Closing the Crypto Loophole: Banking Watchdog Wants Brussels to Tame DeFi

The European Banking Authority (EBA), the EU body responsible for monitoring banking sector stability, has formally urged the European Commission to expand the bloc's digital asset framework. Specifically, the watchdog wants Brussels to bring decentralized finance (DeFi)—financial services run on automated blockchain software without traditional intermediaries like banks—and crypto lending platforms under the scope of the Markets in Crypto-Assets regulation, known across the capital as MiCA. While MiCA was celebrated as the world's first comprehensive rulebook for crypto assets when adopted, it deliberately set aside pure DeFi and lending activities to prevent negotiations from stalling. The banking regulator now argues that leaving these fast-expanding activities outside official oversight poses growing risks to financial stability and consumer protection.

For everyday investors, crypto lending and DeFi platforms currently operate in a regulatory shadow where high promises of return come with zero safety nets. If an unregulated platform founders or suffers a software exploit, consumers have no legal protections under EU law. Bringing these activities under MiCA would force platform operators to satisfy strict risk controls, maintain capital reserves, and provide clear disclosures before serving citizens across the 27 member states. For the crypto industry, it signals an end to the premise that code can exist entirely beyond the reach of European supervisors, trading higher compliance burdens for long-term legal certainty.

The recommendation highlights a familiar Brussels paradox: the rush to set global standards versus the messiness of implementation. When EU institutions adopted MiCA, officials rightly celebrated beating Washington to a unified crypto regime. However, by carving out decentralized protocols—where there is often no corporate board or Chief Executive to serve with an enforcement notice—legislators effectively postponed the hardest technical question. Commission officials now face the daunting task of designing enforcement mechanisms for financial software built explicitly to eliminate central authorities, setting up a clash between consumer protection hawks in the European Parliament and capital-conscious member states.

The decision now rests with the European Commission, which must assess the watchdog's advice as part of its scheduled evaluation of the MiCA framework. Should executive officials agree, the Commission will draft a legislative proposal to amend the rules. That draft would then face the trilogue—the standard three-way negotiation where the Commission, the European Parliament, and the Council representing national governments hammer out final text. Given the procedural steps and technical hurdles involved in defining responsibility within decentralized networks, any new rules will take considerable time to materialize.