Sometimes they're commodities, not securities, depending on the particulars of the transaction (still regulated, just a different set of regulations)

https://www.coindesk.com/cftc-no-inconsistency-sec-cryptocur...