Log in Create an account
regulationsresearchResearch Roadmap

Research Roadmap

March 18, 2026

25 min read

Platform Vision

A comprehensive digital assets risk and regulatory compliance knowledge base serving three audiences:

  • Regulators and policymakers designing or enhancing digital asset frameworks
  • Lawyers and legal advisors navigating cross-jurisdictional compliance
  • Financial institutions building compliant digital asset operations

Every domain follows the same methodology: source-verified research across 15-25+ jurisdictions, comparative analysis, guidance documents with recommended frameworks, and an "unsaid items" section covering implicit requirements not codified in law.

Completed Domains

1. Crypto Mining Regulations

Status: Complete | Files: 44 | Jurisdictions: 27

Covers proof-of-work mining regulation including energy requirements, licensing, taxation, AML/KYC, environmental impact, and economic outcomes. Key finding: grid integration (Texas ERCOT model) is the gold standard; outright bans (China) fail.

2. Stablecoin Regulations

Status: Complete | Files: 39 | Jurisdictions: 18

Covers stablecoin issuance licensing, reserve requirements, redemption rights, algorithmic stablecoin regulation, payment system integration, systemic risk designation, and taxation. Key finding: 100% reserve backing is the emerging global consensus; algorithmic stablecoins face near-universal prohibition post-Terra/LUNA.

3. Institutional Crypto Custody

Status: Complete | Files: 34 | Jurisdictions: 17

Covers custody licensing, asset segregation and bankruptcy protection, key management standards, insurance and liability, capital requirements, audit standards, and compliance. Key finding: Switzerland's DLT Act bankruptcy protection is the global benchmark; "unsaid items" (SOC 2, 90%+ cold storage, $100M+ insurance) matter as much as written law.

Tier 1 — Core Regulatory Domains (Highest Priority)

These domains fill the most critical gaps in the platform and have the highest cross-referencing value with existing content.

4. Digital Asset Licensing & Market Entry (The License Map)

Why essential: "Where should we get licensed?" is the first question every crypto business asks. This is the single most commercially valuable domain on the platform. Founders, GCs, and compliance teams need a side-by-side comparison of every license type, every jurisdiction, every cost, every timeline — and critically, how to arbitrage between jurisdictions to optimize for speed, cost, scope, and passporting. No existing resource provides this at regulator-grade depth across all activity types.

Architecture: Cross-Cutting Layer + Domain Depth

The License Map is NOT a standalone research silo. It's a cross-cutting synthesis layer that connects to deep licensing data living inside each activity-specific domain. Here's how it works:

┌─────────────────────────────────────────────────────────────────┐
│                    LICENSE MAP (this domain)                     │
│  Comparative tables, arbitrage strategies, practical intelligence│
│  Jurisdiction pages: summary of ALL activities per jurisdiction  │
│  Activity pages: summary of ALL jurisdictions per activity       │
│                                                                  │
│  ┌──────────┐  ┌──────────┐  ┌──────────┐  ┌──────────┐       │
│  │ Custody  │  │Stablecoin│  │  Mining  │  │ Exchange │  ...   │
│  │licensing │  │licensing │  │licensing │  │licensing │       │
│  │ SUMMARY  │  │ SUMMARY  │  │ SUMMARY  │  │ DEEP     │       │
│  └────┬─────┘  └────┬─────┘  └────┬─────┘  └──────────┘       │
└───────┼──────────────┼──────────────┼───────────────────────────┘
        │              │              │
        ▼              ▼              ▼
   ┌─────────┐   ┌─────────┐   ┌─────────┐
   │ Crypto  │   │Stablecoin│   │  Crypto │   (+ future domains)
   │ Custody │   │  Regs   │   │  Mining │
   │ Domain  │   │ Domain  │   │ Domain  │
   │(DEEP    │   │(DEEP    │   │(DEEP    │
   │licensing│   │licensing│   │licensing│
   │data)    │   │data)    │   │data)    │
   └─────────┘   └─────────┘   └─────────┘

For activity types that already have a deep domain (custody, stablecoins, mining):

  • The License Map activity-type page summarizes and cross-references the domain's licensing guidance — it does NOT duplicate it
  • Deep licensing data stays in the domain (e.g., crypto-custody/guidance-document/licensing-frameworks.md)
  • The License Map adds the cross-cutting perspective: how does custody licensing compare to exchange licensing in Singapore? What's the cheapest path across activity types?

For activity types that DON'T have their own domain yet (exchanges, payments, lending, RWA, etc.):

  • The License Map activity-type page contains the primary deep research for that activity
  • When a new domain is built later (e.g., "Exchange Regulation"), the deep data migrates to that domain and the License Map page becomes a summary + cross-reference

How data flows:

  1. Every domain's Phase 1 country files produce deep Section 6 licensing data (16 fields per license type)
  2. Every domain's Phase 2 licensing agent produces a 12-dimension licensing guidance document
  3. Phase 2.5 feeds this data into the License Map jurisdiction pages
  4. The License Map's own activity-type agents synthesize across domains + add new research for uncovered activities

What the License Map uniquely provides (that no single domain can):

  • Jurisdiction pages covering ALL activity types side by side (e.g., "everything you can license in Singapore")
  • Arbitrage strategies that span activity types ("cheapest path to a multi-service license")
  • Practical intelligence that's cross-cutting (banking access, substance verification, investor expectations)
  • Master comparison tables that span all domains

Scope — Activity Types:

  • Exchange/trading platform (CEX, DEX, MTF/OTF, derivatives) — primary research in License Map until Exchange domain built
  • Custody/safekeeping — summary + wikilinks to crypto-custody domain
  • Stablecoin/EMT issuance — summary + wikilinks to stablecoin-regulations domain
  • Payment/transfer services — primary research until Payment Services domain built
  • Broker-dealer/intermediary — primary research
  • Lending/yield products — primary research until Lending domain built
  • Token issuance (ICO/IEO/STO) — primary research
  • RWA/security token platforms — primary research until RWA domain built
  • Fund management — primary research
  • Advisory/research — primary research
  • Mining/staking services — summary + wikilinks to crypto-mining domain

Scope — Jurisdiction Pages:

Each jurisdiction page covers ALL activity types available in that jurisdiction (13-dimension framework per activity):

DimensionWhat's Captured
License types availableEvery license permitting digital asset activities
Regulator(s)Single window or multi-regulator
Capital requirementsBy activity type — minimum + ongoing
Application timeline (actual)From firm announcements, not statutory targets
Application cost + setup costGovernment fees + legal/compliance estimate
Annual ongoing costRenewal + audit + compliance + reporting
Staffing/substanceLocal directors, office, FTE minimums
Passporting/cross-borderWhat markets can you serve from here?
Restrictions/exclusionsWhat you CAN'T do
Transition/grandfatheringOperate while applying?
Banking accessWhich banks serve licensed entities?
Approval/rejection dataRates, timelines, top rejection reasons
Regulatory directionTightening or loosening?

Priority jurisdictions — Tier 1 (500+ lines, ALL activities):

  • EU (MiCA) — the passport play
  • United States — the patchwork
  • United Kingdom — FCA regime going live 2027
  • UAE (VARA/ADGM/DIFC) — the speed play
  • Singapore — the prestige play

Tier 2 (200-400 lines): Switzerland, Hong Kong, Japan, Germany, France, Canada, Australia, Bahrain, Bermuda, Cayman Islands, Liechtenstein, Lithuania, South Korea, Brazil

Scope — Analysis & Guidance (the arbitrage layer):

  • Arbitrage strategies: MiCA passport (cheapest EU entry), dual-license (EU + MENA), US market access paths, Asia-Pacific hub strategy, sandbox-to-license pathway, substance vs. shell spectrum, timeline optimization, cost optimization, multi-jurisdictional structuring
  • Practical intelligence: Actual approval rates vs. stated, real timelines, hidden costs, banking access reality, "license shopping" reputation risk, investor/VC expectations, insurance availability
  • Master comparison tables: All jurisdictions × all activities (availability, capital, timeline, cost, passporting, banking)

File manifest (~40 files):

content/deep-research/license-map/
├── index.md                              # Landing page + master comparison tables
├── activity-types/
│   ├── exchange-trading.md               # PRIMARY RESEARCH — deep, all jurisdictions
│   ├── custody-safekeeping.md            # SUMMARY + wikilinks to crypto-custody domain
│   ├── stablecoin-issuance.md            # SUMMARY + wikilinks to stablecoin-regulations domain
│   ├── payment-transfer.md               # PRIMARY RESEARCH — deep
│   ├── broker-dealer.md                  # PRIMARY RESEARCH — deep
│   ├── lending-yield.md                  # PRIMARY RESEARCH — deep
│   ├── token-issuance.md                 # PRIMARY RESEARCH — deep
│   ├── rwa-tokenization.md              # PRIMARY RESEARCH — deep
│   ├── fund-management.md               # PRIMARY RESEARCH — deep
│   ├── advisory-research.md             # PRIMARY RESEARCH — deep
│   └── mining-staking-services.md       # SUMMARY + wikilinks to crypto-mining domain
├── jurisdictions/
│   ├── european-union.md                 # ALL activity types (Tier 1)
│   ├── united-states.md                  # ALL activity types (Tier 1)
│   ├── united-kingdom.md                 # ALL activity types (Tier 1)
│   ├── uae.md                           # ALL activity types (Tier 1)
│   ├── singapore.md                      # ALL activity types (Tier 1)
│   ├── switzerland.md                    # Tier 2
│   ├── hong-kong.md                      # Tier 2
│   ├── japan.md                          # Tier 2
│   ├── germany.md                        # Tier 2
│   ├── france.md                         # Tier 2
│   ├── canada.md                         # Tier 2
│   ├── australia.md                      # Tier 2
│   ├── bahrain.md                        # Tier 2
│   ├── bermuda.md                        # Tier 2
│   ├── cayman-islands.md                 # Tier 2
│   ├── liechtenstein.md                  # Tier 2
│   ├── lithuania.md                      # Tier 2
│   ├── south-korea.md                    # Tier 2
│   └── brazil.md                         # Tier 2
├── analysis/
│   ├── arbitrage-strategies.md           # Cross-jurisdiction optimization playbooks
│   ├── cost-comparison.md                # Setup + Year 1 + ongoing by jurisdiction × activity
│   ├── timeline-comparison.md            # Application to approval by jurisdiction × activity
│   ├── passporting-map.md                # Which licenses cover which markets
│   └── banking-access-reality.md         # Which banks serve which license types
└── guidance-document/
    ├── GUIDANCE.md                       # Master licensing guidance
    ├── multi-jurisdiction-structuring.md  # Holding + operating entity strategies
    ├── substance-requirements.md         # What regulators actually check
    ├── hidden-costs.md                   # True cost of licensing by jurisdiction
    └── unsaid-items.md                   # Investor expectations, reputation risk, banking reality

How existing domains feed the License Map:

  • The master prompt (00-MASTER.md) Phase 2.5 automatically feeds licensing data from any new domain into the License Map jurisdiction pages
  • The licensing update template (docs/prompts/licensing/03-licensing-update-template.md) can enrich existing domain files or License Map files at any time
  • Activity-type pages for domains that already exist (custody, stablecoins, mining) are lightweight summaries with wikilinks to the deep content

Prompts: docs/prompts/licensing/ — dedicated orchestration and agent templates for licensing research, activity-type analysis, and periodic updates.

5. Digital Asset Taxation & Cross-Border Reporting

Why essential: The #1 compliance pain point for institutions operating across jurisdictions. Every existing domain references taxation without going deep. Regulators need this to design effective tax policy; lawyers need it for structuring; institutions need it for operations.

Scope:

  • Income classification of digital asset activities (capital gains vs. ordinary income vs. business income)
  • Cost basis methodologies (FIFO, LIFO, specific identification, average cost) and regulatory acceptance by jurisdiction
  • Mining/staking/DeFi yield tax treatment — when is income recognized? At receipt or disposal?
  • Stablecoin-specific tax issues — are stablecoin transactions taxable events?
  • Cross-border reporting frameworks: OECD CARF (Crypto-Asset Reporting Framework), EU DAC8, US Form 1099-DA, UK HMRC reporting
  • Transfer pricing for digital asset businesses operating across jurisdictions
  • VAT/GST treatment of digital asset services (exchange, custody, advisory)
  • Tax incentives and special economic zones (UAE, El Salvador, Portugal pre-2023, Singapore)
  • Withholding tax on custody fees, staking rewards, and DeFi yields
  • Tax treatment of airdrops, hard forks, and token migrations
  • NFT and RWA-specific tax issues
  • Enforcement: IRS John Doe summonses, HMRC nudge letters, ATO data matching

Priority jurisdictions (Tier 1): United States, European Union, United Kingdom, Japan, Australia Regulatory dimensions: Income classification, reporting obligations, cross-border frameworks, enforcement, incentives

6. DeFi Regulation & Liability Frameworks

Why essential: The largest unregulated segment of digital assets. Identified as a critical gap in the crypto-custody "unsaid items" section. Regulators globally are grappling with how to apply existing frameworks to permissionless protocols. Lawyers need clarity on liability allocation. Institutions need to know the rules before participating.

Scope:

  • Legal classification of DeFi protocols — are they securities exchanges, money transmitters, or something new?
  • DAO legal status and liability — LLC wrappers (Wyoming, Marshall Islands), foundation models (Cayman, Switzerland), unincorporated associations
  • Smart contract liability — who is liable when code has bugs? Developer vs. deployer vs. governance token holder
  • DEX regulation — CFTC vs. SEC jurisdiction (US), MiCA scope (EU), SFC approach (Hong Kong)
  • DeFi lending and borrowing — securities law implications, consumer protection
  • Liquidity pool regulation — is providing liquidity a regulated activity?
  • Oracle manipulation and MEV — market abuse frameworks applied to DeFi
  • DeFi custody — LP tokens, governance tokens, yield-bearing positions
  • Insurance protocols (Nexus Mutual, InsurAce) — regulatory classification
  • Cross-chain bridge regulation — liability for bridge exploits
  • FATF and DeFi — the "so-called DeFi" guidance, IOSCO DeFi report
  • MiCA Article 142 DeFi review (due 2025) and its implications
  • Notable enforcement: Tornado Cash (OFAC sanctions, developer prosecution), Uniswap (SEC Wells notice), Ooki DAO (CFTC action)

Priority jurisdictions (Tier 1): United States, European Union, United Kingdom, Singapore, Japan Regulatory dimensions: Legal classification, liability allocation, AML applicability, enforcement, DAO governance

7. Tokenized Real-World Assets (RWA) Regulation

Why essential: The fastest-growing institutional segment ($16B+ on-chain by early 2026). Sits at the intersection of securities law, custody regulation, and traditional finance. BlackRock, Franklin Templeton, and major banks are entering — they need regulatory clarity.

Scope:

  • Securities law classification — when is a tokenized asset a security? Howey test, MiFID II, national frameworks
  • Tokenized securities vs. security tokens — regulatory distinctions
  • Real estate tokenization — fractional ownership, land registry integration, cross-border property law
  • Tokenized bonds and treasuries — BlackRock BUIDL, Franklin OnChain, Ondo Finance regulatory status
  • Tokenized funds — AIFMD/UCITS compatibility, fund administration requirements
  • Custody classification — do tokenized RWAs need crypto custody or traditional custody?
  • DLT trading facilities — Switzerland SDX, Germany's eWpG (Electronic Securities Act), Singapore's Project Guardian
  • Settlement finality — when is a blockchain transaction legally final?
  • Interoperability — cross-chain RWA transfers, traditional CSD integration
  • Investor protection — suitability, disclosure, secondary market liquidity
  • Tax treatment — capital gains, income, stamp duty on tokenized transfers
  • Cross-border recognition — will a token issued in Switzerland be recognized in Singapore?

Priority jurisdictions (Tier 1): European Union, Switzerland, United Kingdom, Singapore, United States Regulatory dimensions: Securities classification, custody, settlement, investor protection, cross-border recognition

8. AML/CFT & Travel Rule Implementation

Why essential: Cross-cutting compliance obligation that affects every digital asset business. Referenced in all 3 existing domains but deserves its own deep treatment. The gap between FATF expectations and national implementation is the biggest compliance risk for institutions.

Scope:

  • FATF Recommendations 15 and 16 — VASP definition, Travel Rule requirements
  • Travel Rule implementation by jurisdiction — thresholds, technical standards, sunrise problem
  • Technical solutions comparison — TRISA, OpenVASP/TRP, Sygna Bridge, Notabene, interoperability challenges
  • Unhosted/self-hosted wallet regulation — EU EUR 1,000 threshold, Germany GwG Section 15a, proposed US rules
  • Blockchain analytics requirements — Chainalysis, Elliptic, TRM Labs regulatory mandates
  • Sanctions screening — OFAC, EU, UN lists; Tornado Cash precedent; secondary sanctions risk
  • Suspicious activity reporting (SAR/STR) — thresholds, standards, effectiveness
  • Beneficial ownership and KYC for digital assets — CDD/EDD standards, PEP screening
  • Cross-border information sharing — FIU cooperation, tax information exchange
  • De-risking and banking access — why banks refuse crypto clients, regulatory expectations
  • FATF mutual evaluations — how countries score on crypto compliance
  • Enforcement case studies — Binance ($4.3B), BitMEX, OKX, Tornado Cash developers
  • Emerging challenges — privacy coins, mixers, cross-chain bridges, DeFi

Priority jurisdictions (Tier 1): United States, European Union, United Kingdom, Singapore, Japan Regulatory dimensions: Travel Rule, sanctions, monitoring, reporting, enforcement

9. Central Bank Digital Currencies (CBDC) Frameworks

Why essential: 130+ countries exploring CBDCs. Directly impacts stablecoin regulation (competition/coexistence), payment systems, monetary policy, and financial inclusion. Regulators need comparative analysis; institutions need to plan for CBDC integration.

Scope:

  • Wholesale vs. retail CBDC — design choices, regulatory implications, use cases
  • CBDC legal tender status — can you refuse CBDC? Can you mandate acceptance?
  • Privacy and surveillance — tiered privacy models, anonymity thresholds, data protection law compatibility
  • Programmability — conditional payments, smart contract integration, government-imposed spending restrictions
  • Interoperability with stablecoins — coexistence frameworks, conversion requirements
  • Cross-border CBDC — mBridge (BIS), Project Dunbar, Icebreaker — multi-CBDC arrangements
  • Disintermediation risk — impact on commercial banking, deposit flight, monetary policy transmission
  • Technology choices — DLT vs. centralized database, permissioned vs. permissionless, offline capability
  • Financial inclusion — unbanked access, identity requirements, mobile-first design
  • Launched CBDCs — Nigeria eNaira, Bahamas Sand Dollar, Jamaica JAM-DEX, Eastern Caribbean DCash — outcomes and lessons
  • Advanced pilots — China e-CNY, EU digital euro, India e-Rupee, Brazil Drex, Sweden e-Krona
  • Abandoned/paused — Ecuador, Senegal, reasons for failure
  • BIS Innovation Hub projects — Helvetia, Jura, Mariana, Tourbillon
  • IMF CBDC Handbook and policy recommendations

Priority jurisdictions (Tier 1): China, European Union, India, United Kingdom, Brazil Regulatory dimensions: Legal framework, privacy, monetary policy, financial stability, cross-border

Tier 2 — Institutional Infrastructure

These domains cover the operational infrastructure that institutions need to participate in digital asset markets.

10. Digital Asset Exchange & Trading Platform Regulation

Why essential: Exchanges are the primary interface between traditional finance and digital assets. Licensing complexity, market integrity rules, and consumer protection vary dramatically across jurisdictions.

Scope:

  • Exchange licensing models — from registration (basic AML) to full securities exchange authorization
  • Market integrity — manipulation detection (wash trading, spoofing, layering), insider dealing, front-running
  • Best execution obligations — do they apply to crypto? How are they enforced?
  • Order types and trading rules — circuit breakers, trading halts, tick sizes
  • Listing and delisting standards — what criteria must tokens meet? Who decides?
  • Segregation of exchange and custody functions — conflicts of interest, structural separation
  • Consumer/retail investor protection — suitability, leverage limits, risk warnings
  • Institutional-grade infrastructure — FIX protocol, prime brokerage, OTC desks
  • Cross-border exchange access — equivalence, reverse solicitation, geoblocking
  • Dark pools and alternative trading systems for digital assets
  • Post-trade infrastructure — clearing, settlement, netting
  • Notable enforcement — Binance, FTX, BitMEX, Bithumb, Upbit

Priority jurisdictions (Tier 1): United States, European Union, Japan, South Korea, Hong Kong

11. Crypto Lending, Borrowing & Yield Products

Why essential: Post-Celsius/BlockFi/Voyager, this is the most enforcement-active area. Securities classification of yield products remains contested. Institutions need clarity on what structures are permissible.

Scope:

  • Securities classification of yield/interest products — Howey test, MiFID II, national approaches
  • CeFi lending regulation — Celsius, BlockFi, Voyager enforcement actions and settlements
  • Staking-as-a-service regulation — SEC vs. Kraken, Coinbase; when is staking a security?
  • Liquid staking tokens (LSTs) — Lido stETH, Rocket Pool rETH — regulatory classification
  • Restaking protocols — EigenLayer, Symbiotic — layered risk and regulatory uncertainty
  • Institutional lending — bilateral OTC lending, prime brokerage, collateral management
  • Rehypothecation and commingling restrictions — lessons from CeFi failures
  • Consumer protection — disclosure requirements, risk warnings, cooling-off periods
  • Tax treatment of lending income, staking rewards, and DeFi yield
  • Insurance and guarantee requirements for yield products
  • Cross-border marketing restrictions

Priority jurisdictions (Tier 1): United States, European Union, United Kingdom, Singapore, Australia

12. Digital Asset Insurance & Risk Transfer

Why essential: Identified as a critical gap in crypto-custody research. The insurance market is undersized relative to digital asset AUM. Regulators designing custody and exchange frameworks need to understand what insurance is actually available.

Scope:

  • Crypto-specific insurance products — specie/crime, hot wallet, cold wallet, errors & omissions
  • Market capacity — Lloyd's syndicates, Evertas, Canopius, Munich Re, Marsh, Aon
  • Coverage gaps — what ISN'T covered (smart contract bugs, protocol failure, regulatory action, key compromise through social engineering)
  • D&O insurance for crypto firms — availability, exclusions, pricing
  • Custodian insurance requirements by jurisdiction (cross-reference with custody domain)
  • Self-insurance and captive models — when do they satisfy regulatory requirements?
  • DeFi insurance protocols — Nexus Mutual, InsurAce — regulatory classification
  • Parametric insurance for blockchain events — oracle-triggered payouts
  • Deposit guarantee schemes — do they cover crypto? (FSCS UK, FDIC US, esisuisse Switzerland)
  • Claims history and loss data — documented losses, recovery rates, payout experience
  • Actuarial challenges — lack of historical data, correlated risks, key-person dependency
  • Regulatory expectations vs. market reality — the gap

Priority jurisdictions (Tier 1): United Kingdom (Lloyd's), United States, Bermuda, European Union, Singapore

13. Payment Services & Crypto Payment Regulation

Why essential: Stablecoins are increasingly used for payments. The boundary between payment regulation (PSD2/PSD3, EMI licensing) and crypto regulation (MiCA, state money transmitter) is blurring. Institutions need clarity on licensing requirements.

Scope:

  • Payment service licensing for crypto — when does crypto payment trigger PSP/EMI requirements?
  • MiCA and PSD2/PSD3 dual licensing problem — the March 2026 overlap for EMT custody
  • Stablecoin payment networks — Circle, Stripe, PayPal PYUSD — regulatory treatment
  • Cross-border crypto payments — remittance regulation, FX controls, capital flow restrictions
  • Merchant acceptance frameworks — El Salvador (mandatory, then reversed), Switzerland (voluntary)
  • Settlement finality for blockchain payments — when is a crypto payment irrevocable?
  • Consumer protection for crypto payments — chargebacks, fraud liability, error resolution
  • Central bank payment system access for crypto firms — reserve accounts, RTGS access
  • Interoperability — crypto rails to traditional payment systems (SWIFT, SEPA, Fedwire)
  • Payment stablecoin licensing (GENIUS Act, MiCA EMT, Singapore MAS) — cross-reference with stablecoin domain

Priority jurisdictions (Tier 1): European Union, United States, United Kingdom, Singapore, Japan

14. NFT & Digital Collectibles Regulation

Why essential: Regulatory classification remains unsettled — some NFTs are securities, some are commodities, some are neither. IP rights, royalty enforcement, and cultural property law add complexity. The market has matured beyond speculation into institutional use cases (ticketing, identity, loyalty).

Scope:

  • Securities classification — when is an NFT a security? (SEC enforcement, MiCA scope, Hong Kong guidance)
  • Unique asset vs. fractionalized NFT — different regulatory treatment
  • IP rights and licensing — what does buying an NFT actually convey? Bored Apes, CryptoPunks litigation
  • Royalty enforcement — on-chain vs. off-chain, marketplace circumvention, legal enforceability
  • Cultural property and art law — AML for high-value art, provenance, export controls
  • Gaming and metaverse NFTs — loot box regulation, gambling classification, child protection
  • Real-world utility NFTs — ticketing, memberships, loyalty programs — consumer protection
  • NFT marketplaces — platform liability, listing standards, wash trading detection
  • Tax treatment — capital gains vs. collectibles tax (US 28% rate), VAT on primary vs. secondary sales
  • NFT lending and collateralization — DeFi integration, liquidation mechanics

Priority jurisdictions (Tier 1): United States, European Union, United Kingdom, Japan, South Korea

Tier 3 — Emerging & Cross-Cutting Domains

These domains address emerging risks and cross-cutting themes that will grow in importance.

15. AI & Algorithmic Trading in Digital Assets

Why essential: AI-driven trading is becoming dominant in crypto markets. MiCA includes market abuse provisions. Regulators are developing frameworks for algorithmic trading that apply to digital assets.

Scope:

  • Algorithmic trading requirements applied to crypto — MiFID II algo trading rules, MiCA market abuse
  • Market manipulation detection — wash trading, spoofing, layering in 24/7 crypto markets
  • MEV (Maximal Extractable Value) — front-running, sandwich attacks, regulatory response
  • AI-driven compliance tools — transaction monitoring, KYC automation, regulatory reporting
  • Model risk management — when AI makes trading or compliance decisions
  • Flash crashes and circuit breakers — crypto market microstructure regulation
  • High-frequency trading in digital assets — latency advantages, co-location
  • AI-generated investment advice for crypto — robo-advisory regulation

Priority jurisdictions (Tier 1): European Union (AI Act + MiCA), United States, United Kingdom, Singapore

16. Digital Identity & KYC Infrastructure

Why essential: KYC is the foundational compliance layer. Decentralized identity, verifiable credentials, and eIDAS 2.0 are reshaping how identity works. Travel Rule compliance requires robust counterparty identification.

Scope:

  • eIDAS 2.0 European Digital Identity Wallet — implications for crypto KYC
  • Self-sovereign identity (SSI) — regulatory acceptance for CDD/KYC
  • Verifiable credentials — W3C standards, regulatory recognition
  • Decentralized identifiers (DIDs) — ISO/IEC standards, government adoption
  • Zero-knowledge proofs for KYC — privacy-preserving compliance
  • Digital identity for institutional onboarding — LEI, GLEIF vLEI
  • Cross-border identity recognition — mutual recognition agreements
  • Identity fraud in digital assets — deepfakes, synthetic identity, document forgery
  • Biometric requirements — liveness detection, remote onboarding standards

Priority jurisdictions (Tier 1): European Union, United States, United Kingdom, India, Singapore

17. Crypto Bankruptcy & Insolvency Frameworks

Why essential: FTX, Celsius, Voyager, Three Arrows Capital, and BlockFi created a body of case law that didn't exist before 2022. This domain captures the legal precedents that will govern future failures.

Scope:

  • Property classification in bankruptcy — are custodied crypto assets estate property or client property?
  • Cross-border insolvency — Chapter 15 recognition, UNCITRAL Model Law, EU Insolvency Regulation
  • Key case law — FTX (SDNY), Celsius (SDNY), Voyager (SDNY), Three Arrows (BVI), BlockFi (SDNJ)
  • Creditor hierarchies — secured vs. unsecured, DeFi protocol claims, token holder rights
  • Recovery rates and distribution — verified data across major cases
  • Smart contract claims in bankruptcy — automatic liquidation vs. bankruptcy stay
  • DAO insolvency — who are the creditors? Who is the debtor?
  • Clawback and preference actions — crypto-specific challenges (pseudonymous counterparties)
  • Examiner and trustee reports — public findings and lessons
  • Regulatory response — how did each jurisdiction change rules post-crisis?

Priority jurisdictions (Tier 1): United States, United Kingdom, Singapore, Cayman Islands, BVI

18. ESG & Sustainability Reporting for Digital Assets

Why essential: Institutional allocators (pension funds, sovereign wealth) increasingly require ESG disclosure. The EU Sustainable Finance Taxonomy's applicability to digital assets is unresolved. Energy consumption remains the biggest reputational risk.

Scope:

  • Energy consumption disclosure — Cambridge Bitcoin Electricity Consumption Index, IEA data, MiCA requirements
  • Proof-of-Stake vs. Proof-of-Work environmental impact — verified data
  • Carbon credit and offset programs for digital asset operations
  • EU Taxonomy applicability — do digital asset activities qualify as "sustainable"?
  • SFDR (Sustainable Finance Disclosure Regulation) for crypto funds
  • Green bond tokenization — sustainability-linked digital assets
  • E-waste and hardware lifecycle — mining equipment disposal regulation
  • Social impact — financial inclusion metrics, access to banking
  • Governance scores for digital asset firms — board composition, transparency, audit quality
  • ESG rating agencies covering digital assets — MSCI, Sustainalytics approaches

Priority jurisdictions (Tier 1): European Union, United Kingdom, United States, Australia, Japan

19. Cross-Border Regulatory Cooperation & Mutual Recognition

Why essential: Digital assets are inherently borderless. The fragmentation between 100+ jurisdictional frameworks creates massive compliance costs. This domain maps how regulators cooperate (or don't).

Scope:

  • Bilateral MoUs between regulators — map of existing agreements
  • MiCA passporting — how it works, limitations, third-country equivalence
  • Regulatory sandboxes — cross-border sandbox initiatives (GFIN, ASEAN)
  • Equivalence determinations — which jurisdictions recognize each other's frameworks?
  • Supervisory colleges for global crypto firms — coordination mechanisms
  • Data sharing agreements — FIU cooperation, tax information exchange (CRS, CARF)
  • Enforcement cooperation — cross-border investigation, asset recovery, Interpol
  • FSB/IOSCO coordination mechanisms — implementation monitoring, peer review
  • Regulatory arbitrage — how firms exploit jurisdictional gaps, regulatory response
  • Harmonization efforts — G20 roadmap, FSB recommendations, regional convergence

Priority jurisdictions: Global (focus on cooperation gaps rather than individual jurisdictions)

20. Privacy Coins & Financial Privacy Regulation

Why essential: The tension between financial privacy and compliance is intensifying. Tornado Cash sanctions, mixer bans, and privacy coin delistings raise fundamental questions about the limits of financial surveillance.

Scope:

  • Privacy coin classification — Monero, Zcash, Dash — regulatory treatment by jurisdiction
  • Exchange delisting trends — which jurisdictions ban privacy coins? Evidence of effectiveness
  • Tornado Cash precedent — OFAC sanctions, developer prosecution (Pertsev, Storm), Dutch court rulings
  • Mixer and tumbler regulation — are they inherently illegal or legitimate privacy tools?
  • FATF guidance on anonymity-enhancing technologies
  • Zero-knowledge proof compliance — can zk-proofs satisfy AML while preserving privacy?
  • EU AMLR unhosted wallet rules and privacy implications
  • Constitutional/human rights challenges — ECHR Article 8, Fourth Amendment, privacy as a right
  • Privacy-preserving compliance technologies — selective disclosure, confidential transactions
  • Law enforcement tools — chain analysis for privacy coins, Chainalysis capabilities

Priority jurisdictions (Tier 1): United States, European Union, Japan, South Korea, Netherlands

21. Crypto Market Abuse & Manipulation Frameworks

Why essential: Market integrity is the frontier where crypto regulation is weakest. 24/7 global markets, pseudonymous participants, and cross-venue trading create novel manipulation vectors. MiCA Title VI and proposed US legislation are the first attempts at comprehensive frameworks.

Scope:

  • Market abuse definitions applied to crypto — insider dealing, market manipulation, unlawful disclosure
  • MiCA Title VI market abuse provisions — scope, prohibitions, enforcement
  • US market manipulation law — CFTC anti-manipulation authority, SEC securities fraud, proposed legislation
  • Wash trading — prevalence (estimates vary 50-90% on unregulated venues), detection, enforcement
  • Spoofing, layering, and pump-and-dump — adapted to 24/7 crypto markets
  • MEV and front-running — is it market abuse or blockchain design?
  • Cross-venue surveillance — challenges of monitoring across 600+ exchanges globally
  • Social media manipulation — coordinated pump groups, influencer fraud, Elon Musk market impact
  • Stablecoin manipulation — Tether controversy, reserve attestation gaps
  • Market surveillance technology — tools, providers, regulatory expectations
  • Notable enforcement — Mango Markets exploit, Avraham Eisenberg prosecution, Celsius market manipulation charges

Priority jurisdictions (Tier 1): United States, European Union, United Kingdom, Hong Kong, Australia

Implementation Sequence

COMPLETED                           TIER 1 (next)                      TIER 2                          TIER 3

1. Crypto Mining ──────────────────> 4. LICENSING & MARKET ENTRY ────> 10. Exchange Regulation ────────> 15. AI & Algo Trading
2. Stablecoins ────────────────────> 5. Taxation & Reporting ────────> 11. Lending & Yield ────────────> 16. Digital Identity
3. Crypto Custody ─────────────────> 6. DeFi Regulation ─────────────> 12. Insurance & Risk ───────────> 17. Crypto Bankruptcy
                                     7. Tokenized RWA ────────────────> 13. Payment Services ───────────> 18. ESG Reporting
                                     8. AML/Travel Rule ──────────────> 14. NFTs & Collectibles ────────> 19. Cross-Border Cooperation
                                     9. CBDC Frameworks ──────────────>                                  20. Privacy Coins
                                                                                                          21. Market Abuse

Domain #4 (Licensing) is the highest-priority next topic. It's the gateway question for every crypto business and the most commercially valuable domain on the platform. It also generates the most cross-references to existing domains (custody licensing, stablecoin issuance licensing, mining licensing are all sub-topics).

Estimated effort per domain: 19 parallel agents, ~60-90 minutes wall clock, 300-700 lines per file.

Total platform at completion: ~21 domains, ~750+ files, ~350,000+ lines of source-verified regulatory content.

Graph view