France Proposes DeFi Liability Rules for Crypto Platforms
Four French authorities have proposed changes to the EU’s Markets in Crypto-Assets Regulation (MiCA) that could make crypto-asset service providers (CASPs) responsible for some customer losses linked to DeFi security failures. The proposals, published on October 21, 2026, were submitted as part of the European Commission’s review of MiCA and are not yet law.
Platforms that actively connect customers to DeFi services could be required to assess protocols, audit smart contracts and monitor for vulnerabilities and suspicious activity. Liability would not automatically apply to every exploit: it could arise if a platform fails to check a protocol adequately or ignores known risks. Requirements would be proportionate to provider size, with stricter duties for larger firms and some relief for smaller ones.
France also supports possible certification for DeFi protocols and smart contracts, while allowing platforms to offer uncertified services with stronger safeguards and risk disclosures. Standard self-custody wallets would not face mandatory certification, although voluntary certification could be considered for advanced wallets with DeFi features.
The authorities additionally called for direct ESMA supervision of major CASPs and a lower or broader threshold for identifying significant providers. The later proposal cites a current threshold of 15 million daily active users. France also called for a review of MiCA’s asset-referenced token category, noting that no tokens have been authorised under it, and suggested considering its removal and regulating multicurrency stablecoins as e-money tokens.
The European Commission is expected to report to lawmakers by June 30, 2027. If adopted, the DeFi security rules could raise compliance costs for platforms while strengthening investor protections. For traders, the proposals signal possible future regulatory pressure on platforms offering DeFi access, but create no immediate obligations or direct price catalyst for any particular crypto asset.
Neutral
The proposals do not name a specific cryptocurrency and are not yet binding, so they provide no direct, immediate catalyst for the price of an individual crypto asset. In the short term, traders may pay closer attention to EU-regulated platforms and DeFi-related compliance risks, but any reaction is likely to be limited unless the proposals advance or materially affect a major service provider.
Over the longer term, potential liability, audits and monitoring could increase costs for platforms that connect users to DeFi. That may weigh on activity or sentiment around affected services if compliance becomes burdensome. Conversely, clearer safeguards and stronger investor protection could support confidence in regulated crypto markets. The proposals also leave room for uncertified services subject to due diligence and disclosures, limiting the case for assuming a blanket restriction on DeFi. With no final rules or specific token exposure identified, the likely price impact remains neutral.