Crypto Regulation: From Mt. Gox to MiCA — A Decade of Regulatory Evolution

The Markets in Crypto-Assets Regulation (MiCA), which entered full application in the EU in December 2024, is the first comprehensive crypto regulatory framework anywhere in the world. It's worth examining what it actually requires, where it falls short, and what it signals about the trajectory of global crypto regulation.

MiCA's scope: it covers crypto-asset issuers, crypto-asset service providers (CASPs — the EU equivalent of VASPs), and specifically addresses stablecoins under two categories (e-money tokens backed by a single currency, and asset-referenced tokens backed by a basket). It does not cover DeFi protocols (at least in this version), non-fungible tokens (with some exceptions for fungible NFTs), and security tokens (which fall under existing securities regulation).

For issuers of crypto assets that aren't stablecoins, MiCA requires a white paper with specific mandatory disclosures, registration with relevant national competent authority for assets above certain sizes, and liability for misleading white papers. This is lighter-touch than securities regulation — no requirement for full prospectus registration — but provides a clear framework where none existed.

For CASPs, MiCA requires authorization (similar to a financial institution license), with requirements for capital, cybersecurity, governance, and complaint handling. CASPs authorized in one EU member state can passport their services across the entire EU — a significant administrative advantage compared to country-by-country licensing.

Stablecoins get the strictest treatment. E-money tokens (single-currency stablecoins like a EUR stablecoin) must be issued by authorized e-money institutions or credit institutions. Asset-referenced tokens face additional requirements including reserve requirements, redemption rights, and limits on usage as a payment instrument if they get too large (to protect monetary policy).

Where MiCA has limitations: the DeFi exclusion is significant. The largest pools of crypto activity by volume run through decentralized protocols, and MiCA doesn't regulate these. There's a review clause that requires the Commission to assess whether a DeFi regulation is needed, but that assessment is years away from producing binding rules.

The NFT question is also partially unresolved. The guidance that "large series" or "collections" of NFTs may be subject to MiCA is vague enough to create uncertainty for projects that are clearly not trying to issue securities but might be caught by an expansive interpretation.

For US-based crypto businesses, MiCA matters even if they don't operate in the EU because it represents a comprehensive, implementable regulatory model that US regulators and legislators can reference. The argument that "comprehensive regulation is impossible" is harder to make after MiCA. Whether US regulatory direction converges toward a MiCA-like framework or goes a different direction will be one of the defining questions for crypto's global regulatory environment in the next five years.

MiCA and What Comprehensive Regulation Actually Looks Like

// COMMENTS

ON THIS PAGE