A sharp disagreement between two of the most consequential voices in market structure — one from the heart of traditional finance, the other from the frontier of decentralized infrastructure — has crystallized a question the industry can no longer defer: when a permissionless blockchain hosts financial markets accessible worldwide, who exactly is responsible for US regulatory compliance?
On one side stands Terry Duffy, chairman and chief executive of CME Group, the Chicago-based derivatives exchange giant that has long served as the gold standard of regulated futures markets. On the other is Yan, the pseudonymous co-founder of Hyperliquid, the decentralized perpetuals exchange that has quietly become one of the most liquid on-chain venues in the world. Their disagreement is not merely philosophical — it maps directly onto how regulators, courts, and protocol builders will define accountability in the next chapter of crypto market structure.
Yan's position is structurally coherent with how decentralized systems actually function. The argument is that compliance obligations should fall on the entities that deploy markets — the front-end operators, the interface builders, the liquidity program administrators — rather than on the base-layer blockchain itself. In this framing, a neutral settlement and matching layer is analogous to internet infrastructure: the protocol carries packets without adjudicating their content. The compliance burden, Yan contends, belongs with whoever makes a deliberate business decision to build a market and attract users to it. It is a logic familiar to anyone who has watched years of debate over liability frameworks for software, telecommunications, and cloud computing.
That framing is not purely theoretical on Hyperliquid's part. The protocol's own interface already reflects a version of this principle in practice. US-based users are blocked from accessing Hyperliquid's front-end, and the platform actively prevents circumvention via virtual private networks. These are meaningful technical and operational choices — they signal that Hyperliquid is not simply throwing open the doors to all comers and claiming blissful ignorance. The interface layer is exercising judgment, deploying geo-restriction and VPN detection as practical compliance tools. What Yan resists is the notion that the underlying chain itself — the matching engine and settlement layer — should be the locus of regulatory obligation.
Duffy's counterposition reflects the instincts of an institution that has spent decades operating inside a rigorous regulatory perimeter. From the CME's vantage point, market integrity demands that compliance be embedded as close to the transaction as possible, not delegated downstream to a shifting constellation of deployers who may or may not be subject to US jurisdiction. For a traditional exchange operator, the idea that a blockchain-native market could externalize compliance to third-party front-ends looks less like an elegant technical solution and more like a liability gap large enough to drive a systemic risk through.
The stakes in this debate extend well beyond the two individuals involved. The question of who bears US compliance in decentralized finance has become the central regulatory design problem of the current cycle. If regulators adopt something close to Yan's deployer-focused framework, it becomes possible — at least in theory — for permissionless base layers to exist without themselves carrying licensing, reporting, or know-your-customer obligations, provided the interfaces sitting above them carry those burdens. That would represent a significant departure from the functional-equivalence doctrine that agencies like the Commodity Futures Trading Commission have historically favored, which holds that similar economic activity should face similar regulatory treatment regardless of the technology delivering it.
If Duffy's instinct prevails — that compliance must attach as near to the economic activity as the law allows — the pressure on decentralized protocols increases substantially. Developers of base-layer infrastructure could find themselves treated as de facto market operators, subject to registration and oversight regimes designed for centralized intermediaries. That outcome would force a much harder architectural conversation about whether truly permissionless financial infrastructure can survive in a US-adjacent regulatory environment, or whether the practical reality is that every meaningful on-chain market will require an identifiable, regulated operator somewhere in its stack.
Hyperliquid's current posture — blocking US users at the interface while arguing the chain itself should not bear compliance obligations — represents a considered middle path. It acknowledges regulatory reality without conceding that the protocol layer must be licensed. Whether that middle path holds under sustained regulatory scrutiny remains an open question. What is clear is that the Yan-Duffy split has named the fault line more precisely than most industry debates manage to, and the resolution will shape the architecture of on-chain markets for years to come.
Written by the editorial team — independent journalism powered by Bitcoin News.