Is Bitcoin a commodity or a security?
Brian Cubellis | Chief Strategy Officer
Bitcoin is a digital commodity, not a security. Under the CLARITY Act framework and the March 17, 2026 SEC/CFTC joint interpretation that operationalized it, Bitcoin sits in the digital commodity category under CFTC jurisdiction, in the same regulatory bucket as gold or oil. It has no issuer, no investment contract overhang, and no securities law applies to it. For the first time in Bitcoin's history, US federal law explicitly separates Bitcoin from "crypto.
This article explains the five-bucket token taxonomy the March 17, 2026 interpretation established, why Bitcoin's lack of an issuer places it in the commodity category rather than the securities category, how the CFTC's principle-based approach differs from the SEC's disclosure-based approach, what the classification unlocks for fiduciary and pension allocators, and why a commodity held for the long term needs base-layer custody.
The classification, in one sentence
The March 17, 2026 SEC/CFTC joint interpretation, codified in the CLARITY Act framework, establishes a formal token taxonomy with five categories. Bitcoin sits in the digital commodity category, alone in its scale and significance. That is the answer. The rest of this article explains why the answer is what it is and what follows from it.
The CLARITY Act is the market structure legislation that pairs with the GENIUS Act. The GENIUS Act, signed in July 2025, regulates the issuance of dollar-pegged payment stablecoins. CLARITY regulates the classification of every other digital asset. The Senate Banking Committee advanced CLARITY on a 15-9 vote on May 14, 2026, moving the broader market structure framework closer to law. Where GENIUS governs the velocity layer of the new monetary system, CLARITY governs how every non-stablecoin digital asset is categorized for federal purposes.
The five-bucket taxonomy
The March 17, 2026 interpretation does not treat "crypto" as a single thing. It sorts digital assets into five distinct categories, each with its own regulator or its own absence of one.
| Category | Regulator | What it covers |
|---|---|---|
| Digital commodities | CFTC | Bitcoin and assets with no issuer or investment-contract dependency |
| Payment stablecoins | OCC / state | Dollar-pegged tokens under the GENIUS Act framework |
| Digital securities | SEC | Tokens that depend on an issuer or platform |
| Digital collectibles | Unregulated | A residual non-financial category |
| Digital tools | Unregulated | A residual non-financial category |
Bitcoin falls in the first row. The classification is not a footnote to a broader "crypto" category. It is a separation. Bitcoin is no longer in the same regulatory bucket as Ethereum, Solana, or any token that depends on an issuer or platform. It is its own asset class, regulated as a commodity.
Why the absence of an issuer is the deciding factor
The line between a commodity and a security, in the framework, runs through the question of whether there is an issuer. A digital security depends on an issuer or a platform whose efforts a holder is relying on. That dependency is what brings an asset under securities law and the investment-contract analysis that has historically defined it.
Bitcoin has none of that. There is no issuer to regulate. There is no platform whose efforts the holder relies on. There are no platform rewards to negotiate and no yield mechanism to ban. Supply is determined by mathematics, not by a committee. The properties that the report describes as making Bitcoin unsuitable for the velocity layer, the absence of any controller, are precisely the properties that place it in the commodity category rather than the securities category.
This is why the report frames Bitcoin's classification as a category of one. It is alone in its scale and significance within the digital commodity bucket, and it carries no investment contract overhang, the legal uncertainty that has hung over most other tokens since 2017.
Principle-based vs disclosure-based regulation
Classification determines which regulator has jurisdiction, and the two regulators operate on fundamentally different philosophies. The distinction matters for any allocator deciding what they can hold.
The SEC's approach to securities is disclosure-based. It is built around the premise that an issuer must disclose material information to investors who are relying on that issuer's efforts. That framework assumes there is an issuer to make disclosures in the first place.
The CFTC's approach to commodities is principle-based, and the report notes it is substantially more accommodating to commodities than the SEC's disclosure-based approach is to securities. A commodity with no issuer has no disclosures to make and no issuer to make them. Bitcoin fits the principle-based model cleanly because there is no party standing behind it whose conduct needs to be policed through disclosure.
The practical effect of landing in the CFTC's bucket rather than the SEC's is that the analysis stops. There is no investment-contract test to apply, no issuer to scrutinize, and no platform whose efforts must be evaluated. The asset is simply a commodity, the way gold or oil is a commodity, and the regulatory question is settled rather than perpetually open. That is what the report means when it says Bitcoin is separated from "crypto" at the federal level for the first time: not a softer version of securities treatment, but a different category entirely.
| Dimension | SEC (securities) | CFTC (commodities) |
|---|---|---|
| Regulatory philosophy | Disclosure-based | Principle-based |
| Core assumption | An issuer exists and must disclose | No issuer dependency required |
| Fit for Bitcoin | Poor: no issuer to disclose | Clean: no issuer, supply set by math |
| Report's characterization | Constraining | Substantially more accommodating |
What the classification unlocks for fiduciary allocators
For institutional allocators with fiduciary obligations, the classification resolves a specific problem. The regulatory uncertainty that has constrained pension fund participation in Bitcoin since 2017 is now resolved. A pension trustee or other fiduciary evaluating Bitcoin no longer has to weigh the open question of whether the asset might be deemed a security, with all the consequences that classification would carry for a regulated portfolio.
The report draws a clear line on what changed. Bitcoin ETFs were the proof of concept. CLARITY is the structural unlock for direct allocation. The ETF complex demonstrated that institutions would hold Bitcoin exposure through a regulated wrapper, and spot Bitcoin ETF AUM now exceeds $95.8 billion. But an ETF is exposure to Bitcoin, not Bitcoin itself. The CLARITY framework, by classifying Bitcoin as a digital commodity with no securities law overhang, removes the regulatory barrier to direct allocation, where the allocator holds the asset rather than a share of a fund that holds it.
The sovereign and institutional accumulation pattern the report documents reflects this distinction in practice. The US Strategic Reserve holds 198,000 BTC. El Salvador holds 7,577. Bhutan holds approximately 4,400. Abu Dhabi's Mubadala holds $631 million in IBIT. Norway's government pension holds approximately $871 million in indirect exposure. Singapore's GIC backs Coinbase. Twenty-eight US states have introduced Bitcoin reserve legislation. The report's reading is that these are not random allocations; they reflect an institutional understanding of the difference between the velocity layer and the base layer, even where that understanding is not yet articulated publicly.
Commodity, but not just any commodity: the base layer
The classification answers a regulatory question, but it also points to a structural one. The same properties that make Bitcoin a commodity rather than a security, no issuer, no controller, no committee that can inflate supply, are the properties that make it function as the base layer of the emerging monetary system.
The report situates Bitcoin as Layer 2 in a three-layer monetary world: stablecoins for velocity, Bitcoin for neutral settlement and store of value, and gold as the legacy hedge. Bitcoin is the only digital asset structurally outside the enforcement perimeter being constructed around the stablecoin layer. Stablecoins, whether issued by Circle or Tether, can be frozen by their issuer at the request of a sufficiently powerful authority, a point the report demonstrates with the April 23, 2026 freeze of $344 million in USDT tied to Iran's central bank. Bitcoin cannot be frozen by any issuer because there is no issuer. It is designed to hold value across time.
That is the institutional case the report makes. A commodity classified for the long term, held as the base layer where the architecture itself protects value, is held differently than a token traded on a platform. It is held for preservation, across years and across regimes.
Why a long-term commodity needs base-layer custody
If Bitcoin's defining property is that no issuer and no authority can move it, then the way it is custodied has to preserve that property rather than reintroduce the single point of control that the asset is designed to eliminate. A digital commodity held as a base-layer savings asset, with no counterparty to fall back on, depends on the custody structure to hold the line.
This is where Onramp's Multi-Institution Custody fits the asset's classification. Multi-Institution Custody uses a 2-of-3 multisig quorum with keys held by Onramp, BitGo Trust, and CoinCover, three independent regulated institutions, so that no single party, including Onramp, can move client assets unilaterally. The architecture mirrors the property that makes Bitcoin a commodity rather than a security in the first place: there is no single controller. For certain account types, Tetra Trust is available as an optional additional keyholder for added jurisdictional diversification, though Tetra Trust is not available for Onramp's Bitcoin IRA product. For allocators who want a single-custodian entry point, Onramp Finance provides custody with BitGo Trust and an upgrade path to full Multi-Institution Custody.
The classification makes Bitcoin institutionally accessible. The custody architecture is what lets a fiduciary hold it the way a base-layer asset is meant to be held: directly, verifiably, and without any single party able to move it.
The bottom line
Bitcoin is a digital commodity, not a security. Under the CLARITY Act framework and the March 17, 2026 SEC/CFTC joint interpretation, it sits under CFTC jurisdiction in the same bucket as gold or oil, separated from "crypto" at the federal level for the first time, with no issuer and no investment contract overhang. For fiduciary and pension allocators, this resolves the regulatory uncertainty that has constrained participation since 2017 and turns Bitcoin ETFs from the ceiling of institutional access into the proof of concept for direct allocation.
The full analysis of how CLARITY and GENIUS together build the two-layer monetary system, and why Bitcoin's regulatory emancipation is the institutional story underneath the headlines, is in the The Stablecoin Stack research report.
Related Reading