Honoured to have spoken at Jesus College in Cambridge this week.
CIDOEC is the Cambridge International Symposium on Economic Crime. Once a year regulators, prosecutors and law enforcement from around the world meet here to compare notes on what is going wrong.
Crypto was on everybody's mind. Everybody is worried about theft and fraud, and rightly so.
At moments I saw real anger, especially among the older participants. I don't read it as a threat. I read it as the last fight before resignation. The 21st century is the digital age, blockchains are how finance gets done, and a world built on paper is fading with the last generation that grew up in it. There is no reason to be angry at that, or to be angry at them for being angry. It is just what it is.
Change is coming, and ever faster. But it is coming to both sides.
For banks, asset managers, lawyers, judges and law enforcement, change means accepting that public blockchains are not a fad the children do. They are becoming the foundation of the financial system they have to live with.
For us, change means accepting that if you take users' money, hold full control over it and invest it on their behalf, you are doing a regulated activity. It is regulated for good reasons: the moral hazard is enormous, and vaults and stablecoins keep blowing up because of it. The users call the lawyers anyway in the end. Better to accept it up front.
Six weeks ago Commissioner Peirce wrote that vaults fall on a spectrum, from allocations fixed in immutable code to allocations at the sole discretion of a person. My point in Cambridge: that spectrum does indeed exist and it can be measured in the contracts. 105 rated vaults, 32 public safeguard gates each, four quadrants, and the line between them is the manager (the chart behind me).
There is a corridor that can stay unregulated: just code. We should defend it, cherish it and insist on its privileges - anyone may submit a transaction, anyone may deploy a contract. This is our citadel.
But if you are an organisation playing asset manager and merely call yourself decentralised, you should not get the protection reserved for decentralised systems. You aren't the same thing.
Whoever gets this right has the moment of hypergrowth ahead of them. That alone is worth it, as long as the base layer stays decentralised, permissionless and censorship-resistant.