Malta's MFSA published a discussion paper on Wednesday exploring how decentralized finance could fit inside the EU's MiCA framework, asking whether decentralization should be assessed as a spectrum rather than a binary concept. The regulator flagged that many DeFi projects still retain centralized features — administrator keys, concentrated governance, protocol upgrade rights, and control over user-facing front-ends — even as MiCA explicitly excludes services provided in a "fully decentralised manner without any intermediary."
The paper is open to public feedback until July 10 and is the first structured attempt by a national EU regulator to define the practical threshold for MiCA's DeFi carve-out, a question MiCA itself leaves unanswered. The MFSA is also asking whether regulated crypto firms should be required to run smart-contract audits, governance reviews and risk assessments before integrating DeFi protocols into their products.
Why it matters
MiCA's text carves out fully decentralized services but never defines what that means in practice, leaving every national regulator to interpret the line. Malta — historically the EU's most crypto-active jurisdiction and home to a dense cluster of exchanges and token issuers — is the first supervisor to put a concrete framework on the table. The paper's spectrum approach, paired with prompts on DAO structures, segregated cell companies, and "guardian agent" mechanisms that constrain autonomous systems, signals the MFSA's view that on-chain governance is rarely as decentralized as protocol marketing suggests.
If other EU supervisors adopt the spectrum framing, protocols that today sit outside MiCA by claiming full decentralization could find themselves pulled back into the perimeter the moment any of those centralized features — admin keys, upgrade rights, a controlled front-end — is documented.
Frequently asked questions
-
What did Malta's MFSA actually publish?
A discussion paper exploring how DeFi could fit inside the EU's MiCA framework, asking whether decentralization should be assessed as a spectrum and proposing potential legal structures including DAOs and segregated cell companies.
-
Why is MiCA's DeFi treatment a problem?
MiCA excludes services provided in a "fully decentralised manner without any intermediary" but never defines the threshold, leaving every national regulator to interpret the line. The MFSA's paper is the first structured attempt to operationalize that carve-out.
-
What centralized features is the MFSA flagging in DeFi?
Administrator keys, concentrated governance, protocol upgrade rights and control over user-facing front-ends — features the paper says many DeFi projects still retain despite claims of full decentralization.
-
Could this pull decentralized protocols back under MiCA?
Potentially. If other EU supervisors adopt the spectrum framing, protocols that today sit outside MiCA by claiming full decentralization could be pulled back inside once any of those centralized features is documented.
-
When does the public consultation close?
The MFSA's discussion paper is open to public responses until July 10.
CoinDesk