MiCAR and DeFi. The Perimeter.

2026-05-23 — Studio LX20 Law Firm

MiCAR has entered its applicative phase. Edge-cases remain open: DeFi, staking, lending, borrowing, non-custodial wallets and access interfaces to decentralised protocols. The question is not whether a smart contract underlies the activity, but whether — in substance — a subject provides, organises or controls a crypto service to European users.

Key takeaways

• MiCAR Recital 22 does not establish a general safe harbour for DeFi: it is a boundary to be verified case by case
• On-chain execution is not enough. Full decentralisation requires the absence of any identifiable subject controlling, organising or extracting value
• Joint EBA/ESMA Report 16 January 2025: full decentralisation is empirically rare — most protocols show identifiable entities
• Qualification follows actual function, not commercial naming. Front-ends, wallets and aggregators fall within MiCAR as CASPs
• Operational test: who controls the interface, the protocols, the fees, the relationship with the user — four questions before launch