The European Union's crypto regulatory apparatus is entering its second phase. On June 27, the European Parliament's Committee on Economic and Monetary Affairs (ECON) formally recommended that the European Commission assess whether decentralized finance (DeFi), staking, crypto lending, and non-fu...
"No license, no access to the EU single market." — European Securities and Markets Authority (ESMA), Public Statement on MiCA Transitional Period, April 2026
The European Union's crypto regulatory apparatus is entering its second phase. On June 27, the European Parliament's Committee on Economic and Monetary Affairs (ECON) formally recommended that the European Commission assess whether decentralized finance (DeFi), staking, crypto lending, and non-fungible tokens (NFTs) should be brought under the Markets in Crypto-Assets Regulation (MiCA). The nonbinding report, drafted by Belgian MEP Johan Van Overtveldt, heads to a plenary vote on July 7.
This comes five weeks after the Commission launched its own targeted consultation on May 20 — colloquially dubbed "MiCA 2.0" — soliciting feedback on whether the framework remains fit for purpose. The consultation window closes August 31, 2026. A mandatory report to Parliament and Council is due by June 30, 2027. Legislative changes, if proposed, are unlikely before 2028.
The timing is deliberate. MiCA's final transitional period expires on July 1, 2026, after which any entity providing crypto-asset services to EU clients without authorization is in breach of EU law. As of June 18, only 183 firms held full MiCA authorization across the Union, and just 14 were cleared to operate trading platforms. Ten member states — including Italy, Poland, and Romania — had not issued a single MiCA authorization. The EU is enforcing the rules it has while already planning the next set.
MiCA entered into force in 2023 with a phased rollout. Asset-referenced token (ART) and e-money token (EMT) rules became applicable on June 30, 2024. Full CASP requirements took effect December 30, 2024. Member states could grant transitional periods until July 1, 2026 — a date now two days away.
The numbers tell the story of an industry still scrambling. According to ESMA's interim register, 183 firms hold full CASP authorization as of June 18, 2026. Only 14 of those are licensed trading platforms. More than 80% of EU virtual asset service providers remain unlicensed, according to sector data compiled by CoinLaw. A survey cited by CoinLaw found that 73% of European crypto businesses identify compliance costs and bureaucratic hurdles as their primary challenge.
The financial burden is substantial. Annual compliance costs for large exchanges exceed €500,000, encompassing licensing, reporting, and monitoring. For startups, licensing alone runs €50,000 to €100,000. Regulatory fines for non-compliance were projected to surpass €1.2 billion in 2025, with per-violation penalties ranging from €50,000 to €5 million.
Tether's USDT faces effective exclusion from regulated EU platforms due to non-compliance with MiCA's EMT requirements. Circle's USDC remains compliant.
Van Overtveldt's report, first drafted in February 2026 and refined through months of committee negotiations, started as a narrow review of stablecoin classifications. The committee-approved version expanded significantly.
The ECON report makes five principal recommendations:
The report also urged consistent application of MiCA across member states and warned against national gold-plating — the practice of individual countries adding requirements beyond MiCA's harmonized framework.
If adopted in the July 7 plenary vote, the resolution becomes Parliament's official position on digital assets policy. It carries political weight but does not directly amend MiCA or create legal obligations.
The Commission's May 20 consultation is more granular than the ECON report and carries direct regulatory significance. It feeds into mandatory reviews under MiCA Articles 140 and 142, which require the Commission to report to Parliament and Council by June 30, 2027, after consulting EBA and ESMA.
The consultation covers six core areas:
Scope and definitions. Whether the increasingly blurred boundary between crypto-assets and traditional financial instruments requires redrawing. Tokenized securities on DLT may fall under MiCA or the existing securities framework — the consultation asks where the line should be.
Stablecoins. Whether the restrictive treatment of non-EU stablecoins is proportionate. Whether the absence of a third-country equivalence framework limits EU access to global liquidity. For the first time, the Commission acknowledged that multi-issuance stablecoin structures are permitted under MiCA.
DeFi. Whether CASPs providing client access to DeFi platforms should face enhanced obligations — including due diligence over connected protocols, liability for DeFi-related incidents, and a requirement to connect clients only with "certified" DeFi platforms. The consultation also asks whether smart contract certification schemes are warranted.
Staking, lending, and borrowing. Whether the current ancillary treatment of staking under custody provisions is sufficient, or whether staking services need standalone requirements tailored to their risk profile.
Prediction markets. Whether MiCA's framework applies to prediction market platforms and what regulatory treatment is appropriate.
Non-EU providers. Whether third-country firms need a structured access regime rather than the current ad hoc approach.
MiCA's current text excludes crypto-asset services provided "in a fully decentralised manner" from its scope. The operative question — what constitutes "fully decentralised" — has no settled answer.
The Commission's consultation approaches this through the lens of admin keys. The question is not whether a protocol uses any administrative keys, but whether an identifiable party can use those keys to materially alter risk for users. This includes upgrading contract logic, moving reserves, adjusting liquidation thresholds, or activating pause functions.
According to analysis by CryptoDaily, the consultation effectively creates a spectrum. At one end: immutable contracts with no upgrade capability, which would likely qualify for exemption. At the other: protocols where a core team controls upgrade keys and can unilaterally alter contract behavior, which would likely be classified as providing a crypto-asset service.
The middle ground — timelocked upgrades, multisig governance, DAO-controlled parameters — is where the regulatory battle will be fought. The consultation asks whether CASPs that route clients to DeFi protocols should bear liability for protocol failures, creating a potential intermediary layer between users and nominally decentralized systems.
This has direct implications for the $71.77 billion in global DeFi TVL as of June 2026, down 37.3% year-to-date from $114.49 billion at the start of the year. Europe accounts for an estimated 25-30% of global DeFi activity, putting approximately $18-22 billion in TVL within potential regulatory reach.
Under MiCA 1.0, staking falls under the generic CASP custody and administration provisions. The Commission is now asking whether this treatment is adequate.
The concern is that staking involves distinct risks — validator slashing, lock-up periods, variable yield, and operational failures — that custody rules were not designed to address. Users may not understand the operational risks behind advertised returns.
The ECON report and the Commission consultation both flag the same gap: staking services where users lock tokens to support blockchain networks in exchange for rewards sit in a regulatory gray zone between custody, investment services, and deposit-taking. The US, EU, and UK have taken diverging approaches to this classification, with no jurisdiction settling on a definitive framework.
If standalone staking requirements emerge from the MiCA 2.0 process, they would likely include mandatory risk disclosures, capital buffers, and segregation requirements — adding compliance costs that could reshape the competitive landscape for staking-as-a-service providers operating in the EU.
MiCA exempts NFTs representing unique digital art or collectibles from its scope. According to CoinLaw data, approximately 85% of pure art NFTs currently avoid MiCA registration under this exemption.
The exemption is narrower than it appears. Fractionalized NFTs or those issued in large series may be treated as fungible tokens and fall under full MiCA requirements. The ECON report asks the Commission to review whether the current exemption remains appropriate as NFT use cases expand beyond art into gaming, identity, and financial instruments.
EU NFT marketplaces have already reduced anonymous transactions by approximately 20% following MiCA's KYC requirements, according to sector data. The question now is whether the exemption boundary shifts further, pulling more NFT categories into the regulated perimeter.
The regulatory expansion under discussion would affect an industry already absorbing significant compliance costs from MiCA 1.0. The numbers to date:
Extending MiCA-style requirements to DeFi, staking, and NFTs would multiply the compliance surface area. The Commission's own timeline — consultation through August 2026, report by June 2027, legislative proposals no earlier than 2028, implementation potentially 2029-2030 — suggests the industry has a multi-year runway to prepare. But the direction of travel is clear.
The economic calculus is straightforward: operators serving EU clients must either absorb rising compliance costs or exit the market. The 80% unlicensed rate under MiCA 1.0 suggests many will choose the latter.
The EU is treating MiCA 1.0 as a foundation, not a finished product. Before the first framework has even passed its final enforcement deadline, the institutions are already scoping the next layer of regulation. The ECON report and Commission consultation are running on parallel tracks — Parliament signaling political direction, the Commission gathering technical evidence — with convergence expected in the June 2027 report.
The practical question for DeFi protocols, staking providers, and NFT platforms is not whether EU regulation is coming, but how the decentralization test will be drawn. Admin key control, governance structures, and the degree of user-facing intermediation will likely determine which protocols fall inside or outside the regulatory perimeter.
For now, 2026 is an evidence-gathering year. The consultation window closes August 31. The Commission's report is due June 30, 2027. Any legislative proposal would then face the standard EU co-legislative process. Operators have time — but the regulatory architecture is already being designed.