What Happened
Eighteen months ago, the United States had no federal cryptocurrency legislation. Now it has a stablecoin law, a market structure bill advancing through Congress, a joint SEC-CFTC framework under development, and an executive order establishing a Strategic Bitcoin Reserve. That's fast.
The GENIUS Act (Guiding and Establishing National Innovation for U.S. Stablecoins) was signed into law on July 18, 2025. 1 It was the first major piece of digital asset legislation passed by Congress. The law requires stablecoin issuers to maintain 1:1 reserve backing, establishes a licensing and supervision regime, and allows banks, nonbanks, and credit unions to issue payment stablecoins under federal oversight.
One week later, the House passed the CLARITY Act (the Digital Asset Clarity Act of 2025), proposing a framework for determining when a digital asset falls under SEC jurisdiction (as a security) versus CFTC jurisdiction (as a commodity). 2 Senate committees have released discussion drafts, though full passage has been deferred to 2027.
Then came Project Crypto, announced in January 2026 as a joint initiative between the SEC and CFTC. 3 Under SEC Chairman Paul Atkins and incoming CFTC Chairman Michael Selig, the two agencies will develop 'Regulation Crypto' — a unified framework with rulemakings expected throughout 2026 covering crypto trading on exchanges, tokenized securities, market structure for financial 'super-apps,' and an innovation exemption for testing novel models.
Why It Matters
The previous administration's approach to crypto regulation was enforcement-first. The SEC under Gary Gensler filed dozens of actions against crypto companies, often without providing clear guidance on compliance. The DOJ operated a dedicated National Cryptocurrency Enforcement Team targeting exchanges and protocols.
The current approach has inverted. In April 2025, the DOJ disbanded its crypto enforcement team, explicitly stating a shift from 'regulation by prosecution' to targeting underlying crimes — terrorism, narcotics, sanctions evasion — rather than 'gray-area violations by exchanges or custodians.' 4 The SEC's Crypto Task Force has publicly articulated a regulatory objective of balancing privacy protection against government surveillance with transparency for national security.
This is not deregulation. It's re-regulation. The rules are becoming clearer, but they're also becoming more expansive. The question for Bitcoin holders is whether these frameworks protect self-custody or gradually constrain it.
The good news: nothing in the current legislative or regulatory framework restricts the right to self-custody Bitcoin. The GENIUS Act addresses stablecoin issuers, not individual holders. The CLARITY Act defines asset classification, not possession. Project Crypto focuses on trading platforms and market structure, not personal wallets.
The potential concern: as regulated infrastructure expands, the practical ease of moving between the regulated and self-custody worlds may change. The CFTC's Digital Assets Pilot Program now accepts Bitcoin as collateral in derivatives markets. 5 Banks can custody crypto. Exchanges operate under clearer rules. As more Bitcoin flows through regulated channels, the expectations around reporting, compliance, and transparency for individuals who interact with those channels increase.
The Anti-CBDC Surveillance State Act offers a counterbalance. By explicitly prohibiting the Federal Reserve from issuing a central bank digital currency, Congress drew a line against one form of state monetary surveillance. 6 This suggests that at least some legislators see financial privacy as a value worth protecting, even as the reporting apparatus expands.
What This Means for You
Update your mental model. The era of regulatory ambiguity is ending. If you hold Bitcoin on an exchange, that exchange now operates under a clearer set of rules — which means your obligations as a user are also becoming clearer. Know what your exchange reports, to whom, and under what conditions.
Self-custody remains legal, accessible, and arguably more important than ever. But the on-ramps and off-ramps between self-custody and the regulated financial system are becoming more instrumented. If you value privacy, the time to establish self-custody practices, learn coin control, and minimize exchange exposure is before the framework fully takes effect — not after.
Watch for how 'Regulation Crypto' treats DeFi. The CLARITY Act's existing drafts and Project Crypto's mandate explicitly discuss applying 'same risk, same rule' enforcement to decentralized networks. If DeFi protocols are required to implement identity attestation or AML mechanisms, the implications for on-chain privacy could be significant.
What to Watch
The final implementing regulations for the GENIUS Act, expected by July 2026, will set the operational rules for stablecoin issuers — including how they interact with self-custody wallets. Project Crypto's rulemakings throughout 2026 will determine whether 'financial super-apps' that combine custody, trading, and banking services create walled gardens or open ecosystems. And the stalled CLARITY Act in the Senate will determine whether digital asset classification becomes law or remains in regulatory limbo through 2027.