The European Securities and Markets Authority has proposed a new regulated category for crypto firms that connect clients to decentralized finance. The plan also sets out targeted requirements for staking and lending, all under the EU's Markets in Crypto-Assets regulation. ESMA submitted the proposal as part of its response to the European Commission's MiCA consultation.
That's a big deal for any EU crypto business that isn't a plain-vanilla exchange. MiCA already covers issuers and service providers, but DeFi access points — the wallets, front-ends and aggregators that route users into on-chain protocols — have been sitting in a gray zone. ESMA wants to color that zone in.
The gap ESMA is trying to close
MiCA's rulebook was written for centralized intermediaries. A firm that holds client keys or operates an order book knows what it's dealing with. A firm that just pipes a user's wallet into a lending pool or a staking contract doesn't fit as neatly. ESMA's answer is a new category: crypto firms that connect clients to DeFi. It's not the full protocol itself — it's the on-ramp. That matters because most retail users never touch a smart contract directly. They tap an app.
Staking and lending get their own checklist
The proposal doesn't try to rewrite MiCA wholesale. Instead it puts targeted requirements on staking and lending. Those are two of the most common DeFi activities, and they're also the ones regulators worry about most — staking looks like a yield product, lending looks like a credit product, and neither maps cleanly onto existing EU financial rules. ESMA's move is an attempt to say: if you're offering these to EU clients, here's what you have to do, even if the execution happens on-chain.
Consultation is still open
This is a proposal inside a consultation, not final law. The European Commission asked for input on MiCA, and ESMA's response is one piece of that process. Nothing is binding yet. Firms won't wake up tomorrow to a new license requirement. But the direction is clear: the EU wants DeFi access points inside the tent rather than outside it.
What the industry is watching
Two things. First, how broadly ESMA defines "connecting clients to DeFi." A narrow reading catches custodial front-ends. A broad one could sweep in non-custodial wallets and interfaces that don't hold a cent. Second, whether the staking and lending rules land as licensing conditions or as disclosure obligations. The former is expensive. The latter is annoying but survivable. Either way, the Commission will have to digest ESMA's response before it moves. For now, the clock is on Brussels.
