Operating a token sale without correctly classified and fully documented contractual instruments exposes an institutional issuer to the risk of conducting an unregistered securities offering. That risk is not theoretical: regulators across the EU, the United States, the United Kingdom, Singapore and the UAE have each taken action against issuers whose token sale agreements failed to reflect the economic substance of what was being sold. A token sale agreement (the binding contract governing an investor's purchase of, and rights in, digital assets at the time of issuance) must do far more than record a transfer of value – it must map the token's rights onto the correct regulatory category, allocate risk across the relevant jurisdictions, and satisfy the disclosure expectations of every regulator with a plausible claim to supervise the transaction. As regimes across the G20 converge toward mandatory classification and whitepaper requirements, getting that mapping right before launch is the only commercially viable path.
This page explains how OBOLUS approaches token sale agreement drafting for institutional clients: the regulated basis, the process, the common structural mistakes, and the cross-border dynamics that make standard-form documents dangerous.
Why token classification drives the entire agreement
The classification of a token is not a branding decision – it is the legal foundation on which every contractual clause rests. Under MiCA (the EU's Markets in Crypto-Assets Regulation), a token that qualifies as an asset-referenced token (ART) or an e-money token (EMT) triggers issuer authorisation requirements and mandatory reserve and redemption terms that must be reflected in the sale agreement. A token that falls into neither category but is offered to the public still requires a compliant whitepaper. Meanwhile, the SEC and CFTC in the United States apply their own classification logic – with the SEC's investment-contract analysis looking at the economic substance of the rights conferred, not the label on the document.
In our practice, misclassification is the single most common defect we encounter when reviewing third-party-drafted token sale agreements. A "utility" label in the offering document does not fix a structure that delivers profit-sharing, governance rights, or a price mechanism tied to issuer performance. ESMA and the FCA have each signalled that substantive analysis – not marketing terminology – determines regulatory status. The drafting of the agreement must therefore begin with a rigorous classification memo, not with a template.
We assess classification against the substance of rights conferred on the purchaser: voting rights, revenue participation, redemption guarantees, price-support mechanisms, and the degree to which the token's value depends on the issuer's ongoing efforts. That analysis then dictates which contractual provisions are mandatory, which are permissible, and which would be legally fatal to include.
What an institutional token sale agreement must contain
An institutional token sale agreement is a multi-layered instrument that combines elements of a subscription agreement, a disclosure document, a technology services contract, and – depending on classification – a regulated financial instrument documentation package. At minimum, it must address seven structural components.
First, a token description and classification disclosure that states the issuer's classification position and the regulatory basis for it – referencing the applicable regime (MiCA, the relevant VASP provisions, the applicable SEC framework, or the MAS Payment Services Act as appropriate) without asserting certainty where classification is genuinely contested.
Second, a purchase mechanics and settlement clause: the precise mechanism by which consideration moves, the on-chain address to which tokens are delivered, and the conditions precedent to delivery. Institutional purchasers require specificity here; a vague "tokens will be delivered post-TGE" clause has generated disputes across multiple jurisdictions.
Third, representations and warranties running in both directions. The issuer warrants the accuracy of the whitepaper, the completeness of disclosure, the absence of undisclosed material encumbrances on the token, and the issuer's capacity to perform. The purchaser warrants its sophisticated-investor status, its jurisdictional eligibility to participate, and its compliance with the Travel Rule (the obligation to pass originator and beneficiary data with a transfer) where applicable.
Fourth, a transfer restrictions and resale regime. Tokens sold to institutional investors are typically subject to lock-up periods, transfer restrictions in specified jurisdictions, and – for securities tokens – compliance with applicable securities-law resale exemptions. These must be drafted to be enforceable on-chain as well as contractually.
Fifth, a regulatory condition precedent and force-majeure structure that accounts for the real possibility of a regulatory intervention between signing and token generation event (TGE). Operators we advise routinely face mid-process regulatory change; the agreement must allocate that risk clearly.
Sixth, a dispute resolution and governing law clause calibrated to the issuer's actual legal domicile, the investor base's geography, and the forum most likely to grant interim relief quickly. English law and DIFC Courts are both serviceable for this purpose; Singapore's courts are increasingly used for Asia-Pacific token matters.
Seventh, a tax representation and withholding regime. No token sale agreement at institutional level should be silent on the tax character of the consideration paid and received. Withholding obligations, VAT/GST characterisation, and the treatment of staking or yield rights in the token must be addressed, even if the governing principle is simply a mutual obligation to cooperate on tax compliance.
How does the whitepaper interact with the sale agreement?
Under MiCA, a compliant whitepaper is a pre-condition to a public offer of crypto-assets in the EU; the sale agreement cannot simply import the whitepaper by reference and assume disclosure is complete. The whitepaper satisfies the public-disclosure obligation; the sale agreement governs the bilateral relationship between issuer and purchaser. They must be consistent – any discrepancy between the whitepaper's characterisation of token rights and the sale agreement's terms creates both a regulatory defect and a contractual ambiguity that an institutional investor's counsel will exploit.
ESMA has published technical standards under MiCA specifying the content and format of whitepapers for ARTs, EMTs, and other crypto-assets. For ART and EMT issuers, the whitepaper itself requires regulatory approval or notification before publication. The sale agreement must be drafted with this timeline in mind: binding commitments to institutional investors should not be made before the whitepaper is in final, approvable form.
Outside the EU, the disclosure logic shifts. In Singapore, the MAS Payment Services Act and the applicable securities-law exemptions govern what must be disclosed and to whom. In the UAE, VARA's rulebooks impose their own offering-documentation requirements. In each case, the sale agreement must sit within – not alongside – the disclosure regime.
To map your whitepaper obligations against your target investor geography, contact OBOLUS at info@oboluslaw.com. The structure you adopt before the first institutional commitment is placed sets the parameters for everything that follows.
What cross-border drafting risks do institutional token sales carry?
Institutional token sales are almost never single-jurisdiction events. A Cayman Islands issuing entity, a Malta-based platform, a US-resident lead investor, and a Singapore-domiciled secondary purchaser represent a typical deal configuration – and each jurisdiction adds a layer of mandatory terms, restrictions, or disclosure obligations that a domestic template will not capture.
The most acute cross-border risk is jurisdictional overreach by a securities regulator. The SEC's long-arm analysis does not require US incorporation; it requires US investors, US-directed marketing, or a US nexus in the offering mechanics. An agreement that fails to document investor jurisdictional eligibility representations and the specific marketing-restriction regime applied to the US creates a securities-law exposure that survives the closing of the sale.
A second risk is AML and Travel Rule misalignment. FATF Recommendation 15 (the international standard requiring virtual asset service providers to apply AML controls to virtual asset transfers) creates obligations that run through the sale agreement, particularly where the institutional investor is itself a VASP or a regulated financial institution. The agreement must specify the AML representations each party makes and the data-sharing mechanics that satisfy Travel Rule obligations in every relevant jurisdiction.
A third risk is transfer restriction asymmetry. A token sold under a US Regulation D exemption carries resale restrictions that the agreement must impose on the purchaser as covenants – and those covenants must be enforceable in the purchaser's home jurisdiction, not merely under New York law. Operators we advise with a mixed EU/US/Asia investor base routinely require three parallel sets of transfer-restriction schedules.
In recent practice, we worked with a token issuer whose institutional round involved investors across four jurisdictions. The initial draft agreement used a single governing-law clause and a single transfer-restriction regime. The structural defect – that the restriction was unenforceable in two of the four jurisdictions under local mandatory rules – was identified during our review. We restructured the agreement with jurisdiction-specific schedules before any investor committed capital. The issuer launched on schedule without regulatory incident.
What are the most common structural mistakes in token sale agreements?
The five structural mistakes we encounter most frequently in institutional token sale agreements are instructive – and each is avoidable with disciplined drafting from the outset.
Mistake one: classifying by label, not by substance. A "utility token" designation in the agreement preamble does not determine regulatory classification. If the token structure delivers economic returns tied to issuer performance, a regulator – or a purchaser seeking rescission – will look past the label to the substance. The drafting must reflect the classification analysis, not precede it.
Mistake two: failing to condition the agreement on whitepaper approval or regulatory notification. Institutional investors who pay a consideration before the whitepaper is approved under MiCA (or notified under the equivalent regime) may have a statutory right of withdrawal or rescission. That right, if unmanaged, disrupts the entire issuance timeline.
Mistake three: governance rights that trigger securities-law analysis. Voting rights over treasury allocation, revenue participation via staking rewards, or a buyback mechanism tied to issuer profits each adds weight to an investment-contract analysis. Each must be evaluated before it is included – not after the agreement is signed.
Mistake four: no explicit on-chain delivery mechanics. A contractual obligation to deliver tokens "to the purchaser's designated wallet" is meaningless without a specification of the smart-contract address, the token standard, the chain, and the fallback if a technical failure prevents delivery on the scheduled TGE date.
Mistake five: a dispute-resolution clause that names a jurisdiction where the issuer holds no assets and has no enforcement exposure. An institutional investor will not accept an agreement where the only remedy available to it is an award in a forum with no practical enforcement route over the issuer.
Which agreement structure fits your issuer profile?
Different issuer profiles require materially different agreement structures. The following matrix maps the most common configurations to the appropriate contractual approach.
Profile A: A Cayman or BVI-domiciled issuer selling utility tokens to non-US, non-EU institutional investors. The agreement can be structured as a simple token purchase agreement governed by Cayman or BVI law, with standard Regulation S compliance representations for the US exclusion and a jurisdiction-specific eligibility schedule. The BVI VASP Act 2022 and CIMA's regime both require the issuer to have verified the purchaser's eligibility and AML status; those verifications must be documented in the agreement. Timeline to a commercially-ready agreement: typically a matter of weeks, dependent on the complexity of the token structure and the number of investor jurisdictions.
Profile B: An EU-based issuer authorised or seeking authorisation as a CASP under MiCA, selling to EU and international institutional investors. The agreement must be coordinated with the whitepaper notification process. The sale cannot close before the notification period expires (or, for ART/EMT, before authorisation is granted). The agreement must contain the MiCA-mandated investor disclosures, the cooling-off and withdrawal rights, and the reserve and redemption terms for ART/EMT tokens. The complexity here is materially higher; a well-resourced issuer should allow for a legal process measured in months, not weeks.
Profile C: A US-connected issuer structuring a private placement to qualified institutional buyers (QIBs) or accredited investors under applicable US securities-law exemptions. The agreement must satisfy the requirements of the applicable exemption, document each investor's qualifying status, contain the full Regulation D / Rule 144A legend as applicable, and impose contractually enforceable transfer restrictions. The issuer should expect close coordination between its US counsel and allied counsel in each other relevant jurisdiction for the non-US investor tranche.
Profile D: A VARA-licensed issuer in Dubai selling to international institutional investors. VARA's activity-specific rulebooks impose documentation requirements that sit alongside the civil-law governing framework. The agreement must incorporate the mandatory disclosures required under the applicable VARA rulebook, comply with the UAE's AML regime, and address the DIFC/onshore structural distinction where relevant.
How does OBOLUS structure the drafting process?
Our token sale agreement drafting process for institutional clients runs in four stages, each with a defined output.
Stage one is a classification and regulatory mapping memo. Before a single contractual clause is drafted, we produce a written analysis of the token's classification under every jurisdiction in which the issuer proposes to solicit investment. That memo identifies the applicable regimes, the mandatory terms each imposes, and the restrictions that must be reflected in the agreement. It is the foundation on which the drafting stands.
Stage two is a term-sheet review (if the issuer is working from a pre-agreed commercial term sheet with anchor investors) or a first-principles structure session (if the issuer is starting from scratch). We identify commercial terms that are legally problematic before they become contractual commitments.
Stage three is the drafting and negotiation of the agreement itself. For a standard institutional token purchase agreement involving two to four investor jurisdictions, this typically involves at least three drafting rounds before a clean execution copy. The negotiation with institutional investors' counsel will focus on classification representations, transfer restrictions, governance rights, and the dispute-resolution mechanism.
Stage four is closing-condition verification. We confirm that every condition precedent – whitepaper approval, regulatory notification, investor eligibility documentation, AML/KYC completion – is satisfied before the agreement is declared unconditional.
Where allied counsel in the relevant jurisdiction is required for local-law sign-off (US securities counsel, a Malta VFA agent, a VARA-regulated adviser), we coordinate that engagement directly so the issuer does not manage multiple conflicting legal threads.
If you are preparing for an institutional round and need a scoped assessment of your agreement structure, write to OBOLUS at info@oboluslaw.com. A classification memo and a term-sheet review before you engage institutional investors is the most cost-effective insurance available.
A common assumption: the utility label is enough
A common assumption among token issuers – including some with sophisticated in-house legal teams – is that labelling a token as a "utility token" in the whitepaper and in the sale agreement is sufficient to prevent securities-law analysis. It is not. Every major securities regulator that has addressed token classification has confirmed that the label is irrelevant; the economic substance controls.
The SEC's application of the investment-contract test focuses on whether investors expect profits from the efforts of others. The FCA's analysis looks at whether the token confers rights characteristic of a specified investment. ESMA's guidance on MiCA examines whether the token is better characterised as a financial instrument under MiFID II than as a crypto-asset. None of these analyses are satisfied by a label.
The practical consequence for institutional issuers is significant. An agreement drafted around a "utility" position that does not survive regulatory scrutiny may be voidable at the election of an institutional investor who later argues misrepresentation. That argument is most dangerous when the token's market value has declined and the investor is seeking a return of consideration. Drafting that addresses classification honestly – including where the classification is genuinely uncertain – is both legally and commercially more defensible than drafting that overstates certainty.
We assess classification against the substance of rights, not the marketing label. Where classification is uncertain, we document the competing analyses and advise on the structural changes that would reduce regulatory exposure without compromising the token's commercial function.
Related at OBOLUS
- Token Offerings and Securities – Practice Overview – the full regulatory and structuring context for digital-asset issuances across 70+ jurisdictions
- Security Token Offering Structuring in the BVI – how the BVI VASP Act 2022 and CIMA framework apply to institutional token issuances
- Token Sale Agreement Drafting for Established Operators – agreement structuring for operators with an existing regulatory footprint
FAQ
Is my token a security?
There is no universal answer: classification depends on the rights the token confers, the jurisdiction in which it is offered, and the regulatory test that applies in that jurisdiction. Under the SEC's investment-contract analysis, the key question is whether purchasers expect profits from the efforts of others. Under MiCA, the question is whether the token is better characterised as a financial instrument under MiFID II. Under the MAS framework, the question turns on whether the token constitutes a capital-markets product. In our practice, classification begins with a structured analysis of the token's substantive rights – not its label. Where the outcome is uncertain, we document the competing positions and advise on structural modifications that reduce exposure.
Do I need a MiCA whitepaper?
If you are making a public offer of crypto-assets in the EU, MiCA generally requires a compliant whitepaper. Exemptions exist for offers below specified thresholds, offers to fewer than a defined number of investors, and offers exclusively to qualified investors – but those exemptions must be positively verified against the facts of each offering. For ARTs and EMTs, the whitepaper must be approved or notified to the relevant national competent authority before publication. The content and format requirements are set out in ESMA's technical standards. An institutional token sale into the EU that does not address the whitepaper obligation before the sale agreement is executed creates a regulatory condition precedent that may prevent the transaction from closing on schedule.
How should an airdrop be structured legally?
An airdrop – the distribution of tokens without direct monetary consideration from recipients – is not automatically exempt from regulatory analysis. If the airdrop is structured as part of a broader fundraise, as a reward for services rendered, or as a mechanism for distributing tokens whose value is derived from the issuer's ongoing efforts, it may attract securities-law or AML analysis depending on the jurisdiction. Under MiCA, certain airdrops may fall within an exemption from the whitepaper requirement, but the conditions of that exemption must be met precisely. In jurisdictions with active AML regimes, the identity of airdrop recipients and the value of distributions may trigger KYC obligations. We advise on airdrop structuring as part of the broader token offering engagement.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We assess token classification against the substance of rights conferred, not the marketing label – and we draft sale agreements that hold up to institutional investor scrutiny and regulatory review. To discuss your token issuance, contact info@oboluslaw.com.
By Roman Levitt, Technology and DeFi Counsel – specialising in token classification, smart-contract legal analysis, and the drafting of institutional digital-asset offering documents across multi-jurisdictional issuances.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.