Hacker News Reader

I don't think there's any question who has jurisdiction. The SEC and CFTC have both agreed it's the CFTC:

The problem is this is not formalized. It needs to be a law (legislative, not administrative), ideally with the individual tokens named.

Relying on the goodwill of regulators is unwise.