The state just told crypto platforms they're liable for what they sell, not just what they build.
The Summary
- New York AG Letitia James secured a $5 million settlement from Uphold for promoting CredEarn, a third-party crypto savings product that misrepresented risks to users.
- This is New York's first enforcement action targeting a platform for promoting someone else's yield product, not the issuer itself.
- The precedent shifts liability: if you list it, you own it. Distribution is no longer a shield.
The Signal
Uphold marketed CredEarn as a safe savings product to its users, but the product turned out to mislead customers about the actual risks involved. The company didn't build CredEarn. It just promoted it. That distinction used to matter. Not anymore.
The Block reports this is the first time New York has gone after a platform for promoting another company's crypto yield product rather than the product's actual issuer. That's a big shift. It means regulators are treating distribution platforms like gatekeepers, not neutral pipes. If you put a product in front of your customers, you're vouching for it.
"Distribution is no longer a shield. If you list it, you own it."
This creates a new compliance burden for every platform doing third-party integrations:
- Exchanges listing yield products they don't control
- Wallets promoting DeFi protocols through in-app browsers
- Custodians white-labeling services from external providers
The $5 million settlement isn't punitive by New York standards. It's a warning shot. The AG's office is establishing precedent: you can't outsource liability by outsourcing product development. If your brand touches it, your legal team needs to vet it.
What's murky is where the line gets drawn. Does this apply to all third-party integrations, or just financial products? If a wallet app links to a DEX, is that promotion? If an exchange lists a token, is that endorsement? The settlement doesn't clarify. That ambiguity is the point. Regulators are creating space to interpret broadly.
"Regulators are treating distribution platforms like gatekeepers, not neutral pipes."
For platforms building in Web3, this complicates the promise of composability. The whole idea was that protocols could plug into each other without asking permission. But if every integration creates legal exposure, platforms will start acting like Web2 app stores: slow, selective, risk-averse. That kills velocity.
The Implication
Expect every crypto platform to audit their third-party integrations in the next 90 days. Yield products, staking services, anything marketed as passive income is now high-risk from a compliance perspective. Platforms will either pull risky products or start charging partners for the legal overhead of carrying them.
If you're building tools that other platforms integrate, your biggest customers just became harder to close. You'll need to bring more than a smart contract and a pitch deck. You'll need legal opinions, insurance, and indemnification clauses. The cost of distribution just went up.