Last Tuesday, the Draper Foundation released its 2025 Innovation Index, and the headline hit every crypto news feed with surgical precision: ‘Crypto-friendly states are winning.’ Wyoming, Florida, and Texas topped the list, collectively capturing 73% of all U.S.-based crypto venture capital in the previous quarter. The remaining 27% was scattered across 47 states and territories. The market’s reaction was predictable—a wave of blog posts celebrating regulatory clarity, tweets from governors claiming credit, and a fresh round of relocations by blockchain startups. But beneath the celebratory surface, the numbers tell a more uncomfortable story. The index doesn’t measure innovation in any technical sense. It measures regulatory hospitality. And regulatory hospitality, as any risk manager knows, is a double-edged sword that can turn into a compliance trap when federal enforcement finally catches up.
Tim Draper’s Innovation Index has been tracking state-level crypto-friendliness since 2019, using a weighted score of legislative actions, tax policies, crypto-specific banking charters, and the number of registered blockchain entities. Wyoming jumped ahead early with its 2019 SPDI (Special Purpose Depository Institution) law, allowing crypto firms to operate as banks under state supervision. Florida followed with a 2021 law that exempted virtual currency from certain securities classifications, and Texas passed a 2022 bill recognizing digital currencies as property while courting Bitcoin miners with cheap energy. The logic is sound: clear rules attract capital, and capital attracts talent. But the index’s methodology has a fundamental flaw—it conflates ‘friendly legislation’ with ‘innovative outcomes.’ It assumes that a state registry equals real technology deployment, that tax breaks equal sustainable business models, and that legal certainty equals operator competence. The real world, as I learned during my 2022 TerraUSD analysis, rarely respects such tidy equations.
Methodological Blind Spots
The Draper Index weights legislative activity at 60%, startup density at 25%, and patent filings (by crypto firms) at 15%. On the surface, that distribution looks reasonable. But look closer: startup density counts any company registered in the state, regardless of whether its headquarters or development team is physically there. A New York-based firm can claim a Wyoming PO box for a virtual address, pay the lower registration fee, and instantly count toward Wyoming’s density score. I’ve audited contracts for three firms that did exactly that—one of them had 12 employees in New York, zero in Cheyenne, and proudly listed itself as a ‘Wyoming blockchain company’ in its pitch deck. The index’s patent weighting is even more problematic. Patent filings in blockchain generally lag actual code deployments by 12 to 18 months, and many are filed as defensive pre-emption rather than evidence of working products. During my 2024 ETF due diligence, I found that Fireblocks—a company praised for its New York custody solution—had 14 pending patents that described architectures the firm had already abandoned. Patents reflect legal strategy, not innovation velocity.
The False Security of State-Level Compliance
Perhaps the most dangerous assumption embedded in the Draper Index is that state-level friendliness provides any meaningful protection against federal enforcement. The index doesn’t mention the SEC, CFTC, or any federal agency—because its scoring methodology explicitly excludes federal regulatory friction. This omission is not an oversight; it is a feature. The index is designed to promote local autonomy, but in practice, it encourages firms to mistake a state charter for a compliance shield. My 2023 audit of NovaChain (a privacy-focused L1 that had registered in Florida under its friendly crypto law) exposed this gap starkly. NovaChain’s ZK-rollup implementation failed to meet NYDFS capital reserve requirements for institutional clients—requirements that applied because NovaChain had on-boarded pension funds based in New York, not because it was registered in Florida. The project’s legal team had assured the board that ‘Florida’s compliance framework covers all regulatory needs.’ It didn’t. When the NYDFS issued a $2.4 million fine and demanded immediate restructuring, NovaChain’s state-level ‘winning’ status meant nothing. The law that governs custody and capital reserves travels with the customer, not the company’s incorporation papers.
Infrastructure Fragility in the ‘Winning’ States
Every index that ranks crypto-friendliness must eventually face the infrastructure question—the plumbing that keeps operations running. The Draper Index completely ignores node distribution, custody arrangements, and dependency on third-party oracles. Wyoming, for all its progressive SPDI banks, relies on a single bank (Custodia Bank, formerly Avanti) for most of its crypto custody services. Florida’s regulatory framework exempts virtual currency from certain securities definitions but does not address the concentration risk of its largest custodian, Silvergate Bank’s successor. Texas, despite its energy abundance, houses 63% of the state’s Bitcoin mining hash within a 50-mile radius of West Texas—a single transmission line failure could wipe out half the network’s hashrate in that region. During my 2024 Fireblocks analysis, I uncovered an MPC implementation flaw that exposed 0.05% of total assets under custody to a single-point failure. The fix took six weeks, during which time over $4 billion in assets were technically accessible through the same vulnerability. None of these risks appear in the index because they require technical granularity that a state-level ranking cannot—or will not—capture.
Governance by the Few, Not the Many
The index also ignores how state-level ‘friendliness’ is determined. Draper’s methodology relies on publicly available legislative records and interviews with ‘at least three industry insiders per state.’ Those insiders are overwhelmingly VCs, law partners, and trade group executives—the same people who benefit from regulatory arbitrage. It is no coincidence that the top three states correlate directly with where Draper Associates has made direct investments. I’m not accusing Tim Draper of rigging the index; I’m pointing out that the data sources self-select toward cheerleaders. During the 2021 ICO boom, I saw the same pattern with the ‘Ethos’ code audit I volunteered for—the project’s GitHub ignored three reentrancy bugs because the lead developer had a relationship with the auditor. The same dynamics apply here. The ‘innovation’ measured by the Draper Index is the innovation of regulatory engineering, not technical engineering. Regulations are lagging, not absent—and lagging regulations that favor one group over another are eventually challenged.
Liquidity Vanishes; Insolvency Remains
A core tenet of risk management is that liquidity is the first thing to disappear in a crisis. The Draper Index treats state crypto-friendliness as a static advantage, but liquidity moves faster than legislation. In 2023, when the SEC filed its lawsuit against Coinbase, the immediate effect was not a drop in Coinbase’s stock—it was a 40% reduction in the number of crypto projects migrating to friendly states over the next three months. Why? Because VCs froze deployment capital, waiting for federal clarity. The same projects that had announced relocations to Texas or Wyoming abruptly paused those plans. The index, published annually, cannot capture this intra-year volatility. Liquidity vanishes; insolvency remains. When capital stops flowing, all those friendly laws do not protect against the insolvency of a project that cannot access liquidity. My mathematical model of the LUNA collapse in 2022 demonstrated exactly that: do Kwon had registered Terraform Labs in Singapore and Florida, but the friendly laws did nothing to stop the algorithmic death spiral. The state mattered zero when the protocol’s economics broke.
The Contrarian Angle: What the Index Gets Right
To be fair, the Draper Index is not entirely wrong. It correctly identifies that regulatory clarity—even if limited to state level—reduces uncertainty for early-stage projects. Wyoming’s SPDI banks have allowed a small number of firms to access traditional banking services without the oppressive oversight of federal regulation. Florida’s tax exemption on digital currency transactions has, by one estimate, encouraged over 200 new businesses to register in the state since 2022. Texas’s approach to mining deregulation has attracted significant hashrate that might otherwise have gone to Kazakhstan or Iran. The index’s core insight—that states competing for crypto business has historically led to better policy outcomes than top-down federal mandates—is supported by evidence. The 2024 Bitcoin ETF approval, for instance, was accelerated by state-level custody frameworks that provided the SEC with a model for institutional protection. Past performance predicts future panic—but only if the past performance is based on fundamentals, not arbitrage. The danger is not in the index’s existence; the danger is in its overinterpretation.
The Accountability Call
Investment memos and regulatory reports should treat the Draper Index like a weather forecast—useful for general directional awareness, useless for daily decision-making. If you are choosing a state to incorporate your protocol, by all means, pick Wyoming over New York for lower friction. But if you are betting on a project because of its state’s ranking, you have already lost the analytical plot. The index tells you where the political winds blow, not whether the code is safe, the treasury is solvent, or the team can deliver. I have spent the last eight years dissecting smart contracts, modeling systemic risks, and auditing compliance frameworks. In every case—Ethos, LUNA, NovaChain, Fireblocks—the decisive factor was not the state of incorporation. It was the quality of the architecture, the honesty of the numbers, and the resilience of the infrastructure. Check the source code, not the hype. The Draper Index is hype dressed in data. Read it, learn from its macro trends, then set it aside. The real work is in the auditor’s report, not the ranking chart.
Final Thought
Crypto-friendly states are winning a race they may not want to win. They attract capital, yes. But they also attract regulatory scrutiny, concentration risk, and a false sense of security. The next federal enforcement action—and it will come—will not target the state. It will target the projects hiding behind the state’s friendly laws. When that happens, the Draper Index will need a new methodology. One that weighs not friendliness, but fragility.