After years of legal back-and-forth, a federal judge finally put a fork in the Risley v. Universal Navigation lawsuit - and the crypto world is exhaling.
Key Takeaways
Federal judge permanently dismissed all claims against Uniswap Labs and founder Hayden Adams.
The court ruled developers can’t be held liable for scams committed by third parties using their open-source protocol.
The SEC had already dropped a separate investigation into Uniswap in early 2025, signaling a softer regulatory stance on DeFi.
Experts warn this isn’t blanket immunity — future rules could still target centralized elements within decentralized platforms.
On March 2, 2026, U.S. District Judge Katherine Polk Failla dismissed every remaining claim against Uniswap Labs and founder Hayden Adams. Not paused. Not remanded. Dismissed with prejudice, which in plain English means the plaintiffs can’t take another swing at it.
What the Case Was Actually About
Six people lost money on scam tokens — rug pulls and pump-and-dump schemes — between late 2020 and early 2022. They sued Uniswap, arguing the platform helped make those frauds possible. The federal securities claims got tossed back in 2023. The Second Circuit briefly brought some state-law claims back to life in early 2025. And now those too are gone.
The court’s reasoning cuts right to the bone: holding a software developer liable because someone else used their protocol to commit fraud “defies logic.” Uniswap built a neutral, automated trading tool. They didn’t issue the scam tokens. They didn’t run the rug pulls. Anonymous bad actors did.
Why This Actually Matters
This isn’t just a legal technicality. It’s a meaningful line in the sand.
Open-source infrastructure developers have been in an awkward spot for years — building tools that the public uses, while living in fear that they’d be on the hook every time someone exploited those tools for bad ends. This ruling says: that’s not how it works. The responsibility follows the fraud, not the foundation.
Think of it like suing the highway department because someone used the interstate to flee a robbery. The road didn’t commit the crime.
For DeFi developers specifically, this creates some breathing room. Not a free pass — the court was clear this isn’t blanket immunity — but at least a coherent framework for understanding what you’re actually liable for when you build decentralized infrastructure.
The Regulatory Context Makes This Even More Interesting
The ruling doesn’t exist in a vacuum. Earlier in 2025, the SEC quietly closed its separate investigation into Uniswap without bringing charges. Two things happening in sequence like that — an enforcement pass and a civil dismissal — signals something is shifting in how regulators and courts are thinking about DeFi.
It’s worth noting that Judge Failla, in the original 2023 ruling, referred to Bitcoin and Ethereum as “crypto commodities.” That language matters. It hints at a classification framework that treats them differently from securities — which has downstream effects on everything from how they’re traded to who gets to regulate them.
What Still Isn’t Settled
None of this means the legal landscape for crypto is suddenly clear. Experts are already pointing out that future regulations could target specific “points of centralization” within otherwise decentralized protocols — front-ends, governance structures, admin keys. If you build something with a centralized chokepoint, you may not get the same protection Uniswap just received.
There’s also the broader question of consumer protection. The people who lost money on those scam tokens are still out their funds. The ruling correctly places blame on the anonymous issuers — but catching and holding anonymous fraudsters accountable is its own unsolved problem. This ruling closes one door on one form of legal recourse.
The Bottom Line
Uniswap’s win is a genuine milestone for decentralized finance. It establishes a clear precedent: developers of open-source protocols are not custodians of every transaction that flows through them. That’s a sane, workable principle — and frankly, it’s the only framework under which permissionless infrastructure can realistically exist.
Whether Congress or future administrations leave that framework intact is a different question entirely. But for now, the court got this one right.
