managerial Efforts of Others

Expectation of Profit from Others' Work

User Custody of Validator Keys

User Control Over Withdrawals

Conditional (via smart contract)

Protocol-Level Slashing Risk Borne By

Service Provider

Service Provider

Staker

Typical Commission Fee

15-35%

5-15%

0%

SEC Lawsuit Precedent (as of 2024)

Kraken ($30M settlement)

None (High-Risk Target)

N/A

deep-dive
THE LEGAL PRECEDENT

From Kraken to Lido: Mapping the Enforcement Trajectory

The SEC's settlement with Kraken establishes a clear legal framework for targeting centralized staking services, creating a direct path to decentralized protocols like Lido.

The Kraken settlement is the blueprint. The SEC's $30M settlement with Kraken defined its staking service as an unregistered securities offering. This action established the 'investment contract' framework for any service that pools user assets and provides a passive return.

Lido's stETH is the logical next target. The SEC's argument hinges on centralized managerial effort and profit-sharing. Lido DAO's governance over node operators and the liquid staking token's (stETH) yield distribution mirrors the economic realities the SEC challenged at Kraken.

Decentralization is a spectrum, not a shield. Protocols like Rocket Pool and StakeWise use more distributed validator models, but the SEC's Howey Test focuses on the expectation of profits from a common enterprise. Any protocol with a dominant governance token (LDO) controlling fee distribution remains vulnerable.

Evidence: The SEC's own words. In the Kraken complaint, the SEC explicitly stated the service involved 'an investment of money in a common enterprise with a reasonable expectation of profits.' This language directly applies to the staking-as-a-service model employed by both centralized exchanges and leading DeFi protocols.

counter-argument
THE REGULATORY FRONTIER

The Bull Case: Why Decentralization Might Hold

Staking-as-a-Service (STaaS) centralizes critical network security functions, creating a clear target for SEC enforcement based on the Howey Test.

Centralized Staking is a Security. The SEC's Howey Test hinges on a common enterprise with profit expectation from others' efforts. Lido, Coinbase, and Kraken operate massive validator pools where users surrender control, creating a textbook investment contract. This is the legal wedge.

The Attack Surface is Massive. Unlike token sales, STaaS is a recurring revenue stream for both providers and the SEC. Every staking reward distributed is a potential unregistered securities transaction, enabling continuous enforcement and fines.

Decentralized Alternatives Provide Cover. Protocols like Rocket Pool and Stader shift the risk by requiring node operator skin-in-the-game (RPL/ETH collateral) and distributing validator keys. This technical decentralization is the primary legal defense against the Howey Test's 'common enterprise' prong.

Evidence: The SEC's settled charges against Kraken in February 2023 explicitly targeted its staking-as-a-service program, forcing its shutdown in the U.S. and establishing the precedent for future action against centralized providers.

risk-analysis
REGULATORY FRONTIER

Protocol Architect's Risk Assessment

The SEC's Howey Test is a blunt instrument, and the $50B+ staking-as-a-service market is its next logical target.

01

The Centralization Paradox

Staking-as-a-Service (SaaS) providers like Lido, Rocket Pool, and Coinbase create a critical dependency. The protocol's security is outsourced to a handful of entities, creating a single point of regulatory failure.\n- Risk: SEC action against a top 3 SaaS provider could slash network security by >30% overnight.\n- Precedent: The Kraken settlement established that offering staking services can be an unregistered securities offering.

>60%
ETH Staked via SaaS
$50B+
TVL at Risk
02

The Yield-as-Security Problem

The SEC's core argument hinges on the expectation of profit derived from the efforts of others. SaaS providers actively manage node operations, slashing protection, and reward distribution.\n- Howey Trigger: The user's passive income is directly tied to the SaaS provider's technical and operational competence.\n- Mitigation: Truly non-custodial, permissionless staking (solo or via DVT) is the only defensible architecture.

100%
Effort by 3rd Party
~5% APY
Promised Return
03

The Custody & Control Trap

Many SaaS models, especially centralized exchanges, retain custody of user assets and validator keys. This directly implicates them under existing securities custodial rules.\n- Legal On-Ramp: Custody provides a clear, traditional hook for regulators, unlike pure DeFi.\n- Architectural Imperative: Protocols must design for native liquid staking tokens (e.g., stETH, rETH) that are issued on-chain, separating the staking service from asset custody.

Key Custody
Primary Liability
LSTs
Exit Path
04

The Data Transparency Weapon

The SEC will use on-chain analytics from Chainalysis, TRM Labs, and Etherscan to map flows and prove control. SaaS providers generate a perfect audit trail.\n- Evidence: All deposits, rewards, and operator addresses are public and immutable.\n- Counter-Tactic: Architect for privacy-preserving staking pools using zero-knowledge proofs, though this adds significant complexity.

100%
On-Chain Proof
zk-SNARKs
Potential Shield
future-outlook
THE REGULATORY FRONTIER

The Endgame: Balkanization and Regulatory Arbitrage

Staking-as-a-Service (SaaS) providers are the next logical enforcement target for the SEC, forcing a global re-architecture of validator infrastructure.

The Howey Test's Next Target is the SaaS provider, not the individual staker. The SEC's framework for securities hinges on a common enterprise with an expectation of profit from others' efforts. Centralized SaaS operations like Lido, Coinbase, and Kraken are the 'others' whose managerial efforts generate yield, creating a clear enforcement vector.

Jurisdictional Balkanization Accelerates as compliant SaaS providers like Alluvial (Liquid Collective) and Figment domicile in favorable regions. This creates a two-tiered validator market: regulated, KYC'd nodes in compliant jurisdictions and permissionless nodes in regulatory havens, fragmenting network security and governance.

The Technical Countermeasure is the proliferation of Distributed Validator Technology (DVT). Protocols like Obol and SSV Network cryptographically split a validator key across multiple operators, technically and legally diffusing the 'common enterprise' by removing a single point of managerial control or failure.

Evidence: The SEC's 2023 settlements with Kraken and Coinbase explicitly targeted their staking-as-a-service programs, establishing precedent. The subsequent market shift is measurable, with DVT-based staking pools now securing over 1% of Ethereum's total stake, a figure growing exponentially post-enforcement.

takeaways
REGULATORY RISK ASSESSMENT

TL;DR for the Time-Poor CTO

Staking-as-a-Service (SaaS) is not a technical niche; it's a $100B+ liability vector where the SEC sees unregistered securities distribution.

01

The Howey Test's New Playground

The SEC views SaaS as an investment contract: you provide capital (tokens) to a common enterprise (pool) expecting profits (rewards) solely from the efforts of others (the provider). This is the core legal argument.\n- Key Risk: SaaS providers are de facto unregistered securities issuers.\n- Precedent: The Kraken settlement ($30M fine, staking service shutdown) is the blueprint.

$100B+
TVL at Risk
1
Active Precedent
02

Centralized SaaS: The Low-Hanging Fruit

Providers like Coinbase, Kraken, and Binance operate massive, custodial pools with clear profit-sharing models. They have U.S. entities, identifiable leadership, and deep pockets—making them perfect initial targets for enforcement.\n- Key Risk: Wells Notices and cease-and-desist orders are imminent, not hypothetical.\n- Impact: Forced U.S. shutdowns would trigger massive, destabilizing unstaking events.

~60%
Market Share
$30M
Kraken Fine
03

The Decentralized SaaS Loophole (For Now)

Protocols like Lido (LDO), Rocket Pool (RPL), and StakeWise use tokenized staking derivatives (stETH, rETH) to create a more decentralized service layer. The SEC's argument weakens here, as the 'common enterprise' is harder to define.\n- Key Insight: The attack vector shifts from the protocol to the liquid staking token (LST) itself.\n- Strategic Move: Major providers are already geographically diversifying validators and governance to mitigate jurisdiction risk.

$30B+
Lido TVL
100k+
Node Operators
04

The CTO's Mandate: Operational De-Risking

Your treasury's staking strategy is now a compliance function. The goal is to minimize counterparty and regulatory risk.\n- Action 1: Audit provider jurisdiction, legal structure, and contingency plans.\n- Action 2: Diversify across geographies and provider types (SaaS, solo, DVT clusters).\n- Action 3: Model the liquidity impact of a sudden provider exit. Can your LST be sold, or will you face a redemption queue?

3+
Provider Types
21 Days
Max Exit Lag
ENQUIRY

Get In Touch
today.

Our experts will offer a free quote and a 30min call to discuss your project.

NDA Protected
24h Response
Directly to Engineering Team
10+
Protocols Shipped
$20M+
TVL Overall
NDA Protected Directly to Engineering Team