Token issuers routinely treat the sale agreement as an afterthought – a boilerplate document dropped in after the tokenomics deck is finished. That instinct is dangerous. A poorly drafted token sale agreement is the document a regulator reads first when an offering goes wrong, and it is the instrument a purchaser's counsel uses to argue that the issuer sold an unregistered security. Getting the drafting right, before the sale opens, is the single most consequential legal step in any token offering.
A token sale agreement (the binding contract between an issuer and each purchaser in a public or private token offering) must do three things simultaneously: accurately reflect the legal nature of the token being sold, satisfy the disclosure and consumer-protection requirements of every jurisdiction where purchasers are located, and allocate risk in a way that survives regulatory scrutiny. This guide walks through each drafting step, names the regime that governs it, and identifies the mistake most issuers make at that exact point.
Step 1: Classify the Token Before You Write a Single Clause
The threshold legal question – whether the token is a security, an asset-referenced token (ART), an e-money token (EMT) or a utility token – determines every downstream drafting choice, so it must be answered first. Under MiCA (the EU Markets in Crypto-Assets Regulation, supervised by ESMA and national competent authorities), the classification of a crypto-asset drives whether the issuer needs a whitepaper, a CASP authorisation or a full prospectus-equivalent. In the United States, the SEC's Howey analysis asks whether purchasers invest money in a common enterprise with an expectation of profit from the efforts of others; a "utility" label on the front page of a pitch deck has no bearing on that inquiry.
Classification is a substance-over-label exercise. The rights a token actually confers – governance votes, revenue participation, a claim against a reserve, access to a service – determine the regulatory category, not the marketing name. Issuers that skip a formal classification opinion and proceed directly to drafting routinely produce agreements that contradict their own whitepaper and expose the token to retrospective reclassification.
The cross-border reality compounds this. A token issued from a Singapore entity, sold to EU residents and listed on a platform regulated by the SFC in Hong Kong is simultaneously in scope for the MAS Payment Services Act, MiCA and the SFC's VASP licensing regime. Each regime applies its own classification test. A classification memo must address each material jurisdiction where purchasers are expected to participate – not just the issuer's domicile.
Common mistake: drafting the agreement before the classification opinion is finalised. The opinion changes the operative provisions; rewriting after the fact is expensive and, in live offerings, sometimes impossible.
The process above describes the standard path. Your token – the rights it confers, the jurisdictions of your purchasers, the entity holding the proceeds – will change the analysis materially. For a scoped classification assessment before you begin drafting, contact OBOLUS at info@oboluslaw.com.
Step 2: Identify the Governing Law and Dispute-Resolution Mechanism
Selecting governing law and a dispute forum is a substantive commercial decision, not a boilerplate choice. The law you choose determines which implied terms, consumer-protection rules and securities regimes apply to the contract. A token sale agreement governed by English law and providing for LCIA arbitration is a materially different instrument from one governed by the laws of a UAE free zone and providing for DIFC Courts jurisdiction.
English law is widely used for token sale agreements because of its developed treatment of digital assets as property, its well-established contractual interpretation principles, and the availability of the England & Wales courts as a recovery forum for disputed transactions. The DIFC Courts in Dubai have similarly developed a body of digital-asset jurisprudence and are increasingly selected by issuers with UAE operational nexus.
The cross-border note is critical here. Consumer-protection regimes in the EU, the UK and Singapore may override a contractual choice-of-law clause where purchasers are consumers rather than professional investors. An agreement that selects Cayman law but is sold to retail EU residents may still be subject to MiCA's mandatory disclosure rules and to the consumer-protection provisions of each purchaser's home-member-state law. Issuers that restrict participation to professional or institutional purchasers – and enforce that restriction – substantially reduce this risk.
Common mistake: selecting governing law based on the issuer's incorporation jurisdiction rather than on the purchaser profile and the enforceability of the resulting instrument in the forums where disputes are most likely to arise.
What Representations and Warranties Must a Token Sale Agreement Include?
Purchaser representations are the agreement's first line of defence against regulatory exposure, and they must be drafted to be enforceable, not merely present. The issuer needs the purchaser to represent, at minimum: that the purchaser is not located in a restricted jurisdiction; that the purchaser meets any applicable investor-qualification threshold (accredited, professional or institutional, as the case may be); that the purchaser is not acquiring the token with a view to distribution in a jurisdiction where such distribution is unlawful; and that the purchaser has reviewed any applicable whitepaper or offering document and understands the risk factors described in it.
The issuer's own representations must be calibrated equally carefully. An issuer should represent that the offering has been conducted in compliance with the laws of its home jurisdiction and that the proceeds will be applied in the manner described in the offering documents. It should not represent that the token will be listed on any particular exchange, that it will maintain any particular value, or that the rights attaching to the token will not be modified – unless the issuer is genuinely prepared to be held to those statements.
Under MiCA, disclosure in the whitepaper is subject to civil-liability rules: purchasers may seek compensation for losses caused by information in the whitepaper that is misleading, inaccurate or inconsistent with the agreement. This liability cannot be contractually excluded as to the mandatory disclosure items. Issuers whose agreements contain blanket disclaimers of liability for whitepaper content may be surprised to find those disclaimers ineffective precisely where they most wanted protection.
Common mistake: importing a boilerplate "no representations" clause that purports to exclude liability for all statements made outside the four corners of the agreement, without carving out the mandatory MiCA and equivalent regime disclosures to which civil liability nonetheless attaches.
How Should a Token Sale Agreement Address Token Delivery and Vesting?
Token delivery mechanics – the on-chain steps by which purchased tokens are transferred to the purchaser's wallet address – must be specified with enough precision that neither party can later dispute what was agreed. The agreement should define the delivery date or condition, the smart-contract address from which tokens will be distributed, the blockchain protocol that governs the transfer, and what happens if a technical failure prevents delivery on the agreed date.
Where tokens are subject to a lock-up or vesting schedule (a time-based or milestone-based restriction on the purchaser's ability to transfer or sell the tokens), the agreement must specify the vesting parameters with precision and address what happens to unvested tokens if the issuer ceases operations. A vague reference to "standard vesting terms" is not a contract.
Regulators in several leading hubs have begun treating aggressive lock-up releases – particularly cliff-vesting structures that release large tranches on a single date – as a marker of secondary-market manipulation risk. The SFC in Hong Kong and MAS in Singapore both expect issuers to demonstrate that vesting and lock-up structures are designed to align incentives rather than to manufacture artificial scarcity.
The cross-border consideration: if tokens are delivered to purchasers in jurisdictions where the secondary-market trading of those tokens would require a licence (for example, under the MiCA CASP regime or the UK FCA's financial-promotion rules), the delivery mechanics must be paired with transfer-restriction provisions that are technically enforceable, not merely contractual. On-chain transfer restrictions, implemented at the smart-contract level, are the standard.
Common mistake: treating delivery and vesting as operational details to be resolved after signing, with a side letter. Side letters complicate the offering structure and, depending on their content, may constitute material terms that should have been in the main agreement and disclosed in the whitepaper.
Which Jurisdiction Restrictions and AML Provisions Are Required?
Every token sale agreement operating across borders requires a jurisdictional exclusion schedule and an AML/KYC compliance section. The exclusion schedule lists the jurisdictions where the offering is not available – typically the United States (absent registration or exemption), sanctioned jurisdictions, and any jurisdiction where the token would require a regulatory approval the issuer has not obtained. The schedule must be current at the date of signing and should be updateable by the issuer without a full contract amendment where the regulatory environment changes after the agreement is executed.
The AML/KYC section must specify the issuer's obligations under applicable law and the purchaser's obligations to cooperate. Under FATF Recommendation 15 (the international standard that introduced virtual-asset-specific AML obligations, applied across the EU under MiCA, in Singapore under the MAS Payment Services Act and in the UK under the FCA's MLR framework), issuers that qualify as VASPs must conduct customer due diligence, maintain records and, where the Travel Rule (the obligation to transmit originator and beneficiary information with each virtual-asset transfer) applies, pass that information to the receiving institution.
Purchaser identification at the agreement stage – obtaining a wallet address, verifying beneficial ownership, conducting sanctions screening – is not merely a compliance formality. It is the factual record the issuer will need to respond to a regulatory inquiry, a tax authority request or a law-enforcement freeze.
Common mistake: relying on a third-party KYC platform to collect data while the agreement itself contains no representation by the purchaser regarding the accuracy of that data. The agreement should incorporate the purchaser's KYC representations by reference to the on-boarding process, so that a false submission is a breach of contract as well as a regulatory violation.
If a prior token sale raised AML or sanctions concerns – or if an account was closed during or after the offering period – a second read of the structure can surface the reason and the route forward. Write to info@oboluslaw.com or message us at t.me/oboluslaw.
How Should the Agreement Address Tax and Proceeds Treatment?
The tax characterization of token sale proceeds – income, capital, VAT/GST, a combination – is jurisdiction-specific and turns on facts that must be established at the drafting stage. The agreement should confirm how proceeds are denominated (fiat, stablecoin, native cryptocurrency), where they will be held, and who bears the tax cost of any conversion. These are not boilerplate items; they determine the issuer's accounting and reporting obligations from the moment the first token is sold.
Stablecoin proceeds warrant particular attention. Under MiCA, proceeds denominated in an EMT (e-money token) are subject to the EMT issuer's reserve and redemption obligations. Proceeds held in an ART may fluctuate in value against the issuer's functional currency in ways that create unplanned tax exposures. The agreement should specify the currency in which obligations are denominated and the conversion mechanism if proceeds are received in a different asset.
The cross-border angle: a token issuer domiciled in one jurisdiction, receiving proceeds through a smart contract hosted on a permissionless blockchain, with purchasers in fifteen countries, faces a multi-jurisdiction tax analysis at every step of the proceeds chain. Banking access – the ability to convert crypto proceeds to fiat and hold them in a regulated account – is often the most operationally constrained element. We have seen offerings fully subscribed in cryptocurrency whose proceeds sat unconverted for months because the issuer had not obtained a banking relationship capable of handling the inflow before the sale opened.
Common mistake: treating tax as a post-closing matter. Tax characterization affects the pricing of the token, the representations in the agreement, and the ongoing obligations of the issuer. It should be addressed in parallel with the drafting, not after the agreement is signed.
What Does a Well-drafted Token Sale Agreement Look Like in Practice?
In a recent structuring matter, an early-stage protocol had prepared a token sale agreement for a private round that classified the token as a utility token, selected governing law without reference to the purchaser base, and contained no jurisdiction-restriction schedule. The purchaser list, when reviewed, included institutional participants in the EU and the United States. We were engaged to re-draft the agreement and supporting documents before the round closed.
The work involved a cross-border classification analysis under MiCA and the applicable US framework, redrafting the purchaser representations to include investor-qualification and jurisdiction-restriction provisions, adding a MiCA-compliant disclosure cross-reference, and selecting a governing law and dispute forum appropriate to the institutional purchaser profile. The round closed on revised terms. No regulatory inquiry followed. The restructuring took a matter of weeks rather than the months that a post-close remediation would have required.
The lesson is structural: a token sale agreement is not a standalone contract. It sits inside a stack that includes the whitepaper, the KYC/AML framework, the tax analysis and the banking structure. A weakness in any one document propagates through the rest. The agreement is the place where all of those threads are made binding.
Decision Matrix: Which Drafting Approach Fits Your Offering Profile?
Profile A – Private round, institutional purchasers only, EU or UK nexus. The agreement requires robust investor-qualification representations, a MiCA whitepaper cross-reference (or a documented exemption analysis), English or DIFC governing law, and a jurisdiction-restriction schedule that excludes retail participants. Timeline from initial instructions to signed agreement is typically measured in weeks, depending on the complexity of the purchaser base and whether a classification opinion is being prepared in parallel.
The key risk for this profile is scope creep: a round that begins as institutional-only but admits one retail purchaser – because a whitelist was not technically enforced – may trigger mandatory disclosure obligations across the entire offering.
Profile B – Public sale, multi-jurisdiction, utility token claim. The agreement must include a full jurisdiction-restriction schedule, technically enforced on-chain transfer restrictions, a MiCA whitepaper or documented non-applicability analysis, and purchaser representations that survive retail participation. Governing-law selection is more complex because consumer-protection mandatory rules in multiple jurisdictions may override the contractual choice. A cross-border tax analysis is essential before pricing is fixed.
The key risk for this profile is classification: a token sold to the public with governance rights or revenue-participation features will be scrutinised as a security in most major jurisdictions, regardless of the utility label in the whitepaper.
Profile C – Cross-border with US participants. US securities law analysis is required before the agreement is drafted. If the Howey test is not clearly negative, a Regulation D, Regulation S or Regulation A+ structure must be built into the agreement before the sale opens. Post-close remediation of a US securities law problem is expensive and, in some cases, not possible without rescission.
In our cross-border practice, the most common mistake we see at the decision-matrix stage is issuers treating Profile B structures as Profile A problems – attempting to use an institutional-round agreement for a public sale with minor modifications. The resulting document is neither fish nor fowl: it fails the institutional test because it was modified, and it fails the retail test because it was never designed for retail in the first place.
Related at OBOLUS
- Token Offerings & Securities practice – end-to-end legal support for compliant token issuance and structuring
- Exchange listing legal counsel in Liechtenstein – regulated listing pathways and exchange-counsel support in a leading EU-adjacent hub
- Correspondent banking access: the compliance burden in practice – how token issuers solve the banking challenge that follows a successful raise
FAQ
Is my token a security?
Token classification is a substance-over-label analysis applied under each relevant jurisdiction's legal test. In the United States, the Howey test asks whether there is an investment of money in a common enterprise with an expectation of profit from the efforts of others. Under MiCA, the token's rights determine whether it is an ART, an EMT or an other crypto-asset subject to whitepaper obligations. A "utility" label in the whitepaper does not settle the question in either regime. A formal classification opinion, addressing every jurisdiction where purchasers are located, is the only reliable starting point.
Do I need a MiCA whitepaper?
Under MiCA, most public offers of crypto-assets in the EU require a whitepaper notified to the competent national authority before the offer opens. Exemptions exist for offers below defined thresholds, offers directed solely to qualified investors, and certain categories of token. Whether an exemption applies turns on the specific facts of the offering – the token type, the distribution method and the purchaser profile. An exemption that applies to a private round may not apply if the same token is subsequently offered publicly or traded on an EU-accessible platform.
How should an airdrop be structured legally?
An airdrop – a gratuitous distribution of tokens to wallet addresses – is not automatically outside the scope of securities law or MiCA. If the airdrop forms part of a broader promotional or marketing campaign, or if recipients must perform tasks in exchange for tokens, the distribution may be characterised as a sale or as an offering of crypto-assets subject to disclosure obligations. A legal analysis of the airdrop mechanics, the token classification and the jurisdictions of intended recipients is required before distribution. Structuring the airdrop as genuinely unconditional, with no ancillary obligation on the recipient, reduces but does not eliminate regulatory risk.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We assess token classification against the substance of rights conferred, not the marketing label. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams. Digital assets are the whole of our practice. To discuss your token offering structure, contact info@oboluslaw.com.
By Roman Levitt, Technology & DeFi Counsel – specialising in token structuring, smart-contract legal analysis and cross-border digital-asset offerings.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.