Malta's financial regulator is proposing a nuanced approach to classifying decentralized finance (DeFi) protocols under the European Union's Markets in Crypto-Assets (MiCA) framework, potentially bringing projects with centralized features under regulatory oversight.

Market Context

The MFSA discussion paper arrives as EU member states continue implementing MiCA, which officially excluded services provided in a "fully decentralised manner without any intermediary" from its scope. However, the regulation lacks clarity on where that threshold lies, creating uncertainty for DeFi developers and traditional financial institutions seeking to integrate blockchain protocols.

Analysis

The Malta Financial Services Authority argues that many DeFi projects retain significant centralized characteristics despite their decentralized branding. These include administrator keys held by small teams, governance concentration among token holders, protocol upgrade rights controlled by core developers, and oversight of user-facing interfaces. The MFSA suggests decentralization may be better assessed as a spectrum rather than a binary determination.

The paper also examines potential legal structures for DeFi operations, including decentralized autonomous organizations (DAOs) and segregated cell companies. Additionally, the regulator explores the concept of "guardian agents"—automated mechanisms designed to monitor, evaluate, and constrain the behavior of other autonomous systems to ensure compliance with predefined objectives.

Among the questions posed: whether regulated crypto firms should be required to conduct smart-contract audits, governance reviews, and risk assessments before integrating DeFi protocols into their services. The MFSA is also asking whether a standardized framework should be developed to determine when protocols fall outside MiCA's scope entirely.

Key Numbers

- July 10: Deadline for public responses to the MFSA discussion paper

- MiCA excludes "fully decentralised" services but provides no clear threshold definition

- Multiple centralized features identified in ostensibly decentralized protocols: administrator keys, governance concentration, upgrade rights, interface control

What to Watch

Industry feedback during the July 10 comment period could shape how EU regulators ultimately define decentralization boundaries. The MFSA's spectrum approach may influence other member states grappling with similar classification questions. If adopted, such a framework could bring many DeFi protocols currently operating in regulatory grey areas under MiCA compliance requirements, affecting everything from token listings to liquidity provision arrangements.