# Rules and Referees

By [Lista DAO](https://blog.lista.org) · 2026-08-18

---

Dev brought the tax notice in a manila envelope.

He set it on the bench between us, with the careful gravity of a man delivering bad news, and then sat down beside it without opening it. The envelope had been opened already, and re-folded along the same crease, and re-tucked, in the way of documents that had been read and put away and read again.

"From the tax office," he said. "Three weeks ago. They want to talk about my crypto trading from last year."

"Are you in trouble?"

"I don't know yet. The notice is a request for documentation. They want me to provide records of every trade I made, every conversion, every realized gain or loss. They're calculating my tax liability. They believe I owe them something. They are not wrong. I just don't know how much."

Moolah climbed onto the bench beside the envelope and looked at it for a long moment.

"This," she said, "is a very good way to begin today's conversation. Because today we talk about regulation. And there is no better introduction to the topic than the moment when regulation walks up to your door, in the form of a polite letter from a tax office, and asks you to come inside."

She tapped the envelope with one paw.

"You are about to learn, Dev, what every person who has been active in this industry for more than a few years eventually learns. _Code is not law._ The code of a smart contract may be immutable, but it does not exempt you from the laws of any country whose jurisdiction you live in. You are, regardless of what your wallet says, a tax resident here. The tax office considers your crypto trades to be taxable events. Every swap is a sale of one asset and a purchase of another, and every sale generates a gain or a loss that must be reported. You did not, I assume, keep meticulous records of every trade?"

"I didn't keep records at all."

"Then this will be a difficult few weeks for you. There are services that can reconstruct your trading history from your wallet addresses. They cost some money, but they save many hours, and the tax office will accept their reports if they're presented well. Find one. Then file an amended return. Pay what you owe. The tax office here, in my experience, is much more interested in compliance than punishment, and people who come forward voluntarily tend to be treated much more leniently than people who hide. Pay it. Move on."

Dev exhaled slowly. "Okay."

"Now," Moolah said, "let me zoom out. Because the question of _how do I pay tax on this_ is only the smallest, most local version of a much larger question that the entire industry is wrestling with, in every jurisdiction on earth. Which is: _what are the rules, and who gets to make them?_"

I opened the notebook to a fresh page.

  

* * *

  

"There are roughly four major regulatory frameworks in the world that matter for DeFi," Moolah said. "The United States, the European Union, the United Kingdom, and the patchwork of Asian regions - Japan, Singapore, Hong Kong, South Korea - that have taken different approaches. Each has been moving, in different directions, at different speeds, for different reasons. The result is a global regulatory landscape that is _deeply_ incoherent. A protocol can be legal in one country, illegal in the next, and ambiguous in a third. Users moving across borders carry their compliance obligations with them. The global, borderless nature of the technology runs directly into the very local, very bordered nature of law."

"Walk me through them."

"The United States is the most aggressive and the most chaotic. The Securities and Exchange Commission - the SEC - has, over the last several years, taken the position that most crypto tokens are unregistered securities, and that protocols issuing or trading them may be operating illegally. They have brought enforcement actions against many of the largest names in the industry. They have also lost a number of those cases, or had them overturned on appeal, or seen them weakened by court rulings. The legal status of any given token, in the United States, is often a matter of open litigation. The rules are being made, in real time, by judges deciding individual cases. It is - the polite word is _evolving_. The accurate word is _chaotic_."

"And the EU?"

"The European Union has been more methodical. It passed a comprehensive piece of legislation called _MiCA_ - Markets in Crypto-Assets - that took effect in 2024. MiCA covers most of what the industry does: stablecoins, exchanges, custody, market manipulation, the full stack. It is, by general agreement, the clearest and most comprehensive framework in the world right now. Whether it is _good_ - whether it strikes the right balance between protecting consumers and allowing innovation - is debated. But at least it exists, and protocols operating in the EU now have a clear set of rules to comply with. The trade-off is that compliance is expensive. Some smaller protocols have simply geo-blocked European users rather than meet the requirements. The market has narrowed slightly. The remaining market is more legitimate."

"The UK?"

"The UK has been moving toward a regime similar to MiCA, with its own variations. They have been more permissive about certain kinds of staking and lending. They have been more aggressive about advertising restrictions. The Financial Conduct Authority requires firms operating in the UK to register, and has been notably willing to refuse registration. The result is a smaller industry footprint than London might otherwise have, but a more legitimate one. The firms that operate there are operating with regulatory blessing. The firms that don't, mostly, have left."

"And Asia?"

"More varied. Singapore has positioned itself as a regulated, sober jurisdiction - not friendly to retail speculation, but welcoming to institutional infrastructure. Many of the major firms have set up there. Hong Kong has, in the past few years, made a deliberate push to attract crypto businesses, after losing some ground to Singapore. South Korea has very strict rules around anti-money-laundering and exchange registration, which has made it hard for foreign exchanges to serve Korean users but has also produced a vibrant local industry that operates within the local rules. Japan - which is where you live - has had a regulated crypto framework since 2017, after the Mt. Gox collapse forced the issue. The Financial Services Agency licenses exchanges. The tax treatment is unfavorable to retail investors but clear. Compliance is required. The notice you received, Dev, is a routine product of a system that has been quietly running for years."

"And the rest of the world?"

"Varies enormously. Some countries - El Salvador, the Central African Republic - have made Bitcoin legal tender. Some have effectively banned the industry, though enforcement varies. Some are entirely silent, with no specific framework either way. The legal status of a given user's activity depends not on the protocol they're using, which is global, but on where they are sitting when they use it, which is local. The user must, in effect, do their own research about their own jurisdiction. Most don't. Many discover their obligations the way Dev just did."

I wrote in the notebook. _Four main blocs: US (chaotic), EU (MiCA, strict but clear), UK (similar to MiCA), Asia (varied - Singapore/HK welcoming, Japan licensed and clear)._

"What does this mean for someone using DeFi?"

"In practice, three things. First - _taxes_. Almost every jurisdiction taxes crypto in some form. Most treat trades as taxable events. Most treat staking and yield as ordinary income. Most expect you to keep records. The protocols don't help you with this. There is no W-2. There is no annual statement. The record-keeping is your responsibility. The penalties for not doing it can be severe."

"Second - _protocol availability_. Some protocols have begun blocking users from certain countries. Most decentralized exchanges, technically, do not check where you are - but the websites that _interface_ with those exchanges may, increasingly, do so. This is one of the strangest tensions in the industry. The protocol is global but the website is local. A user in a blocked country can technically still interact with the protocol, by going around the website - but doing so puts them in a legal gray zone in their own country. Most users do not understand this distinction. Most get caught in it accidentally."

"Third - _the future of decentralization_. Regulators are increasingly skeptical that protocols are as decentralized as they claim. The argument from some regulators is: _if there is a team that wrote the code, and a team that maintains it, and a team that holds most of the governance tokens, then the protocol is not really decentralized - it is a company in disguise, and we will regulate it like a company._ This argument has been made successfully in several court cases. The defense - that protocols are open-source software run by their users - has been made successfully in others. There is, again, no resolution. The industry is being shaped, in real time, by the slow accumulation of legal rulings."

"Where does this end?"

"It does not end. It evolves. Five years from now the framework will be different than it is today. Ten years from now it will be different again. The industry will adapt. Some protocols will register and become regulated entities. Some will operate in jurisdictions friendly to their model. Some will dissolve. Some will become, effectively, illegal in one or more major markets. The map is being drawn while the houses are being built. This is uncomfortable for everyone - for the builders, who do not know which rules will apply; for the users, who do not know if they will be on the wrong side of a future ruling; for the regulators, who are trying to write rules for a moving target. The discomfort is real. There is no version of this that is comfortable."

I underlined a phrase from earlier. _Code is not law._

"Some practical advice," Moolah said. "Pay your taxes. Use a record-keeping service. Read the rules of your own country, even if you find them dull. If you are uncertain, ask a tax professional who has experience with crypto - there are now many. Do not rely on advice from anonymous accounts on social media. Do not rely on protocol founders, who have every incentive to tell you everything is fine. Do not rely on me - I am not licensed to give legal or tax advice in any jurisdiction, including the otter ones. The cost of professional advice is small relative to the cost of being on the wrong side of a tax authority. Spend the money. It is, in the long run, the cheapest insurance you will ever buy."

Dev was looking at the envelope. "How bad is it likely to be?"

"For you, given your trading history, I would estimate - without seeing your actual records - somewhere in the low five figures of back taxes plus interest plus penalties. Manageable. Painful. Survivable. It will hurt, but it will not destroy you. And next year you will know to keep records, and the year after that you will keep them automatically, and within three years this will be a normal part of your life that you barely think about. Most people who get one of these notices, deal with it, and then never get another one. They become compliant by accident, through the experience of having had to be."

He nodded slowly.

"There is one more thing I want to say," Moolah said. "About what regulation, in the long run, does to this industry."

She paused.

"Regulation is generally treated, by people in the industry, as the enemy. It slows things down. It makes building harder. It chases activity to friendlier jurisdictions. All of this is true. But regulation is also - almost always, eventually - what allows an industry to scale. The traditional financial system, for all its frustrations, has consumer protections, deposit insurance, fraud recovery mechanisms, fiduciary obligations, things that exist because regulation forced their existence. Most of those protections did not come from the industry voluntarily. They came from regulators, often after disasters, sometimes after enormous fights. The disasters I told you about over the last several weeks - the Terra collapse, the FTX fraud, the Ronin theft - all of them produced regulatory responses. Some of those responses are well-designed. Some are not. But the absence of any regulation - the early DeFi vision, where code alone would govern - has, in practice, allowed many of the worst behaviors I described to flourish. Regulation, imperfect as it is, has been a partial corrective."

"You sound like you support it."

"I support _good_ regulation. I am skeptical of _bad_ regulation. I do not always know which is which when I see it. The honest truth is that the industry needs rules, and the rules will be imperfect, and that is how every industry has ever been regulated - imperfectly, slowly, with many missteps, eventually arriving at something workable. We are in the middle of that process. We will be for some time. The job is to participate honestly while it happens, and to advocate for rules that protect users without strangling innovation, and to recognize that perfect freedom is a fantasy that almost always ends with a few people getting rich and a great many people getting hurt. The freedom-and-guardrails balance I told you about in Episode One - that's where this all comes back to. The guardrails that DeFi removed are now, slowly, being put back. Some by regulators. Some by the industry itself, learning from its mistakes. The result will not be the original vision. It will, with luck, be something more durable."

I wrote that down. _Perfect freedom is a fantasy. Some guardrails are coming back. The industry is partly learning, partly being taught._

The afternoon was getting hot. The hydrangeas had opened - fat, almost cartoonish blue clusters along the path, their color so saturated it looked unnatural. A child ran past us chasing a small dog. The child was laughing. The dog was, I think, mildly confused.

"Same place next week?" Dev asked.

"Yes. Next week is the most optimistic episode I will give you in this entire series. We will talk about real-world assets coming on-chain. The slow, quiet convergence of DeFi and traditional finance that is, by almost any measure, the most important thing happening in this industry right now. I have been looking forward to next week."

"You've been looking forward?"

"Rarely," Moolah admitted. "But yes. Next week."

She slipped off the bench. The melonpan was, that day, a small piece of fresh dorayaki from a kiosk by the gate that she had paid for, this time, with a single yen coin she had produced from somewhere. The vendor had taken the coin without surprise. We did not ask what currency from what era it was.

Dev tucked the envelope back into his coat.

"Thanks for the advice," he said quietly.

"Pay it," she said. "Move on. The tax office is not the worst thing that can happen to you. Today proves that, if anything, you are now finally legitimate."

She walked off down the path. Dev watched her go.

"Legitimate," he said. "I have never been called that before."

"Get used to it," I said.

  

* * *

  

_Next: Where DeFi Meets Main Street_

---

*Originally published on [Lista DAO](https://blog.lista.org/rules-and-referees)*