What the ICO era taught crypto about disclosure, trust, and risk

The ICO boom forced crypto to face a problem it still has not solved. In a market built on speed, hype, and global access, transparency usually comes too late.

In 2017, token sales raised money from retail investors around the world with far less disclosure than a public stock offering would require. White papers often replaced prospectuses. Founders sold big ideas before they had real products. Legal structures were often unclear. That made it easier for honest teams to move fast, but it also made it easier for dishonest ones to hide in the crowd.

U.S. regulators warned about that early. In its July 2017 DAO Report, the SEC said digital assets sold through blockchain systems could still be securities and that investors still needed proper disclosure and legal protections. The point was simple. New technology did not remove the need for basic information about what was being sold, who controlled it, and what rights buyers actually had.

That became even clearer as the ICO boom started to break down. In late 2018, the SEC announced settlements with two token issuers in what it described as its first cases imposing civil penalties only for ICO registration violations. Both companies agreed to return money to investors, register the tokens as securities, file periodic reports, and pay penalties. The message was that the problem was not only outright fraud. It was also weak disclosure in a market that had invited public money at scale.

Crypto adapted, but it did not fully solve the core issue. ICOs gave way to newer structures such as SAFTs, offshore foundations, token warrants, exchange listings, and more careful language around utility tokens and governance tokens. The legal packaging changed, but the central question stayed the same. How much should a project tell investors before it takes their money?

That is why the ICO story still matters. It created a pattern the industry has repeated ever since. Crypto projects often claim transparency because the blockchain is public, the code is open source, or onchain data can be viewed by anyone. But those things do not answer the most important questions in a crisis. Who controls the treasury? Who can change the code? Who holds the admin keys? Are customer assets separated? Are reserves real? Can insiders sell before everyone else? A public blockchain does not answer all of that.

The bancryptcy of FTX made that impossible to ignore. It was not an ICO case, but it exposed the same weakness. A company could look large, respected, and visible while still having poor governance, weak recordkeeping, and unclear handling of customer assets. That was another version of the same old problem: visible activity is not the same as meaningful disclosure.

Even proof of reserves showed the limits of partial transparency. In 2023, the SEC’s Office of the Chief Accountant warned that proof of reserves reports were not the same as audits and could give investors a false sense of comfort. The agency said the real problem was not whether some information was available, but whether the information answered the right questions.

The same pressure is visible in 2026. In March, the SEC published an interpretive release explaining how federal securities laws apply to certain categories of crypto assets and transactions. In Europe, MiCA is pushing crypto firms into a system based on disclosure, authorization, and supervision. In Switzerland, FINMA said in January that firms offering crypto custody must be able to separate client assets in bankruptcy and provide equivalent protection even when assets are held abroad. Different regulators are taking different paths, but the direction is similar. Crypto firms are being pushed to explain more clearly what the asset is, who controls it, and what happens if the intermediary fails.