Europe's top securities regulator is pushing to redraw the boundary of the continent's landmark crypto law. The European Securities and Markets Authority has proposed expanding the Markets in Crypto-Assets framework — commonly known as MiCA — to capture three categories of crypto activity that currently sit in a regulatory grey zone: decentralized finance access providers, staking services, and crypto lending. If adopted, the proposal would represent the most significant extension of MiCA's reach since the regulation came into force, and would fundamentally alter how intermediaries serving European users must operate.
MiCA was designed as a comprehensive rulebook for crypto markets in the European Union, but even its architects acknowledged that certain fast-moving segments of the industry would require follow-up legislation. The gaps have become harder to ignore. Billions of euros in value flow through DeFi protocols accessible to European retail users via front-end interfaces and aggregator platforms — none of which currently carry licensing obligations. Staking providers and crypto lending desks operate in a similar limbo, subject to general consumer protection principles but not the detailed conduct and capital requirements that govern traditional financial services. ESMA's proposal is a direct response to that structural inconsistency.
A New Category: The DeFi Gateway
The most architecturally novel element of ESMA's proposal is the creation of an entirely new regulated crypto-asset service classification: firms that provide users with access to decentralized finance protocols. This is a deliberate regulatory workaround — one that avoids the philosophically thorny question of whether truly decentralized protocols themselves can be regulated, and instead focuses enforcement on the intermediary layer. Web applications, aggregators, and wallet-integrated front-ends that route users into DeFi liquidity pools or lending protocols would, under this model, become licensed entities with compliance obligations. The protocol beneath may remain permissionless; the on-ramp to it would not.
This approach mirrors a broader global trend. Regulators from Washington to Singapore have increasingly concluded that the practical entry points into DeFi — the user-facing interfaces and smart-contract wrappers — are sufficiently centralized to fall under financial services law. ESMA's framing formalizes that logic within EU law. It also creates a meaningful enforcement mechanism: regulators can pursue registered entities with addresses, directors, and capital rather than chasing anonymous code deployed on a blockchain.
Staking and Lending Enter the Perimeter
Beyond the DeFi gateway category, ESMA's proposal would bring staking and crypto lending services more explicitly within MiCA's scope. Both activities have grown substantially in scale and retail participation since MiCA's original drafting. Centralized staking providers — platforms that pool user assets to participate in proof-of-stake consensus in exchange for yield — and crypto lending desks — which borrow user assets to extend credit to institutional borrowers — would face clearer classification criteria under the new framework. The proposal establishes that clearer definitional criteria, rather than regulatory ambiguity, should determine how these services are classified and what obligations their operators must meet.
The inclusion of lending in particular carries significant market implications. Crypto lending briefly went mainstream before a series of high-profile collapses in 2022 demonstrated the sector's systemic fragility. European regulators have watched offshore lending platforms attract EU retail customers while remaining beyond their supervisory reach. Bringing such services inside MiCA's perimeter would impose capital adequacy requirements, disclosure obligations, and — crucially — a pathway for enforcement when things go wrong.
Stablecoins Tightened Further
ESMA's proposal also includes provisions to tighten the rules around non-compliant stablecoins. MiCA already established a rigorous licensing regime for asset-referenced tokens and e-money tokens, but non-compliant stablecoins — those issued outside the EU regulatory framework and continuing to circulate on European platforms — represent a persistent supervisory challenge. The proposed expansion would sharpen the criteria and consequences applying to such instruments, signaling that regulators intend to enforce the stablecoin perimeter with greater precision rather than allowing ambiguity to serve as a functional exemption.
What This Means for the Industry
ESMA's proposals are not yet law. They represent a regulatory recommendation that must navigate EU legislative process — European Commission review, co-decision between the European Parliament and Council — before taking binding effect. That journey typically takes years. But the regulatory direction is now clearly set, and compliance-conscious firms cannot afford to ignore it. Operators of DeFi front-ends serving European users, staking platforms with significant EU customer bases, and crypto lending desks currently marketing to retail investors in the bloc will need to begin mapping their structures against the proposed categories now.
The proposal also sends a signal to the global industry: MiCA was never intended to be a static document. The EU has demonstrated an institutional willingness to extend regulatory perimeter in response to market evolution, and the pace of that extension may accelerate as on-chain financial activity scales. For infrastructure providers, the message is clear — regulatory compliance is no longer a concern exclusive to exchanges and custodians. The full stack of crypto intermediation, from protocol front-ends to yield-bearing custody products, is now within the regulator's line of sight.
Written by the editorial team — independent journalism powered by Bitcoin News.