US Court Sidesteps Core Legal Question for Non-Custodial Crypto Developers
A Texas federal judge dismissed a developer's lawsuit seeking clarity on whether publishing self-custody software violates money-transmission law, leaving a foundational legal question unresolved for builders worldwide.
A federal judge in the Northern District of Texas dismissed a crypto developer's pre-emptive lawsuit on March 26, 2026, ruling that the plaintiff lacked standing to bring the case. Michael Lewellen, a crypto developer and Coin Center fellow, had sued the US Attorney General seeking a court declaration that his planned Ethereum-based charitable crowdfunding protocol, Pharos, would not expose him to criminal liability under federal money-transmission statutes (Lewellen v. Garland). Chief US District Judge Reed O'Connor dismissed the case without prejudice, finding that Lewellen had not demonstrated a sufficiently credible or imminent threat of prosecution.
The Standing Problem
The dismissal turned on procedure rather than substance. Lewellen's argument was straightforward: Pharos is non-custodial, meaning he would never hold user funds or be able to redirect them. Under longstanding guidance from the Financial Crimes Enforcement Network (FinCEN), non-custodial software developers are not money transmitters and do not require federal licensing. FinCEN draws a precise regulatory distinction between "anonymizing software providers," who publish code without controlling funds, and "anonymizing service providers," who operate custodial services subject to money-transmission rules. But the Department of Justice has pursued criminal charges against non-custodial software builders anyway, most notably in the Tornado Cash and Samourai Wallet cases.
Judge O'Connor drew a distinction between those prosecutions and Lewellen's situation. "The 'core conduct' of those cases is money laundering," the judge wrote. "By contrast, the core conduct here would be running a business." The court also pointed to an April 2025 internal DOJ memo, issued by Deputy Attorney General Todd Blanche, that instructed prosecutors to deprioritize enforcement against developers for the misconduct of their end users. The memo's existence, in the judge's view, made Lewellen's prosecution risk insufficiently imminent to establish standing.
That reasoning produces a legal Catch-22. The memo Blanche issued to reassure developers became the procedural basis for a court to avoid ruling on whether those developers actually have legal protection. Lewellen was direct about his disappointment: "Disappointed to see the court dismiss my suit today. A non-binding DOJ memo is no substitute for real legal certainty." Peter Van Valkenburgh, executive director of Coin Center, reinforced that point, noting that the memo "has not provided meaningful protection to developers, given the outcomes in the Tornado Cash and Samourai Wallet cases."
The breadth of industry concern was visible in the amicus briefs filed in support of Lewellen by the Blockchain Association, the DeFi Education Fund, the Solana Policy Institute, and the Uniswap Foundation, illustrating how widely the underlying legal question was being watched across the sector.
The Enforcement Backdrop
The two cases cited in the ruling illustrate the stakes. Samourai Wallet co-founders Keonne Rodriguez and William Lonergan Hill pleaded guilty in July 2025 and were sentenced in November 2025 to five and four years in prison, respectively, after prosecutors documented that the platform facilitated over $237.8 million in criminal proceeds. Tornado Cash developer Roman Storm was convicted in August 2025 on conspiracy charges related to operating an unlicensed money-transmitting business; the jury deadlocked on the more serious money laundering and sanctions violations charges, making the verdict a mixed result. He is currently appealing. His defense fund had raised more than $5 million by January 2026, drawing broad support from across the crypto industry as developers monitored the case's implications for open-source software publishing.
Both prosecutions involved platforms with documented links to illicit finance. Lewellen's Pharos has not been deployed and carries no such record. Still, the court declined to rule on whether his non-custodial architecture would insulate him from prosecution under the same statutes used against those developers.
The Legislative Path Forward
With the courts unwilling to engage on the merits, attention shifts to Congress. The Blockchain Regulatory Certainty Act (S.3611/H.R.3533), introduced on a bipartisan basis in January 2026 by Senators Cynthia Lummis (R-WY) and Ron Wyden (D-OR), would write FinCEN's existing guidance into law. The bill states that a "non-controlling developer or provider" cannot be classified as a money-transmitting business solely for publishing software, distributing hardware or software tools, or providing infrastructure support. Lummis framed the goal plainly: "It's time to stop treating software developers like banks simply because they write code."
The BRCA faces opposition from some Senate Judiciary Committee members, including Senators Durbin and Grassley, who argue it could weaken anti-money laundering enforcement. The bill's progress toward a floor vote had not been confirmed as of publication. The CFTC issued no-action relief for self-custodial wallet software providers in March 2026, a smaller but concrete signal that at least one federal regulator is moving toward protecting non-custodial technology.
Why This Matters Outside the United States
The Lewellen ruling was domestic, but it carries weight for builders far beyond Texas. In India, where one of the world's fastest-growing crypto developer communities operates, the Prevention of Money Laundering Act framework extends to virtual asset service providers but provides no clear statutory test for non-custodial software developers. Indian builders working on DeFi protocols and self-custody wallets face a legal vacuum that closely mirrors the US situation. A US ruling on the merits could have provided a useful foreign precedent; the dismissal on standing grounds provides none.
Pakistan presents a related concern. The country's newly established Digital Asset Authority signals an openness to structured innovation, but ongoing US legal ambiguity could push Pakistani regulators toward more cautious, custody-centric approaches that limit the regulatory space available to non-custodial builders.
In Nigeria and Kenya, where non-custodial tools serve a practical function in economies marked by legacy financial exclusion, the global supply of open-source self-custody infrastructure is shaped in part by whether developers across jurisdictions face credible legal risk for building it. Legal uncertainty could discourage local developers from building in the space and reduce the availability of open-source tools globally. South Africa, which already operates a Crypto Asset Service Provider licensing regime, may extend exchange control regulations to cross-border crypto transfers in 2026, a move that could indirectly capture non-custodial software activity.
The EU experience offers a concrete analogue. Following MiCA implementation and the regulatory uncertainty around DeFi in the first quarter of 2025, DEX trading volumes in Europe fell 18.9% and more than 40% of EU-based DeFi traders shifted to offshore platforms. That data, cited by Norton Rose Fulbright, suggests that sustained legal ambiguity does not freeze activity so much as relocate it.
The case remains open. The without-prejudice dismissal allows Lewellen to refile or appeal. In the meantime, the Blockchain Regulatory Certainty Act represents the primary legislative vehicle currently available for resolving the question the court refused to answer.