On paper, a token sale looks straightforward: draft the agreement, attach a whitepaper, open a contribution window. In practice, the legal question that governs every design decision arrives before the first investor conversation — what, precisely, is this token? Get that classification wrong, and a product launch becomes an unregistered securities offering. The exposure travels across borders, because most token issuers sell to participants in multiple jurisdictions simultaneously, each with its own regulatory perimeter.
Token sale agreement drafting requires legal counsel that works from regulatory substance, not marketing labels. The rights a token actually confers — economic participation, governance, redemption, access — determine how it is classified under MiCA in the EU, under the securities regimes administered by the SEC and CFTC in the United States, under the SFC in Hong Kong, and under the MAS Payment Services Act in Singapore. At OBOLUS, we assess every token against those substantive standards before a single clause is drafted. That sequence is not procedural caution; it is the only way to write an agreement that holds.
This page covers what a well-constructed token sale agreement requires, how classification determines structure, the process we follow, and where cross-border complexity concentrates. If you are preparing for a sale, a private round, or a public offering and need a scoped assessment now, the fastest path is a direct message.
What legal regime governs a token sale?
The regulated perimeter for any token sale is determined by the rights the token grants, the jurisdiction in which the issuer is established, and the geographic spread of purchasers. No single global regime governs token offerings, but several frameworks now apply with enough convergence that a multi-jurisdiction analysis follows a recognizable structure.
Under MiCA, the EU regulation that entered full effect for crypto-asset service providers in 2024, tokens fall into three categories: asset-referenced tokens (ARTs), which stabilize against a basket of assets; e-money tokens (EMTs), which stabilize against a single fiat currency; and "other crypto-assets", which cover the broad population of utility and governance tokens. Each category carries different whitepaper obligations, issuer-authorization requirements, and ongoing compliance duties administered by ESMA and the relevant national competent authorities. An issuer that sells into EU member states without mapping its token to one of these categories is operating without the required regulatory foundation.
Outside the EU, the analysis diverges. The SEC applies a functional test derived from federal securities law to determine whether a token constitutes a security. The MAS in Singapore applies its own assessment under the Payment Services Act and the securities ordinance. The SFC in Hong Kong uses its own criteria for virtual asset trading platforms. The common thread is that no regulator accepts a self-applied "utility" label as dispositive. Classification turns on what the token does, not on what the whitepaper calls it.
In our cross-border practice, we see issuers routinely surprised by the multiplier effect: a token that escapes securities regulation in its home jurisdiction may still be treated as a security in the US if any US persons participate. Managing that exposure requires active structural decisions — not boilerplate purchaser representations alone.
For a scoped assessment of your token's classification across the jurisdictions relevant to your sale, contact OBOLUS at info@oboluslaw.com. The process above describes the standard analysis. Your specific token mechanics — the rights conferred, the economic model, the participant base — change where the liability sits. Map your options.
What does a token sale agreement actually need to cover?
A well-drafted token sale agreement is not a purchase contract with a glossary. It is a structured instrument that allocates regulatory risk, defines the legal character of the token, limits exposure to secondary-market liability, and sets the enforceable perimeter of the issuer's obligations. Each of those functions requires deliberate drafting choices.
The core elements of a token sale agreement include the following:
- Token classification statement – a substantive description of what rights the token grants, cross-referenced to the applicable regulatory analysis, not a simple assertion of utility.
- Purchaser eligibility and geographic restrictions – structured exclusions for jurisdictions where the offering would require registration or authorization not obtained; this must be actively maintained, not a standard-form schedule.
- Representations and warranties – from both issuer and purchaser, calibrated to the specific risk profile of the offering and the relevant regulatory requirements in each target jurisdiction.
- Vesting, lock-up and transfer restrictions – where applicable for team, advisor and investor allocations; these interact directly with securities law analysis in multiple jurisdictions.
- Whitepaper incorporation – how the whitepaper is referenced, what its legal status is, and the liability consequences of any material inaccuracy or subsequent amendment.
- Dispute resolution and governing law – a jurisdiction selection that reflects where the issuer entity sits and where the most legally developed courts for digital-asset disputes operate.
- Regulatory change provisions – a mechanism for addressing the real possibility that the applicable regime changes between execution and token delivery.
Operators we advise routinely underestimate the whitepaper incorporation clause. A loosely drafted integration can make every forward-looking statement in the whitepaper a contractual warranty. We structure the relationship between the agreement and the whitepaper with precision — which statements are binding, which are aspirational disclosures, and where the liability perimeter sits.
How does token classification change the structure of the sale?
Token classification is not a preliminary question that gets answered once and filed. It is the variable that determines every structural decision that follows, from the choice of issuer entity to the form of the sale instrument to the geographic scope of the offering.
Consider the difference between a governance token and an ART under MiCA. A governance token that grants pure on-chain voting rights — no economic entitlement, no redemption, no profit participation — may sit outside the MiCA whitepaper obligation for "other crypto-assets" below the relevant thresholds, though issuers above those thresholds must file a whitepaper with the relevant national competent authority. An ART, by contrast, requires prior authorization from the relevant NCA, carries ongoing capital and reserve obligations, and is subject to ESMA oversight. The sale documentation, the marketing materials, and the issuer corporate structure look entirely different across those two profiles.
The securities-law analysis adds another layer. A token that grants economic rights in a project — revenue participation, profit-sharing, appreciation linked to the issuer's efforts — will typically satisfy a functional securities test in most common-law jurisdictions. Once that threshold is crossed, the sale document is not just a commercial contract; it is a securities offering document, with all the disclosure, registration and liability consequences that follow. In the US, that means SEC jurisdiction. In Hong Kong, it means SFC oversight. In Singapore, it means MAS review.
We regularly advise issuers who designed a token to be a utility instrument but, on analysis, have built in features — a rebate on fees proportional to holdings, or a burn mechanism linked to project revenue — that move the classification toward a security in at least one major jurisdiction. Catching those issues at the drafting stage is materially less expensive than addressing them after the sale closes.
What is the drafting process and how long does it take?
Token sale agreement drafting at OBOLUS follows a structured five-stage process, with defined deliverables at each stage and a predictable timeline measured in business days rather than open-ended weeks.
Stage 1 – Classification analysis. Before any drafting begins, we conduct a substantive token classification analysis across the jurisdictions material to the offering. This covers the EU/MiCA regime, the US securities analysis, and any other priority jurisdiction identified by the client. The output is a written classification memorandum. This stage typically completes within a defined number of business days from the information-gathering session; the timeline depends on the complexity of the token mechanics and the number of jurisdictions in scope.
Stage 2 – Structure and instrument selection. Based on the classification analysis, we advise on the appropriate sale instrument — a SAFT (Simple Agreement for Future Tokens), a token purchase agreement, a contribution agreement, or a hybrid — and on the geographic scope of the offering. We also advise on whether an offering memorandum or whitepaper is required and, if so, the level of disclosure it must contain under the applicable regime.
Stage 3 – First draft. We produce a first draft of the primary agreement, the purchaser eligibility schedule, and any ancillary instruments required. Our drafts are jurisdiction-specific, not adapted from a standard form. Each clause is annotated with the regulatory rationale, which accelerates client and counterparty review.
Stage 4 – Review and negotiation support. We support the client through investor review, legal due diligence requests, and any negotiation of terms. For institutional investors with their own counsel, we engage directly at the legal level.
Stage 5 – Execution readiness and post-closing. We review the execution process, confirm that any required regulatory filings have been made, and advise on post-closing obligations including any ongoing disclosure requirements under the applicable regime.
The overall timeline from engagement to first draft depends on the scope of the classification analysis and the number of jurisdictions in play. For a single-jurisdiction sale with a defined token structure, the timeline is measurable in weeks, not months. Multi-jurisdictional offerings with complex token mechanics take longer, and we scope that accurately at the outset.
If a prior application stalled or an agreement came back from investor counsel with structural objections, a second read can identify the root issue and the path forward. Write to us at info@oboluslaw.com or map your options directly.
What are the most common drafting mistakes in token sale agreements?
The most damaging mistakes in token sale agreement drafting are not technical drafting errors. They are structural choices — made before a clause is written — that create regulatory exposure the agreement cannot cure.
The first and most common is the utility-label assumption. A whitepaper that describes a token as a "utility token" does not settle its legal classification. Regulators in every major jurisdiction apply a functional test. If the token grants rights that look like a security interest — particularly economic participation tied to the issuer's efforts — the label is irrelevant. We have reviewed agreements where the whitepaper called the token a utility instrument but the contribution terms included a tiered return structure and a secondary-market listing commitment. That combination is legally combustible in the US, the EU, Hong Kong, and Singapore simultaneously.
The second is inadequate geographic restriction. A boilerplate "US persons excluded" representation, without active verification procedures and a properly structured geographic scope in the agreement, does not provide meaningful protection. The representation has to be verifiable, and the agreement has to reflect the actual scope of the offering.
The third is misaligned governing law. Issuers frequently select a governing law based on where the issuer entity is incorporated, without considering whether that jurisdiction's courts have developed jurisprudence on digital-asset disputes. England and Wales, Singapore, and the DIFC Courts in Dubai are among the forums with the most developed case law and procedural tools for digital-asset matters. Choosing an offshore jurisdiction with no relevant judicial history because it is the issuer's domicile is a structural mistake.
The fourth is vesting and lock-up provisions that were written without securities law analysis. In multiple jurisdictions, the transfer of tokens to team members and early investors under vesting arrangements is itself a regulated transaction. Agreements that treat vesting as a purely commercial matter, without the applicable regulatory layer, create compliance exposure that surfaces at the worst possible time — during a secondary listing process or a regulatory inquiry.
How does a token sale work across multiple jurisdictions?
Most token offerings are structurally cross-border from the first day. The issuer may be incorporated in one jurisdiction, the token development entity in another, the lead investors in a third, and the public sale participants spread across dozens of countries. That multiplicity means that no single agreement, governed by a single law, provides complete protection across the offering.
The EU position is now anchored by MiCA. An issuer selling into EU member states must assess whether the token requires a whitepaper filed with a national competent authority and, if the token is an ART or EMT, whether issuer authorization is required. ESMA coordinates the framework, but the authorization process runs through the NCA of the member state in which the issuer is established or through which it passports. For issuers without an existing EU presence, the first question is whether to establish one — and in which member state — before the sale opens.
The US position is structurally different. The SEC does not operate a pre-clearance mechanism for token sales the way an NCA operates an authorization process under MiCA. The US analysis is a legal opinion on classification, informed by the applicable securities test, combined with active structural exclusions for US persons if the issuer has determined the token is a security and is not prepared to register the offering. Issuers that accept US purchasers without that analysis in place carry direct SEC exposure.
Singapore and Hong Kong each have developed VASP licensing regimes — the MAS framework under the Payment Services Act and the SFC VATP licensing regime respectively — that interact with token sale classification. A token that is treated as a capital markets product under either regime brings additional disclosure and licensing obligations that must be addressed in the agreement.
In our practice, we regularly advise issuers who have structured the sale around one jurisdiction's analysis without addressing the others. The cross-border multiplier is real: a token that is fine in the EU may be a security in the US and a capital markets product in Hong Kong. The agreement and the offering structure have to address all three.
Where local counsel is required in a jurisdiction outside our direct practice scope, we work with allied counsel in the relevant jurisdiction. We coordinate the overall structure and the primary documentation; allied counsel provide the jurisdiction-specific opinion or review. The client gets a coherent cross-border analysis rather than disconnected jurisdiction-by-jurisdiction advice.
Which token sale structure fits your profile?
The right instrument for a token sale depends on where the issuer sits in its development cycle, the nature of the token, and the target investor base. There is no universal answer, and any counsel that gives one without the classification analysis first is working backward.
Profile A – Early-stage issuer, token not yet built, institutional investors only. The SAFT (Simple Agreement for Future Tokens) is the most common instrument for this profile. It is a deferred delivery mechanism: investors fund now in exchange for a right to receive tokens at a future delivery date, typically at a discount. The SAFT's legal status turns on the classification of the future token — if the token, when delivered, will be a security, the SAFT itself is likely a security. The agreement must reflect that analysis. Timeline from engagement to execution-ready documentation, where the classification analysis is straightforward, is typically measured in weeks. The key risk is the classification of the delivered token at the time of delivery, not at the time of the SAFT.
Profile B – Issuer with a working protocol, mixed institutional and retail investors, EU and non-EU participants. A hybrid instrument — a token purchase agreement for non-EU participants and a MiCA-compliant whitepaper process for EU participants — is the most defensible structure. The agreement must actively separate the two tranches, with different eligibility conditions and different disclosure documents for each. The MiCA whitepaper process adds time; the NCA review period is a real variable that must be built into the offering timeline. The key risk is treating EU and non-EU participants uniformly and exposing the EU tranche to MiCA enforcement.
Profile C – Issuer with an existing protocol, liquid secondary market anticipated, US participants potentially in scope. This is the highest-complexity profile. The US analysis cannot be avoided. If the token passes a securities-law test, the US tranche requires either registration or a valid exemption — and the offering documents must reflect that structure. If the issuer elects to exclude US persons, that exclusion must be operationally meaningful. The key risk is a post-closing determination that the exclusion was nominal rather than real.
Does a utility label in the whitepaper protect the issuer?
A common assumption among issuers is that labeling a token as a "utility token" in the whitepaper provides meaningful legal protection. It does not, and in our practice we treat that assumption as the primary risk factor to address at the outset of any engagement.
The reason is straightforward. Every regulator with jurisdiction over digital-asset offerings applies a functional test to determine whether a token is a security, an ART, an EMT, or another regulated instrument. That test looks at the rights the token actually confers — economic participation, profit distribution, governance rights with economic value, redemption claims. The name in the whitepaper is not relevant to that analysis. A whitepaper that calls a token a utility instrument does not change what the token does; it creates a record of what the issuer claimed, which becomes an aggravating factor in an enforcement context if the classification is wrong.
ESMA and the national competent authorities under MiCA have been explicit on this point: the token classification obligation under MiCA runs to substance, and issuers bear the classification burden. In the US, the SEC has consistently applied the same principle. In Singapore, the MAS applies its own functional test under the Payment Services Act. No jurisdiction we are aware of treats a self-applied label as dispositive.
The practical implication for drafting is that the classification analysis must happen before the whitepaper is written, not after. An agreement built on a pre-completed whitepaper that has already locked in a misclassification cannot cure the underlying problem; it can only limit the contractual exposure while the regulatory exposure remains.
Related at OBOLUS
- Token Offerings & Securities practice – the full regulatory regime for token issuers across major markets
- Security token offering structuring in the Bahamas – how the Bahamas STO framework compares for cross-border issuers
- VASP licence applications: what recent enforcement tells operators – enforcement signals that affect token issuers seeking VASP status
A recent structuring matter
In a recent cross-border matter, a fintech issuer planning a token sale across EU and Asia-Pacific jurisdictions engaged us before the whitepaper was drafted. The token mechanics included a fee-rebate feature and a governance vote right that carried a secondary economic entitlement. Our classification analysis identified that the combination triggered securities-law considerations in two of the target jurisdictions and an ART-adjacent analysis under MiCA. We restructured the token rights before the whitepaper was written, separating the governance mechanism from the economic entitlement, and drafted a two-tranche sale agreement — a MiCA-compliant instrument for EU participants and a separate token purchase agreement with a binding US-persons exclusion for the Asia-Pacific tranche. The sale proceeded without a regulatory challenge. The structural change that made the difference was identified in the first week of the engagement, before any public-facing documentation existed.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We assess token classification against the substance of rights, not the marketing label — that discipline is the foundation of every agreement we draft. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums, which means we understand how token sale documentation is scrutinized when it enters a litigation context. To discuss your token sale structure, contact info@oboluslaw.com or message us at t.me/oboluslaw.
To pressure-test your token structure before documentation begins, message us via t.me/oboluslaw or write to info@oboluslaw.com. Map your options.
FAQ
Is my token a security?
Whether a token is a security depends on the rights it actually confers, not on the label applied to it. Regulators in the US, EU, Singapore, Hong Kong and most other major jurisdictions apply a functional test: if the token grants economic rights in the issuer's enterprise, profit participation, or appreciation linked to the issuer's efforts, it is likely to be treated as a security. The analysis must be conducted jurisdiction by jurisdiction, because the same token can be classified differently in different markets. A written classification memorandum, prepared before the sale opens, is the baseline protection.
Do I need a MiCA whitepaper?
Under MiCA, a whitepaper is required for most public crypto-asset offerings directed at EU participants, subject to limited exemptions — for example, for offerings to fewer than a defined number of persons or below a defined consideration threshold. The whitepaper must be filed with the relevant national competent authority before the offer opens. ART and EMT issuers face additional prior-authorization requirements beyond the whitepaper obligation. If your offering reaches EU participants in any meaningful volume, the MiCA whitepaper obligation is likely to apply and must be addressed in the offering structure.
How should an airdrop be structured legally?
An airdrop — a gratuitous distribution of tokens to wallet addresses — carries legal risk that is frequently underestimated. In multiple jurisdictions, the question of whether an airdrop constitutes a regulated offering turns on whether recipients gave any consideration, whether the distribution is targeted, and whether the tokens distributed are themselves regulated instruments. A broad-based airdrop of a token classified as a security in one jurisdiction is a securities distribution in that jurisdiction, regardless of the absence of payment. Airdrop structuring requires the same classification analysis as a sale, combined with an assessment of the geographic distribution and the nature of the recipient list.
By Roman Levitt, Technology & DeFi Counsel — specializing in token classification, smart-contract legal risk, and cross-border digital-asset offering structures.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.