Regulatory Lawfare

Mechanism

The pattern combines three levers, often together. The first is weaponizing definitional ambiguity: the question of whether a given crypto asset counted as a commodity or a security was genuinely unresolved in US law, and rather than issuing formal rulemaking to clarify it, as the Administrative Procedures Act requires, the SEC under its prior leadership classified crypto assets as securities through enforcement actions, selectively targeting companies to force capitulation, with no law passed and no rule promulgated.

The second is enforcing without specifying the violation. Brian Armstrong has described Coinbase holding more than thirty meetings with the SEC asking directly what the company had done wrong, only to be told to consult its own lawyers before receiving an enforcement action anyway.¹ The goal in this pattern is not compliance, it is capitulation, since companies that cannot afford to litigate simply fold.

The third is extrajudicial bank pressure: signaling to regulated banks, informally, that serving certain industries, crypto, oil and gas, or firearms, will generate scrutiny in upcoming examinations. Nothing about this needs to be stated explicitly or made illegal; the implication alone is sufficient, and industries lose banking access without any law being passed.

The cost asymmetry

The pattern works because the cost of fighting it is deeply asymmetric. A government actor carries an effectively unlimited litigation budget and no personal accountability for losing, while a startup facing an enforcement action must spend tens of millions of dollars in legal fees and absorb years of depressed valuation just to defend itself. Armstrong estimates Coinbase spent 50 to 100 million dollars in legal costs and suffered 10 to 20 billion dollars of stock market damage over the course of its fight; smaller crypto companies that could not afford a comparable defense simply died or relocated offshore.¹

Distinct from legitimate enforcement

Legitimate regulation identifies a specific violation of existing law, articulates it clearly, offers a chance to comply, and enforces only if compliance fails. Regulatory lawfare instead uses ambiguity to force capitulation over behavior that may in fact be legal, refuses to specify what is wrong, and uses enforcement actions as leverage to demand unspecified compliance from an entire industry rather than from specific bad actors. The Administrative Procedures Act specifically prohibits this pattern, requiring agencies to engage with industry to promulgate rules before enforcing them, and the SEC's failure to do so is what ultimately gave Coinbase grounds to sue proactively, and win.

Extraterritoriality and look-back

CZ describes a related structural feature from the receiving end, in the enforcement action that targeted Binance: "Some US laws apply globally. And they also have a very long look back period."² That combination is what distinguishes this from ordinary regulation. Extraterritorial reach means no amount of relocating offshore is protective, and a long look-back period means present-day compliance does not settle past conduct, so a firm can be fully compliant at the moment of enforcement and still be liable for a period during which the rules were unclear or unstated. Together, they let an agency reach a foreign operator for historical conduct without ever having passed a crypto-specific law in the first place, which is precisely the pattern this concept describes. CZ frames his own experience as personal ignorance of the law rather than persecution, which, in his telling, makes it stronger evidence rather than weaker.

The legislative fix

The industry's own conclusion is that the only permanent remedy is legislation that removes the ambiguity itself, rather than continuing to rely on enforcement discretion or after-the-fact litigation. Without a clear statutory line between which crypto assets are commodities and which are securities, a future hostile regulator could restart the same campaign at will.