Brussels is reopening one of the thorniest questions left unresolved by its landmark crypto framework: what to do about DeFi lending vaults. The European Commission opened a targeted consultation on May 20, 2026, asking stakeholders how to treat decentralized finance and onchain lending — activity that fell outside the original Markets in Crypto-Assets regulation, which explicitly excluded services provided in a “fully decentralized manner.” The window for input closes September 30, 2026.
The gap matters because lending vaults now route billions of dollars into onchain credit markets while sitting in a legal no-man's-land. The problem isn't that regulators can't see the activity — it's that there is no legal category called a “vault” anywhere in EU law.
No Label, No Obvious Regulator
“EU law has no category called a 'vault,'” says Yuriy Brisov, an EU digital assets lawyer at Digital & Analogue Partners. “A lawyer therefore defines it the way a regulator would qualify it: by function, not by label.” That function-first approach runs into trouble fast once you look at how modern vaults are actually built. Morpho's Vault V2 architecture, for instance, splits responsibility across four distinct roles — an owner, a curator who sets strategy and risk parameters, an allocator who executes allocations, and a sentinel who can step in to reduce risk. With no single party holding all the strings, identifying one “regulated provider” to hold accountable becomes genuinely difficult.
The Case Against a Blunt Rulebook
Decentralization is a spectrum and a function of time: a test built on it would penalize newer, more novel protocols while entrenching mature incumbents that have had years to distribute control.
That's the warning from Jonathan Galea, a partner at Cahill Gordon & Reindel, who argues against treating every lending vault as one homogeneous category — in his view, these vaults “solve more practical problems than they create,” and a broad rule aimed at “DeFi lending” risks capturing structures that serve very different economic functions. Brisov proposes a narrower, structural test instead: regulation should hinge on whether “there is no undertaking, no appointed manager, the holder has a direct coded claim on the pool, and the user can exit before any parameter change takes effect.”
Related: Aave's TVL Hits $18.05B, But Spot Outflows Cloud the Rally
Curve Finance founder Michael Egorov, whose protocol has its own lending markets exposed to this debate, argues the EU shouldn't simply port traditional finance rules onto DeFi. “If DeFi lending is ever brought into the scope of regulation, it should be treated completely differently,” he says. “DeFi doesn't need some of the safeguards which traditional lending requires, and yet, at the same time, it may need others.” The distinction matters for protocols like Aave, whose lending TVL recently topped $18 billion even as spot outflows raised separate questions about the health of the rally — scale like that is precisely what's pulling regulatory attention toward vaults in the first place.
The Commission's own targeted consultation document leaves the outcome genuinely open: lending vaults could stay outside MiCA entirely, get folded into the existing framework through amendment, or become subject to an entirely new regime built specifically to distinguish between different forms of onchain lending. That last option is the one most of the lawyers interviewed seem to favor, given how poorly vaults map onto categories written for centralized intermediaries.
Whichever direction Brussels takes, the timing lines up with a broader wave of regulatory recalibration across jurisdictions this year — from Japan's central bank-adjacent regulator ending a four-year freeze on new crypto licenses to ongoing court fights over how existing securities law applies to onchain products. The common thread is regulators trying to write rules for financial primitives that didn't exist when most of their rulebooks were drafted.
