The New York Attorney General's office has secured a $5 million settlement from Uphold, a cryptocurrency exchange and custodial platform, to reimburse users who suffered losses through CredEarn, a third-party yield product that collapsed. This enforcement action represents a significant moment in how state regulators are beginning to hold platforms accountable for vetting external financial products offered to their user base—a practice that became widespread during crypto's 2021 bull market when exchanges competed aggressively on yield offerings.
CredEarn, which promised returns on deposited cryptocurrency, ultimately failed to deliver, leaving investors with substantial losses. Rather than treating this as an isolated third-party failure, New York's regulator took the position that Uphold bore responsibility for inadequate due diligence before integrating the product into its platform. The settlement imposes structural reforms on Uphold including mandatory enhanced review procedures for any future third-party offerings, explicit broker registration requirements, and a commitment to direct any funds Uphold recovers from CredEarn's bankruptcy proceedings toward compensating harmed customers. This last provision is particularly notable, as it creates an incentive alignment between the platform and its users during creditor recovery processes.
The case highlights a recurring vulnerability in the crypto ecosystem: platforms' reliance on yield products as a competitive differentiator while lacking the operational infrastructure or regulatory guardrails to properly evaluate counterparty risk. During the 2021-2022 cycle, similar patterns emerged across multiple exchanges and custodians, with products like Voyager Digital's lending program and various other yield schemes eventually unraveling. The distinction here is that regulators are now moving beyond reactive fraud prosecution to impose preventative structural changes—requiring platforms to operate with the due diligence standards traditionally applied to securities brokers, not merely cryptocurrency exchanges.
Uphold's settlement signals that state-level enforcement will increasingly focus on the operational governance gaps between platforms and the products they offer. For the broader industry, this creates a compliance template: custodians and exchanges can no longer treat third-party integrations as arm's-length relationships exempt from regulatory responsibility. The precedent suggests future settlements will demand both monetary remediation and procedural reform, potentially reshaping how platforms evaluate partnership risk and manage customer disclosure practices.