CertiK’s latest global report lands with a fairly blunt message: crypto regulation is no longer a waiting game. It is here, it is enforceable, and it increasingly looks like traditional finance with different rails.
The report says anti-money laundering enforcement has now overtaken securities classification as the main regulatory risk for digital asset firms. That is a notable shift. For years, much of the industry’s legal anxiety sat around whether a token was a security. Now the heavier pressure is coming from transaction monitoring, sanctions screening and basic compliance controls.
CertiK points to more than $900 million in AML-related fines and settlements in the first half of 2025, including large actions against crypto exchanges and related financial institutions. The message for platforms is not subtle. Weak monitoring systems are no longer treated as a technical gap. They are a financial and regulatory liability.
Stablecoin rules are also converging. The details differ by jurisdiction, but the direction is similar: full reserves, independent attestations, licensing and tighter redemption standards. Algorithmic designs are being pushed to the margins, while fiat-backed models are being pulled closer to banking-style supervision.
Smart contract audits are following the same path. CertiK says they are now statutory or quasi-statutory requirements in several major markets, often tied to licensing, token admission or operational resilience rules. For exchanges, issuers and custodians, that turns security reviews into a recurring cost of doing business, not a one-off launch expense.
The Basel framework adds another layer. Tokenized traditional assets and compliant stablecoins may fit more easily into bank balance sheets. Unbacked crypto assets, by contrast, face heavier capital treatment. That split could shape which parts of the market institutions can scale, and which remain outside the core financial system for longer.
