The CLARITY Act and the Quiet War Over Who Controls DeFi

Just before a Senate vote scheduled for September 15, the architects of the CLARITY Act — the biggest U.S. crypto market-structure bill in years — released another rewrite, this one 630 pages. Buried among the definitions was the sharpest tool the bill has produced yet: a rule aimed at protocols that call themselves decentralized but are actually run by a company, a founder, or a coordinated group. If that sounds like parsing legal fiction rather than market news, it is exactly the point. The most consequential fight in American crypto regulation right now is over what the word "decentralized" is allowed to mean, and the answer decides which projects get regulated and which get a legal pass.

To see why, it helps to remember what this bill is trying to do. The CLARITY Act is the effort to give crypto a home in U.S. law by drawing a clean line between two regulators: the Securities and Exchange Commission keeps authority over securities and investment contracts, while the Commodity Futures Trading Commission becomes the principal cop over spot markets in "digital commodities" — effectively, tokens tied to a functional network rather than to an issuer's promise. The House passed its version in July 2025 by a 294-134 vote, and the bill has now sat in the Senate for more than a year while the details get re-litigated.

The details keep circling back to DeFi. That is not an accident. A trading protocol built so users transact directly with one another — no broker, no custody, no middleman taking your money — has no obvious person to regulate. The bill's drafters solved that by treating "decentralized status" as a kind of off-ramp: a protocol that counts as decentralized is spared registration duties and the anti-money-laundering machinery that goes with being a financial business. But an exemption that generous turns a technical description into a legal category, and categories are where the politics live. Anyone who can prove they are "decentralized" escapes the burdens of being a financial intermediary; anyone who cannot is suddenly a regulated exchange.

That is the definition the revisions keep trying to get right, and the new text narrows it with a "control test." Rather than judging a protocol by its software architecture, the bill now asks whether an individual or coordinated group has the authority to control or materially alter the protocol's functionality, operations, or rules. Fail that test, and the operators may be forced to register with the CFTC. Pass it, and non-custodial software development, self-custody, and peer-to-peer trading keep their protections: a developer who publishes code without controlling user funds is generally not treated as a money transmitter.

Read that test closely and you can see what it really is: the bill has turned "decentralized" from a claim about code into a governance audit. The factors regulators would weigh — upgrade keys, admin keys, multisig emergency functions, a team able to change fees or halt a contract — are the mechanics of who holds power, not evidence about blockchains. A platform that runs on smart contracts but keeps a founder's finger on the kill switch loses the carve-out and lands in the same bucket as an exchange. For anyone deciding what to own, the label on the white paper tells you less than the answer to a simpler question: who holds the keys?

The messiness of that test is also why the bill keeps stalling. This is not a technical squabble; it is a fight over who gets to sit between digital cash and the user, and who escapes the money-laundering rules that come with that seat. The current draft focuses anti-money-laundering and sanctions duties on identifiable intermediaries rather than on every smart contract — which supporters call realistic and critics call a loophole for mixers and sanctioned actors. It is the same cleavage that has held the bill up for months: Democrats are conditioning their support on stronger ethics language for officials and on law-enforcement safeguards around exactly these DeFi carve-outs.

The calendar makes the standoff concrete. Republicans hold 53 seats, so the cloture vote set for September 15 needs 60 votes — meaning the bill cannot advance without Democratic support that has not yet been secured, even after the Senate Banking Committee passed a revised version 15-9 back in May. The pressure comes from a blunt warning Senator Cynthia Lummis delivered on September 6: if this bill does not get through the current Congress, she argues, the next realistic opportunity for comprehensive crypto market-structure legislation may not arrive until 2030, because the 2026 midterms force any new bill to start over.

I do not pretend to know how the vote turns out. But I keep coming back to what the endless revision is actually telling an investor. Under the old regime, the question "is my token a security?" was answered by regulators in court cases, token by token. The CLARITY Act tries to replace that with rules — and its most worked-over rule is the DeFi control test. That is a meaningful change in how decentralized projects will be valued, because it attaches enormous financial consequence to a governance choice. A token on a genuinely non-custodial network is groomed toward commodity status and the institutional money that comes with it. A token on a network whose team can push an upgrade or flip a switch lives in regulatory limbo, with the compliance burden — and the risk of registration — that limbo implies.

The deepest irony is that the market has been treating this as price news, watching affordability of the bill and bracing for a selloff in altcoins if it fails. That is the narrative layer. The theme running underneath is more durable: "decentralized" is becoming a jurisdiction, not just a description. Whatever the Senate does on the 15th, the direction is set — the value of the label will be decided less by whitepapers than by who actually holds the keys. That is the thing worth watching in any token you own, and it is more predictable than the vote.