#
MiCA does not create a bespoke authorisation or licensing regime for underlying on-chain activities such as DeFi protocols, staking, mining or node/validator operation as such; it regulates issuers and intermediaries (CASPs) rather than protocols. EBA and ESMA's joint Article 142 MiCAR report (2025) found DeFi to remain a niche phenomenon in the EU/EEA and identified risks (ML/TF exposure, information asymmetries, procyclicality) without recommending new legislation. Where a regulated entity (e.g. a CASP or credit institution) engages with DeFi, existing frameworks such as DORA apply to that regulated entity's own ICT risk management, not to the DeFi protocol itself.
Mining, node operation and validator activities are not subject to any bespoke EEA-wide licensing or authorisation regime as standalone activities under MiCA; MiCA regulates issuers and CASP intermediaries, not protocol-level infrastructure participants as such. This is a structural gap rather than an oversight: MiCA was drafted to capture issuance and intermediation, and standalone protocol-level activity sits outside that design. Where regulated entities -- credit institutions, CASPs, and ART issuers -- do engage in DeFi-related activity themselves, they must separately comply with operational resilience and ICT risk-management requirements under the Digital Operational Resilience Act (DORA) for their own activities, even though DORA does not reach into DeFi protocols directly. This creates a two-tier picture: regulated entities touching DeFi carry obligations at the entity level, while the underlying protocols themselves remain outside any EEA-wide licensing perimeter.
Outlook
This module is likely to remain in a watch-and-monitor posture rather than move toward binding licensing in the near term, given the EBA/ESMA joint report's explicit conclusion that no new legislation is currently recommended and DeFi's continued niche scale relative to the broader crypto-asset market. The amber traffic-light status reflects the coexistence of a genuine regulatory gap for protocol-level activity with an active, if analytical, supervisory monitoring mandate. Future cycles should watch for any shift in EBA/ESMA's Article 142 reporting cadence toward a recommendation for bespoke DeFi or staking rules, particularly if EEA DeFi's share of global activity grows materially from its current niche baseline.
No new data since the standing brief. 1 periodic run re-emitted it unchanged.
Sources and findings (4)
- T1 · European Securities and Markets AuthorityEuropean Securities and Markets Authority — EBA and ESMA's 2025 joint report found that DeFi remains a niche phenomenon, with value locked in DeFi protocols representing only 4% of all crypto-asset market value globally, and that EU adoption, while above the global average, is lower than in other developed economies.retrieved M3non-binding
- T1 · European Banking Authority / European Securities and Markets AuthorityEuropean Banking Authority / European Securities and Markets Authority — EBA/ESMA define staking as the process of immobilising crypto-assets to support Proof-of-Stake (PoS) or PoS-like consensus mechanisms in exchange for the granting of validator privileges that can generate block rewards.retrieved M2non-binding
- T1 · European Securities and Markets AuthorityEuropean Securities and Markets Authority — Where regulated financial entities (credit institutions, CASPs, ART issuers) adopt or integrate DeFi activities, they may need to ensure compliance with operational resilience and ICT risk management requirements under DORA, even though DORA does not itself regulate the DeFi protocols.retrieved M3bindingin force
- T1 · Publications Office of the European Union / EUR-LexPublications Office of the European Union / EUR-Lex — No bespoke EEA-wide licensing or authorisation regime exists for crypto-asset mining, node operation, or validator activities as standalone activities under MiCA.retrieved M2non-bindinga fact about the regime