SAFE, SAFT or token warrant? Hybrid rounds compared

A familiar situation: a company raised seed and Series A rounds on standard equity terms, and its product now needs a token. Some investors assume they are owed tokens in proportion to their shareholding; others would rather have tokens than more equity; new investors want to know whether earlier ones will receive an allocation that dilutes the token supply. The existing documents cannot answer, because they were drafted for a company without a token.

The instruments below are the usual answers. Each puts the token right in a different legal place, delivers tokens at a different time and raises different regulatory questions. The choice belongs to the company and its counsel; this comparison is meant to shorten that conversation.

A token warrant gives an equity or SAFE investor the right to receive part of a future token, usually for a nominal extra payment. The core term is the allocation formula. A common approach ties it to ownership: the company sets aside an investor pool of tokens, and each warrant holder receives that pool multiplied by its fully diluted ownership at a defined date. Alternatives fix a number of tokens per unit invested, or a share of total supply.

The negotiation follows from the formula. Investors want the pool size committed, or at least a floor; founders want room to size it once the token design settles. Both sides must agree the date ownership is measured, what happens if no token is issued or a separate foundation issues it, the lock-up for warrant tokens relative to other buckets, and whether later equity investors receive warrants too. Each answer feeds the allocation table and the vesting schedule.

The simple agreement for future tokens was designed for raising money before a network existed. Investors bought rights to tokens delivered at launch, on the theory that the agreement was a security sold under an exemption while the tokens, once the network worked, would be used rather than held as investments.

US courts have since looked past that split. In March 2020 the Southern District of New York preliminarily enjoined Telegram from delivering the Grams it had sold, finding a substantial likelihood that the SEC could show the sales were part of a larger scheme to distribute Grams into the secondary market¹. In September 2020 the same court granted the SEC summary judgment against Kik Interactive, holding that its sales of Kin tokens were investment contracts and that its private and public sales formed a single integrated offering².

Neither decision makes every pre-launch token agreement unlawful, and analysis differs elsewhere. In the EU, a public token offer may need a MiCA white paper unless an exemption applies, while tokens that qualify as financial instruments fall outside MiCA and under securities rules³. The lesson is that the contract's label does not decide the question; the whole arrangement does, including how investors expect to sell.

Y Combinator, which publishes widely used forms, describes the SAFE as a short contract that converts into preferred stock when the company raises a priced round, and says it is not debt; its forms include an optional pro rata side letter for future equity rounds⁴. A SAFE says nothing about tokens, so some companies add a token side letter: a short promise that the investor may buy, or will receive, tokens on stated terms. Such letters only postpone the argument if they leave allocation, price or lock-up undefined.

Every instrument leaves a trace in the integrated model. Warrants create an investor pool and an obligation to deliver tokens that must reconcile with the cap table at the measurement date. SAFTs bring cash in before the token exists, often with refund terms. Side letters add buckets that are easy to forget. Running each option through the model before term sheets lets founders compare dilution, supply and treasury effects side by side, the purpose of the structuring memo described on the capital raising and tokenomics hub.