EU Markets Regulator Warns of DeFi’s ‘Serious Risks’

ESMA, responsible for rulemaking under the bloc’s landmark new crypto law MiCA, is worried about new forms of market manipulation when there’s no central counterparty

AccessTimeIconOct 11, 2023 at 1:11 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

The European Securities and Markets Authority (ESMA) warned of "serious risks" of investors being harmed by decentralized finance (DeFi) in a Wednesday report despite the innovative technology being in its infancy.

ESMA, an EU agency that is due to set rules under the bloc’s landmark Markets in Crypto Assets Regulation (MiCA), promised to look further into the nascent market, which has posed a puzzle for policymakers who are used to pinning regulatory obligations on centralized entities like banks or securities exchanges.

“Although investors’ exposure to DeFi remains small overall, there are serious risks to investor protection, due to the highly speculative nature of many DeFi arrangements, important operational and security vulnerabilities, and the lack of a clearly identified responsible party,” said the report prepared by the Paris-based agency, promising annual reports on the sector.

While in principle, DeFi – which uses smart contracts to automatically execute loans or other financial services – poses less of a risk of counterparties defaulting, the report notes heightened volatility in crypto markets and anonymity that enables dubious behavior like wash trading, in which sale volumes are inflated to manipulate markets.

ESMA last week proposed a swathe of new rules for crypto asset service providers under MiCA, such as the environmental disclosures that will need to be included in issuers’ white papers. A further report on Wednesday highlighted the potentially innovative nature of the smart contracts used in DeFi, noting they can range from financially-motivated Ponzi schemes to operational memory management.

ESMA is not the only regulator wondering how to deal with DeFi projects, and the International Organization of Securities Commissions recently proposed to treat them on a par with conventional finance. In response to a consultation from the French financial regulator, AMF, the lobby group EU Crypto Initiative has recently argued that DeFi needs a tailored approach – with programmers not held legally liable merely because they realize their code could be misused.

Edited by Aoyon Ashraf.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Jack Schickler

Jack Schickler was a CoinDesk reporter focused on crypto regulations, based in Brussels, Belgium. He doesn’t own any crypto.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.

Read more about