ZEC, ZEN and XLM “may currently be a security, based on the facts as they exist today,” Grayscale said in recent, little-noticed filings.