Today on The Wrapper: policy proposals are finally turning into binding operational rules. We cover the U.S. Treasury's finalized stablecoin certification pathways under the GENIUS Act, a critical boundary the SEC just drew for token buybacks, and the new infrastructure granting verifiable corporate identities to autonomous AI agents.
Following yesterday's coverage of the SEC's updated guidance on automated token buybacks, a closer look at the actual text reveals the Division of Corporation Finance added a critical four-word condition to Question 2.5: 'and has no central party.' The amendment—which officially landed on Tuesday, September 29—clarifies that token buyback programs avoid Howey classifications only if no single entity retains operational control. The specific phrasing addresses the loopholes previously highlighted by a16z crypto general counsel Miles Jennings.
Why it matters
This administrative refinement connects protocol compliance directly to onchain governance architecture. By establishing the absence of a central controlling party as an explicit condition for non-securities buybacks, the SEC staff effectively penalizes protocols that maintain administrative backdoors, upgrade keys, or discretionary foundation safes. For protocol legal teams, executing programmatic token burns or treasury repurchases now requires a comprehensive audit proving that human discretion has been completely removed from fee switch and treasury execution parameters.
a16z crypto General Counsel Miles Jennings praised the updated language for preventing centralized teams from exploiting revenue buyback exemptions. Conversely, industry legal observers note that because staff FAQs remain nonbinding interpretations without formal Commission vote, reliance on the 'no central party' standard leaves protocols exposed if agency leadership pivots.
T-REX Network and OpenZeppelin updated the ONCHAINID standard to V3 on Tuesday, September 29, transitioning identity management from a static claim registry to a modular smart account. The redesign combines ERC-734 key management with ERC-7579 execution capabilities, introducing ERC-7913 signature checks, WebAuthn authentication, modular social recovery, and multi-chain identity verification. The framework permits token issuers to enforce dynamic compliance rules directly through installable smart account modules.
Why it matters
Decoupling identity verification from static wallet registries solves a fundamental friction point for institutional compliance in tokenized real-world assets. By structuring corporate identities as modular smart accounts, financial institutions can update signatory powers, enforce jurisdiction-specific transfer rules, and manage key recovery without re-issuing compliance credentials or re-boarding identity claims across multiple blockchain networks.
OpenZeppelin engineers highlight that modular smart account architecture allows regulated entities to adopt familiar WebAuthn credentials while preserving decentralized smart contract security. Institutional compliance officers note that while modular flexibility streamlines onboarding, complex smart account module interactions increase the audit surface for smart contract vulnerabilities.
A legal analysis published on Tuesday, September 29, examined non-charitable purpose trusts under the Trusts (Guernsey) Law, 2007, as an alternative legal wrapper for decentralized protocols. The piece details the mandatory separation of roles among trustees, enforcers, and power-holders, illustrating how DAO onchain votes can map onto legally binding trust instructions. The analysis emphasizes that while purpose trusts eliminate corporate equity owners, they require strict fiduciary governance to enforce protocol objectives.
Why it matters
For onchain organizations seeking asset protection without creating corporate entities that trigger equity liability, purpose trusts provide an established common-law wrapper. By separating trust asset ownership from protocol enforcers, DAOs can hold real-world assets, license intellectual property, and manage cross-border legal obligations without exposing individual token holders to personal partnership liability.
Legal specialists argue that Guernsey purpose trusts offer superior long-term asset stability for DAOs compared to traditional foundation structures because they eliminate corporate shareholding requirements. Skeptics note that purpose trusts require professional licensed trustees, introducing ongoing administrative overhead and offchain fiduciary dependencies.
A legal report published on Tuesday, September 29, analyzed the classification of decentralized autonomous organizations under South Korean jurisprudence following the Virtual Asset User Protection Act. The study contrasts civil partnerships (민법상 조합) with unincorporated associations (권능없는 사단), warning that Korean courts are likely to characterize unwrapped DAOs as civil partnerships. This classification exposes active governance voters to joint and several unlimited personal liability for protocol debts and legal damages.
Why it matters
This jurisdictional analysis underscores the severe legal risks facing token holders participating in unwrapped DAO governance within East Asian markets. As South Korean regulators step up digital asset enforcement, active governance participants residing in South Korea face direct personal liability for protocol failures or tax debts unless the DAO operates through an explicit legal entity design such as a Cayman foundation or Wyoming DUNA.
South Korean legal scholars argue that applying traditional civil partnership laws to DAOs accurately reflects the collective economic enterprise of active token voters. Web3 founders contend that treating open-source governance voters as general partners ignores the automated, code-governed reality of decentralized software protocols.
Adding to the active versus passive DAO liability debate we've tracked through cases like Samuels v. Lido DAO, an analytical review published on Monday examined recent federal court rulings regarding general partnership liability for unwrapped organizations. The report highlights a consistent judicial trend where courts treat active governance voters as general partners while dismissing claims against passive token holders. With the Lido DAO case currently stayed in the Ninth Circuit, the core legal question of whether active voting creates unlimited partner liability remains untested on its merits.
Why it matters
The emerging judicial distinction between active voters and passive token holders creates a dangerous incentive structure for decentralized governance. By concentrating legal liability specifically on active voters, courts unintentionally penalize the core contributors and delegates responsible for protocol security and treasury stewardship. This dynamic makes adopting formal legal entity wrappers an urgent operational priority for active governance communities.
MIDAO legal analysts stress that active DAO participants must adopt formal legal wrappers like DAO LLCs or DUNAs to insulate themselves from joint and several liability. Litigation scholars point out that until federal appellate courts rule directly on the merits of general partnership claims in Web3, active delegates operate under substantial personal exposure.
Following Sanctum's successful supply burn via MetaDAO's futarchy markets we covered earlier this month, new onchain metrics published Tuesday detail the platform's broader traction. MetaDAO has facilitated 23 token sales drawing $624.7 million in cumulative offer subscriptions against $45.4 million in accepted capital since April 2025. The protocol, which replaces traditional token-weighted voting with 72-hour decision markets, reported revenues of $1.8 million in Q4 2025, $556,000 in Q1 2026, and $376,500 in Q2 2026 from market trading fees.
Why it matters
MetaDAO's empirical transaction volume demonstrates that futarchy is transitioning from theoretical social choice research into a functional capital formation engine. Replacing discretionary DAO grants committees with decision markets aligns capital allocation directly with speculative market pricing, offering a data-backed alternative to traditional token-weighted governance votes.
MetaDAO proponents argue that pricing proposals via decision markets eliminates political lobbying and voting apathy in decentralized treasury management. Financial economists note that futarchy remains vulnerable to low market liquidity and capital manipulation on niche decision pairs.
OurDAO opened a technical repository issue on Tuesday, September 29, to implement a square-root quadratic voting formula for its staking contracts under the Stellar Wave program. The proposal replaces linear token-weight boosts with a square-root calculation based on total staked tokens. The acceptance criteria require voting power to scale quadratically to prevent whale stakeholders from dominating governance outcomes.
Why it matters
Implementing native quadratic scaling in staking contracts directly addresses the perennial conflict between capital concentration and democratic legitimacy in onchain governance. By dampening the voting power of large token holders via square-root formulas, DAOs can establish more balanced governance systems that preserve capital commitment while preventing plutocratic capture.
OurDAO developers maintain that quadratic staking weights balance financial commitment with broad community representation in governance votes. Governance researchers warn that without robust sybil-resistant identity controls, quadratic voting contracts remain susceptible to split-wallet Sybil attacks.
Fleshing out the Sentora ARFC proposal for an isolated Aave V4 lending hub that governance began debating yesterday, newly detailed financial terms reveal an even 50/50 revenue split with the Aave DAO at zero operational cost. Sentora will manage collateral selections, interest curves, and liquidation parameters under revocable DAO roles, utilizing a mandatory 48-hour timelock for risk-increasing changes. Shortfalls from liquidations will be absorbed directly by suppliers of that Hub asset rather than protocol-wide reserves.
Why it matters
This proposal serves as the first major real-world test of Aave V4's modular Hub & Spoke architecture for delegating operational risk management to third-party operators. By containing liquidation bad debt strictly within the specific Hub's supplier pool and requiring zero DAO operational spend, the model allows major lending protocols to scale institutional asset coverage without exposing the primary treasury to systemic risk.
Sentora maintains that performance-aligned revenue sharing incentivizes rigorous professional risk curation while expanding Aave's institutional market share. Governance participants on the Aave forum raise concerns regarding potential revenue dilution, the lack of mandatory independent monitoring by existing DAO risk stewards, and supplier exposure to unbacked shortfalls.
Following yesterday's coverage of the onchain allegations that the Compound Foundation converted 8.42 million DAI into 344,780 COMP to swing critical governance votes, the Foundation issued a formal defense on Monday. Defending the fact that the acquired COMP was delegated to its own voting address just 58 minutes before voting closed on Proposal 582, the Foundation stated that historical Proposal 536 authorized this reserve usage for protocol development and governance continuity.
Why it matters
This dispute exposes systemic vulnerabilities in foundation-DAO relationships where affiliated non-profit foundations exercise operational control over unallocated treasury reserves. When foundations convert reserve assets into voting power to pass controversial development grants or protocol budgets, token-weighted governance devolves into circular self-dealing. This conflict pressures major DAOs to enact explicit constitutional bans on foundation self-delegation and temporary voting power acquisition.
Community delegate ugurmersin argues that converting protocol reserves into voting tokens to pass foundation-backed proposals violates core DAO oversight principles and centralization boundaries. The Compound Foundation contends that its treasury actions strictly complied with Proposal 536 mandates to secure long-term protocol development funding without speculative trading.
Verified across 2 sources:
Protos(Sep 29) · Paragraph(Sep 30)
Click Copy for AI above, then paste the prompt
into your favorite AI chatbot — ChatGPT, Claude, Gemini, or
Perplexity all work well.
Abracadabra DAO opened a governance vote on Wednesday, September 30, to formally wind down the protocol and liquidate its Magic Internet Money (MIM) stablecoin following the accumulation of over $21 million in unbacked bad debt. With remaining enforceable collateral standing at just $900,000, MIM is backed by less than 5% of its face value. If approved, remaining treasury assets will be converted to Ether and distributed to MIM holders, completely wiping out the value of the SPELL governance token.
Why it matters
This shutdown vote establishes a formal governance precedent for the orderly liquidation of insolvent collateralized-debt-position (CDP) stablecoins. By prioritizing stablecoin debt claims over equity-like SPELL governance token holders, the DAO enforces a strict capital waterfall that absorbs total equity loss before debt holders take haircuts. The execution provides a structural template for managing terminal protocol failure in decentralized finance.
Protocol leadership contends that orderly liquidation is the only responsible choice to protect remaining stablecoin holders after bad debt outstripped protocol reserves. SPELL token holders express frustration that treasury assets will be entirely liquidated to cover historical bad debt, leaving governance participants with zero residual recovery.
Fleshing out the 24/7 blockchain collateral platforms we noted the DTCC building yesterday, the clearinghouse announced an integration with Chainlink on Tuesday to power its new tokenized settlement rails. Operating on a permissioned Ethereum-compatible AppChain built on Hyperledger Besu, Chainlink will handle real-time asset pricing, valuation, margining, and cross-chain settlement workflows for institutional market participants.
Why it matters
Integrating public blockchain oracle infrastructure into core market utilities like the DTCC marks a major transition for tokenized real-world assets from isolated pilots to institutional financial plumbing. Establishing continuous 24/7 collateral settlement rails allows corporate treasuries to optimize capital efficiency and eliminate overnight clearing buffers.
DTCC and Chainlink leadership state that automated 24/7 valuation and settlement rails significantly reduce systemic counterparty risk and operational drag in legacy securities clearing. Institutional risk managers note that relying on automated AppChain settlement requires robust fail-safe mechanisms to handle market volatility during non-traditional trading hours.
A new Pantera Capital tokenization report published on Tuesday takes a slightly different measure of the real-world asset market than figures we tracked earlier this month. While recent estimates placed tokenized U.S. Treasuries at $15 billion, Pantera cites the figure at $12 billion—and notably reveals that 81% of that value remains statically held in reserve wallets rather than actively traded across decentralized finance protocols. Pantera calculates the total tokenized asset market at $321 billion when including $293 billion in stablecoins.
Why it matters
The high percentage of passively held tokenized Treasuries indicates that institutional asset managers currently utilize tokenized real-world assets primarily as digitised yield-bearing reserves rather than active composable collateral. For DAO treasury managers, this underscores that secondary market liquidity for tokenized fund shares remains constrained by regulatory transfer restrictions.
Pantera researchers emphasize that institutional adoption of tokenized Treasuries demonstrates strong trust in blockchain recordkeeping for reserve management. DeFi composability advocates argue that until issuers remove restrictive transfer whitelists, tokenized assets will fail to capture the capital efficiency advantages of public permissionless networks.
Addressing the ERC-3643 composability bottlenecks we've tracked across real-world assets, Metaplex launched the MPL-3643 token standard on Solana on Tuesday, September 29. Built on Solana's Token-2022 program and Attestation Service, the framework brings an equivalent compliance layer for permissioned securities to high-throughput blockchains. By embedding investor eligibility checks and transfer restrictions directly into smart contracts, verified wallets can interact seamlessly across venues like Orca and Raydium.
Why it matters
Bringing permissioned real-world asset standards to Solana removes a primary barrier to institutional asset tokenization on high-throughput networks. By embedding regulatory compliance logic into Token-2022 extensions rather than wrapping assets in proprietary smart contracts, asset issuers can maintain strict regulatory controls while enabling continuous secondary market trading across decentralized exchanges.
Metaplex developers emphasize that native compliance standards eliminate the trade-off between institutional regulatory enforcement and high-speed DEX composability. Decentralized finance purists contend that permissioned token standards introduce administrative freeze keys and identity registries that undermine permissionless blockchain design.
Advancing the U.S. Treasury's GENIUS Act stablecoin framework we've been tracking since its proposed draft in August, an interim final rule took effect on Wednesday, September 30, formalizing the certification pathways. The rule establishes the Stablecoin Certification Review Committee and details the procedure for state regulators to seek federal recognition. Uncertified stablecoins face potential restrictions in inter-state commercial transactions, turning counterparty issuer status into a mandatory compliance check for Web3 businesses.
Why it matters
This rule transforms stablecoin selection from a liquidity preference into an essential regulatory risk calculation for onchain organizations. DAOs, crypto-native firms, and protocol treasuries using stablecoins for payroll, grants, or liquidity provisioning must audit issuer compliance status to avoid accepting uncertified tokens that could become legally restricted in U.S. commerce. What to watch: whether state banking departments file immediate recognition petitions or trigger operational delays for regional issuers.
Treasury officials emphasize that formal certification review prevents regulatory arbitrage and protects consumer commerce across state lines. Digital asset policy advocates argue that creating a central federal review committee re-introduces discretionary gatekeeping that favors well-capitalized institutional issuers over open, decentralized stablecoin models.
Building on the ERC-8004 onchain identity standard we've been tracking, a new draft ERC published on Wednesday introduces Agent Identity (AID) to bind autonomous software agents to blockchain addresses. AID defines a deterministic four-state liveness machine (DORMANT, ACTIVE, STALE, RETIRED) and an AID Document resolving claims by provenance class. The reference implementation includes Solidity contracts, JSON schemas, test vectors, and a lightweight resolver.
Why it matters
Establishing standard liveness and authorization states for autonomous agents provides essential infrastructure for onchain organization treasuries. When DAOs assign capital or task execution to autonomous agents, the AID framework allows smart contracts to verify whether an agent's operational key is active or stale before executing payments. This deterministic state model mitigates orphan agent execution risks across decentralized networks.
The proposal authors maintain that AID delivers a thin, verifiable onchain identity layer that integrates existing reputation registries without depending on centralized offchain indexers. Smart contract security researchers emphasize that liveness state transitions must incorporate secure decay functions to prevent compromised agents from remaining indefinitely active.
Moca Network launched the mainnet of Moca Chain on Tuesday, September 29, an EVM-compatible blockchain engineered specifically for digital identity and authorization in agentic web environments. The launch features AIR, an integration layer designed to let enterprises verify autonomous AI agents alongside their human owners, enforcing delegated permissions, budget caps, and zero-knowledge identity proofs. Initial launch partners include Plume, Nansen, Open Campus, and SK Planet.
Why it matters
Deploying dedicated Layer-1 execution environments optimized for non-human economic actors shifts blockchain infrastructure toward machine-native governance. By embedding spending limits, delegation cages, and ownership verification directly into consensus and middleware layers, Moca Chain offers onchain organizations a controlled environment for deploying autonomous trading and treasury management agents without exposing master private keys.
Moca Foundation executives highlight that AIR solves the core accountability gap in autonomous commerce by establishing a verifiable, revocable link between software agents and legal entities. Network analysts question whether purpose-built agent blockchains can build sufficient liquidity and developer adoption compared to established general-purpose Layer-2 networks.
Expanding the verifiable Legal Entity Identifier (vLEI) push beyond the ENS integration we noted yesterday, the Global Legal Entity Identifier Foundation (GLEIF) detailed a joint architecture with Chainlink and J.P. Morgan at the Sibos 2026 conference on Wednesday. The panel outlined technical structures combining vLEIs with Chainlink's Cross-Chain Identity (CCID) and Automated Compliance Engine (ACE) to grant software agents institutional counterparty authorization.
Why it matters
Institutional adoption of autonomous AI agents requires linking machine execution to recognized legal corporate entities. Integrating vLEI verification into cross-chain oracle rails provides traditional banks and corporate treasuries with a cryptographic framework to audit agent authorization before releasing funds or settling tokenized asset transactions. This bridges corporate governance compliance with automated software execution.
J.P. Morgan and GLEIF representatives argue that linking vLEIs to smart contract execution is essential for meeting international KYC and AML standards in machine-driven financial markets. Decentralized identity advocates express concern that anchoring agent authorization exclusively to traditional legal entity identifiers restricts autonomous agent participation to traditional corporate structures.
As the x402 and AP2 payment standards we've been tracking gain traction for autonomous AI agents, Formance published an architecture guide on Tuesday detailing financial ledger design to prevent automated execution failures like duplicate retries and drift. Arguing that these authorization protocols lack native ledger controls, the paper proposes a five-layer stack (Agent, Policy, Ledger, Execution Adapter, Reconciliation). Under this model, agents retain read-only access while policy engines compile execution mandates into Numscript transactions before atomic ledger entry.
Why it matters
As autonomous AI agents execute high-frequency transactions for corporate treasuries, traditional financial ledgers fail under rapid API retries and automated reasoning drift. Enforcing a strict cryptographic boundary between agent reasoning and immutable ledger accounting prevents catastrophic treasury draining events, providing essential operational plumbing for enterprise AI commerce.
Formance architects argue that isolating AI reasoning behind deterministic policy engines is mandatory to prevent accounting drift in high-volume machine transactions. Web3 agent developers contend that requiring multi-layered offchain policy engines re-introduces infrastructure complexity that defeats the purpose of lightweight smart contract payments.
Nevermined Payments published an integration specification on Wednesday, September 30, detailing how AI agents can monetize API resources using x402 USDC payments and ERC-4337 smart account delegations. The framework uses Express middleware to verify access permissions, manage plan credits, and execute settlements via smart accounts while enforcing buyer-side spend caps and duration limits on Base Sepolia and mainnet.
Why it matters
Combining HTTP 402 payment requirements with spend-capped account abstraction delegation solves a core hurdle in machine-to-machine financial infrastructure. By binding session keys and budget caps directly to smart accounts, developers can grant autonomous software agents financial autonomy without risking unrestricted wallet balance exposure.
Nevermined engineers emphasize that spending cages and automated credit settlement allow developers to monetize AI services seamlessly without requiring manual subscription management. Security auditors caution that misconfigured session key durations or missing delegation checks can leave agent wallets vulnerable to unauthorized drain attacks.
The Illinois Department of Revenue released draft implementation rules on Monday, September 28, for the state's 0.2% digital asset transaction tax scheduled to take effect on January 1, 2027. The guidelines confirm that payment stablecoins fall within the taxable scope, while non-fungible tokens are exempt. Decentralized finance transactions are exempt unless subject to protocol fees considered valuable consideration, whereas base network gas fees and LP swap fees are excluded.
Why it matters
Subnational tax frameworks targeting protocol-level fees present novel compliance challenges for decentralized application developers and treasury managers. Classifying protocol revenue fees as taxable consideration requires Web3 organizations operating or serving users in Illinois to implement geolocation fee tracking or adapt smart contract fee routing ahead of 2027.
Illinois tax officials contend that applying a nominal 0.2% fee to commercial digital asset transactions establishes predictable state revenue while exempting basic blockchain gas fees. Crypto industry trade groups argue that taxing protocol fees creates compliance friction and incentivizes DeFi applications to block state IP addresses.
Administrative Safe Harbors Require Technical Elimination of Centralized Control Federal regulators are explicitly conditioning non-securities treatment for protocol corporate actions on structural decentralization. The SEC's refined buyback FAQ mandates that networks retain 'no central party' to avoid Howey managerial effort classification, forcing protocols to replace offchain multisigs and admin keys with immutable code before executing treasury repurchases.
Autonomous Agent Infrastructure Shifts from Payment Settlement to Verifiable Identity As basic machine-to-machine payment rails like x402 mature, developer attention has moved toward cryptographic authorization and liveness standards. Initiatives like draft AID, ONCHAINID V3, and Moca Chain's AIR layer focus on binding software agents to deterministic state machines and human delegators to enforce spending limits ex-ante.
Institutional RWA Tokenization Prioritizes Secondary Settlement Over Primary Issuance Infrastructure providers are pivoting toward secondary market liquidity and collateral management for real-world assets. With 81% of tokenized Treasuries currently held passively as custodial wrappers, integrations by DTCC, Metaplex (MPL-3643), and OpenZeppelin target continuous, 24/7 cross-protocol clearing to make tokenized assets composable in institutional DeFi.
Foundation Treasury Interventions Trigger Protocol Governance Crises Major protocols are facing severe community pushback as core foundations deploy treasury reserves to sway critical votes or cover protocol shortfalls. The dispute at Compound regarding reserve conversions for COMP voting highlights how ambiguities in early foundation mandates threaten the legitimacy of token-weighted governance.
Federal and State Tax Regimes Establish Direct Gatekeeping over Stablecoins Tax and monetary authorities are transforming stablecoin oversight into an active compliance barrier for Web3 operations. The Treasury's GENIUS Act interim final rule establishes federal certification committees that invalidate uncertified stablecoins in inter-state commerce, while state frameworks like Illinois's draft 0.2% tax explicitly target protocol-level fees.
What to Expect
2026-10-01—Foley & Lardner legal briefing on autonomous agentic AI governance frameworks and liability boundaries.
2026-10-02—SEC Commissioner Hester Peirce's planned departure date from the Commission.
2026-10-30—Public comment deadline closes for Illinois Department of Revenue draft 0.2% digital asset tax rules.
2027-01-01—Implementation date for Illinois 0.2% digital asset transaction tax on stablecoins and protocol fees.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
392
📖
Read in full
Every article opened, read, and evaluated
103
⭐
Published today
Ranked by importance and verified across sources
20
— The Wrapper
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste