Malta Regulator Weighs Bringing DeFi Under MiCA Framework

The European Union’s Markets in Crypto-Assets regulation, known as MiCA, is built largely around identifiable issuers and crypto service providers. DeFi lending vaults complicate that model because smart contracts, governance participants and front-end operators may share control without a single legally accountable entity. Extending MiCA to the sector could redefine the obligations of developers, vault managers and users, with broad consequences for Europe’s on-chain credit market.

The European Commission is assessing whether decentralized finance and crypto lending should fall within the MiCA framework, including how regulators should identify the responsible party and determine whether a vault is genuinely decentralized. The legal uncertainty reflects the difficulty of applying entity-based rules to automated on-chain structures. No formal legislative proposal, monetary threshold or implementation date has been announced so far, leaving the scope and enforcement mechanism unresolved.

The European Union's Markets in Crypto-Assets Regulation, or MiCA, establishes uniform rules for crypto-asset issuance, trading and service providers, while imposing stricter requirements on stablecoins. As stablecoin payments and decentralized finance, or DeFi, expand rapidly, restrictions on interest and the potential regulation of decentralized services have become critical issues for market competition and investor protection.

The European Commission recently opened a public consultation on whether MiCA's existing digital-asset framework remains fit for market needs. The review focuses on stablecoin interest rules and potential loopholes that could allow DeFi businesses to exploit classification definitions to avoid regulation. Industry participants may submit comments through August 31, and the feedback will inform discussions about amendments widely referred to as “MiCA 2.0.”

Decentralized finance, or DeFi, uses smart contracts to provide trading and lending services, while DAOs make decisions through governance-token voting. The EU's Markets in Crypto-Assets Regulation, or MiCA, generally excludes “fully decentralized” services. Whether control is concentrated therefore directly affects who may be regulated, where legal liability lies and whether a protocol can claim an exemption.

On March 26, 2026, the European Central Bank published Working Paper No. 3208 analyzing Aave, MakerDAO, Ampleforth and Uniswap. Snapshots from November 2022 and May 2023 showed that the top 100 addresses in each protocol held more than 80% of its tokens. Ampleforth's top 20 voters controlled 96% of delegated votes, while MakerDAO's top 10 controlled 66%, suggesting regulators may need to identify a MiCA regulatory anchor case by case.