Rule 144 Resale Restrictions for Security Tokens

Rule 144 under the Securities Act provides a safe harbor for the resale of restricted and control securities without registration, subject to specific conditions including holding periods, volume limitations, and filing requirements. For security tokens issued under Regulation D or other private placement exemptions — which account for 78% of all digital asset Form D filings — Rule 144 defines the timeline and conditions under which investors can resell their tokens in the secondary market. With STO issuance growing from $5.6 billion in 2024 to $6.66 billion in 2025 and 284 active security token listings trading on 47 SEC-registered ATS platforms, Rule 144 compliance enforcement at the smart contract level — using standards like ERC-1400 and ERC-3643 — has become critical infrastructure for the secondary market.

Holding Period Requirements

The core Rule 144 holding period depends on whether the issuer is a reporting or non-reporting company:

Reporting issuers (those subject to Exchange Act reporting requirements): six-month holding period before restricted securities can be resold, subject to current public information being available.

Non-reporting issuers (the majority of security token issuers): one-year holding period before resale, with no current public information requirement during the first year.

For security tokens, the holding period begins when the token is “fully paid for” by the investor. In token offerings with vesting schedules or lock-up periods, the interaction between Rule 144’s holding period and contractual restrictions creates layered timing considerations. A token issued under Reg D with a six-month contractual lock-up and a one-year Rule 144 holding period effectively restricts resale for one year (the longer of the two periods).

Smart Contract Enforcement

The blockchain-native approach to enforcing Rule 144 holding periods is through smart contract transfer restrictions. Platforms like Securitize and Polymath embed compliance rules directly into the token’s smart contract, preventing transfers during the holding period regardless of whether the token holder attempts to sell through a registered ATS or an over-the-counter transaction.

This smart contract enforcement represents a significant compliance advantage over traditional restricted securities, where holding period compliance depends on transfer agent verification and broker-dealer gatekeeper functions. The on-chain restriction provides real-time, automated compliance that eliminates the possibility of premature resale — a feature that the SEC has acknowledged positively in discussions with digital asset platforms.

Volume Limitations

After the holding period expires, affiliates (persons who control, are controlled by, or are under common control with the issuer) face ongoing volume limitations. During any three-month period, an affiliate may sell the greater of:

• 1% of the outstanding shares (or tokens) of the class, or
• The average weekly trading volume during the preceding four calendar weeks.

For security tokens with limited secondary market liquidity, the volume limitation based on trading volume may be extremely restrictive. A security token trading $50,000 per week would permit affiliate sales of approximately $200,000 per quarter — potentially insufficient for insiders with significant holdings.

Non-affiliates face no volume limitations after the holding period expires, making the affiliate/non-affiliate distinction particularly significant for token projects where the founding team and early investors often hold substantial portions of the total supply.

Manner of Sale Requirements

Rule 144 requires that securities be sold in “brokers’ transactions” or in transactions directly with a “market maker.” For security tokens, this means resales must occur through a registered broker-dealer or on a registered trading platform.

This requirement effectively channels Rule 144 resales through regulated infrastructure — tZERO, INX, or other registered ATS platforms. Peer-to-peer token transfers that bypass registered intermediaries do not satisfy the manner of sale requirement and would not qualify for the Rule 144 safe harbor.

Restrictive Legend Removal

Traditional restricted securities carry a physical or electronic legend stating that the securities have not been registered and may not be resold without registration or an applicable exemption. For security tokens, this legend is typically encoded in the token’s smart contract as a transfer restriction.

Removing the restrictive legend — thereby enabling unrestricted secondary market trading — requires the transfer agent to confirm that all Rule 144 conditions have been satisfied. For security tokens, this involves updating the smart contract to remove transfer restrictions, which requires coordination between the token issuer, the transfer agent, and the smart contract administrator.

The technical process varies by platform. Securitize uses a compliance oracle that automatically lifts transfer restrictions when holding period and other conditions are met. Other platforms require manual intervention by the transfer agent to update the on-chain compliance status.

Form 144 Filing Requirements

Affiliates intending to sell restricted securities under Rule 144 must file Form 144 with the SEC if the sale exceeds 5,000 shares (or tokens) or $50,000 in aggregate sale price during any three-month period. The form must be filed concurrently with placing the sell order with a broker or executing the sale directly with a market maker.

For security tokens, Form 144 filing creates a public record of planned insider sales. Filed forms are available on SEC EDGAR, providing transparency into affiliate selling activity. The filing requirement serves a market integrity function: other market participants can monitor Form 144 filings to identify potential supply pressure from insider sales.

The practical challenge for security token affiliates is timing. Form 144 must be filed before the sale, but the thin secondary market liquidity on most ATS platforms means that large affiliate sales may not execute quickly. If the sale is not completed within 90 days of filing, the affiliate must file a new Form 144 before resuming sales.

Current Public Information Requirement

For reporting issuers, Rule 144 requires that “adequate current public information” be available about the issuer at the time of the resale. This condition is satisfied when the issuer has filed all required Exchange Act reports (10-K, 10-Q, 8-K) for the preceding 12 months.

For non-reporting issuers — which includes most security token issuers — the current public information requirement is met through Rule 15c2-11 compliance. The issuer must make reasonably current information publicly available, including:

• The exact name of the issuer and its predecessors
• The address of its principal executive offices
• The state of incorporation
• The title and class of the security
• The par or stated value of the security
• The number of shares or total amount of the securities outstanding
• The name and address of the transfer agent
• The nature of the issuer’s business
• The nature of products or services offered
• A balance sheet, profit and loss, and retained earnings statements

For token issuers, this requirement creates an ongoing disclosure obligation that survives the initial offering. Platforms like Securitize and Republic assist issuers in maintaining the public information repository required for their tokens to remain Rule 144-eligible on secondary markets.

Rule 144 and Regulation S Interaction

Security tokens issued under Regulation S (offshore offerings) are also restricted securities when they flow back to U.S. markets. The interaction between Rule 144 and Regulation S creates a two-layer restriction:

Distribution compliance period. Regulation S imposes a 40-day (Category 1) or one-year (Category 3) distribution compliance period during which tokens cannot be sold to U.S. persons. This period runs concurrently with Rule 144’s holding period.

Tacking. After the Regulation S distribution compliance period expires, the Rule 144 holding period may be “tacked” from the date the investor originally acquired the tokens in the offshore offering, provided certain conditions are met. This tacking rule prevents investors from circumventing Rule 144 by purchasing tokens offshore and immediately reselling in U.S. markets.

The smart contract enforcement of these dual restrictions requires coordination between the offshore token transfer agent and the U.S. market compliance infrastructure. Polymath’s ERC-1400 token standard and Securitize’s DS Protocol both support jurisdiction-based transfer restrictions that can enforce Regulation S flowback limitations at the smart contract level.

Rule 144A: The Institutional Alternative

Rule 144A provides a separate resale safe harbor for restricted securities sold to qualified institutional buyers (QIBs) — institutions with at least $100 million in securities. Unlike Rule 144, Rule 144A has no holding period requirement, no volume limitations, and no Form 144 filing requirement. The only condition is that the buyer must be a QIB.

For security token issuers, Rule 144A creates a parallel secondary market channel for institutional trading. Tokens issued under Reg D 506(b) or 506(c) can be resold to QIBs immediately through ATS platforms that restrict access to verified institutional accounts.

Practical Considerations for Token Issuers

Token issuers structuring offerings under Reg D should consider Rule 144’s implications at the design stage:

Token supply transparency. Volume limitations are calculated based on outstanding supply. Tokens with complex supply mechanics (burns, mints, staking locks) must have clear methodology for calculating the “outstanding” supply for Rule 144 purposes. The SEC’s digital asset classification taxonomy provides some guidance on how supply mechanics affect regulatory treatment.

Affiliate identification. The broad definition of “affiliate” can capture not just founders and executives but also significant token holders, DAO governance participants, and entities providing essential services to the network. The Howey test analysis of “efforts of others” and the Hinman speech concept of “sufficient decentralization” inform the affiliate determination.

Transfer agent coordination. The transfer agent plays a critical gatekeeping role in Rule 144 compliance. Token issuers must ensure their transfer agent has the technical capability to manage on-chain compliance status updates.

FINRA coordination. Broker-dealers executing Rule 144 sales must comply with FINRA rules regarding restricted securities. For broker-dealer requirements related to security token trading, including Rule 144 processing obligations, see our market structure guide.

Custody considerations. During the holding period, restricted tokens must be held in custody arrangements that prevent unauthorized transfers. The interaction between Rule 144 transfer restrictions and SAB 121 accounting requirements for custodied crypto assets creates additional compliance considerations for custody providers.

Rule 144 and Tokenized Debt Securities

The application of Rule 144 to tokenized debt securities introduces additional considerations beyond equity tokens. Tokenized corporate bonds, revenue-sharing agreements, and structured debt instruments are increasingly issued under Reg D exemptions, and their resale under Rule 144 raises distinct questions:

Maturity and holding period interaction. A tokenized bond with a one-year maturity issued under Reg D to non-reporting issuers faces a Rule 144 holding period that may exceed the instrument’s life. If the bond matures before the one-year holding period expires, the investor receives principal repayment directly from the issuer rather than through a secondary market sale — effectively rendering Rule 144 irrelevant for the instrument but relevant for any secondary market trading that occurs before maturity.

Interest payment treatment. Token holders receiving periodic interest payments during the Rule 144 holding period may raise questions about whether those payments constitute a “sale” under Section 2(a)(3) of the Securities Act. The better view — supported by SEC staff informal guidance — is that interest payments on debt securities do not constitute sales, but the on-chain visibility of these transfers creates compliance documentation requirements for issuers and their transfer agents.

Conversion features. Tokenized convertible notes that convert into equity tokens at a specified trigger event create Rule 144 tacking questions. When a convertible debt token converts into an equity token, the holding period for the new equity token tacks back to the original purchase date of the debt token, provided the conversion occurs automatically under the original terms without additional consideration. Smart contracts can automate this conversion while preserving the compliance metadata necessary for Rule 144 tacking.

Rule 144 Compliance Technology Infrastructure

The technology infrastructure supporting Rule 144 compliance for security tokens has matured considerably since the first tokenized offerings in 2018:

Compliance oracles. Platforms like Securitize deploy on-chain compliance oracles — smart contracts that maintain a registry of compliance status for each token holder. The oracle checks the holder’s Rule 144 eligibility (holding period completion, affiliate status, volume limitations) before approving any transfer. This system operates in real time, preventing non-compliant transfers at the smart contract level rather than relying on post-trade surveillance.

Transfer restriction standards. The ERC-1400 security token standard and Securitize’s DS Protocol both implement transfer restriction interfaces that encode Rule 144 requirements directly into the token’s transfer function. When a token holder initiates a transfer, the smart contract queries the compliance oracle, which evaluates the transfer against Rule 144 requirements and returns an approval or rejection. This architecture supports the automated legend removal process: when the oracle confirms that all Rule 144 conditions are satisfied, the transfer restriction is lifted programmatically.

Audit trail generation. Every transfer attempt — whether approved or rejected — generates an immutable on-chain record that serves as an audit trail for Rule 144 compliance. This audit trail is available to the issuer, the transfer agent, and regulators, providing a level of compliance transparency that does not exist for traditional restricted securities. SEC examination staff have indicated informally that this automated compliance infrastructure represents a significant improvement over manual compliance processes.

For comparison of resale frameworks across offering types, see our analysis of Reg D vs. Reg A+ token offerings. For the SEC’s official Rule 144 guidance, see the SEC Rule 144 page. For secondary market considerations, review our guide to ATS registration requirements and secondary market liquidity.