Malta's Financial Services Authority opened a public consultation on 12 June 2026 asking whether decentralized finance protocols that retain centralized features should fall under the European Union's Markets in Crypto-Assets Regulation, with responses due by 10 July. The consultation tests the reach of MiCA's exemption for fully decentralized services, which the MFSA notes most DeFi protocols do not meet because they keep administrator keys, concentrated governance structures, upgrade rights, and control over user interfaces. MiCA's Recital 22 excludes crypto-asset services provided without any intermediary, yet the regulation offers no clear test for determining when a protocol qualifies as fully decentralized, prompting the MFSA to propose a case-by-case assessment framework.
MiCA Regulation Lacks Clear Decentralization Test
Recital 22 of MiCA places services that operate without any intermediary outside the regulation. The MFSA's discussion paper states that judging whether a protocol clears that threshold demands a case-by-case assessment of its governance, operational, and control features. The paper draws on the European Commission's MiCA review consultation to list indicators of incomplete decentralization: an identifiable intermediary, control through admin keys over key functions, concentrated governance power, custody of user assets by the protocol, absence of open-source code, and marketing by an identifiable entity. The MFSA asks whether decentralization should be treated as a spectrum rather than a binary state.
MFSA Proposes Case-by-Case Assessment Framework
The discussion paper proposes that authorized crypto-asset service providers integrating DeFi components should run smart-contract audits, governance reviews, and risk assessments. The MFSA stresses that the paper sets out no policy position and that its proposals remain non-binding. The exercise extends a track record that has made Malta a primary EU licensing base, where Blockchain.com won EU-wide approval through the MFSA to offer custody and wallet services across the European Economic Area.
Stablecoins Accounted for 84 Percent of Illicit Transaction Volume in 2025
The MFSA points to the Financial Action Task Force's "same risk, same rule" principle, under which persons exercising control over a protocol may qualify as virtual asset service providers. Citing FATF and Chainalysis figures, the paper records that stablecoins accounted for roughly 84 percent of illicit virtual asset transaction volume in 2025. The regulator notes this risk sharpens as licensed players such as BVNK passport stablecoin infrastructure across the EEA under MiCA.
MFSA Floats Legal Wrapper Options for DeFi Projects
The paper canvasses structures that could give DeFi projects clearer legal footing. Options include recognizing software-based organizations as a legal category and treating decentralized autonomous organizations as one type within it. Segregated cell companies feature as a second option, ring-fencing assets across internal cells that mirror on-chain modularity, though the MFSA warns that a central entity could itself read as evidence of centralization. Guardian agents and account abstraction round out the review. The regulator questions when guardian authority amounts to effective control, and argues that a provider holding signature weight or controlling validation logic in a smart contract account may be performing custody captured by MiCA.
MFSA Will Review Feedback Before Developing Detailed Proposals
The consultation closes on 10 July. The MFSA will review feedback before deciding whether to develop detailed proposals. The consultation lands amid an EU supervision dispute, after the MFSA rejected calls to hand crypto oversight to ESMA and ESMA moved to expand its mandate over crypto trading platforms.
FAQ
What did Malta's MFSA propose on 12 June 2026 regarding DeFi protocols?
Malta's Financial Services Authority opened a public consultation on 12 June 2026 asking whether decentralized finance protocols that retain centralized features—such as administrator keys, concentrated governance, and control over user interfaces—should fall under the EU's Markets in Crypto-Assets Regulation. The consultation closes on 10 July.
Why does MiCA's exemption for decentralized services create uncertainty for DeFi protocols?
MiCA's Recital 22 excludes crypto-asset services provided without any intermediary, but the regulation offers no clear test for determining when a protocol qualifies as fully decentralized. The MFSA notes that most DeFi protocols retain features such as admin keys and concentrated governance, which could pull them inside the regulatory perimeter.
What percentage of illicit virtual asset transaction volume did stablecoins account for in 2025?
Citing FATF and Chainalysis figures, the MFSA's discussion paper records that stablecoins accounted for roughly 84 percent of illicit virtual asset transaction volume in 2025.
