MiCA is coming for DeFi vaults, but regulation will be difficult
MiCA is coming for DeFi vaults as Brussels reviews whether crypto lending belongs inside the EU rulebook, but onchain vaults can channel billions into credit markets while spreading core functions across smart contracts and multiple participants, making it unclear who should be regulated.
MiCA originally left crypto lending outside its scope. On May 20, 2026, the European Commission opened a targeted consultation on areas left outside the Markets in Crypto Assets framework, including DeFi and crypto lending and borrowing.
One flashpoint is lending vaults, which can direct large sums into onchain credit markets without resembling conventional lending. Their legal status rests on non-binding interpretations that they fall outside MiCA and EU fund rules. For more regulatory coverage, see our Fintech & Crypto Alerts hub.
Key Takeaways
- Brussels is reviewing whether crypto lending and DeFi vaults should fall under MiCA after initially excluding them.
- EU law has no dedicated "vault" category, so regulators must judge structures by economic function, not label.
- Protocols like Morpho split roles across owners, curators, allocators and sentinels, complicating who counts as a provider.
- The Commission consultation closes Sept. 30, 2026, and could reshape onchain lending rules across Europe.
Why are DeFi lending vaults hard to regulate?
Yuriy Brisov, an EU digital assets lawyer at Digital & Analogue Partners, told Cointelegraph Magazine that EU law has no category called a "vault." Regulators must qualify structures by function, not by label.
Vaults can perform the economic functions of lending while spreading other functions over smart contracts and multiple participants rather than a single company. Jonathan Galea, a partner at Cahill Gordon & Reindel, warned that treating lending vaults as one category could capture structures that deserve opposite regulatory answers.
What does Morpho reveal about the regulatory puzzle?
Decentralized lending protocol Morpho illustrates the difficulty. Its Vault V2 architecture divides responsibilities between an owner, curator, allocator and sentinel. The curator configures strategy and risk parameters, the allocator executes allocations, and the sentinel holds powers intended to reduce risk.
None of this clearly establishes any participant as providing a regulated lending service under MiCA. Galea noted that some vaults direct fragmented liquidity into lending markets, while others buy and sell crypto assets and should be treated differently.
Who should actually be regulated under MiCA?
MiCA excludes crypto asset services provided in a "fully decentralized manner," though it can apply where only part of an activity is decentralized. Galea argued a decentralization test would penalize newer protocols while entrenching mature incumbents that have had years to distribute control.
Brisov said the safer ground is structural: no undertaking, no appointed manager, a direct coded claim on the pool, and the ability to exit before parameter changes take effect. Curve Finance founder Michael Egorov added that if DeFi lending enters regulation, it should be treated differently from traditional finance and approached carefully.
What happens next for DeFi vaults in Europe?
Brisov suggested explicitly adding lending and borrowing to the list of regulated crypto asset services rather than broadening the definition of a crypto asset service provider. The European Commission consultation closes Sept. 30, 2026.
What follows could determine whether lending vaults remain outside MiCA or face a new framework. For Brussels, the challenge is how to write rules that distinguish between different forms of onchain lending and the people, if any, who exercise control over them.