EU Regulators Weigh Bringing DeFi Vaults and Lending Under MiCA Oversight

The European Commission has opened a public consultation on whether DeFi vaults and crypto lending should be folded into MiCA, and the timing matters if you're deploying capital into yield strategies on this side of the Atlantic. As reported by The Paypers, the targeted consultation launched on 20 May 2026, with stakeholder responses due by 30 September 2026. That window is short enough that anything you or your governance delegates want to say is best said now, not after the rules land.

The gap Brussels is trying to close

When MiCA was first drafted, crypto lending and fully decentralised activities were deliberately left out of scope. That made sense when most on-chain lending sat behind identifiable interfaces and vault-like products were still a curiosity. As the crypto lending and liquidity landscape has since expanded, automated vaults that route deposits across lending markets, curate strategies, and distribute roles across multiple participants now sit at the centre of how a lot of yield is generated. Brussels is essentially asking whether the original exclusions have created an oversight hole.

The stakes here are not abstract. If vaults end up inside MiCA, the protocols you currently use — Morpho-style markets, Curve-based lending flows, anything that aggregates strategies under a shared curator — could face categorisation rules that were never written with them in mind. If they stay outside, the legal uncertainty you've been quietly absorbing as "regulatory risk" simply stays in place.

Why "vault" is a hard word to define

The consultation highlights a problem practitioners have already run into: EU law does not currently contain a category called "vault." Yuriy Brisov, a digital assets lawyer, has noted that this means lawyers have to assess vaults by the functions they perform rather than by any existing label. The Paypers points to Morpho Vault V2 as a working example. A single vault there can involve owners, curators, allocators, and sentinels, each with a different slice of operational responsibility. That distribution is precisely what makes these products useful for capital efficiency, and precisely what makes them hard to map onto a framework built around identifiable service providers.

Two voices in the conversation are worth tracking. Jonathan Galea, a partner at Cahill, has warned against treating "DeFi lending" as a single, uniform category, because doing so risks a one-size-fits-all approach to products that differ structurally. Michael Egorov, founder of Curve, has argued that if DeFi lending is brought under regulation, it should be treated differently from traditional lending, since it does not require the same set of safeguards.

What to weigh before 30 September

For now, nothing changes operationally. Vaults and lending protocols continue to function under the existing regulatory gap, and any concrete proposals are likely to take shape only after the consultation closes at the end of September. That gives you a narrow window to think through a few trade-offs.

First, jurisdictional exposure: if you route meaningful capital through EU-resident front-ends or governance participants, your risk surface shifts depending on how vaults get classified. Second, product structure: protocols with concentrated curators or single points of control look very different from fully distributed ones, and any future rule will almost certainly treat them differently. Third, the sustainable baseline question — whether yields that depend on leverage loops or unbacked lending strategies survive once those loops have to comply with capital and disclosure rules.

I'd keep one eye on consultation responses as they filter through industry channels, and another on your own position-sizing. The goal here is not to predict the outcome, but to make sure your capital efficiency doesn't quietly turn into capital fragility if Brussels decides vaults need a label after all.