The European Securities and Markets Authority proposed creating a new regulated crypto-asset service category for firms that route customers into decentralized finance protocols, according to the agency's formal response to the European Commission's MiCA review.

The framework would cover exchanges, wallet applications and other intermediaries that provide user interfaces or transaction routing into DeFi, rather than the underlying permissionless code. ESMA framed the move as a guard against regulatory arbitrage through MiCA's existing DeFi exemption, which currently carves out genuinely decentralized activity from the regime.

"The 'DeFi' exemption should be as narrow as possible to avoid being used as a way of circumventing the application of the MiCA regime," the review response states.

Why target access points rather than protocols?

ESMA is going after the on-ramps, not the smart contracts, because decentralized protocols are difficult to police and frequently appear autonomous while still depending on a small group of operators for upgrades, oracle management and treasury decisions.

The agency is also asking for a clearer test to distinguish genuinely decentralized systems from those that rely on human coordination to keep running. An earlier ECB report has documented that gap across several major DeFi projects, where governance remains concentrated despite the absence of a legal operator.

A 2025 joint report by ESMA and the European Banking Authority quantified the stakes. DeFi accounted for roughly 4% of the global crypto-asset market by value, while decentralized exchanges processed about 10% of global crypto trading volume. The report identified three primary gateways:

• Application interfaces
• Self-custody wallets
• Centralized exchanges routing customer orders

What else sits inside the package?

Beyond the new service category, ESMA proposed tighter rules for marketing by influencers and third parties, better cost disclosure, and proportionate requirements for staking, borrowing and lending activity.

The EBA pushed separately for direct oversight of crypto lending, especially DeFi-related activity, and for more consistent token classification across member states to prevent products from being routed through the lightest-touch jurisdiction.

ESMA also wants expanded supervisory powers. The agency's wish list includes the ability to take down fraudulent websites, seize cryptoassets tied to suspected market manipulation or terrorist financing, pursue unauthorized third-country entities, and restrict exchanges of stablecoins issued by non-compliant providers. The stablecoin measure would allow national authorities to choke off liquidity for issuers that fail to meet MiCA's reserve and authorization rules.

How exposed is Europe's compliance pipeline?

The proposal lands against a fragmented MiCA rollout. Data from TRM Labs shows that only 281 of 1,343 monitored crypto service providers in the European Economic Area had secured MiCA authorization before the transition period ended on July 1.

That gap leaves a meaningful share of EEA-based intermediaries exposed to fresh obligations if ESMA's recommendations are adopted, particularly those operating across multiple jurisdictions. A new DeFi-gateway license category would expand the compliance load on cross-border providers and could accelerate consolidation among firms with the resources to meet the requirements.

The Financial Stability Board has warned that divergent national rules can push firms toward lighter jurisdictions, complicating cross-border supervision. The Bank for International Settlements has separately noted that DeFi performs functions characteristic of conventional finance while carrying heightened transparency, information-gap and financial-stability risks.

What moves in the market?

Crypto markets have historically digested regulatory news unevenly. A January 2026 study found that regulatory announcements move specific tokens more than the aggregate market, with governance tokens and DEX tokens among the most reactive categories.

When does this take effect?

For European DeFi gateways, the operational question is timing. ESMA's submission feeds into the Commission's MiCA review. Whether Brussels translates the agency's recommendations into binding technical standards before or after the 2026 legislative cycle will determine whether intermediaries face a hard licensing cliff or a phased compliance window.