Token issuers and individual promoters who participated in ICO bounty programs often believed they were operating in a regulatory gray area. This episode of HoldCo unpacks why that assumption was — and remains — dangerous, drawing on this legal analysis of ICO bounty risks and obligations. The core securities law questions raised in the original piece haven't aged out; if anything, the enforcement environment around digital asset offerings has only grown more demanding.

The episode walks through the legal architecture that governs both sides of a bounty arrangement — the companies running token offerings and the individuals promoting them for commission — and explains why the structure that seemed so frictionless in the early ICO era was riddled with compliance traps. Here's what's covered:

• What an ICO bounty actually is: essentially the unregistered equivalent of a selling agent in a traditional IPO underwriting syndicate — a framing that immediately signals the scale of the problem.
• The threshold question for issuers: whether the token constitutes a security, and why the prudent default is to assume it does, triggering the full suite of exemption requirements under Reg D, Reg A, or Reg S.
• FINRA registration and broker-dealer rules: why paying U.S.-based promoters a commission to source investors may require those promoters to be registered — and why the issuer bears exposure if they're not.
• The foreign-promoter carve-out and its limits: a narrow exception exists for unregistered foreign finders, but it comes with a serious caveat — issuers lose control of the marketing message and have no visibility into what claims are being made or who is actually being reached.
• KYC and AML due diligence: the obligation to vet every promoter and finder in a bounty program, and why gaps in that process can compound liability if the offering is later scrutinized.
• The risk calculus for individual promoters: U.S. citizens receiving commissions for selling tokens to other U.S. investors without proper registration face civil liability, potential criminal referrals, and protracted regulatory exposure — often for relatively modest pay.

The episode closes with a broader point about professionalization: the existence of bounty-related legal risk is itself an argument for engaging a registered investment banker rather than relying on a decentralized network of social media promoters. The cost of compliance infrastructure upfront is almost always lower than the cost of unwinding a deal gone wrong.

More from the show: Why We Built a Forest, Not a Single Tree: The Case for HoldCo explores the strategic thinking behind the holding company model and why diversification across businesses changes the risk profile entirely.

Mergers & Acquisitions