BRUSSELS — The European Commission launched a formal consultation on May 20, 2026, inviting stakeholders to weigh in on areas excluded from the Markets in Crypto Assets regulation—chiefly DeFi protocols and crypto lending and borrowing. The consultation closes Sept. 30, and the outcome determines whether lending vaults remain outside MiCA or face a new regulatory framework.
MiCA explicitly excludes crypto asset services provided in a "fully decentralized manner," though the regulation does apply where only part of an activity runs on-chain and part does not. Lending vaults currently sit in legal gray territory, their status determined by non-binding interpretations that place them outside both MiCA and EU fund law—interpretations Brussels is now reconsidering.
The architecture of Morpho's Vault V2 illustrates why applying any existing regulatory category is difficult. The protocol divides responsibilities across four distinct roles: an owner, a curator, an allocator and a sentinel. The curator sets strategy and risk parameters; the allocator executes capital deployments; the sentinel holds powers designed to reduce risk exposure. No single participant fits the definition of a conventional lender offering a regulated service under MiCA, making it an open question who a regulator would actually supervise.
Yuriy Brisov, an EU digital assets lawyer and partner at Digital Analogue Partners, said the law governing vaults is unclear. The distributed nature of these structures—where economic functions associated with lending are spread across smart contracts and multiple participants rather than concentrated in a single entity—means the standard regulatory question of "who is the provider" has no clean answer.
Jonathan Galea, a partner at Cahill Gordon Reindel, analyzed the issue in a client update examining how vault structures sit across MiCA, stablecoin rules and European fund law. Galea argued policymakers should resist treating lending vaults as a single category. "Lending vaults solve more practical problems than they create," Galea said. He drew a line between vaults that direct fragmented liquidity into credit markets and vaults that actively buy and sell crypto assets, arguing the two perform materially different economic functions and should be regulated differently.
Morpho already channels substantial capital into on-chain credit markets. Bitwise announced plans to launch on-chain vaults through Morpho's system. If Brussels draws a broad regulatory perimeter around DeFi lending without distinguishing between vault types, protocols structured like Morpho's—where control is deliberately distributed—face the hardest compliance path, because the design itself resists mapping onto a single regulated entity.
MiCA's current carve-out for fully decentralized services creates a practical threshold problem. Most major lending protocols involve at least some centralized touchpoints—a governance multisig, a parameter-setting committee, a risk curator with admin keys—which means the "fully decentralized" exemption is harder to claim than the language suggests. Vault V2's sentinel and curator roles are precisely the kind of active human intervention that could push a structure toward the regulated side of that line.
Curve Finance founder Michael Egorov, whose protocol operates lending markets alongside its core AMM, said regulation should be approached "really carefully." A dedicated framework for DeFi lending could improve safety and open these markets to new users, but only if regulators avoid writing rules that protocols cannot comply with because of how they are built at a technical level.
Protocols built on immutable smart contracts cannot retrofit a compliance layer after deployment. A regulation requiring a licensed entity to approve each loan has no obvious implementation path on a protocol where loan origination is executed entirely by code. Brussels writing rules without accounting for that constraint produces regulations that technically apply but cannot be followed—effectively a ban on certain vault designs.
The Commission's consultation is a scoping exercise to determine which gaps in MiCA require legislative action. Responses from protocol teams, legal practitioners and institutional participants will feed into whatever legislative proposal follows. Given that the consultation closes Sept. 30, any draft framework would not realistically appear before late 2026 at the earliest, with full implementation further out.
Lending vaults aggregate capital from multiple depositors and route it across multiple borrowing pools—the same function a bank performs, but without a balance sheet, a charter or a single point of accountability. Whether Brussels decides that resemblance is close enough to require equivalent oversight is the question the consultation is designed to answer.
