The Markets in Crypto Assets (MiCA) regime originally left crypto lending and many DeFi activities outside its scope — but the European Commission is now asking whether that should change. On May 20, 2026 the Commission launched a targeted consultation inviting stakeholders to comment on areas not fully covered by the first MiCA rulebook, explicitly naming decentralized finance and crypto lending and borrowing as topics for review.
A central problem is lending vaults: onchain structures that can channel large sums into credit markets while avoiding the outward appearance of a conventional lender. Their legal status today rests largely on non‑binding interpretations that place them beyond MiCA and some EU fund rules, but those interpretations are not settled law and regulators are reconsidering whether a different approach is needed.
Practitioners say the ambiguity is structural. As one EU digital assets lawyer put it, there is no statutory category called a “vault,” so legal characterisation follows the function and the degree of control rather than the label. Vault architectures often split roles across multiple actors and smart contracts, so the economic activity of lending can be present without a single company operating as an obvious regulated counterparty.
Morpho’s Vault V2 illustrates why drawing bright lines is hard. Its design separates responsibilities among an owner, a curator who sets strategy and risk parameters, an allocator who executes allocations, and a sentinel with emergency powers. That division of duties means it is far from obvious which participant, if any, should be treated as a regulated service provider under existing frameworks — or whether the protocol itself could be regulated in conventional terms.
Legal advisers warn against treating all “DeFi lending” as one homogeneous category. Some vaults primarily aggregate fragmented liquidity into lending markets, while others perform trading or asset management functions; a single regulatory label risks sweeping together structures with very different economics and governance. Policymakers that simply expand the definition of crypto‑asset service providers could end up capturing systems that deserve distinct answers.
One possible regulatory dividing line is the degree of decentralization: MiCA currently excludes services provided in a “fully decentralized manner,” though that exclusion can be pierced when only part of an activity is decentralized. Critics say using decentralization as a bright‑line test is problematic because decentralization is a spectrum that evolves over time — it could disadvantage newer protocols that have not yet distributed control widely and entrench mature incumbents.
Several lawyers and protocol founders argue a safer approach is structural: focus on how a vault is organized, whether there is an identifiable undertaking or appointed manager, whether token holders have direct coded claims on a pool, and whether users can exit before governance or parameter changes take effect. If regulators decide lending and borrowing should be regulated, some experts suggest adding those activities explicitly to the list of regulated crypto services rather than broadly redefining provider status.
Founders in the space also urge care. They say DeFi lending may not need the same safeguards as traditional finance in every respect, but it may need other protections tailored to onchain mechanics. A bespoke framework could improve safety and access without imposing rules that some protocols cannot implement because of their architecture.
The Commission’s consultation closes on Sept. 30, 2026. What follows — whether a targeted amendment, new definitions, or a bespoke regime — will determine whether lending vaults remain largely outside MiCA or are brought inside a revised regulatory perimeter. The core challenge for Brussels is not simply whether to regulate DeFi lending, but how to draft rules that distinguish between very different onchain lending models and the people or code that actually exercise control.
This article is for informational purposes and does not constitute legal, financial, or investment advice. Readers should carry out their own research and consult qualified professionals. Editorial perspectives are independent of any commercial relationships.