MiCA DeFi lending vaults are at the centre of a Brussels review that opened on 20 May 2026, when the European Commission asked specialised stakeholders to weigh in on crypto activities left outside the original Markets in Crypto-Assets (MiCA) framework. The resulting report may, under Articles 140 and 142 of MiCA, be accompanied by a new legislative proposal to amend the regulation.
The targeted consultation document explicitly groups staking alongside lending and borrowing as activities ‘currently not addressed in MiCA regulation.’ The Commission ran two parallel tracks: a public consultation open to individuals and a targeted consultation for technical and legal specialists. The targeted track’s original deadline of 31 August 2026 was later extended to 30 September 2026.
The review did not emerge in isolation. The European Banking Authority (EBA), jointly with the European Securities and Markets Authority (ESMA), published a report in January 2026 analysing DeFi, crypto lending, borrowing, and staking as a formal contribution to the Commission’s Article 142 obligations. That groundwork makes the current consultation less exploratory and more a precursor to drafting.
Why MiCA DeFi Lending Vaults Resist Easy Classification
Lending vaults can channel large volumes into onchain credit markets without resembling conventional lending at the entity level. Their legal status currently rests on non-binding interpretations that they fall outside MiCA and EU fund rules.
Yuriy Brisov, an EU digital assets lawyer and partner at Digital & Analogue Partners, puts the problem plainly: ‘EU law has no category called a “vault.” A lawyer therefore defines it the way a regulator would qualify it: by function, not by label.’
Morpho’s infrastructure illustrates the classification difficulty. Vault V2 is described in Morpho’s official documentation as a ‘permissionless vault framework for curated lending strategies’ built around an Adapters system, a granular Cap System, and automatic interest accrual through real-time asset reporting. Anyone can create noncustodial vaults that allocate deposited assets to any current or future Morpho protocol.
The role architecture divides responsibilities between an Owner, Curator, Allocator, and Sentinel. The Owner holds top-level permissions but has no direct control over assets or risk parameters. A compromised Sentinel can only take actions that reduce risk, such as deallocating assets, and cannot introduce new exposure.
Morpho’s official blog describes the system as ‘a fully onchain, noncustodial solution’ in which timelocks apply to most Curator actions, including fee and cap changes. Cap increases are timelocked for between 24 hours and two weeks; cap decreases are instant. That structure deliberately distributes control, which is precisely what makes pinpointing a regulated ‘provider’ under MiCA so difficult.
Who Carries the Regulatory Exposure?
MiCA currently excludes crypto-asset services provided in a ‘fully decentralised manner,’ while remaining applicable where only part of an activity is decentralised. Jonathan Galea, a partner at Cahill Gordon & Reindel, warns against treating lending vaults as a single regulatory category: ‘Lending vaults solve more practical problems than they create.’ He argues that vaults directing fragmented liquidity into lending markets are functionally different from vaults that buy and sell crypto assets and should not be captured under one label.
Galea also cautions against using decentralisation as the regulatory dividing line: ‘Decentralisation is a spectrum and a function of time: a test built on it would penalize newer, more novel protocols while entrenching mature incumbents that have had years to distribute control.’
Brisov’s preferred test is structural rather than definitional. He argues that if a vault has no undertaking, no appointed manager, grants holders a direct coded claim on the pool, and allows users to exit before any parameter change takes effect, it should sit outside the regulatory perimeter. On legislative mechanics, he says that if lending and borrowing are to be regulated, they should be ‘explicitly added to the list of regulated crypto asset services rather than broadening the definition of a crypto asset service provider itself.’
Curve Finance founder Michael Egorov adds a technical dimension: ‘If DeFi lending is ever brought into the scope of regulation, it should be treated completely differently. DeFi doesn’t need some of the safeguards which traditional lending requires, and yet, at the same time, it may need others.’ A dedicated framework, he argues, could improve safety and open DeFi lending to new users without imposing rules that protocol architecture cannot accommodate.
One complication running parallel to the policy debate is the MiCA transitional provision: service providers that were operating lawfully before 30 December 2024 could continue until 1 July 2026 or until authorisation was granted or refused under Article 63. That window has now closed, sharpening the urgency of the review for any operators still in grey-area territory.
The targeted consultation closes 30 September. If the Commission follows with a legislative proposal, the design of any ‘regulated lending’ definition will determine whether vault infrastructure ends up inside the perimeter or is left to self-govern under the same non-binding interpretations it relies on today.
