BRUSSELS — The European Commission is consulting on whether crypto lending and decentralized finance protocols should fall under the Markets in Crypto Assets (MiCA) framework, specifically targeting on-chain credit markets left outside the regulation's original scope.
The review, initiated May 20, 2026, solicits stakeholder input on lending and borrowing protocols that currently operate in regulatory gray space. The expansion would reshape how decentralized vault architectures are classified and potentially supervised across the EU.
DeFi lending vaults channel billions into on-chain credit markets but distribute operational responsibility across smart contracts and multiple participants rather than concentrating it in a single entity. Current legal interpretations generally place them outside both MiCA and existing EU fund regulations, creating ambiguity over who—if anyone—should be regulated as a service provider.
"The law pertaining to vaults at present is unclear," said Yuriy Brisov, EU digital assets lawyer and partner at Digital Analogue Partners.
Morpho's Vault V2 architecture exemplifies the structural challenge. The system segments responsibilities among owner, curator, allocator and sentinel roles. The curator configures strategy and risk parameters; the allocator executes capital deployment; the sentinel manages risk mitigation. No single participant clearly qualifies as a regulated lending service provider under MiCA's current definitions, yet the combined structure performs credit intermediation.
Jonathan Galea, partner at Cahill Gordon Reindel, advised against treating all lending vaults as a single regulatory category. "Lending vaults solve more practical problems than they create," Galea said, noting that some consolidate liquidity for lending while others engage in asset trading, requiring distinct regulatory frameworks.
A broad "DeFi lending" definition risks capturing structures with different economic functions and participant incentives. The Commission's challenge lies in identifying which participants should trigger regulatory obligations and at what point in the vault's architecture—a task complicated by the decentralized and multi-jurisdictional nature of on-chain protocols.
