Start Here
New to this research? Start with the Regulatory Guidance Framework for an executive summary and the 7 non-negotiable elements every DeFi regulatory framework needs. Then explore the Regulatory Spectrum to see where jurisdictions fall, or dive into the Country Comparison Tables for side-by-side data.
The Regulatory Spectrum
| Position | Approach | Jurisdictions | Key Outcome |
|---|---|---|---|
| Regulatory Vacuum | No DeFi licensing pathway | South Korea | VA trading regulated but DeFi has no route to compliance; lending/staking effectively prohibited |
| Enforcement-First | Prosecution under existing law | Canada, India, Germany, Estonia | Enforcement targets centralized gateways and AML failings; protocols sit in a grey zone |
| Extension of Existing Law | Activity-based regulation applied to DeFi | US, Hong Kong, Japan, France, South Africa | Clear rules for identifiable operators; gaps for decentralized protocols |
| Comprehensive + DeFi Carve-Out | Broad crypto framework with DeFi exemption | EU (MiCA), UK (FSMA), Brazil, Australia, Malta, Thailand, British Virgin Islands, Nigeria | Legal certainty for licensed providers; "fully decentralized" definition unresolved |
| DeFi-Specific Licensing | Dedicated DeFi/issuer license categories | El Salvador, Seychelles | Regulation channels to identifiable issuers/operators; controllerless DeFi permissive-by-omission |
| Innovation-First / Sandbox | Pilot programs and purpose-built wrappers | Singapore, Switzerland, UAE, Cayman Islands, Bermuda, Marshall Islands, Liechtenstein | Institutional experimentation, DAO wrappers, and the first DeFi operating licence (UAE/VARA) |
Analysis
- The Regulatory Spectrum — Maps all 27 jurisdictions on a spectrum from regulatory vacuum to innovation-first sandboxes, with verified outcomes
- What Works & What Doesn't — Evidence-based playbook: 7 failures, 8 successes, 6 mixed results, and 12 principles
- Country Comparison Tables — 7 side-by-side tables covering legal status, classification, liability, licensing, taxation, AML, and enforcement
Guidance Document
- Master Regulatory Guidance — Executive summary, non-negotiable elements, implementation roadmap, and decision matrix for national regulators
- Legal Classification of DeFi Protocols — 6 classification models, decentralization tests, and recommended framework
- Liability Allocation Frameworks — Developer, deployer, governance token holder, and DAO liability across jurisdictions
- DAO Governance & Legal Status — From Cayman Foundation (1,300+ registrations) to the Marshall Islands DAO LLC to regulatory vacuum
- DeFi Protocol-Specific Regulation — DEX, lending, liquidity pool, bridge, and MEV/oracle regulation
- DeFi Licensing Frameworks — 12-dimension comparative analysis with arbitrage strategies and banking access data
- Compliance & Enforcement — AML/KYC applicability, sanctions, Travel Rule, and 10 landmark enforcement cases
- Taxation Frameworks — DeFi yield, LP position, and governance token taxation across 27 jurisdictions
- Implementation Guide — 3-year phased roadmap with country precedents and stakeholder consultation framework
Country Research — Americas
- United States — Extension of existing securities/commodities/AML law via multi-agency interpretation; SEC/CFTC five-category token taxonomy (March 2026); Ooki DAO, Tornado Cash, Roman Storm landmark cases
- Canada — Enforcement-first under CSA securities law and FINTRAC MSB registration; no DeFi regime; record Xeltox/Cryptomus fine; Stablecoin Act 2026
- Brazil — Comprehensive SPSAV/VASP licensing (Law 14,478 + Resolutions 519/520/521) in force Feb 2026; high capital (R$10.8-37.2M); progressive 15%-22.5% CGT (flat MP 1303 lapsed); DeCripto CARF reporting
- Cayman Islands — Innovation-first: Foundation Company as the global-standard DAO wrapper (1,300+ registrations, ~USD 10B); tax-neutral; VASP gatekeeping of custodial chokepoints
- Bermuda — Innovation-first DABA sandbox with a T/M/F on-ramp; world-first DAO-governed exchange licence (DerivaDEX) and Embedded Supervision pilot; 0% income/CGT for most
- El Salvador — Purpose-built LEAD issuer/DASP licensing under a single regulator (CNAD); state-encouraged; 0% tax on registered activity; ~84% rejection rate
- British Virgin Islands — VASP Act 2022 with an express carve-out for token issuance and unhosted wallets; token-launch hub; 0% tax; DAOs wrapped via orphan BCs/CLGs
Country Research — Europe
- European Union — MiCA "fully decentralized" exemption (Recital 22); Article 142 DeFi review; CASP passporting; Product Liability Directive for software
- United Kingdom — FSMA Cryptoassets Regulations 2026 (effective Oct 2027) explicitly covering staking/lending/custody; "truly decentralised" exemption; Property (Digital Assets) Act 2025
- Switzerland — DLT Act; FINMA "substance over form"; DLT trading facility; Swiss Foundation as the leading DAO wrapper; no individual capital gains tax
- Germany — BaFin compliance-first enforcement (Ethena EUR 600K); MiCA via FinmadiG; eWpG tokenized securities; ~18 CASPs (leading EU); 1-year holding tax exemption
- France — AMF PSAN → MiCA CASP transition (July 2026 deadline); DeFi discussion paper; crypto-asset pledge regime; 31.4% PFU flat tax
- Malta — MiCA via Chapter 647 (dual MFSA/FIAU); "fully decentralised" carve-out; ESMA peer-review flagged authorisation quality issues; VFA Act repeal July 2026
- Liechtenstein — TVTG Blockchain Act (Token Container Model) plus MiCAR EEA access; light-touch event-driven FMA supervision; PGR foundation/establishment wrappers; flat 12.5% corporate tax
- Estonia — Enforcement-first trajectory from VASP haven to ~95% licence contraction; MiCA via CMA with EU passporting; hard legacy-licence sunset July 1, 2026; no bespoke DAO form
Country Research — Asia-Pacific
- Singapore — MAS activity-based regulation; Project Guardian (40+ institutions); PS Act DPT licensing; retail staking/lending restricted; first MPI revocation (May 2026)
- Japan — Pioneering DAO LLC carve-out (April 2024); CAESP registration migrating PSA → FIEA; 20.315% flat tax for listed assets (2027) but DeFi yields still up to ~55%
- Hong Kong — SFC VATP licensing (HKD 5M); ASPIRe roadmap; first stablecoin issuer licences (2026); no CGT; JPEX enforcement (HKD 1.6B)
- South Korea — VAUPA (July 2024) with no DeFi licensing pathway; lending/staking effectively prohibited; crypto tax deferred to 2027; first pump-and-dump prosecution
- Australia — Comprehensive Digital Assets Framework Act 2026 (Royal Assent April 2026, commences April 2027) creating DAP/TCP licences; Block Earner precedent; aggressive ATO LP/staking positions
- India — Enforcement-first: no crypto statute; punitive 30%/1% VDA tax and PMLA-based FIU-IND VDASP registration (54 registered); aggressive chokepoint enforcement; offshore-domiciled DAOs
- Thailand — Comprehensive Emergency Decree licensing (7 categories, extraterritorial) that excludes permissionless DeFi; staking/lending prohibited; 2025-2029 capital-gains exemption
- Marshall Islands — World-first statutory DAO LLC (2022) with personhood and a member liability shield via MIDAO; 3% GRT for-profit / 0% non-profit; parallel MIMA supervision
Country Research — Middle East & Africa
- UAE — Innovation-first multi-regulator structure; world-first DeFi operating licence (VARA, MANTRA Feb 2025); ADGM DeFi/staking frameworks; new federal CMA; no income tax
- South Africa — Extension of existing FAIS/FICA law (crypto declared a "financial product"); 300 approved CASPs; FSCA "spectrum of decentralization"; exited FATF grey list (Oct 2025)
- Nigeria — Comprehensive securities-based regime (ISA 2025); digital assets classified as securities; high capital (₦500M); progressive 0%-25% tax (2026); aggressive chokepoint enforcement
- Seychelles — Substance-demanding mandatory VASP Act 2024 (criminal without a licence) reaching DeFi via identifiable operators; first cohort still "in Assessment"; mining/mixers banned; no CGT