The ISS Subpoena Gambit: SEC Enforcement as Infrastructure Policy, and What It Signals for Crypto Governance

The most structurally significant securities enforcement action this quarter has nothing to do with digital assets. The SEC filed suit in federal district court seeking judicial enforcement of an administrative subpoena against Institutional Shareholder Services (ISS). Not a token. Not an exchange. A proxy voting advisory firm that most crypto participants cannot name. Subpoena enforcement suits are infrastructure law. They surface at the frontier of an agency's investigative authority, before substantive violations are proven or even charged. The court is not being asked whether ISS broke the law. The court is being asked whether the SEC may look. That distinction matters more for crypto than for ISS. The action confirms a regulatory strategy pattern that dictates how the SEC will approach the next decade of digital asset oversight. Rulemaking is stalled. Enforcement-created boundaries are the default. Mapping the chaos, one block at a time. ISS is the largest proxy advisory institution in the world. Together with Glass Lewis, it controls an estimated 97 percent of the U.S. proxy voting advice market. ISS covers roughly 40,000 shareholder meetings annually. Institutional giants — BlackRock, Vanguard, State Street — rely on its voting recommendations to discharge fiduciary duties at thousands of portfolio companies, including the public crypto names: Coinbase, MicroStrategy, MARA Holdings. When ISS votes, trillions in assets move with it. When ISS hesitates, capital-markets democracy stalls. The legal mechanics of the conflict run through Section 21(b) and 21(c) of the Securities Exchange Act of 1934. Section 21(b) empowers the SEC to issue subpoenas in any investigation of possible securities law violations. Section 21(c) empowers the SEC to seek a federal district court order compelling compliance when subpoenas are resisted. ISS has evidently resisted, or partially resisted, and the SEC wants a judge to intervene. The direct relief sought is not a fine or a disgorgement order. It is a judicial command: produce the documents. The underlying target of the investigation is undisclosed. That is the most important fact in this file. Subpoena enforcement litigation is rarely the endgame. It is the key that unlocks internal documents. Once the court orders ISS to produce records — subject to the relevance, reasonableness, and non-burdensomeness tests established in United States v. Morton Salt Co. and its progeny — the SEC's substantive theories will crystallize. They likely concern conflicts of interest, incomplete disclosure of consulting relationships with public companies, and possible misstatements in proxy voting advice under Rule 14a-9 of the Exchange Act. I have watched this movie before. In mid-2020, while completing my applied mathematics thesis, I built a Python simulation of Uniswap's initial liquidity mining incentives and discovered that token emission rates were mathematically unsustainable without external liquidity injection. The lesson was simple: you can always identify the weakest part of an incentivized system by asking who is left holding the liability when the mechanism turns. In May 2022, I dissected the Terra collapse as a predictable failure in algorithmic stability constraints, tracing the contagion to Celsius and Three Arrows Capital. The recurring pattern: intermediaries whose incentive conflicts are structurally hidden become the liability sink when sentiment reverses. ISS now holds that same structural position in corporate governance infrastructure — and it has stopped cooperating with regulators asking about the mechanics of its own incentives. The regulatory history here deserves close reading because it explains why the SEC chose litigation over legislation. In 2020, under Chairman Jay Clayton, the SEC adopted Release No. 34-89372, classifying proxy voting advice as solicitation under the proxy rules. That classification imposed disclosure obligations and a feedback mechanism permitting public companies to review voting recommendations before release. It was a rule leaning toward issuers. In 2022, under Gary Gensler, the SEC issued Release No. 34-95260, partially retreating. That release acknowledged First Amendment protections for voting advice and loosened the compliance posture of the 2020 rule. Read the sequence carefully. An agency that loses the rulemaking war tends to rediscover its enforcement powers. Subpoenas do not require a new rule. They require only relevance. The relevance bar is deliberately wide: information that may reveal a securities law violation. The SEC does not need to prove ISS violated anything before issuing a subpoena. It needs only the possibility of discovering a violation. That is exactly the pattern governing digital asset regulation since 2021. The SEC never promulgated a comprehensive rule for the securities classification of tokens. Instead, it pursued enforcement actions — against Coinbase, Binance, Ripple, and numerous smaller issuers — building legal precedent case by case. The industry experienced the consequence as existential unpredictability because each action redefined legitimate conduct without published guidance. The ISS action is the same playbook transplanted into corporate governance infrastructure. Proxy voting advisory institutions occupy a double role that creates an inherent conflict structure. ISS charges institutional investors subscription fees for voting recommendations. Simultaneously, its related entity, ISS Corporate Solutions, sells corporate governance ratings and consulting services to the very public companies its recommendations assess. The arrangement has been criticized for years by the U.S. Chamber of Commerce and the National Association of Manufacturers. The SEC's investigation will likely focus on whether ISS adequately disclosed those relationships and whether its conflict-management walls were substantive or formalistic. What does this have to do with blockchain? The conflict map is nearly identical to what I encountered during my early DeFi stress tests, when I was modeling AMM curves under sustained emission pressure. The failure mode of any incentive-aligned system appears when a single entity is paid by both sides of the informational event. Centralized exchanges listing tokens while operating market-making desks. Validators participating in governance votes while holding outsized token inventories. Lending platforms quoting oracle prices for assets they themselves supply. The ledger does not care about honesty; it only records the consequences of misaligned incentives. During my 2025 cross-border stablecoin pilot on Polygon, I learned an even sharper variant of this lesson. We reduced settlement time from T+3 to T+0 and cut transaction fees by sixty percent relative to SWIFT, yet the binding constraint was never the blockchain. It was the opaque intermediation of legacy banking rails. Regulation operates under adversarial information asymmetry: the regulator wins when it can compel disclosure; the regulated wins when structures remain opaque. The ISS enforcement is the SEC refusing to tolerate opacity in a governance-critical intermediary. The strategic logic applies wherever an information intermediary exercises discretion over asset flows. Convergence is inevitable; timing is tactical. Cryptocurrency observers will scroll past this case, confident it belongs to the legacy world of quarterly reports and institutional voting. That confidence is misplaced. Regulatory precedent is transportable. A test established for one infrastructure intermediary migrates silently to the next. The SEC's theory — that information intermediaries with dual revenue streams must maintain verifiable walls between conflicting operations — applies to governance service providers and custodial recommendation engines in digital asset infrastructure as directly as to ISS. Consider the AI dimension. By 2026, autonomous agents are increasingly transacting on-chain and participating in protocol governance votes. These agents do not read whitepapers; they read recommendation feeds. They follow voting models, risk scores, and credibility rankings supplied by middleware providers. Who audits the recommender? Who checks the model for embedded bias? Who discloses that the ranking provider also holds tokens in the protocols being ranked? The SEC has spent three years building the analytical tools to interrogate those questions. The ISS case is the calibration test for the machinery. The macro view reveals what the micro hides: an enforcement capacity that turns infrastructure intermediaries into compliance gatekeepers. The superficial read will call ISS a traditional-market story. The structural read is different. ISS occupies the precise junction of information asymmetry and delegated decision-making that the SEC considers its most fertile enforcement territory. Proxy voting advice is exercised discretion on behalf of asset owners, the same delegated discretion exercised by ETF sponsors, fund managers, and, increasingly, protocol delegates. When the SEC forces ISS to open its internal files, it is not merely punishing noncompliance. It is building a template for how far investigative authority extends into systems that manufacture governance opinions at scale. There is a decoupling thesis worth rejecting here. Crypto prices have decoupled from equity markets, and in a sideways consolidation market, positioning matters more than prediction. But regulatory structure does not decouple. One agency enforces one mandate across all capital markets infrastructure. A precedent established in the proxy advisory context becomes persuasive authority in any subsequent proceeding involving an information intermediary. The dissenters will argue that the SEC's enforcement is weak because the agency never substantiated its theories. That argument misunderstands investigative sequencing. Subpoena enforcement comes first for a reason: the SEC collects internal documents before it commits to a legal theory. The first visible battle is about jurisdiction, and jurisdiction in securities law is always expanded through judicial acquiescence to investigative requests. ISS's available defenses are instructive. It can assert that the subpoena is overly broad, or that materials are protected by attorney-client privilege or the work-product doctrine. It can argue that the SEC's investigation lacks a good-faith legislative or enforcement purpose. It can press the international comity angle for documents held abroad under GDPR or other foreign disclosure restrictions. None of these defenses is likely to succeed outright, but each buys time. Time is exactly what ISS needs to renegotiate client agreements, repair reputational damage, and prepare for the substantive fight. The real commercial risk is not the subpoena itself. It is what happens after the files are produced: if conflict-of-interest management was indeed cosmetic, ISS faces cease-and-desist proceedings, civil penalties, and, more damagingly, client flight. The collateral channel runs through institutional investors. Under the SEC's expanded Form N-PX rules, fund advisers must disclose how they voted on a widening array of matters. They depend on ISS data to satisfy that obligation. If ISS's recommendations prove to have been tainted by undisclosed consulting relationships, those funds face a compliance dilemma: their filings relied on advice from a conflicted source. Litigation and client withdrawal would follow. The same dependency structure is emerging in crypto, where delegate voting platforms and governance analytics providers supply the data on which self-proclaimed decentralized protocols make decisions. Regulation is the new liquidity engine, but the engine reserves the right to seize inputs, not just measure outputs. Institutions entering the digital asset space should verify their intermediaries' conflict-management walls now, because the subpoena is already in the mail. I have audited enough incentive structures to know that firewalls are effective only when the cost of crossing them exceeds the benefit. The SEC is now raising that cost across the entire governance advisory economy, both traditional and digital. Strategy prevails where sentiment fails; the strategy here is to understand that enforcement discretion has replaced rulemaking as the primary mechanism of regulatory boundary-setting. What cannot be legislated will be litigated. What cannot be disclosed will be discovered. Trust is verified, never assumed — and in the new enforcement era, verification arrives by subpoena, not by press release. I am not predicting which specific crypto project will face the next ISS-style action. The distribution of potential targets is too broad, and the SEC's own priorities remain opaque. But the direction of travel is clear. Enforcement-created precedent is becoming the dominant legal architecture for digital asset markets, and the ISS case provides a detailed blueprint of how the SEC structures its assault on governance intermediaries. The next twelve months will determine whether courts endorse the broad investigative reach that the SEC claims over the institutional plumbing of capital markets. For issuers, delegates, and advisers operating in the tokenized economy, the lesson is unassailable: verify the independence of every service provider, document every conflict, and assume the inquiry is coming. Strategy prevails where sentiment fails. This is the cycle positioning that matters — not price levels, but structural preparation.