MiCA eyes DeFi vaults, hits a wall
Brussels is weighing whether to regulate crypto lending vaults, but its own architecture splits control across four roles, not one.
Brussels wants to know if crypto lending belongs inside MiCA. On May 20, 2026, the European Commission opened a consultation on the gaps left by the original rulebook, and DeFi lending vaults sit near the top of the list.
The vault problem
Lending vaults can move billions into onchain credit markets without resembling a bank or broker in any legal sense. EU law has no defined category for them. A lawyer has to guess how a regulator would classify the function, because the label doesn't exist yet.
Morpho's Vault V2 shows why that guess is hard. The structure splits control across four roles: an owner, a curator who sets strategy, an allocator who executes it, and a sentinel who can intervene on risk.
None of those roles maps to "lender" under MiCA. That's the point.
The numbers regulators are working with
- The Commission's targeted consultation opened May 20, 2026, covering DeFi and crypto lending gaps in MiCA.
- Morpho's Vault V2 architecture assigns four distinct functions to four distinct parties, per protocol documentation cited by Cointelegraph.
- The consultation window closes Sept. 30, 2026, the date that determines what follows.
- MiCA currently exempts services provided in a "fully decentralized manner," a carve-out with no numeric or structural test attached.
What the split-role design actually does
The obvious take says Brussels just needs to close a loophole and bring lending inside the perimeter. The vault architecture argues otherwise.
When four separate parties each hold a partial function, none of them individually performs the "lending service" MiCA was built to catch. Yuriy Brisov, an EU digital assets lawyer, puts it plainly: there's no undertaking, no appointed manager, just a coded claim the holder can exit before any parameter change lands.
That's not evasion by design. It's a structure where liability doesn't concentrate anywhere, because no single actor holds custody or control the way a bank does.
Jonathan Galea's warning matters here. Treat "DeFi lending" as one label, and vaults that buy and sell assets end up regulated the same way as vaults that just route liquidity to borrowers.
Those are different economic functions wearing the same word. A rule built for one will misfire on the other.
Michael Egorov's read pushes further: DeFi lending doesn't need every safeguard traditional lending requires, but it likely needs some traditional finance doesn't have. A framework copied from bank rules will either miss the actual risk or block protocols that can't restructure to comply.
The structural test Brisov proposes, exit rights and no appointed manager, would catch genuinely permissionless vaults while still reaching structures with a real operator behind the curtain. A decentralization-spectrum test, by contrast, would reward older protocols simply for having had more time to disperse control.
What to watch
- Whether the Commission's post-Sept. 30 proposal adds lending explicitly to MiCA's regulated services list, versus broadening the definition of a crypto asset service provider.
- Whether any draft adopts a structural test (no manager, coded exit rights) versus a decentralization-spectrum test that would favor incumbent protocols.
- Whether vaults performing different economic functions, credit routing versus asset trading, get split into separate categories or lumped under one "DeFi lending" label.