On this page
The (Initial Coin Offering) boom of 2017 was crypto's first mass speculation event — billions of dollars poured into new tokens, often backed by nothing more than a whitepaper. It was the Wild West of fundraising: no regulation, no investor protections, and no accountability. Most ICO tokens went to zero. But the ICO boom also funded some of the most important infrastructure in crypto (Ethereum itself was an ICO), and it forced regulators to define what a token sale actually is. Understanding the ICO boom is understanding the regulatory framework that governs crypto today.
What was an ICO?
An ICO (“Initial Coin Offering”) was a fundraising method where a project issued a new cryptocurrency token and sold it to the public to fund development. The name was a deliberate echo of “IPO” (Initial Public Offering), but the similarities were superficial. An IPO is a heavily regulated process with disclosure requirements, underwriter due diligence, and investor protections. An ICO was, in 2017, essentially none of those things: a project would publish a whitepaper, set up a smart contract to accept ETH (or BTC) and issue tokens in return, and announce a sale date. That was it.
The ease of issuing tokens on Ethereum (via the ERC-20 standard) made ICOs trivial to launch. Writing a token contract and deploying it took hours, not months. This low barrier to entry was both a feature (democratized fundraising) and a bug (democratized fraud).
The Howey test: are tokens securities?
The central legal question about ICO tokens was whether they were securities under US law. The test comes from a 1946 Supreme Court case, SEC v. W.J. Howey Co., which established that an investment contract (a security) exists when there is:
- An investment of money,
- In a common enterprise,
- With an expectation of profit,
- Derived primarily from the efforts of others.
Most ICO tokens met all four prongs: you invested money (ETH), in a common enterprise (the project), with an expectation of profit (the token would go up in value), derived from the efforts of others (the project team building the product). Under Howey, most ICO tokens were unregistered securities — and selling unregistered securities to US investors is illegal.
The timeline
Tap any event to expand its story.
J.R. Willett publishes "The Second Bitcoin White Paper" in January 2012, proposing Mastercoin — a protocol layer on top of Bitcoin, and the idea of selling a new token to fund it. The concept sits idle for over a year; nothing is built yet.
The Mastercoin token sale runs in mid-2013, raising ~5,000 BTC (~$500K at the time) and establishing the template: issue a new token, sell it to the public, fund development. The concept is born.
Ethereum raises ~$18M (31,000 BTC) in a 42-day token sale. It becomes the platform that most subsequent ICOs are built on — the ERC-20 token standard makes it trivial to issue a new token. The irony: Ethereum itself was an ICO, and it enabled the ICO boom.
The DAO raises ~$150M in an ICO, becoming the largest crowdfunding in history. Then it gets hacked (see the DAO hack deep dive). The SEC later issues its DAO Report (2017), determining that DAO tokens were securities — a ruling that would cast a long shadow over the ICO market.
ICO fundraising explodes. Projects raise billions, often with nothing more than a whitepaper and a website. EOS raises a record $4 billion in a year-long ICO. Filecoin raises $257M. Tezos raises $232M. Many ICOs sell out in minutes. The market is frothy, speculative, and largely unregulated.
In July 2017, the SEC issues its Report of Investigation on The DAO, concluding that DAO tokens were securities under the Howey test and subject to US securities laws. This is the first major regulatory statement on token sales — but it doesn't immediately stop the boom.
The crypto bear market of 2018 hits ICO tokens hardest. Most ICO tokens lose 90%+ of their value. Many projects fail to deliver. Some turn out to be outright scams. Investors who bought into ICOs at peak prices lose billions. The ICO era is effectively over.
The SEC brings enforcement actions against numerous ICO projects, ordering them to register their tokens as securities or return funds to investors. Telegram's TON project is shut down by the SEC. The message is clear: most ICO tokens were unregistered securities offerings.
The ICO boom's legacy is mixed: it funded some genuine projects (Ethereum, Filecoin, Cosmos), but it also enabled massive fraud and speculation. The framework that emerged — SAFT (Simple Agreement for Future Tokens), Reg D exemptions, accredited investor rules — attempts to make token sales legal. The ICO is dead; token sales continue, but under regulatory frameworks.
The scale of the boom
In 2017, ICOs raised approximately $5.6 billion globally. Some notable raises:
- Ethereum (2014): $18M — the platform that enabled most subsequent ICOs.
- The DAO (2016): $150M — then the largest crowdfunding ever; subsequently hacked.
- EOS (2017–2018): $4 billion — the largest ICO in history, over a year-long sale.
- Filecoin (2017): $257M.
- Tezos (2017): $232M — later plagued by internal disputes and investor litigation (settled for $25 million in 2020).
- Telegram TON (2018): $1.7B — later shut down by the SEC and refunded.
Many ICOs sold out in minutes. Some raised tens of millions with nothing more than a 10-page whitepaper and a website. The quality ranged from genuine projects building real technology to outright scams that took the money and disappeared.
The SEC's DAO Report (2017)
In July 2017, the SEC published its Report of Investigation on The DAO, concluding that DAO tokens were securities under the Howey test. The report didn't immediately shut down the ICO market — many projects continued selling tokens, often by excluding US investors (a fig leaf that didn't always hold up legally). But the writing was on the wall: the SEC considered most token sales to be securities offerings, and enforcement was coming.
The crash and enforcement
The 2018 crypto bear market hit ICO tokens hardest. Most tokens lost 90%+ of their value. Many projects that raised millions failed to deliver anything. Some were outright scams — the team took the money and vanished. Investors who bought into ICOs at peak prices lost billions.
Starting in 2018, the SEC began bringing enforcement actions against ICO projects. Dozens of projects were ordered to register their tokens as securities, pay penalties, and return funds to investors. Telegram's TON project was shut down by the SEC in 2020, and Telegram returned $1.2 billion to investors and paid an $18.5 million penalty. The message was clear: “code is law” does not exempt you from securities law.
After the ICO era, token sales didn't disappear — they evolved:
- SAFT (Simple Agreement for Future Tokens): A legal framework where tokens are sold to accredited investors before the network launches, with the expectation that the tokens will become functional (and therefore not securities) once the network is live.
- Reg D / Reg S exemptions: Token sales structured under SEC exemptions, limiting who can invest (accredited investors only) and restricting resale.
- IEOs (Initial Exchange Offerings): Token sales conducted through a centralized exchange, which does (nominal) due diligence and lists the token.
- Airdrops and liquidity mining: Instead of selling tokens, projects distribute them to users who provide value (liquidity, usage, testing).
The ICO is dead. Token sales continue, but under regulatory frameworks that the ICO boom forced into existence.
The mixed legacy
The ICO boom is often dismissed as pure speculation and fraud, but the reality is more nuanced:
- It funded real infrastructure. Ethereum, Filecoin, Cosmos, Polkadot, and others were funded by token sales. Some of the most important infrastructure in crypto traces back to an ICO.
- It proved the concept of decentralized fundraising. Before ICOs, funding a crypto project required VC money. ICOs showed that a global, open fundraising mechanism was possible — even if the 2017 version was too unregulated to last.
- It forced regulatory clarity. The SEC's DAO Report and subsequent enforcement established that most tokens are securities, creating the framework that governs token sales today. Without the ICO boom, this clarity might have taken much longer.
- It enabled massive fraud. Billions were lost to scams, failed projects, and tokens that went to zero. Investors who didn't understand the risks lost everything. The harm was real and fell disproportionately on retail investors.
Key takeaways
- An ICO (Initial Coin Offering) was a fundraising method where projects sold new tokens to the public, often with nothing but a whitepaper. The ease of issuing ERC-20 tokens on Ethereum made ICOs trivial to launch.
- The 2017 ICO boom raised ~$5.6 billion. EOS raised $4B (the largest ever); many raised tens of millions with no product. Most ICO tokens lost 90%+ of their value in the 2018 crash.
- The SEC's 2017 DAO Report established that most ICO tokens are securities under the Howey test (investment of money, common enterprise, expectation of profit, derived from efforts of others). Subsequent enforcement confirmed this.
- The ICO is dead, replaced by SAFTs, Reg D exemptions, IEOs, and airdrops — token sales under regulatory frameworks that the ICO boom forced into existence.
- The legacy is mixed: it funded real infrastructure (Ethereum, Filecoin, Cosmos) and proved decentralized fundraising was possible, but it also enabled massive fraud and retail investor losses. The technology outlasts the speculation — see the NFT deep dive for a parallel pattern.