Malta regulator opens DeFi and DAO consultation

TLDR

Malta's financial regulator has opened a public consultation on how to regulate DeFi and DAOs under the EU MiCA regime, including a new "software-based organization" category.

1. Maltas MFSA published a DeFi discussion paper that introduces software-based organizations to capture DAOs and similar software-governed entities.
2. The move targets DeFi projects that are not truly fully decentralized, filling a MiCA grey zone around governance and accountability.
3. DeFi builders and maker/">DAO communities with EU users should watch Maltas consultation outcome, which could shape how DeFi is supervised across Europe.

Deep Dive

1. New Category For DAOs

Maltas Financial Services Authority (MFSA) has issued a discussion paper and opened a consultation on DeFi that runs until 10 July, seeking feedback on how to regulate DeFi activities.

The paper proposes a new legal category of software-based organizations, designed to cover DAOs and other blockchain entities that are primarily governed by code rather than a traditional company structure. This framework would legally distinguish the organization from the protocol and code it operates, aiming to clarify who is responsible when things go wrong in a DAO or DeFi system.

This is framed as exploratory, not yet a binding rulebook, but it is a formal attempt to give DAOs and similar entities a recognized place in financial regulation.

2. Filling MiCAs DeFi Gap

Under the EUs Markets in Crypto Assets (MiCA) regulation, fully decentralized services are largely outside scope, but regulators note that many DeFi projects still have concentrated governance or admin control.

Maltas paper highlights this problem and cites research showing that voting power and decision making in major DeFi protocols often sit with a relatively small group of participants, making it hard to treat them as truly decentralized. By proposing software-based organizations, MFSA is effectively saying that if humans still control key levers, there needs to be a legal and supervisory hook.

This comes ahead of MiCAs final implementation in mid 2026, when centralized crypto service providers will need authorization to serve EU customers, while DeFi remains under review by the European Commission. Maltas model could influence how other EU supervisors interpret and extend MiCA toward DeFi.

3. What DeFi Teams Should Watch

For DeFi builders and DAOs with European users, three areas are important to monitor.

1. How Malta finalizes the definition of a software-based organization and whether it becomes a template for EU-level rules.
2. Which governance features regulators focus on when deciding if a protocol is fully decentralized, such as admin keys, multisig control, and token concentration.
3. Any expectations around embedded risk controls, like automated guardian mechanisms at protocol level, and potential registration or disclosure duties for DAO stewards.

Conclusion

Maltas consultation does not regulate DeFi overnight, but it signals a shift from asking whether DeFi fits existing rules to designing new categories that make DAOs and software governed systems explicitly accountable.

For crypto users and builders, this is an early look at how the EU might draw the line between truly decentralized protocols that stay outside MiCA and pseudo decentralized projects that will be treated more like regulated financial intermediaries.