Code is Not Law

In 2022, an image of a "bored ape" accessible through a non-fungible token (NFT) was stolen from actor Seth Green. The thief then sold the bored ape to a good faith purchaser. Had this been a physical painting, the outcome would have been clear: a thief cannot convey title they do not have, and the purchaser would acquire nothing. Yet the ensuing debate proceeded as though the NFT's technical features had altered this settled principle, as though blockchain records could bestow property rights on the new purchaser. They cannot. Ownership rights in digital assets stem from law, not from the software systems that create and maintain them. When Lawrence Lessig famously proclaimed "code is law," he meant that code functions as behavioral regulation by imposing technical limitations on users, not that it generates enforceable rights. His insight was descriptive: code shapes what people can do within digital environments, just as physical architecture channels movement through physical space. Yet the advent of blockchain networks, cryptocurrencies, and smart contracts has morphed this observation into the flawed conviction that what code makes possible, the law must recognize as legally enforceable. While legal scholarship has noted this misconception, it has yet to offer a rigorous framework to resolve it. This Article fills this gap by applying H.L.A. Hart's legal theory to demonstrate that code acquires legal force only to the extent that positive law grants such power. This investiture occurs through two pathways: public empowerment through legislation, and private empowerment through contracts, trusts, and other ordering instruments. Absent such formal investiture, code remains "soft law," a structural constraint lacking normative force. The relevance of our analysis extends beyond the conceptual malaise affecting the blockchain ecosystem, addressing a foundational conflict poised to reappear with every wave of new technology, from large language models to autonomous robots.